{"snapshot_version":"2026.10.17","last_ingest_sync":"2026-10-17T23:59:57.467Z","count":1649,"evidence_summary":{"curated_lead":65,"incident_disclosure":59,"advisory_feed":1500,"illustrative_scenario":25},"corpus_policy":{"curated_lead":"Real incident summarised from a public source; source link checked, summary not yet human-adjudicated.","advisory_feed":"Auto-ingested security advisory; machine-extracted and unreviewed.","illustrative_scenario":"Composite teaching scenario; not a documented incident."},"incidents":[{"incident_id":"SEA-SEC-001","title":"Enterprise Cloud Identity & OAuth Consent Grant Compromise","display_title":"Enterprise Cloud Identity & OAuth Consent Grant Compromise","display_summary":"Legacy test tenant without MFA compromised via password spraying; adversary created malicious OAuth apps with mail.read privileges.","display_reference":"","display_source_type":"SEC filing","incident_date":"2024-01-19","disclosure_date":"2024-01-19","source_type":"regulator_report","source_url":"https://www.sec.gov/Archives/edgar/data/789019/000119312524011295/d708866d8k.htm","source_title":"Microsoft Form 8-K: nation-state attack on corporate email (Jan 2024)","source_publisher":"U.S. SEC EDGAR (Microsoft Corporation)","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-09-30T00:00:00.000Z","source_hash":"content-fingerprint:fnv1a-74195fa6","affected_system":{"organization":"Global Cloud Identity & Enterprise SaaS Provider","product":"Enterprise Cloud Identity Platform","system_type":"Enterprise Cloud & Distributed Systems","is_ai_system":false,"is_agentic":false,"primary_language":"Multi-Language / Distributed Architecture"},"documented_facts":[{"id":"SEA-SEC-001-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Legacy test tenant without MFA compromised via password spraying; adversary created malicious OAuth apps with mail.read privileges.","source_quote_or_pointer":"Summary combines the linked source with wider public reporting","fact_id":"SEA-SEC-001-F1","document_citation":"Summary combines the linked source with wider public reporting"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.credentials_secrets","arch.multi_tenant"],"failure_mechanisms":["SEA-FM-012","SEA-FM-002"],"consequences":["Data exposure (corporate email)","Credential compromise"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"collectsea-curated-v2","review_status":"machine_extracted","review_notes":["Source re-checked 2026-09-30 (source documents the core event; some summary details come from wider reporting). The 8-K reports a nation-state actor compromising a legacy non-production test tenant account via password spray and accessing some corporate email. The OAuth-application details come from Microsoft's separate security blog."]},"source_authority":{"document_type":"SEC Form 8-K","filing_id":"SEA-SEC-001-DOC","reporting_entity":"Microsoft Corporation","regulatory_body":"SEC / Regulatory & Engineering Authority"},"safeguards":[{"safeguard_id":"SEA-SEC-001-SG1","label":"Enforce MFA everywhere, including legacy and test tenants","description":"Require MFA and conditional access on every account and tenant; retire or lock down legacy and non-production tenants that can reach production data.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-SEC-001-SG2","label":"Constrain and monitor OAuth applications","description":"Limit which applications can hold broad mailbox permissions, expire stale consents, and alert when an application requests mail-read or elevated roles.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-SEC-001-SG1","label":"Enforce MFA everywhere, including legacy and test tenants","description":"Require MFA and conditional access on every account and tenant; retire or lock down legacy and non-production tenants that can reach production data.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-SEC-001-SG2","label":"Constrain and monitor OAuth applications","description":"Limit which applications can hold broad mailbox permissions, expire stale consents, and alert when an application requests mail-read or elevated roles.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"disclosure"},{"incident_id":"SEA-SEC-002","title":"Nationwide Healthcare Clearinghouse & Payment Gateway Outage","display_title":"Nationwide Healthcare Clearinghouse & Payment Gateway Outage","display_summary":"Single-factor remote access portal breached with stolen credentials; ransomware forced nationwide claims gateway disconnection.","display_reference":"","display_source_type":"SEC filing","incident_date":"2024-02-21","disclosure_date":"2024-02-21","source_type":"regulator_report","source_url":"https://www.sec.gov/Archives/edgar/data/731766/000073176624000045/unh-20240221.htm","source_title":"UnitedHealth Group Form 8-K: Change Healthcare cyber security incident (Feb 2024)","source_publisher":"U.S. SEC EDGAR (UnitedHealth Group)","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-09-30T00:00:00.000Z","source_hash":"content-fingerprint:fnv1a-f3445582","affected_system":{"organization":"National Healthcare EDI Clearinghouse & Billing Gateway","product":"EDI Claims Clearinghouse & Payment Gateway","system_type":"Enterprise Cloud & Distributed Systems","is_ai_system":false,"is_agentic":false,"primary_language":"Multi-Language / Distributed Architecture"},"documented_facts":[{"id":"SEA-SEC-002-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Single-factor remote access portal breached with stolen credentials; ransomware forced nationwide claims gateway disconnection.","source_quote_or_pointer":"Summary combines the linked source with wider public reporting","fact_id":"SEA-SEC-002-F1","document_citation":"Summary combines the linked source with wider public reporting"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.financial_action","data.financial_records","auth.privileged_action"],"failure_mechanisms":["SEA-FM-012","SEA-FM-005"],"consequences":["Service outage (claims processing)","Data exposure (health records)"],"confidence":"TENTATIVE","authority_level":"IRREVERSIBLE_EXTERNAL"},"provenance":{"extractor_version":"collectsea-curated-v2","review_status":"machine_extracted","review_notes":["Source re-checked 2026-09-30 (source documents the core event; some summary details come from wider reporting). The 8-K reports a suspected nation-state actor gaining access to Change Healthcare IT systems and the company isolating affected systems. The missing-MFA remote-access detail comes from later congressional testimony, not the filing."]},"source_authority":{"document_type":"SEC Form 8-K","filing_id":"SEA-SEC-002-DOC","reporting_entity":"UnitedHealth Group / Change Healthcare","regulatory_body":"SEC / Regulatory & Engineering Authority"},"safeguards":[{"safeguard_id":"SEA-SEC-002-SG1","label":"Require MFA on all remote-access portals","description":"No externally reachable access path to production systems should accept a single factor.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-SEC-002-SG2","label":"Isolate and recover independently","description":"Segment clearinghouse components and keep tested, separately restorable backups and failover so one compromised gateway cannot halt claims nationwide.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-SEC-002-SG1","label":"Require MFA on all remote-access portals","description":"No externally reachable access path to production systems should accept a single factor.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-SEC-002-SG2","label":"Isolate and recover independently","description":"Segment clearinghouse components and keep tested, separately restorable backups and failover so one compromised gateway cannot halt claims nationwide.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"disclosure"},{"incident_id":"SEA-SEC-003","title":"Enterprise Endpoint Security Configuration Update System Crash","display_title":"Enterprise Endpoint Security Configuration Update System Crash","display_summary":"Rapid deployment channel 291 bypassed staged canary rings; out-of-bounds memory read triggered BSOD on 8.5M Windows hosts.","display_reference":"","display_source_type":"Engineering postmortem","incident_date":"2024-07-19","disclosure_date":"2024-07-19","source_type":"vendor_postmortem","source_url":"https://www.crowdstrike.com/wp-content/uploads/2024/08/Channel-File-291-Incident-Root-Cause-Analysis-08.06.2024.pdf","source_title":"Channel File 291 Incident Root Cause Analysis","source_publisher":"CrowdStrike","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-09-30T00:00:00.000Z","source_hash":"content-fingerprint:fnv1a-d90b39e2","affected_system":{"organization":"Enterprise Endpoint Security & Kernel Driver Pipeline","product":"Kernel-Level Endpoint Protection Sensor","system_type":"Enterprise Cloud & Distributed Systems","is_ai_system":false,"is_agentic":false,"primary_language":"Multi-Language / Distributed Architecture"},"documented_facts":[{"id":"SEA-SEC-003-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Rapid deployment channel 291 bypassed staged canary rings; out-of-bounds memory read triggered BSOD on 8.5M Windows hosts.","source_quote_or_pointer":"Summary combines the linked source with wider public reporting","fact_id":"SEA-SEC-003-F1","document_citation":"Summary combines the linked source with wider public reporting"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.code_execution","auth.infrastructure_modification","arch.external_api"],"failure_mechanisms":["SEA-FM-011"],"consequences":["Service outage (global host crashes)","Financial loss"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"collectsea-curated-v2","review_status":"machine_extracted","review_notes":["Source re-checked 2026-09-30 (source documents the core event; some summary details come from wider reporting). CrowdStrike's RCA documents the parameter-count mismatch (21 fields defined, 20 supplied) that caused an out-of-bounds read and system crash. The ~8.5 million affected-host figure comes from Microsoft, not this document."]},"source_authority":{"document_type":"Vendor root cause analysis","filing_id":"SEA-SEC-003-DOC","reporting_entity":"CrowdStrike Holdings","regulatory_body":"SEC / Regulatory & Engineering Authority"},"safeguards":[{"safeguard_id":"SEA-SEC-003-SG1","label":"Stage every content update through canary rings","description":"Release configuration and content updates to a small ring first, observe crash and health signals, then widen; never push globally in one step.","target_failure_mode":"SEA-FM-011","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-SEC-003-SG2","label":"Validate content and fail safe","description":"Check parameter counts and bounds between template definitions and the interpreter before release, and make the agent skip malformed content rather than crash the host.","target_failure_mode":"SEA-FM-011","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-SEC-003-SG1","label":"Stage every content update through canary rings","description":"Release configuration and content updates to a small ring first, observe crash and health signals, then widen; never push globally in one step.","target_failure_mode":"SEA-FM-011","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-SEC-003-SG2","label":"Validate content and fail safe","description":"Check parameter counts and bounds between template definitions and the interpreter before release, and make the agent skip malformed content rather than crash the host.","target_failure_mode":"SEA-FM-011","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"incident"},{"incident_id":"SEA-SEC-004","title":"Hospitality & Gaming ESXi Hypervisor Infrastructure Disruption","display_title":"Hospitality & Gaming ESXi Hypervisor Infrastructure Disruption","display_summary":"Social engineering of IT helpdesk reset admin credentials; ransomware deployed directly to ESXi hypervisors shutting down resort operations.","display_reference":"","display_source_type":"SEC filing","incident_date":"2023-09-13","disclosure_date":"2023-09-13","source_type":"regulator_report","source_url":"https://www.sec.gov/Archives/edgar/data/789570/000119312523233855/d502352d8k.htm","source_title":"MGM Resorts Form 8-K: cybersecurity issue (Sept 2023)","source_publisher":"U.S. SEC EDGAR (MGM Resorts International)","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-09-30T00:00:00.000Z","source_hash":"content-fingerprint:fnv1a-d659fcdf","affected_system":{"organization":"Hospitality Hypervisor & Central Reservation Infrastructure","product":"Global Reservation & Hypervisor Infrastructure","system_type":"Enterprise Cloud & Distributed Systems","is_ai_system":false,"is_agentic":false,"primary_language":"Multi-Language / Distributed Architecture"},"documented_facts":[{"id":"SEA-SEC-004-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Social engineering of IT helpdesk reset admin credentials; ransomware deployed directly to ESXi hypervisors shutting down resort operations.","source_quote_or_pointer":"Summary combines the linked source with wider public reporting","fact_id":"SEA-SEC-004-F1","document_citation":"Summary combines the linked source with wider public reporting"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.privileged_action","auth.infrastructure_modification"],"failure_mechanisms":["SEA-FM-012","SEA-FM-014"],"consequences":["Service outage (multi-day)","Financial loss"],"confidence":"TENTATIVE","authority_level":"IRREVERSIBLE_EXTERNAL"},"provenance":{"extractor_version":"collectsea-curated-v2","review_status":"machine_extracted","review_notes":["Source re-checked 2026-09-30 (source documents the core event; some summary details come from wider reporting). The 8-K discloses a cybersecurity issue affecting certain systems and that some systems were shut down. The helpdesk social engineering and ESXi ransomware details come from public reporting, not the filing."]},"source_authority":{"document_type":"SEC Form 8-K","filing_id":"SEA-SEC-004-DOC","reporting_entity":"MGM Resorts International","regulatory_body":"SEC / Regulatory & Engineering Authority"},"safeguards":[{"safeguard_id":"SEA-SEC-004-SG1","label":"Verify identity out of band for credential resets","description":"Helpdesk must verify the caller through a channel the caller does not control before resetting credentials or MFA for privileged accounts.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-SEC-004-SG2","label":"Protect the hypervisor management plane","description":"Put virtualization management behind dedicated MFA-protected admin identities and separate it from general corporate credentials.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-SEC-004-SG1","label":"Verify identity out of band for credential resets","description":"Helpdesk must verify the caller through a channel the caller does not control before resetting credentials or MFA for privileged accounts.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-SEC-004-SG2","label":"Protect the hypervisor management plane","description":"Put virtualization management behind dedicated MFA-protected admin identities and separate it from general corporate credentials.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"disclosure"},{"incident_id":"SEA-SEC-005","title":"Consumer Goods Manufacturing Global ERP Ordering System Disruption","display_title":"Consumer Goods Manufacturing Global ERP Ordering System Disruption","display_summary":"Ransomware encrypted internal ordering databases; lack of decoupled offline queue forced multi-week manual processing and inventory write-downs.","display_reference":"","display_source_type":"SEC filing","incident_date":"2023-08-14","disclosure_date":"2023-08-14","source_type":"regulator_report","source_url":"https://www.sec.gov/Archives/edgar/data/21076/000120677423000969/clx4231381-8k.htm","source_title":"Clorox Form 8-K: unauthorized activity on IT systems (Aug 2023)","source_publisher":"U.S. SEC EDGAR (The Clorox Company)","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-09-30T00:00:00.000Z","source_hash":"content-fingerprint:fnv1a-db99d57f","affected_system":{"organization":"Manufacturing ERP & Automated Supply Chain Platform","product":"Enterprise Resource Planning (ERP) & Ordering Engine","system_type":"Enterprise Cloud & Distributed Systems","is_ai_system":false,"is_agentic":false,"primary_language":"Multi-Language / Distributed Architecture"},"documented_facts":[{"id":"SEA-SEC-005-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Ransomware encrypted internal ordering databases; lack of decoupled offline queue forced multi-week manual processing and inventory write-downs.","source_quote_or_pointer":"Summary combines the linked source with wider public reporting","fact_id":"SEA-SEC-005-F1","document_citation":"Summary combines the linked source with wider public reporting"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.financial_action","data.financial_records","auth.infrastructure_modification"],"failure_mechanisms":["SEA-FM-014","SEA-FM-005"],"consequences":["Service outage (order processing)","Financial loss (inventory shortfalls)"],"confidence":"TENTATIVE","authority_level":"IRREVERSIBLE_EXTERNAL"},"provenance":{"extractor_version":"collectsea-curated-v2","review_status":"machine_extracted","review_notes":["Source re-checked 2026-09-30 (source documents the core event; some summary details come from wider reporting). The 8-K reports unauthorized IT activity, systems taken offline and operational workarounds. The multi-week manual order processing comes from later Clorox filings and is not in this document."]},"source_authority":{"document_type":"SEC Form 8-K","filing_id":"SEA-SEC-005-DOC","reporting_entity":"The Clorox Company","regulatory_body":"SEC / Regulatory & Engineering Authority"},"safeguards":[{"safeguard_id":"SEA-SEC-005-SG1","label":"Keep a tested manual or offline fallback for ordering","description":"Define and rehearse a degraded-mode path so orders keep flowing when the ERP is unavailable.","target_failure_mode":"SEA-FM-014","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-SEC-005-SG2","label":"Immutable, restorable backups","description":"Keep offline or immutable backups of ordering databases and run restore drills against recovery-time targets.","target_failure_mode":"SEA-FM-014","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-SEC-005-SG1","label":"Keep a tested manual or offline fallback for ordering","description":"Define and rehearse a degraded-mode path so orders keep flowing when the ERP is unavailable.","target_failure_mode":"SEA-FM-014","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-SEC-005-SG2","label":"Immutable, restorable backups","description":"Keep offline or immutable backups of ordering databases and run restore drills against recovery-time targets.","target_failure_mode":"SEA-FM-014","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"disclosure"},{"incident_id":"SEA-SEC-006","title":"Customer Support Portal Diagnostic HTTP Archive (HAR) Token Exfiltration","display_title":"Customer Support Portal Diagnostic HTTP Archive (HAR) Token Exfiltration","display_summary":"Support portal allowed unredacted HAR file uploads containing session tokens; threat actor hijacked customer administrator accounts.","display_reference":"","display_source_type":"Engineering postmortem","incident_date":"2023-10-19","disclosure_date":"2023-10-19","source_type":"vendor_postmortem","source_url":"https://sec.okta.com/articles/2023/10/tracking-unauthorized-access-oktas-support-system","source_title":"Tracking Unauthorized Access to Okta's Support System","source_publisher":"Okta Security","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-09-30T00:00:00.000Z","source_hash":"content-fingerprint:fnv1a-2ed94276","affected_system":{"organization":"Enterprise Identity Provider & Customer Support Mesh","product":"Customer Support Case Management System","system_type":"Enterprise Cloud & Distributed Systems","is_ai_system":false,"is_agentic":false,"primary_language":"Multi-Language / Distributed Architecture"},"documented_facts":[{"id":"SEA-SEC-006-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Support portal allowed unredacted HAR file uploads containing session tokens; threat actor hijacked customer administrator accounts.","source_quote_or_pointer":"Summary combines the linked source with wider public reporting","fact_id":"SEA-SEC-006-F1","document_citation":"Summary combines the linked source with wider public reporting"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.credentials_secrets","data.pii","arch.multi_tenant"],"failure_mechanisms":["SEA-FM-012","SEA-FM-009"],"consequences":["Credential compromise","Data exposure (customer sessions)"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"collectsea-curated-v2","review_status":"machine_extracted","review_notes":["Source re-checked 2026-09-30 (source documents the core event; some summary details come from wider reporting). Okta reports that a stolen credential was used to reach its support case management system, where uploaded HAR files can contain session tokens. Details of customer-session hijacking are in Okta's follow-up root-cause post."]},"source_authority":{"document_type":"Vendor security incident report","filing_id":"SEA-SEC-006-DOC","reporting_entity":"Okta Inc.","regulatory_body":"SEC / Regulatory & Engineering Authority"},"safeguards":[{"safeguard_id":"SEA-SEC-006-SG1","label":"Redact secrets from customer-uploaded diagnostics","description":"Strip or reject session tokens and cookies in uploaded HAR and log files before they are stored or viewed by support staff.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-SEC-006-SG2","label":"Harden support tooling identities","description":"Keep service-account credentials out of personal browsers, scope them minimally, and bind or shorten customer session lifetimes so stolen tokens lose value quickly.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-SEC-006-SG1","label":"Redact secrets from customer-uploaded diagnostics","description":"Strip or reject session tokens and cookies in uploaded HAR and log files before they are stored or viewed by support staff.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-SEC-006-SG2","label":"Harden support tooling identities","description":"Keep service-account credentials out of personal browsers, scope them minimally, and bind or shorten customer session lifetimes so stolen tokens lose value quickly.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"disclosure"},{"incident_id":"SEA-SEC-007","title":"High-Frequency Algorithmic Order Router Runaway Execution","display_title":"High-Frequency Algorithmic Order Router Runaway Execution","display_summary":"Repurposed test flag on 1 of 8 servers activated legacy Power Peg loop; bought 4M shares in 45 minutes losing $460M.","display_reference":"","display_source_type":"SEC filing","incident_date":"2012-08-01","disclosure_date":"2012-08-01","source_type":"regulator_report","source_url":"https://www.sec.gov/litigation/admin/2013/34-70694.pdf","source_title":"SEC Order Instituting Proceedings: Knight Capital Americas LLC (Release 34-70694)","source_publisher":"U.S. Securities and Exchange Commission","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-09-30T00:00:00.000Z","source_hash":"content-fingerprint:fnv1a-f7fd39f2","affected_system":{"organization":"High-Frequency Automated Equities Router & Market Maker","product":"Automated High-Frequency Order Execution Router","system_type":"Enterprise Cloud & Distributed Systems","is_ai_system":true,"is_agentic":true,"primary_language":"Multi-Language / Distributed Architecture"},"documented_facts":[{"id":"SEA-SEC-007-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Repurposed test flag on 1 of 8 servers activated legacy Power Peg loop; bought 4M shares in 45 minutes losing $460M.","source_quote_or_pointer":"Summary combines the linked source with wider public reporting","fact_id":"SEA-SEC-007-F1","document_citation":"Summary combines the linked source with wider public reporting"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.financial_action","auth.autonomous_approval","auth.code_execution"],"failure_mechanisms":["SEA-FM-002","SEA-FM-011"],"consequences":["Financial loss","Runaway automated execution"],"confidence":"TENTATIVE","authority_level":"IRREVERSIBLE_EXTERNAL"},"provenance":{"extractor_version":"collectsea-curated-v2","review_status":"machine_extracted","review_notes":["Source re-checked 2026-09-30 (source documents the core event; some summary details come from wider reporting). The SEC order documents the August 1, 2012 erroneous-order incident and Knight's market-access control failures. Specific figures in the summary (shares bought, dollar loss) are not independently confirmed here."]},"source_authority":{"document_type":"SEC administrative order","filing_id":"SEA-SEC-007-DOC","reporting_entity":"Knight Capital Group","regulatory_body":"SEC / Regulatory & Engineering Authority"},"safeguards":[{"safeguard_id":"SEA-SEC-007-SG1","label":"Enforce hard pre-trade limits in deterministic code","description":"Cap order volume, position and notional exposure in a control layer the trading logic cannot bypass, with an automatic kill switch.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-SEC-007-SG2","label":"Deploy atomically and verify every server","description":"Remove dead code paths, reuse of old flags and partial rollouts; verify that all servers run identical code before enabling features.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-SEC-007-SG1","label":"Enforce hard pre-trade limits in deterministic code","description":"Cap order volume, position and notional exposure in a control layer the trading logic cannot bypass, with an automatic kill switch.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-SEC-007-SG2","label":"Deploy atomically and verify every server","description":"Remove dead code paths, reuse of old flags and partial rollouts; verify that all servers run identical code before enabling features.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"incident"},{"incident_id":"SEA-SEC-008","title":"Telecommunications Customer Call & Text Metadata Repository Exfiltration","display_title":"Telecommunications Customer Call & Text Metadata Repository Exfiltration","display_summary":"Contractor credentials without MFA accessed third-party cloud data warehouse; downloaded 109 million customer call and text records.","display_reference":"","display_source_type":"SEC filing","incident_date":"2024-05-06","disclosure_date":"2024-05-06","source_type":"regulator_report","source_url":"https://www.sec.gov/Archives/edgar/data/732717/000073271724000046/t-20240506.htm","source_title":"AT&T Form 8-K, Item 1.05: material cybersecurity incident (May 2024)","source_publisher":"U.S. SEC EDGAR (AT&T Inc.)","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-09-30T00:00:00.000Z","source_hash":"content-fingerprint:fnv1a-d0d3521a","affected_system":{"organization":"Telecommunications & Cloud Data Analytics Warehouse","product":"Cloud Data Warehouse Analytics Repository","system_type":"Enterprise Cloud & Distributed Systems","is_ai_system":false,"is_agentic":false,"primary_language":"Multi-Language / Distributed Architecture"},"documented_facts":[{"id":"SEA-SEC-008-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Contractor credentials without MFA accessed third-party cloud data warehouse; downloaded 109 million customer call and text records.","source_quote_or_pointer":"Summary combines the linked source with wider public reporting","fact_id":"SEA-SEC-008-F1","document_citation":"Summary combines the linked source with wider public reporting"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","data.credentials_secrets","arch.multi_tenant"],"failure_mechanisms":["SEA-FM-012","SEA-FM-009"],"consequences":["Data exposure (customer interaction records)"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"collectsea-curated-v2","review_status":"machine_extracted","review_notes":["Source re-checked 2026-09-30 (source documents the core event; some summary details come from wider reporting). The 8-K reports exfiltration of call and text interaction records of nearly all wireless customers from a third-party cloud platform workspace. The contractor-credentials-without-MFA detail comes from public reporting."]},"source_authority":{"document_type":"SEC Form 8-K","filing_id":"SEA-SEC-008-DOC","reporting_entity":"AT&T Inc.","regulatory_body":"SEC / Regulatory & Engineering Authority"},"safeguards":[{"safeguard_id":"SEA-SEC-008-SG1","label":"Require MFA for contractor and third-party access","description":"Third-party accounts reaching data warehouses must use MFA and network allow-lists.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-SEC-008-SG2","label":"Detect bulk export","description":"Alert on and rate-limit large exports from analytics warehouses, and review who can read historical data.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-SEC-008-SG1","label":"Require MFA for contractor and third-party access","description":"Third-party accounts reaching data warehouses must use MFA and network allow-lists.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-SEC-008-SG2","label":"Detect bulk export","description":"Alert on and rate-limit large exports from analytics warehouses, and review who can read historical data.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"disclosure"},{"incident_id":"SEA-SEC-009","title":"Real Estate Escrow Document Portal Insecure Direct Object Reference (IDOR)","display_title":"Real Estate Escrow Document Portal Insecure Direct Object Reference (IDOR)","display_summary":"Sequential integer URLs in imaging web portal lacked object-level authorization checks; exposed 885 million escrow and wire documents.","display_reference":"","display_source_type":"SEC filing","incident_date":"2019-05-24","disclosure_date":"2019-05-24","source_type":"regulator_report","source_url":"https://www.sec.gov/news/press-release/2021-102","source_title":"SEC Charges First American Financial for Cybersecurity Disclosure Controls Failures","source_publisher":"U.S. Securities and Exchange Commission","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-09-30T00:00:00.000Z","source_hash":"content-fingerprint:fnv1a-92833326","affected_system":{"organization":"Real Estate Escrow & Document Image Management Portal","product":"Document Management & Escrow Imaging Portal","system_type":"Enterprise Cloud & Distributed Systems","is_ai_system":false,"is_agentic":false,"primary_language":"Multi-Language / Distributed Architecture"},"documented_facts":[{"id":"SEA-SEC-009-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Sequential integer URLs in imaging web portal lacked object-level authorization checks; exposed 885 million escrow and wire documents.","source_quote_or_pointer":"Summary combines the linked source with wider public reporting","fact_id":"SEA-SEC-009-F1","document_citation":"Summary combines the linked source with wider public reporting"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.financial_records","data.pii","arch.multi_tenant"],"failure_mechanisms":["SEA-FM-003","SEA-FM-013"],"consequences":["Data exposure (document images)","Compliance exposure"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"collectsea-curated-v2","review_status":"machine_extracted","review_notes":["Source re-checked 2026-09-30 (source documents the core event; some summary details come from wider reporting). The SEC release documents the vulnerability in First American's document-sharing application (over 800 million images exposed) reported on May 24, 2019 and the failure to escalate a January 2019 finding. The sequential-URL mechanism and the 885 million figure come from public reporting."]},"source_authority":{"document_type":"SEC press release","filing_id":"SEA-SEC-009-DOC","reporting_entity":"First American Financial Corporation","regulatory_body":"SEC / Regulatory & Engineering Authority"},"safeguards":[{"safeguard_id":"SEA-SEC-009-SG1","label":"Enforce object-level authorization","description":"Check that the requester may access each document on every request and use unguessable identifiers instead of sequential ones.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-SEC-009-SG2","label":"Escalate security findings to disclosure decision-makers","description":"Route assessment results on known vulnerabilities to the people responsible for incident and disclosure decisions.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-SEC-009-SG1","label":"Enforce object-level authorization","description":"Check that the requester may access each document on every request and use unguessable identifiers instead of sequential ones.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-SEC-009-SG2","label":"Escalate security findings to disclosure decision-makers","description":"Route assessment results on known vulnerabilities to the people responsible for incident and disclosure decisions.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"incident"},{"incident_id":"SEA-SEC-010","title":"Network Management Software Automated Build Pipeline Backdoor Insertion","display_title":"Network Management Software Automated Build Pipeline Backdoor Insertion","display_summary":"Compromised build server injected SUNBURST malware into compiler memory during build process; distributed to 18,000 customers.","display_reference":"","display_source_type":"SEC filing","incident_date":"2020-12-14","disclosure_date":"2020-12-14","source_type":"regulator_report","source_url":"https://www.sec.gov/litigation/complaints/2023/comp-pr2023-227.pdf","source_title":"SEC v. SolarWinds Corporation and Timothy G. Brown: complaint","source_publisher":"U.S. Securities and Exchange Commission","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-09-30T00:00:00.000Z","source_hash":"content-fingerprint:fnv1a-7c577198","affected_system":{"organization":"Enterprise CI/CD Build Orchestration & Distribution Pipeline","product":"Continuous Integration & Build Pipeline (CI/CD)","system_type":"Enterprise Cloud & Distributed Systems","is_ai_system":false,"is_agentic":false,"primary_language":"Multi-Language / Distributed Architecture"},"documented_facts":[{"id":"SEA-SEC-010-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Compromised build server injected SUNBURST malware into compiler memory during build process; distributed to 18,000 customers.","source_quote_or_pointer":"Summary combines the linked source with wider public reporting","fact_id":"SEA-SEC-010-F1","document_citation":"Summary combines the linked source with wider public reporting"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.code_execution","auth.infrastructure_modification","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-002","SEA-FM-009"],"consequences":["Supply-chain compromise","Data exposure (downstream customers)"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"collectsea-curated-v2","review_status":"machine_extracted","review_notes":["Source re-checked 2026-09-30 (source documents the core event; some summary details come from wider reporting). The SEC complaint concerns SolarWinds' cybersecurity disclosures up to and including its December 14, 2020 Form 8-K about the SUNBURST attack. Build-pipeline mechanics and customer counts come from the company's and CISA's technical reporting."]},"source_authority":{"document_type":"SEC civil complaint","filing_id":"SEA-SEC-010-DOC","reporting_entity":"SolarWinds Corporation","regulatory_body":"SEC / Regulatory & Engineering Authority"},"safeguards":[{"safeguard_id":"SEA-SEC-010-SG1","label":"Harden and isolate the build pipeline","description":"Treat build servers as production-critical: restrict access, use ephemeral builders and log all changes to build inputs.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-SEC-010-SG2","label":"Verify build output independently","description":"Use reproducible builds and independent comparison of artifacts before signing and distribution.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-SEC-010-SG1","label":"Harden and isolate the build pipeline","description":"Treat build servers as production-critical: restrict access, use ephemeral builders and log all changes to build inputs.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-SEC-010-SG2","label":"Verify build output independently","description":"Use reproducible builds and independent comparison of artifacts before signing and distribution.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"disclosure"},{"incident_id":"SEA-SEC-011","title":"Automated Algorithmic Real Estate Asset Purchasing Model Failure","display_title":"Automated Algorithmic Real Estate Asset Purchasing Model Failure","display_summary":"Machine learning pricing models drifted during market volatility; automated purchasing bought homes above value resulting in $540M inventory write-down.","display_reference":"","display_source_type":"SEC filing","incident_date":"2021-11-02","disclosure_date":"2021-11-02","source_type":"regulator_report","source_url":"https://www.sec.gov/Archives/edgar/data/1617640/000161764021000085/z-20211102.htm","source_title":"Zillow Group Form 8-K: wind-down of Zillow Offers (Nov 2021)","source_publisher":"U.S. SEC EDGAR (Zillow Group, Inc.)","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-09-30T00:00:00.000Z","source_hash":"content-fingerprint:fnv1a-41bd047f","affected_system":{"organization":"Algorithmic Property Valuation & Automated Capital Allocation Engine","product":"Algorithmic Home Valuation & Purchasing Engine (Offers)","system_type":"Enterprise Cloud & Distributed Systems","is_ai_system":true,"is_agentic":true,"primary_language":"Multi-Language / Distributed Architecture"},"documented_facts":[{"id":"SEA-SEC-011-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Machine learning pricing models drifted during market volatility; automated purchasing bought homes above value resulting in $540M inventory write-down.","source_quote_or_pointer":"Summary combines the linked source with wider public reporting","fact_id":"SEA-SEC-011-F1","document_citation":"Summary combines the linked source with wider public reporting"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.financial_action","auth.autonomous_approval","arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-002","SEA-FM-010"],"consequences":["Financial loss (inventory write-down)","Automated overexposure"],"confidence":"TENTATIVE","authority_level":"IRREVERSIBLE_EXTERNAL"},"provenance":{"extractor_version":"collectsea-curated-v2","review_status":"machine_extracted","review_notes":["Source re-checked 2026-09-30 (source documents the core event; some summary details come from wider reporting). The filing announces the wind-down of Zillow Offers citing home-price unpredictability and expects a large inventory write-down. The \"model drift\" framing is CollectSEA's inference, not the company's wording."]},"source_authority":{"document_type":"SEC Form 8-K","filing_id":"SEA-SEC-011-DOC","reporting_entity":"Zillow Group","regulatory_body":"SEC / Regulatory & Engineering Authority"},"safeguards":[{"safeguard_id":"SEA-SEC-011-SG1","label":"Cap automated exposure in deterministic limits","description":"Set hard caps on automated purchasing volume and concentration, with human approval above thresholds.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-SEC-011-SG2","label":"Monitor model drift and pause automatically","description":"Compare model valuations with realised outcomes and halt automated action when error exceeds a tolerance.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-SEC-011-SG1","label":"Cap automated exposure in deterministic limits","description":"Set hard caps on automated purchasing volume and concentration, with human approval above thresholds.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-SEC-011-SG2","label":"Monitor model drift and pause automatically","description":"Compare model valuations with realised outcomes and halt automated action when error exceeds a tolerance.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"disclosure"},{"incident_id":"SEA-SEC-012","title":"Industrial Building Automation Enterprise Hypervisor Ransomware Outage","display_title":"Industrial Building Automation Enterprise Hypervisor Ransomware Outage","display_summary":"Ransomware encrypted virtual hypervisors; halted manufacturing and billing operations incurring $27M in direct remediation costs.","display_reference":"","display_source_type":"SEC filing","incident_date":"2023-09-27","disclosure_date":"2023-09-27","source_type":"regulator_report","source_url":"https://www.sec.gov/Archives/edgar/data/833444/000083344423000036/jci-20230927.htm","source_title":"Johnson Controls Form 8-K: cybersecurity incident (Sept 2023)","source_publisher":"U.S. SEC EDGAR (Johnson Controls International plc)","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-09-30T00:00:00.000Z","source_hash":"content-fingerprint:fnv1a-2277c645","affected_system":{"organization":"Industrial Automation & Enterprise Hypervisor Cluster","product":"Enterprise Hypervisor & Corporate Data Infrastructure","system_type":"Enterprise Cloud & Distributed Systems","is_ai_system":false,"is_agentic":false,"primary_language":"Multi-Language / Distributed Architecture"},"documented_facts":[{"id":"SEA-SEC-012-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Ransomware encrypted virtual hypervisors; halted manufacturing and billing operations incurring $27M in direct remediation costs.","source_quote_or_pointer":"Summary combines the linked source with wider public reporting","fact_id":"SEA-SEC-012-F1","document_citation":"Summary combines the linked source with wider public reporting"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.infrastructure_modification","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-014","SEA-FM-005"],"consequences":["Service outage (manufacturing and billing)","Financial loss"],"confidence":"TENTATIVE","authority_level":"IRREVERSIBLE_EXTERNAL"},"provenance":{"extractor_version":"collectsea-curated-v2","review_status":"machine_extracted","review_notes":["Source re-checked 2026-09-30 (source documents the core event; some summary details come from wider reporting). The 8-K discloses disruption of internal IT infrastructure from a cybersecurity incident. The ransomware/hypervisor details come from a later November 2023 Form 8-K."]},"source_authority":{"document_type":"SEC Form 8-K","filing_id":"SEA-SEC-012-DOC","reporting_entity":"Johnson Controls International","regulatory_body":"SEC / Regulatory & Engineering Authority"},"safeguards":[{"safeguard_id":"SEA-SEC-012-SG1","label":"Segment and protect hypervisor infrastructure","description":"Isolate virtualization management and enforce MFA and least privilege on administrators.","target_failure_mode":"SEA-FM-014","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-SEC-012-SG2","label":"Immutable backups with tested restores","description":"Keep offline copies of virtual machines and rehearse restoring critical workloads.","target_failure_mode":"SEA-FM-014","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-SEC-012-SG1","label":"Segment and protect hypervisor infrastructure","description":"Isolate virtualization management and enforce MFA and least privilege on administrators.","target_failure_mode":"SEA-FM-014","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-SEC-012-SG2","label":"Immutable backups with tested restores","description":"Keep offline copies of virtual machines and rehearse restoring critical workloads.","target_failure_mode":"SEA-FM-014","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"disclosure"},{"incident_id":"SEA-SEC-013","title":"Credit Bureau Apache Struts Unpatched Framework Remote Code Execution","display_title":"Credit Bureau Apache Struts Unpatched Framework Remote Code Execution","display_summary":"Apache Struts CVE-2017-5638 parser bug left unpatched for 2 months; attackers executed arbitrary commands and accessed unencrypted databases of 147M Americans.","display_reference":"","display_source_type":"SEC filing","incident_date":"2017-09-07","disclosure_date":"2017-09-07","source_type":"regulator_report","source_url":"https://www.sec.gov/Archives/edgar/data/0000033185/000003318517000026/exhibit99120170907.htm","source_title":"Equifax Form 8-K, Exhibit 99.1: cybersecurity incident announcement (Sept 2017)","source_publisher":"U.S. SEC EDGAR (Equifax Inc.)","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-09-30T00:00:00.000Z","source_hash":"content-fingerprint:fnv1a-9a4fa2c4","affected_system":{"organization":"National Credit Bureau & Consumer Dispute Portal","product":"Online Consumer Dispute Web Application","system_type":"Enterprise Cloud & Distributed Systems","is_ai_system":false,"is_agentic":false,"primary_language":"Multi-Language / Distributed Architecture"},"documented_facts":[{"id":"SEA-SEC-013-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Apache Struts CVE-2017-5638 parser bug left unpatched for 2 months; attackers executed arbitrary commands and accessed unencrypted databases of 147M Americans.","source_quote_or_pointer":"Summary combines the linked source with wider public reporting","fact_id":"SEA-SEC-013-F1","document_citation":"Summary combines the linked source with wider public reporting"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","auth.code_execution","arch.multi_tenant"],"failure_mechanisms":["SEA-FM-013","SEA-FM-009"],"consequences":["Data exposure (consumer records)","Compliance exposure"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"collectsea-curated-v2","review_status":"machine_extracted","review_notes":["Source re-checked 2026-09-30 (source documents the core event; some summary details come from wider reporting). Replaces a link that pointed at a different company's filing index. Equifax's announcement reports exploitation of a U.S. web-application vulnerability affecting about 143 million consumers. The Apache Struts CVE and the final 147 million figure come from later reporting."]},"source_authority":{"document_type":"SEC Form 8-K exhibit","filing_id":"SEA-SEC-013-DOC","reporting_entity":"Equifax Inc.","regulatory_body":"SEC / Regulatory & Engineering Authority"},"safeguards":[{"safeguard_id":"SEA-SEC-013-SG1","label":"Patch critical vulnerabilities on a defined deadline","description":"Maintain an asset inventory, scan for affected components and enforce a short remediation deadline for actively exploited issues.","target_failure_mode":"SEA-FM-013","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-SEC-013-SG2","label":"Keep inspection and monitoring effective","description":"Monitor certificates and traffic inspection so exfiltration of sensitive data is detectable, and encrypt sensitive stores.","target_failure_mode":"SEA-FM-013","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-SEC-013-SG1","label":"Patch critical vulnerabilities on a defined deadline","description":"Maintain an asset inventory, scan for affected components and enforce a short remediation deadline for actively exploited issues.","target_failure_mode":"SEA-FM-013","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-SEC-013-SG2","label":"Keep inspection and monitoring effective","description":"Monitor certificates and traffic inspection so exfiltration of sensitive data is detectable, and encrypt sensitive stores.","target_failure_mode":"SEA-FM-013","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"disclosure"},{"incident_id":"SEA-SEC-014","title":"Automotive Dealer Management ERP SaaS Ransomware Shutdown","display_title":"Automotive Dealer Management ERP SaaS Ransomware Shutdown","display_summary":"Ransomware forced shutdown of core dealer management SaaS platform, halting sales, financing, and parts ordering for 15,000 auto dealerships.","display_reference":"","display_source_type":"Reported incident","incident_date":"2024-06-19","disclosure_date":"2024-06-19","source_type":"verified_journalism","source_url":"https://www.bleepingcomputer.com/news/security/cdk-global-outage-caused-by-blacksuit-ransomware-attack/","source_title":"CDK Global outage caused by BlackSuit ransomware attack","source_publisher":"BleepingComputer","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-09-30T00:00:00.000Z","source_hash":"content-fingerprint:fnv1a-879f824","affected_system":{"organization":"Automotive Dealer Management & Credit Financing SaaS","product":"Dealer Management & Loan Financing SaaS Mesh","system_type":"Enterprise Cloud & Distributed Systems","is_ai_system":false,"is_agentic":false,"primary_language":"Multi-Language / Distributed Architecture"},"documented_facts":[{"id":"SEA-SEC-014-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Ransomware forced shutdown of core dealer management SaaS platform, halting sales, financing, and parts ordering for 15,000 auto dealerships.","source_quote_or_pointer":"Summary combines the linked source with wider public reporting","fact_id":"SEA-SEC-014-F1","document_citation":"Summary combines the linked source with wider public reporting"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.financial_action","arch.multi_tenant","auth.infrastructure_modification"],"failure_mechanisms":["SEA-FM-014","SEA-FM-005"],"consequences":["Service outage (dealer operations)","Financial loss"],"confidence":"TENTATIVE","authority_level":"IRREVERSIBLE_EXTERNAL"},"provenance":{"extractor_version":"collectsea-curated-v2","review_status":"machine_extracted","review_notes":["Source re-checked 2026-09-30 (source documents the core event; some summary details come from wider reporting). CDK Global is privately held and filed no 8-K; this is a secondary news report, not a primary source. It covers the ransomware shutdown affecting roughly 15,000 dealerships."]},"source_authority":{"document_type":"Technology news report","filing_id":"SEA-SEC-014-DOC","reporting_entity":"CDK Global Inc.","regulatory_body":"SEC / Regulatory & Engineering Authority"},"safeguards":[{"safeguard_id":"SEA-SEC-014-SG1","label":"Contain before restoring","description":"Finish eradication and monitoring before reconnecting systems; restoring too early exposed CDK to a second incident.","target_failure_mode":"SEA-FM-014","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-SEC-014-SG2","label":"Offer a documented degraded mode to customers","description":"Give dependent customers a manual fallback and clear status updates during multi-day outages.","target_failure_mode":"SEA-FM-014","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-SEC-014-SG1","label":"Contain before restoring","description":"Finish eradication and monitoring before reconnecting systems; restoring too early exposed CDK to a second incident.","target_failure_mode":"SEA-FM-014","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-SEC-014-SG2","label":"Offer a documented degraded mode to customers","description":"Give dependent customers a manual fallback and clear status updates during multi-day outages.","target_failure_mode":"SEA-FM-014","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"incident"},{"incident_id":"SEA-SEC-015","title":"Hospitality Chain Unsegmented Reservation Database Credential Breach","display_title":"Hospitality Chain Unsegmented Reservation Database Credential Breach","display_summary":"Legacy Starwood database left unsegmented following acquisition; attackers extracted passport numbers and encrypted payment cards of 383M guests.","display_reference":"","display_source_type":"SEC filing","incident_date":"2018-11-30","disclosure_date":"2018-11-30","source_type":"regulator_report","source_url":"https://www.sec.gov/Archives/edgar/data/0001048286/000162828018014745/a2018ex99.htm","source_title":"Marriott Form 8-K, Exhibit 99: Starwood guest reservation database security incident (Nov 2018)","source_publisher":"U.S. SEC EDGAR (Marriott International)","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-09-30T00:00:00.000Z","source_hash":"content-fingerprint:fnv1a-2312fe73","affected_system":{"organization":"Global Hospitality Multi-Property Reservation Database","product":"Starwood Legacy Reservation Database","system_type":"Enterprise Cloud & Distributed Systems","is_ai_system":false,"is_agentic":false,"primary_language":"Multi-Language / Distributed Architecture"},"documented_facts":[{"id":"SEA-SEC-015-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Legacy Starwood database left unsegmented following acquisition; attackers extracted passport numbers and encrypted payment cards of 383M guests.","source_quote_or_pointer":"Summary combines the linked source with wider public reporting","fact_id":"SEA-SEC-015-F1","document_citation":"Summary combines the linked source with wider public reporting"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","data.financial_records","arch.multi_tenant"],"failure_mechanisms":["SEA-FM-014","SEA-FM-013"],"consequences":["Data exposure (guest records)","Compliance exposure"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"collectsea-curated-v2","review_status":"machine_extracted","review_notes":["Source re-checked 2026-09-30 (source documents the core event; some summary details come from wider reporting). Marriott reports unauthorized access to the Starwood network since 2014 and up to about 500 million guest records. The later 383 million figure comes from subsequent updates."]},"source_authority":{"document_type":"SEC Form 8-K exhibit","filing_id":"SEA-SEC-015-DOC","reporting_entity":"Marriott International","regulatory_body":"SEC / Regulatory & Engineering Authority"},"safeguards":[{"safeguard_id":"SEA-SEC-015-SG1","label":"Secure acquired systems during integration","description":"Assess, segment and monitor acquired networks before connecting them and before years pass undetected.","target_failure_mode":"SEA-FM-014","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-SEC-015-SG2","label":"Minimise and encrypt sensitive guest data","description":"Tokenise or encrypt passport and payment fields and restrict who can query reservation data in bulk.","target_failure_mode":"SEA-FM-014","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-SEC-015-SG1","label":"Secure acquired systems during integration","description":"Assess, segment and monitor acquired networks before connecting them and before years pass undetected.","target_failure_mode":"SEA-FM-014","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-SEC-015-SG2","label":"Minimise and encrypt sensitive guest data","description":"Tokenise or encrypt passport and payment fields and restrict who can query reservation data in bulk.","target_failure_mode":"SEA-FM-014","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"disclosure"},{"incident_id":"SEA-SEC-016","title":"Cloud Telephony Inbound SMS Verification Token Interception","display_title":"Cloud Telephony Inbound SMS Verification Token Interception","display_summary":"Attackers used SMS phishing to fool some Twilio employees into giving up credentials, then used them to access internal systems and information about a limited number of customer accounts.","display_reference":"","display_source_type":"Engineering postmortem","incident_date":"2022-08-04","disclosure_date":"2022-08-04","source_type":"vendor_postmortem","source_url":"https://www.twilio.com/en-us/blog/archive/2022/august-2022-social-engineering-attack","source_title":"Incident Report: Employee and Customer Account Compromise","source_publisher":"Twilio","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-09-30T00:00:00.000Z","source_hash":"content-fingerprint:fnv1a-51e33c38","affected_system":{"organization":"Cloud Communications & SMS Gateway Infrastructure","product":"Customer SMS Routing & API Console","system_type":"Enterprise Cloud & Distributed Systems","is_ai_system":false,"is_agentic":false,"primary_language":"Multi-Language / Distributed Architecture"},"documented_facts":[{"id":"SEA-SEC-016-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Attackers used SMS phishing to fool some Twilio employees into giving up credentials, then used them to access internal systems and information about a limited number of customer accounts.","source_quote_or_pointer":"Incident Report: Employee and Customer Account Compromise","fact_id":"SEA-SEC-016-F1","document_citation":"Incident Report: Employee and Customer Account Compromise"},{"id":"SEA-SEC-016-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Twilio's early estimate of about 125 affected customers was later revised to 209 of more than 270,000 customers.","source_quote_or_pointer":"Incident Report: Employee and Customer Account Compromise","fact_id":"SEA-SEC-016-F2","document_citation":"Incident Report: Employee and Customer Account Compromise"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.external_communication","data.credentials_secrets","arch.multi_tenant"],"failure_mechanisms":["SEA-FM-012","SEA-FM-009"],"consequences":["Credential compromise","Data exposure (customer accounts)"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"collectsea-curated-v2","review_status":"machine_extracted","review_notes":["Source re-checked 2026-09-30 (source documents the listed facts). Twilio's own incident report. The original summary's \"125 customers\" was an early figure; the October 2022 update reports 209 customers."]},"source_authority":{"document_type":"Vendor security incident report","filing_id":"SEA-SEC-016-DOC","reporting_entity":"Twilio Inc.","regulatory_body":"SEC / Regulatory & Engineering Authority"},"safeguards":[{"safeguard_id":"SEA-SEC-016-SG1","label":"Use phishing-resistant MFA for employees","description":"Hardware-key or passkey authentication resists lookalike-domain phishing that defeats SMS and one-time codes.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-SEC-016-SG2","label":"Limit and log internal console access","description":"Restrict what an employee account can do in customer-account tooling and alert on unusual access.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-SEC-016-SG1","label":"Use phishing-resistant MFA for employees","description":"Hardware-key or passkey authentication resists lookalike-domain phishing that defeats SMS and one-time codes.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-SEC-016-SG2","label":"Limit and log internal console access","description":"Restrict what an employee account can do in customer-account tooling and alert on unusual access.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"incident"},{"incident_id":"SEA-SEC-017","title":"Phishing impersonating a CI vendor yields GitHub credentials and 130 source-code repositories (Dropbox, 2022)","display_title":"Phishing impersonating a CI vendor yields GitHub credentials and 130 source-code repositories (Dropbox, 2022)","display_summary":"Phishing emails impersonating CircleCI led an employee to a fake page where GitHub credentials and a one-time code were captured, giving the attacker access to a GitHub organization and 130 code repositories.","display_reference":"","display_source_type":"SEC filing","incident_date":"2022-11-03","disclosure_date":"2022-11-03","source_type":"regulator_report","source_url":"https://www.sec.gov/Archives/edgar/data/1467623/000146762322000046/dbx-20221103.htm","source_title":"Dropbox Form 8-K: unauthorized access to GitHub repositories (Nov 2022)","source_publisher":"U.S. SEC EDGAR (Dropbox, Inc.)","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-09-30T00:00:00.000Z","source_hash":"content-fingerprint:fnv1a-1c67f841","affected_system":{"organization":"Distributed Cloud Storage & Developer Code Repository","product":"GitHub Source Code Repositories & API Tokens","system_type":"Enterprise Cloud & Distributed Systems","is_ai_system":false,"is_agentic":false,"primary_language":"Multi-Language / Distributed Architecture"},"documented_facts":[{"id":"SEA-SEC-017-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Phishing emails impersonating CircleCI led an employee to a fake page where GitHub credentials and a one-time code were captured, giving the attacker access to a GitHub organization and 130 code repositories.","source_quote_or_pointer":"Dropbox Form 8-K: unauthorized access to GitHub repositories (Nov 2022)","fact_id":"SEA-SEC-017-F1","document_citation":"Dropbox Form 8-K: unauthorized access to GitHub repositories (Nov 2022)"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.code_execution","data.credentials_secrets","arch.external_api"],"failure_mechanisms":["SEA-FM-012","SEA-FM-009"],"consequences":["Data exposure (source code and credentials)","Credential compromise"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"collectsea-curated-v2","review_status":"machine_extracted","review_notes":["Source re-checked 2026-09-30 (source documents the core event; some summary details come from wider reporting). Dropbox's filing and blog describe phishing that impersonated CircleCI and led to code-repository access. The original summary wrongly described CircleCI accounts as the target."]},"source_authority":{"document_type":"SEC Form 8-K","filing_id":"SEA-SEC-017-DOC","reporting_entity":"Dropbox Inc.","regulatory_body":"SEC / Regulatory & Engineering Authority"},"safeguards":[{"safeguard_id":"SEA-SEC-017-SG1","label":"Require phishing-resistant authentication for code hosting","description":"Use origin-bound credentials (passkeys or hardware keys) so a lookalike page cannot replay a one-time code.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-SEC-017-SG2","label":"Keep secrets out of repositories","description":"Scan repositories for API keys and rotate any credential found; store secrets in a vault.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-SEC-017-SG1","label":"Require phishing-resistant authentication for code hosting","description":"Use origin-bound credentials (passkeys or hardware keys) so a lookalike page cannot replay a one-time code.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-SEC-017-SG2","label":"Keep secrets out of repositories","description":"Scan repositories for API keys and rotate any credential found; store secrets in a vault.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"disclosure"},{"incident_id":"SEA-SEC-018","title":"Major entertainment company hit by an SMB worm with destructive wiper components (2014)","display_title":"Major entertainment company hit by an SMB worm with destructive wiper components (2014)","display_summary":"US-CERT alert TA14-353A describes an SMB worm tool used against a major entertainment company that spreads by brute-forcing Windows SMB shares.","display_reference":"","display_source_type":"Government security alert","incident_date":"2014-12-19","disclosure_date":"2014-12-19","source_type":"vendor_postmortem","source_url":"https://www.cisa.gov/news-events/alerts/2014/12/19/targeted-destructive-malware","source_title":"Alert TA14-353A: Targeted Destructive Malware","source_publisher":"U.S. CISA / US-CERT","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-09-30T00:00:00.000Z","source_hash":"content-fingerprint:fnv1a-bd1f6ebb","affected_system":{"organization":"Media Production Domain Controller & Enterprise Storage","product":"Corporate Windows Active Directory Domain","system_type":"Enterprise Cloud & Distributed Systems","is_ai_system":false,"is_agentic":false,"primary_language":"Multi-Language / Distributed Architecture"},"documented_facts":[{"id":"SEA-SEC-018-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"US-CERT alert TA14-353A describes an SMB worm tool used against a major entertainment company that spreads by brute-forcing Windows SMB shares.","source_quote_or_pointer":"Alert TA14-353A: Targeted Destructive Malware","fact_id":"SEA-SEC-018-F1","document_citation":"Alert TA14-353A: Targeted Destructive Malware"},{"id":"SEA-SEC-018-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The tool includes destructive components that overwrite drive data and the master boot record, which can leave machines non-operational with irrecoverable data.","source_quote_or_pointer":"Alert TA14-353A: Targeted Destructive Malware","fact_id":"SEA-SEC-018-F2","document_citation":"Alert TA14-353A: Targeted Destructive Malware"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.privileged_action","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-014","SEA-FM-005"],"consequences":["Destructive data deletion","Service outage"],"confidence":"TENTATIVE","authority_level":"IRREVERSIBLE_EXTERNAL"},"provenance":{"extractor_version":"collectsea-curated-v2","review_status":"machine_extracted","review_notes":["Source re-checked 2026-09-30 (source documents the listed facts). Replaces a link to an unrelated Microsoft filing. US-CERT alert TA14-353A describes the malware used against a major entertainment company. The original summary's Kerberos/Mimikatz details are not in this alert and have been removed."]},"source_authority":{"document_type":"Government security alert","filing_id":"SEA-SEC-018-DOC","reporting_entity":"Sony Pictures Entertainment","regulatory_body":"SEC / Regulatory & Engineering Authority"},"safeguards":[{"safeguard_id":"SEA-SEC-018-SG1","label":"Segment and restrict credential spread","description":"Limit lateral movement over file-sharing protocols and protect privileged credentials.","target_failure_mode":"SEA-FM-014","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-SEC-018-SG2","label":"Offline backups and mass-deletion detection","description":"Keep offline backups of critical servers and alert on large-scale overwrites or boot-record changes.","target_failure_mode":"SEA-FM-014","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-SEC-018-SG1","label":"Segment and restrict credential spread","description":"Limit lateral movement over file-sharing protocols and protect privileged credentials.","target_failure_mode":"SEA-FM-014","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-SEC-018-SG2","label":"Offline backups and mass-deletion detection","description":"Keep offline backups of critical servers and alert on large-scale overwrites or boot-record changes.","target_failure_mode":"SEA-FM-014","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"disclosure"},{"incident_id":"SEA-SEC-019","title":"National Retailer HVAC Vendor VPN Credential Pivot & POS Memory Scraper","display_title":"National Retailer HVAC Vendor VPN Credential Pivot & POS Memory Scraper","display_summary":"HVAC vendor portal credentials lacked two-factor authentication; attackers pivoted into internal networks and pushed BlackPOS memory scrapers to 1,800 checkout terminals.","display_reference":"","display_source_type":"Engineering postmortem","incident_date":"2013-12-19","disclosure_date":"2013-12-19","source_type":"vendor_postmortem","source_url":"https://corporate.target.com/article/2013/12/target-confirms-unauthorized-access-to-payment-car","source_title":"Target Confirms Unauthorized Access to Payment Card Data in U.S. Stores","source_publisher":"Target Corporation","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-09-30T00:00:00.000Z","source_hash":"content-fingerprint:fnv1a-93778a22","affected_system":{"organization":"Retail Point-of-Sale (POS) & Automated Ingestion Network","product":"Point-of-Sale Checkout Terminal Cluster","system_type":"Enterprise Cloud & Distributed Systems","is_ai_system":false,"is_agentic":false,"primary_language":"Multi-Language / Distributed Architecture"},"documented_facts":[{"id":"SEA-SEC-019-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"HVAC vendor portal credentials lacked two-factor authentication; attackers pivoted into internal networks and pushed BlackPOS memory scrapers to 1,800 checkout terminals.","source_quote_or_pointer":"Summary combines the linked source with wider public reporting","fact_id":"SEA-SEC-019-F1","document_citation":"Summary combines the linked source with wider public reporting"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.financial_action","data.financial_records","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012","SEA-FM-014"],"consequences":["Data exposure (payment cards)","Credential compromise"],"confidence":"TENTATIVE","authority_level":"IRREVERSIBLE_EXTERNAL"},"provenance":{"extractor_version":"collectsea-curated-v2","review_status":"machine_extracted","review_notes":["Source re-checked 2026-09-30 (source documents the core event; some summary details come from wider reporting). Target's statement confirms unauthorized access to payment card data for about 40 million accounts between Nov 27 and Dec 15, 2013. The HVAC-vendor credential pivot and BlackPOS details come from later investigative reporting."]},"source_authority":{"document_type":"Company statement","filing_id":"SEA-SEC-019-DOC","reporting_entity":"Target Corporation","regulatory_body":"SEC / Regulatory & Engineering Authority"},"safeguards":[{"safeguard_id":"SEA-SEC-019-SG1","label":"Constrain third-party vendor access","description":"Require MFA for vendor portals, scope access to only what the vendor needs and segment vendor networks from payment systems.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-SEC-019-SG2","label":"Monitor point-of-sale software integrity","description":"Detect unexpected binaries on terminals and unusual outbound data flows.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-SEC-019-SG1","label":"Constrain third-party vendor access","description":"Require MFA for vendor portals, scope access to only what the vendor needs and segment vendor networks from payment systems.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-SEC-019-SG2","label":"Monitor point-of-sale software integrity","description":"Detect unexpected binaries on terminals and unusual outbound data flows.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"disclosure"},{"incident_id":"SEA-SEC-020","title":"Social Media Internal Administrative Account Delegation Social Engineering","display_title":"Social Media Internal Administrative Account Delegation Social Engineering","display_summary":"A phone spear-phishing attack on a small number of employees gave attackers credentials to internal support tools on July 15, 2020.","display_reference":"","display_source_type":"Engineering postmortem","incident_date":"2020-07-15","disclosure_date":"2020-07-15","source_type":"vendor_postmortem","source_url":"https://blog.x.com/en_us/topics/company/2020/an-update-on-our-security-incident","source_title":"An update on our security incident","source_publisher":"Twitter (X)","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-09-30T00:00:00.000Z","source_hash":"content-fingerprint:fnv1a-1463e9f9","affected_system":{"organization":"Social Messaging & Internal Administrative Support Portal","product":"Internal Customer Support & Account Management Tooling","system_type":"Enterprise Cloud & Distributed Systems","is_ai_system":false,"is_agentic":false,"primary_language":"Multi-Language / Distributed Architecture"},"documented_facts":[{"id":"SEA-SEC-020-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A phone spear-phishing attack on a small number of employees gave attackers credentials to internal support tools on July 15, 2020.","source_quote_or_pointer":"An update on our security incident","fact_id":"SEA-SEC-020-F1","document_citation":"An update on our security incident"},{"id":"SEA-SEC-020-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Attackers targeted 130 accounts, reset passwords on 45 of them, and posted tweets soliciting bitcoin.","source_quote_or_pointer":"An update on our security incident","fact_id":"SEA-SEC-020-F2","document_citation":"An update on our security incident"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.credentials_secrets","arch.multi_tenant"],"failure_mechanisms":["SEA-FM-002","SEA-FM-012"],"consequences":["Credential compromise","Fraud (account takeover)"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"collectsea-curated-v2","review_status":"machine_extracted","review_notes":["Source re-checked 2026-09-30 (source documents the listed facts). Twitter's own incident update."]},"source_authority":{"document_type":"Vendor security incident report","filing_id":"SEA-SEC-020-DOC","reporting_entity":"Twitter Inc.","regulatory_body":"SEC / Regulatory & Engineering Authority"},"safeguards":[{"safeguard_id":"SEA-SEC-020-SG1","label":"Require two-person approval for high-impact account actions","description":"Actions such as password resets on high-profile accounts should need a second authorised person.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-SEC-020-SG2","label":"Phishing-resistant authentication and full audit of support tools","description":"Protect internal tool access with hardware keys and log every action with the actor and target.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-SEC-020-SG1","label":"Require two-person approval for high-impact account actions","description":"Actions such as password resets on high-profile accounts should need a second authorised person.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-SEC-020-SG2","label":"Phishing-resistant authentication and full audit of support tools","description":"Protect internal tool access with hardware keys and log every action with the actor and target.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"incident"},{"incident_id":"SEA-REG-001","title":"Loan Servicing Interface Confusion Inadvertent Principal Wire Transfer","display_title":"Loan Servicing Interface Confusion Inadvertent Principal Wire Transfer","display_summary":"Unintuitive Flexcube interface required checking obscure override box; bank accidentally wired $894M of proprietary funds to Revlon lenders.","display_reference":"","display_source_type":"Court record","incident_date":"2020-08-11","disclosure_date":"2020-08-11","source_type":"court_filing","source_url":"https://www.nysd.uscourts.gov/sites/default/files/2021-02/20cv6539%20Citibank%20Opinion.pdf","source_title":"In re Citibank August 11, 2020 Wire Transfers, 20-cv-6539 (JMF): findings of fact and conclusions of law","source_publisher":"U.S. District Court, Southern District of New York","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-09-30T00:00:00.000Z","source_hash":"content-fingerprint:fnv1a-662fa006","affected_system":{"organization":"Global Commercial Banking & Wire Settlement Clearinghouse","product":"Financial Wire Settlement Platform (Flexcube)","system_type":"Enterprise Cloud & Distributed Systems","is_ai_system":false,"is_agentic":false,"primary_language":"Multi-Language / Distributed Architecture"},"documented_facts":[{"id":"SEA-REG-001-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Unintuitive Flexcube interface required checking obscure override box; bank accidentally wired $894M of proprietary funds to Revlon lenders.","source_quote_or_pointer":"Summary combines the linked source with wider public reporting","fact_id":"SEA-REG-001-F1","document_citation":"Summary combines the linked source with wider public reporting"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.financial_action","auth.privileged_action","data.financial_records"],"failure_mechanisms":["SEA-FM-002","SEA-FM-007"],"consequences":["Financial loss (mistaken payments)","Interface-induced error"],"confidence":"TENTATIVE","authority_level":"IRREVERSIBLE_EXTERNAL"},"provenance":{"extractor_version":"collectsea-curated-v2","review_status":"machine_extracted","review_notes":["Source re-checked 2026-09-30 (source documents the core event; some summary details come from wider reporting). The opinion (Feb 16, 2021) finds that Citibank's mistaken wires of nearly $900 million in principal to Revlon term-loan lenders were final. The Flexcube interface detail is part of the factual record but is summarised here from public reporting."]},"source_authority":{"document_type":"Court opinion","filing_id":"SEA-REG-001-DOC","reporting_entity":"Citibank, N.A.","regulatory_body":"SEC / Regulatory & Engineering Authority"},"safeguards":[{"safeguard_id":"SEA-REG-001-SG1","label":"Design payment interfaces so a risky option is explicit","description":"Make the control that changes a payment from interest-only to full principal unmistakable and require a clear confirmation.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-REG-001-SG2","label":"Require dual control and reconciliation for large payments","description":"Independent approval and automated checks against expected amounts should catch payments that differ by orders of magnitude.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-REG-001-SG1","label":"Design payment interfaces so a risky option is explicit","description":"Make the control that changes a payment from interest-only to full principal unmistakable and require a clear confirmation.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-REG-001-SG2","label":"Require dual control and reconciliation for large payments","description":"Independent approval and automated checks against expected amounts should catch payments that differ by orders of magnitude.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"incident"},{"incident_id":"SEA-REG-002","title":"Cloud Metadata Proxy SSRF & WAF Misconfiguration Data Exfiltration","display_title":"Cloud Metadata Proxy SSRF & WAF Misconfiguration Data Exfiltration","display_summary":"The OCC assessed an $80 million civil money penalty against Capital One for failing to establish effective risk assessment processes before migrating significant IT operations to the public cloud and for not correcting…","display_reference":"","display_source_type":"Regulatory or court record","incident_date":"2019-07-19","disclosure_date":"2019-07-19","source_type":"regulator_report","source_url":"https://www.occ.gov/news-issuances/news-releases/2020/nr-occ-2020-101.html","source_title":"OCC Assesses $80 Million Civil Money Penalty Against Capital One","source_publisher":"Office of the Comptroller of the Currency","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-09-30T00:00:00.000Z","source_hash":"content-fingerprint:fnv1a-aa0c6525","affected_system":{"organization":"Consumer Banking & Cloud Object Storage Infrastructure","product":"Cloud Virtual Private Network & WAF Architecture","system_type":"Enterprise Cloud & Distributed Systems","is_ai_system":false,"is_agentic":false,"primary_language":"Multi-Language / Distributed Architecture"},"documented_facts":[{"id":"SEA-REG-002-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The OCC assessed an $80 million civil money penalty against Capital One for failing to establish effective risk assessment processes before migrating significant IT operations to the public cloud and for not correcting deficiencies in a timely manner.","source_quote_or_pointer":"OCC Assesses $80 Million Civil Money Penalty Against Capital One","fact_id":"SEA-REG-002-F1","document_citation":"OCC Assesses $80 Million Civil Money Penalty Against Capital One"},{"id":"SEA-REG-002-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Misconfigured ModSecurity WAF exploited via SSRF to query IMDSv1; exfiltrated 700 S3 buckets containing 106M credit card applications.","source_quote_or_pointer":"Summary combines the linked source with wider public reporting","fact_id":"SEA-REG-002-F2","document_citation":"Summary combines the linked source with wider public reporting"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.credentials_secrets","data.pii","auth.privileged_action"],"failure_mechanisms":["SEA-FM-013","SEA-FM-002"],"consequences":["Data exposure (applicant records)","Compliance exposure"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"collectsea-curated-v2","review_status":"machine_extracted","review_notes":["Source re-checked 2026-09-30 (source documents the core event; some summary details come from wider reporting). The OCC release (Aug 6, 2020) documents the penalty for failing to establish effective risk assessment before migrating IT operations to the public cloud. The SSRF, WAF and metadata-service mechanics come from the Department of Justice and public reporting."]},"source_authority":{"document_type":"Regulator news release","filing_id":"SEA-REG-002-DOC","reporting_entity":"Capital One Financial Corporation","regulatory_body":"SEC / Regulatory & Engineering Authority"},"safeguards":[{"safeguard_id":"SEA-REG-002-SG1","label":"Assess cloud risk before migrating, and fix findings on time","description":"Complete risk assessment and network-security control design before moving workloads, then track remediation of deficiencies.","target_failure_mode":"SEA-FM-013","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-REG-002-SG2","label":"Restrict cloud metadata and role permissions","description":"Require metadata-service protections, least-privilege roles for edge components, and alerting on unusual bulk reads of storage.","target_failure_mode":"SEA-FM-013","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-REG-002-SG1","label":"Assess cloud risk before migrating, and fix findings on time","description":"Complete risk assessment and network-security control design before moving workloads, then track remediation of deficiencies.","target_failure_mode":"SEA-FM-013","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-REG-002-SG2","label":"Restrict cloud metadata and role permissions","description":"Require metadata-service protections, least-privilege roles for edge components, and alerting on unusual bulk reads of storage.","target_failure_mode":"SEA-FM-013","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"incident"},{"incident_id":"SEA-REG-003","title":"Retail broker failed best-execution reviews while taking high payment for order flow (Robinhood, SEC 2020)","display_title":"Retail broker failed best-execution reviews while taking high payment for order flow (Robinhood, SEC 2020)","display_summary":"From July 2016 to June 2019 the broker received high payment for order flow but did not conduct adequate, regular and rigorous reviews of execution quality on customer orders.","display_reference":"","display_source_type":"SEC filing","incident_date":"2020-12-17","disclosure_date":"2020-12-17","source_type":"regulator_report","source_url":"https://www.sec.gov/litigation/admin/2020/33-10906.pdf","source_title":"SEC Order: Robinhood Financial LLC (Release 33-10906)","source_publisher":"U.S. Securities and Exchange Commission","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-09-30T00:00:00.000Z","source_hash":"content-fingerprint:fnv1a-151bd9a1","affected_system":{"organization":"Retail Brokerage Mobile API & Market Settlement Engine","product":"Algorithmic Order Routing & Settlement Engine","system_type":"Enterprise Cloud & Distributed Systems","is_ai_system":true,"is_agentic":true,"primary_language":"Multi-Language / Distributed Architecture"},"documented_facts":[{"id":"SEA-REG-003-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"From July 2016 to June 2019 the broker received high payment for order flow but did not conduct adequate, regular and rigorous reviews of execution quality on customer orders.","source_quote_or_pointer":"SEC Order: Robinhood Financial LLC (Release 33-10906)","fact_id":"SEA-REG-003-F1","document_citation":"SEC Order: Robinhood Financial LLC (Release 33-10906)"},{"id":"SEA-REG-003-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The SEC found the inferior prices cost customers $34.1 million even after accounting for zero commissions, and ordered a $65 million penalty.","source_quote_or_pointer":"SEC Order: Robinhood Financial LLC (Release 33-10906)","fact_id":"SEA-REG-003-F2","document_citation":"SEC Order: Robinhood Financial LLC (Release 33-10906)"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.financial_action","auth.autonomous_approval","data.financial_records"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Financial loss (inferior execution prices)","Compliance exposure"],"confidence":"TENTATIVE","authority_level":"IRREVERSIBLE_EXTERNAL"},"provenance":{"extractor_version":"collectsea-curated-v2","review_status":"machine_extracted","review_notes":["Source re-checked 2026-09-30 (source documents the listed facts). The original summary described an \"algorithmic order router\"; the order concerns best-execution reviews and misleading disclosures, so the description was rewritten from the order."]},"source_authority":{"document_type":"SEC administrative order","filing_id":"SEA-REG-003-DOC","reporting_entity":"Robinhood Financial LLC","regulatory_body":"SEC / Regulatory & Engineering Authority"},"safeguards":[{"safeguard_id":"SEA-REG-003-SG1","label":"Review execution quality regularly and rigorously","description":"Compare execution against alternatives with documented, periodic reviews and act on findings.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-REG-003-SG2","label":"Disclose revenue sources accurately","description":"Describe payment-for-order-flow and other conflicts in customer-facing materials.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-REG-003-SG1","label":"Review execution quality regularly and rigorously","description":"Compare execution against alternatives with documented, periodic reviews and act on findings.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-REG-003-SG2","label":"Disclose revenue sources accurately","description":"Describe payment-for-order-flow and other conflicts in customer-facing materials.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"disclosure"},{"incident_id":"SEA-REG-004","title":"Layering algorithm places and cancels large E-mini S&P 500 orders around the 2010 Flash Crash","display_title":"Layering algorithm places and cancels large E-mini S&P 500 orders around the 2010 Flash Crash","display_summary":"The CFTC alleged a layering algorithm automatically placed four to six very large sell orders in the E-mini S&P 500 order book and cancelled them without execution.","display_reference":"","display_source_type":"Regulatory or court record","incident_date":"2010-05-06","disclosure_date":"2010-05-06","source_type":"regulator_report","source_url":"https://www.cftc.gov/PressRoom/PressReleases/7156-15","source_title":"CFTC Charges Navinder Singh Sarao and Nav Sarao Futures Limited PLC with Price Manipulation and Spoofing","source_publisher":"U.S. Commodity Futures Trading Commission","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-09-30T00:00:00.000Z","source_hash":"content-fingerprint:fnv1a-b1ad6e44","affected_system":{"organization":"Algorithmic Derivatives High-Frequency Trading Engine","product":"Automated E-Mini Futures Trading System","system_type":"Enterprise Cloud & Distributed Systems","is_ai_system":true,"is_agentic":true,"primary_language":"Multi-Language / Distributed Architecture"},"documented_facts":[{"id":"SEA-REG-004-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The CFTC alleged a layering algorithm automatically placed four to six very large sell orders in the E-mini S&P 500 order book and cancelled them without execution.","source_quote_or_pointer":"CFTC Charges Navinder Singh Sarao and Nav Sarao Futures Limited PLC with Price Manipulation and Spoofing","fact_id":"SEA-REG-004-F1","document_citation":"CFTC Charges Navinder Singh Sarao and Nav Sarao Futures Limited PLC with Price Manipulation and Spoofing"},{"id":"SEA-REG-004-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The complaint alleges this conduct contributed to an order-book imbalance that contributed to market conditions leading to the May 6, 2010 Flash Crash.","source_quote_or_pointer":"CFTC Charges Navinder Singh Sarao and Nav Sarao Futures Limited PLC with Price Manipulation and Spoofing","fact_id":"SEA-REG-004-F2","document_citation":"CFTC Charges Navinder Singh Sarao and Nav Sarao Futures Limited PLC with Price Manipulation and Spoofing"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.financial_action","auth.autonomous_approval","auth.code_execution"],"failure_mechanisms":["SEA-FM-002","SEA-FM-009"],"consequences":["Market manipulation","Financial loss"],"confidence":"TENTATIVE","authority_level":"IRREVERSIBLE_EXTERNAL"},"provenance":{"extractor_version":"collectsea-curated-v2","review_status":"machine_extracted","review_notes":["Source re-checked 2026-09-30 (source documents the listed facts). Replaces a link to an unrelated press release. The CFTC complaint (Apr 21, 2015) alleges a layering algorithm and that the conduct contributed to conditions that led to the May 6, 2010 Flash Crash."]},"source_authority":{"document_type":"Regulator press release","filing_id":"SEA-REG-004-DOC","reporting_entity":"Navinder Singh Sarao / Nav Sarao Futures","regulatory_body":"SEC / Regulatory & Engineering Authority"},"safeguards":[{"safeguard_id":"SEA-REG-004-SG1","label":"Limit order modification and cancellation behaviour","description":"Enforce order-to-trade and cancel-rate limits in the risk layer, independent of trading logic.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-REG-004-SG2","label":"Surveil for layering patterns","description":"Monitor order-book activity for repeated large orders placed and cancelled without execution.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-REG-004-SG1","label":"Limit order modification and cancellation behaviour","description":"Enforce order-to-trade and cancel-rate limits in the risk layer, independent of trading logic.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-REG-004-SG2","label":"Surveil for layering patterns","description":"Monitor order-book activity for repeated large orders placed and cancelled without execution.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"incident"},{"incident_id":"SEA-REG-005","title":"Quantitative Market Maker Microwave Timestamp Synchronization Failure","display_title":"Quantitative Market Maker Microwave Timestamp Synchronization Failure","display_summary":"A microsecond clock drift between Chicago and New York microwave feeds caused automated trading models to execute arbitrage against stale quotes.","display_reference":"","display_source_type":"Illustrative scenario","incident_date":"2024-03-15","disclosure_date":"2024-03-15","source_type":"vendor_postmortem","source_url":"https://collectsea.com/methodology","source_title":"Illustrative scenario (no primary source)","source_publisher":"CollectSEA illustrative scenario","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026.09.30T00:00:00.000Z","source_hash":"content-fingerprint:fnv1a-7d712b67","affected_system":{"organization":"Proprietary Quantitative Arbitrage Trading Mesh","product":"Ultra-Low Latency High-Frequency Trading Mesh","system_type":"Enterprise Cloud & Distributed Systems","is_ai_system":false,"is_agentic":false,"primary_language":"Multi-Language / Distributed Architecture"},"documented_facts":[{"id":"SEA-REG-005-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A microsecond clock drift between Chicago and New York microwave feeds caused automated trading models to execute arbitrage against stale quotes.","source_quote_or_pointer":"CollectSEA illustrative scenario","fact_id":"SEA-REG-005-F1","document_citation":"CollectSEA illustrative scenario"}],"source_stated_contributors":["A microsecond clock drift between Chicago and New York microwave feeds caused automated tr..."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.financial_action","auth.autonomous_approval","data.financial_records"],"failure_mechanisms":["SEA-FM-002","SEA-FM-006"],"consequences":["Financial Loss","Execution Error"],"confidence":"TENTATIVE","authority_level":"IRREVERSIBLE_EXTERNAL"},"provenance":{"extractor_version":"collectsea-illustrative-scenario-v1","review_status":"machine_extracted","review_notes":["Composite teaching scenario written by CollectSEA. Not a documented real-world incident and not tied to a primary source."]},"source_authority":{"document_type":"Illustrative scenario","filing_id":"SEA-REG-005","reporting_entity":"CollectSEA","regulatory_body":"Not applicable"},"safeguards":[{"safeguard_id":"SEA-REG-005-SG1","label":"Automated Defensive Guardrail","description":"Enforce business authorization limits and approval thresholds in deterministic backend interceptors, requiring dual-control human sign-off for high-impact actions.","target_failure_mode":"Repeat architectural failure","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-REG-005-SG1","label":"Automated Defensive Guardrail","description":"Enforce business authorization limits and approval thresholds in deterministic backend interceptors, requiring dual-control human sign-off for high-impact actions.","target_failure_mode":"Repeat architectural failure","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-POST-001","title":"Design reference: idempotency keys make retried payment API calls safe (Stripe)","display_title":"Design reference: idempotency keys make retried payment API calls safe (Stripe)","display_summary":"Stripe explains that a client which cannot tell whether a request succeeded (for example after a network failure) needs to retry safely, and that without protection a retried charge could double-charge a customer.","display_reference":"","display_source_type":"Engineering design article","incident_date":"2017-02-22","disclosure_date":"2017-02-22","source_type":"vendor_postmortem","source_url":"https://stripe.com/blog/idempotency","source_title":"Designing robust and predictable APIs with idempotency","source_publisher":"Stripe","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-09-30T00:00:00.000Z","source_hash":"content-fingerprint:fnv1a-ca355858","affected_system":{"organization":"Global Payment Gateway & Merchant Idempotency API","product":"API Gateway & Payment Processing Engine","system_type":"Enterprise Cloud & Distributed Systems","is_ai_system":false,"is_agentic":false,"primary_language":"Multi-Language / Distributed Architecture"},"documented_facts":[{"id":"SEA-POST-001-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Stripe explains that a client which cannot tell whether a request succeeded (for example after a network failure) needs to retry safely, and that without protection a retried charge could double-charge a customer.","source_quote_or_pointer":"Designing robust and predictable APIs with idempotency","fact_id":"SEA-POST-001-F1","document_citation":"Designing robust and predictable APIs with idempotency"},{"id":"SEA-POST-001-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The article describes idempotency keys, where the server stores the result of the first request under the key and returns it for retries.","source_quote_or_pointer":"Designing robust and predictable APIs with idempotency","fact_id":"SEA-POST-001-F2","document_citation":"Designing robust and predictable APIs with idempotency"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.financial_action","arch.external_api","arch.caching"],"failure_mechanisms":["SEA-FM-001"],"consequences":["Financial loss (duplicate charges)"],"confidence":"TENTATIVE","authority_level":"IRREVERSIBLE_EXTERNAL"},"provenance":{"extractor_version":"collectsea-curated-v2","review_status":"machine_extracted","review_notes":["Source re-checked 2026-09-30 (source documents the listed facts). This is a design article, not an incident report. The original summary presented it as a documented double-charge incident; it now states what the article says."]},"source_authority":{"document_type":"Engineering design article","filing_id":"SEA-POST-001-DOC","reporting_entity":"Stripe Inc.","regulatory_body":"SEC / Regulatory & Engineering Authority"},"safeguards":[{"safeguard_id":"SEA-POST-001-SG1","label":"Attach idempotency keys to state-changing requests","description":"Store the result of the first request under the key and return it for retries so a retried charge is never applied twice.","target_failure_mode":"SEA-FM-001","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-POST-001-SG2","label":"Treat timeouts as unknown, not failed","description":"Reconcile with the server before repeating an operation whose outcome is unknown.","target_failure_mode":"SEA-FM-001","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-POST-001-SG1","label":"Attach idempotency keys to state-changing requests","description":"Store the result of the first request under the key and return it for retries so a retried charge is never applied twice.","target_failure_mode":"SEA-FM-001","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-POST-001-SG2","label":"Treat timeouts as unknown, not failed","description":"Reconcile with the server before repeating an operation whose outcome is unknown.","target_failure_mode":"SEA-FM-001","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"publication"},{"incident_id":"SEA-POST-002","title":"Design reference: AWS guidance on timeouts, retries and backoff with jitter","display_title":"Design reference: AWS guidance on timeouts, retries and backoff with jitter","display_summary":"AWS describes retries as powerful but dangerous: when a dependency is struggling, too many retries can amplify load and turn a partial failure into a retry storm.","display_reference":"","display_source_type":"Engineering design article","incident_date":"2024-03-15","disclosure_date":"2024-03-15","source_type":"vendor_postmortem","source_url":"https://aws.amazon.com/builders-library/timeouts-retries-and-backoff-with-jitter/","source_title":"Timeouts, retries, and backoff with jitter","source_publisher":"Amazon Web Services (Builders' Library)","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-09-30T00:00:00.000Z","source_hash":"content-fingerprint:fnv1a-56fc55ec","affected_system":{"organization":"Global Cloud Control Plane & Dynamic Configuration Service","product":"Cloud API Gateway & Distributed State Orchestrator","system_type":"Enterprise Cloud & Distributed Systems","is_ai_system":false,"is_agentic":false,"primary_language":"Multi-Language / Distributed Architecture"},"documented_facts":[{"id":"SEA-POST-002-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"AWS describes retries as powerful but dangerous: when a dependency is struggling, too many retries can amplify load and turn a partial failure into a retry storm.","source_quote_or_pointer":"Timeouts, retries, and backoff with jitter","fact_id":"SEA-POST-002-F1","document_citation":"Timeouts, retries, and backoff with jitter"},{"id":"SEA-POST-002-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The article recommends timeouts, capped exponential backoff and jitter to keep retries from synchronising.","source_quote_or_pointer":"Timeouts, retries, and backoff with jitter","fact_id":"SEA-POST-002-F2","document_citation":"Timeouts, retries, and backoff with jitter"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.infrastructure_modification","arch.external_api","arch.caching"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service outage (retry storm)","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"collectsea-curated-v2","review_status":"machine_extracted","review_notes":["Source re-checked 2026-09-30 (source documents the listed facts). Replaces a link to a different AWS article on idempotent APIs. This is a design article, not an incident report, and its publication date has not been recorded."]},"source_authority":{"document_type":"Engineering design article","filing_id":"SEA-POST-002-DOC","reporting_entity":"Amazon Web Services (AWS)","regulatory_body":"SEC / Regulatory & Engineering Authority"},"safeguards":[{"safeguard_id":"SEA-POST-002-SG1","label":"Use capped exponential backoff with jitter","description":"Spread retries over time and cap attempts so clients do not synchronise into a storm.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-POST-002-SG2","label":"Retry at one layer with a budget","description":"Avoid multiplying retries across layers; bound retries with a budget relative to normal traffic.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-POST-002-SG1","label":"Use capped exponential backoff with jitter","description":"Spread retries over time and cap attempts so clients do not synchronise into a storm.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-POST-002-SG2","label":"Retry at one layer with a budget","description":"Avoid multiplying retries across layers; bound retries with a budget relative to normal traffic.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"unknown"},{"incident_id":"SEA-POST-004","title":"Blank provisioning parameter leads to automatic deletion of a customer's private cloud (UniSuper / Google Cloud, 2024)","display_title":"Blank provisioning parameter leads to automatic deletion of a customer's private cloud (UniSuper / Google Cloud, 2024)","display_summary":"An input parameter was left blank in an internal provisioning tool, so the system assigned an unknown default fixed one-year term to the customer's VMware Private Cloud.","display_reference":"","display_source_type":"Engineering postmortem","incident_date":"2024-05-24","disclosure_date":"2024-05-24","source_type":"vendor_postmortem","source_url":"https://cloud.google.com/blog/products/infrastructure/details-of-google-cloud-gcve-incident","source_title":"Sharing details on a recent incident impacting one of our customers","source_publisher":"Google Cloud","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-09-30T00:00:00.000Z","source_hash":"content-fingerprint:fnv1a-42a42f3d","affected_system":{"organization":"Private Cloud Virtual Private Cloud (VPC) Deployment Engine","product":"Multi-Region Cloud Hosting & Backup Environment","system_type":"Enterprise Cloud & Distributed Systems","is_ai_system":false,"is_agentic":false,"primary_language":"Multi-Language / Distributed Architecture"},"documented_facts":[{"id":"SEA-POST-004-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"An input parameter was left blank in an internal provisioning tool, so the system assigned an unknown default fixed one-year term to the customer's VMware Private Cloud.","source_quote_or_pointer":"Sharing details on a recent incident impacting one of our customers","fact_id":"SEA-POST-004-F1","document_citation":"Sharing details on a recent incident impacting one of our customers"},{"id":"SEA-POST-004-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"When that term ended the Private Cloud was deleted; no customer notification was sent because the deletion was not triggered by a customer request.","source_quote_or_pointer":"Sharing details on a recent incident impacting one of our customers","fact_id":"SEA-POST-004-F2","document_citation":"Sharing details on a recent incident impacting one of our customers"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.infrastructure_modification","arch.multi_tenant"],"failure_mechanisms":["SEA-FM-005","SEA-FM-008"],"consequences":["Destructive data deletion","Service outage (multi-day)"],"confidence":"TENTATIVE","authority_level":"IRREVERSIBLE_EXTERNAL"},"provenance":{"extractor_version":"collectsea-curated-v2","review_status":"machine_extracted","review_notes":["Source re-checked 2026-09-30 (source documents the listed facts). Replaces the UniSuper/Google joint statement with Google Cloud's own root-cause report."]},"source_authority":{"document_type":"Vendor incident report","filing_id":"SEA-POST-004-DOC","reporting_entity":"UniSuper & Google Cloud","regulatory_body":"SEC / Regulatory & Engineering Authority"},"safeguards":[{"safeguard_id":"SEA-POST-004-SG1","label":"Never let a blank input silently choose a default lifetime","description":"Require explicit values for expiry and deletion parameters, and reject missing ones.","target_failure_mode":"SEA-FM-005","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-POST-004-SG2","label":"Soft-delete with grace periods and independent backups","description":"Delay irreversible deletion, notify the customer, and keep backups in an independent location.","target_failure_mode":"SEA-FM-005","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-POST-004-SG1","label":"Never let a blank input silently choose a default lifetime","description":"Require explicit values for expiry and deletion parameters, and reject missing ones.","target_failure_mode":"SEA-FM-005","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-POST-004-SG2","label":"Soft-delete with grace periods and independent backups","description":"Delay irreversible deletion, notify the customer, and keep backups in an independent location.","target_failure_mode":"SEA-FM-005","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"disclosure"},{"incident_id":"SEA-POST-005","title":"Database permissions change doubles a bot-management feature file and crashes edge proxies (Cloudflare, 2025)","display_title":"Database permissions change doubles a bot-management feature file and crashes edge proxies (Cloudflare, 2025)","display_summary":"A ClickHouse access-control change made table permissions explicit, so a query without a database filter returned duplicate rows and doubled the size of the Bot Management feature file.","display_reference":"","display_source_type":"Engineering postmortem","incident_date":"2025-11-18","disclosure_date":"2025-11-18","source_type":"vendor_postmortem","source_url":"https://blog.cloudflare.com/18-november-2025-outage/","source_title":"Cloudflare outage on November 18, 2025","source_publisher":"Cloudflare","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-09-30T00:00:00.000Z","source_hash":"content-fingerprint:fnv1a-5a7f2834","affected_system":{"organization":"Cloudflare","product":"Bot Management feature file / core proxy","system_type":"Enterprise Cloud & Distributed Systems","is_ai_system":false,"is_agentic":false,"primary_language":"Multi-Language / Distributed Architecture"},"documented_facts":[{"id":"SEA-POST-005-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A ClickHouse access-control change made table permissions explicit, so a query without a database filter returned duplicate rows and doubled the size of the Bot Management feature file.","source_quote_or_pointer":"Cloudflare outage on November 18, 2025","fact_id":"SEA-POST-005-F1","document_citation":"Cloudflare outage on November 18, 2025"},{"id":"SEA-POST-005-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The oversized file exceeded the module's hard limit of 200 features and triggered a panic in the Rust proxy code, producing widespread 5xx errors.","source_quote_or_pointer":"Cloudflare outage on November 18, 2025","fact_id":"SEA-POST-005-F2","document_citation":"Cloudflare outage on November 18, 2025"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.code_execution","auth.infrastructure_modification","arch.external_api"],"failure_mechanisms":["SEA-FM-011","SEA-FM-008"],"consequences":["Service outage (global)","Cascading failure"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"collectsea-curated-v2","review_status":"machine_extracted","review_notes":["Source re-checked 2026-09-30 (source documents the listed facts). The original summary attributed unrelated details to the June 2022 Cloudflare outage. It now describes the November 18, 2025 incident from Cloudflare's own postmortem."]},"source_authority":{"document_type":"Vendor postmortem","filing_id":"SEA-POST-005-DOC","reporting_entity":"Cloudflare Inc.","regulatory_body":"SEC / Regulatory & Engineering Authority"},"safeguards":[{"safeguard_id":"SEA-POST-005-SG1","label":"Validate generated configuration before global propagation","description":"Check size, duplicates and schema of auto-generated files, and roll out gradually with a kill switch.","target_failure_mode":"SEA-FM-011","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-POST-005-SG2","label":"Fail safe with last-known-good configuration","description":"Consumers should reject an invalid file and keep serving with the previous good version instead of panicking.","target_failure_mode":"SEA-FM-011","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-POST-005-SG1","label":"Validate generated configuration before global propagation","description":"Check size, duplicates and schema of auto-generated files, and roll out gradually with a kill switch.","target_failure_mode":"SEA-FM-011","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-POST-005-SG2","label":"Fail safe with last-known-good configuration","description":"Consumers should reject an invalid file and keep serving with the previous good version instead of panicking.","target_failure_mode":"SEA-FM-011","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"incident"},{"incident_id":"SEA-POST-006","title":"Valid customer configuration change triggers a latent software bug across a CDN (Fastly, 2021)","display_title":"Valid customer configuration change triggers a latent software bug across a CDN (Fastly, 2021)","display_summary":"A software deployment on May 12, 2021 introduced a bug that a specific valid customer configuration could trigger; on June 8 a customer pushed such a change.","display_reference":"","display_source_type":"Engineering postmortem","incident_date":"2021-06-08","disclosure_date":"2021-06-08","source_type":"vendor_postmortem","source_url":"https://www.fastly.com/blog/summary-of-june-8-outage","source_title":"Summary of June 8 outage","source_publisher":"Fastly","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-09-30T00:00:00.000Z","source_hash":"content-fingerprint:fnv1a-b4a08ded","affected_system":{"organization":"Fastly","product":"Edge cloud platform","system_type":"Enterprise Cloud & Distributed Systems","is_ai_system":false,"is_agentic":false,"primary_language":"Multi-Language / Distributed Architecture"},"documented_facts":[{"id":"SEA-POST-006-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A software deployment on May 12, 2021 introduced a bug that a specific valid customer configuration could trigger; on June 8 a customer pushed such a change.","source_quote_or_pointer":"Summary of June 8 outage","fact_id":"SEA-POST-006-F1","document_citation":"Summary of June 8 outage"},{"id":"SEA-POST-006-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The bug caused about 85% of Fastly's network to return errors; the issue was detected within a minute and 95% of the network was back to normal within 49 minutes.","source_quote_or_pointer":"Summary of June 8 outage","fact_id":"SEA-POST-006-F2","document_citation":"Summary of June 8 outage"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.code_execution","auth.infrastructure_modification","arch.external_api"],"failure_mechanisms":["SEA-FM-011","SEA-FM-006"],"consequences":["Service outage (global)","Cascading failure"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"collectsea-curated-v2","review_status":"machine_extracted","review_notes":["Source re-checked 2026-09-30 (source documents the listed facts). Replaces a link to a Cloudflare postmortem for a different outage. Details come from Fastly's own summary."]},"source_authority":{"document_type":"Vendor postmortem","filing_id":"SEA-POST-006-DOC","reporting_entity":"Fastly Inc.","regulatory_body":"SEC / Regulatory & Engineering Authority"},"safeguards":[{"safeguard_id":"SEA-POST-006-SG1","label":"Canary software changes and watch for latent bugs","description":"Roll out to a small share of the network first and verify behaviour under real customer configurations.","target_failure_mode":"SEA-FM-011","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-POST-006-SG2","label":"Enable fast detection and rollback","description":"Detect errors within a minute and keep a one-step way to disable the triggering configuration.","target_failure_mode":"SEA-FM-011","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-POST-006-SG1","label":"Canary software changes and watch for latent bugs","description":"Roll out to a small share of the network first and verify behaviour under real customer configurations.","target_failure_mode":"SEA-FM-011","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-POST-006-SG2","label":"Enable fast detection and rollback","description":"Detect errors within a minute and keep a one-step way to disable the triggering configuration.","target_failure_mode":"SEA-FM-011","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"incident"},{"incident_id":"SEA-POST-007","title":"Privilege escalation and a certificate-validation flaw allow cross-account database access (Azure PostgreSQL \"ExtraReplica\", 2022)","display_title":"Privilege escalation and a certificate-validation flaw allow cross-account database access (Azure PostgreSQL \"ExtraReplica\", 2022)","display_summary":"Researchers exploited a bug in Azure's modified PostgreSQL engine to gain superuser privileges and run operating-system commands on their own database instance.","display_reference":"","display_source_type":"Engineering postmortem","incident_date":"2022-04-29","disclosure_date":"2022-04-29","source_type":"vendor_postmortem","source_url":"https://www.wiz.io/blog/wiz-research-discovers-extrareplica-cross-account-database-vulnerability-in-azure-postgresql","source_title":"Wiz Research discovers \"ExtraReplica\": a cross-account database vulnerability in Azure PostgreSQL","source_publisher":"Wiz Research","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-09-30T00:00:00.000Z","source_hash":"content-fingerprint:fnv1a-838d52ff","affected_system":{"organization":"Microsoft Azure","product":"Azure Database for PostgreSQL Flexible Server","system_type":"Enterprise Cloud & Distributed Systems","is_ai_system":false,"is_agentic":false,"primary_language":"Multi-Language / Distributed Architecture"},"documented_facts":[{"id":"SEA-POST-007-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Researchers exploited a bug in Azure's modified PostgreSQL engine to gain superuser privileges and run operating-system commands on their own database instance.","source_quote_or_pointer":"Wiz Research discovers \"ExtraReplica\": a cross-account database vulnerability in Azure PostgreSQL","fact_id":"SEA-POST-007-F1","document_citation":"Wiz Research discovers \"ExtraReplica\": a cross-account database vulnerability in Azure PostgreSQL"},{"id":"SEA-POST-007-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A flaw in certificate validation let them forge a client certificate matching another customer's instance and access other customers' databases across accounts.","source_quote_or_pointer":"Wiz Research discovers \"ExtraReplica\": a cross-account database vulnerability in Azure PostgreSQL","fact_id":"SEA-POST-007-F2","document_citation":"Wiz Research discovers \"ExtraReplica\": a cross-account database vulnerability in Azure PostgreSQL"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.code_execution","arch.multi_tenant","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-003","SEA-FM-002"],"consequences":["Data exposure (cross-tenant database access)"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"collectsea-curated-v2","review_status":"machine_extracted","review_notes":["Source re-checked 2026-09-30 (source documents the listed facts). Replaces a link to an unrelated GitHub post. This is a responsibly disclosed research finding that Microsoft fixed; Microsoft reported no customer data was accessed."]},"source_authority":{"document_type":"Security research disclosure","filing_id":"SEA-POST-007-DOC","reporting_entity":"Wiz Security & Microsoft Azure","regulatory_body":"SEC / Regulatory & Engineering Authority"},"safeguards":[{"safeguard_id":"SEA-POST-007-SG1","label":"Validate tenant identity with strict, anchored certificate checks","description":"Match the full identity of a client certificate rather than a loosely matched pattern, and fuzz identity parsing.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-POST-007-SG2","label":"Isolate tenant containers from host networking","description":"Give each tenant workload its own network namespace and do not grant superuser to customer-controlled roles.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-POST-007-SG1","label":"Validate tenant identity with strict, anchored certificate checks","description":"Match the full identity of a client certificate rather than a loosely matched pattern, and fuzz identity parsing.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-POST-007-SG2","label":"Isolate tenant containers from host networking","description":"Give each tenant workload its own network namespace and do not grant superuser to customer-controlled roles.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"publication"},{"incident_id":"SEA-POST-008","title":"Public Source Code Repository Private RSA Host Key Exposure","display_title":"Public Source Code Repository Private RSA Host Key Exposure","display_summary":"GitHub.com's RSA SSH private key was briefly exposed in a public GitHub repository.","display_reference":"","display_source_type":"Engineering postmortem","incident_date":"2023-03-23","disclosure_date":"2023-03-23","source_type":"vendor_postmortem","source_url":"https://github.blog/2023-03-23-we-updated-our-rsa-ssh-host-key/","source_title":"We updated our RSA SSH host key","source_publisher":"GitHub","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-09-30T00:00:00.000Z","source_hash":"content-fingerprint:fnv1a-3845e04c","affected_system":{"organization":"Distributed Git Host & RSA Host Key Infrastructure","product":"SSH Remote Repository Management System","system_type":"Enterprise Cloud & Distributed Systems","is_ai_system":false,"is_agentic":false,"primary_language":"Multi-Language / Distributed Architecture"},"documented_facts":[{"id":"SEA-POST-008-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"GitHub.com's RSA SSH private key was briefly exposed in a public GitHub repository.","source_quote_or_pointer":"We updated our RSA SSH host key","fact_id":"SEA-POST-008-F1","document_citation":"We updated our RSA SSH host key"},{"id":"SEA-POST-008-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"GitHub replaced the key out of caution and stated it had no reason to believe the exposed key was abused; it was not the result of a compromise of GitHub systems.","source_quote_or_pointer":"We updated our RSA SSH host key","fact_id":"SEA-POST-008-F2","document_citation":"We updated our RSA SSH host key"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.credentials_secrets","auth.privileged_action","arch.external_api"],"failure_mechanisms":["SEA-FM-002","SEA-FM-009"],"consequences":["Credential compromise (host key exposure)"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"collectsea-curated-v2","review_status":"machine_extracted","review_notes":["Source re-checked 2026-09-30 (source documents the listed facts). GitHub's own notice."]},"source_authority":{"document_type":"Vendor incident notice","filing_id":"SEA-POST-008-DOC","reporting_entity":"GitHub Inc.","regulatory_body":"SEC / Regulatory & Engineering Authority"},"safeguards":[{"safeguard_id":"SEA-POST-008-SG1","label":"Scan for private keys before they are published","description":"Use pre-commit and push-time secret scanning to block private keys from leaving controlled repositories.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-POST-008-SG2","label":"Protect and rotate key material","description":"Keep host keys in a vault with access logging and have a rehearsed rotation and notification plan.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-POST-008-SG1","label":"Scan for private keys before they are published","description":"Use pre-commit and push-time secret scanning to block private keys from leaving controlled repositories.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-POST-008-SG2","label":"Protect and rotate key material","description":"Keep host keys in a vault with access logging and have a rehearsed rotation and notification plan.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"incident"},{"incident_id":"SEA-POST-009","title":"Production Database Directory Accidental Deletion & 5-Way Backup Failure","display_title":"Production Database Directory Accidental Deletion & 5-Way Backup Failure","display_summary":"While working on replication, an engineer ran a data-directory deletion on the production database server instead of the secondary, removing about 300 GB before stopping it.","display_reference":"","display_source_type":"Engineering postmortem","incident_date":"2017-01-31","disclosure_date":"2017-01-31","source_type":"vendor_postmortem","source_url":"https://about.gitlab.com/blog/postmortem-of-database-outage-of-january-31/","source_title":"Postmortem of database outage of January 31","source_publisher":"GitLab","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-09-30T00:00:00.000Z","source_hash":"content-fingerprint:fnv1a-d526c01c","affected_system":{"organization":"Git CI/CD Pipeline & PostgreSQL Secondary Cluster","product":"Production PostgreSQL Replication Cluster","system_type":"Enterprise Cloud & Distributed Systems","is_ai_system":false,"is_agentic":false,"primary_language":"Multi-Language / Distributed Architecture"},"documented_facts":[{"id":"SEA-POST-009-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"While working on replication, an engineer ran a data-directory deletion on the production database server instead of the secondary, removing about 300 GB before stopping it.","source_quote_or_pointer":"Postmortem of database outage of January 31","fact_id":"SEA-POST-009-F1","document_citation":"Postmortem of database outage of January 31"},{"id":"SEA-POST-009-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The backup mechanisms failed: pg_dump backups had failed silently (version mismatch), Azure disk snapshots were not enabled, the LVM snapshot was six hours old, and the secondary's data had been wiped.","source_quote_or_pointer":"Postmortem of database outage of January 31","fact_id":"SEA-POST-009-F2","document_citation":"Postmortem of database outage of January 31"},{"id":"SEA-POST-009-F3","claim_type":"COLLECTSEA_INFERENCE","statement":"About 5,000 projects, 5,000 comments and 700 user accounts created in a roughly 6.5-hour window were lost.","source_quote_or_pointer":"Postmortem of database outage of January 31","fact_id":"SEA-POST-009-F3","document_citation":"Postmortem of database outage of January 31"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.infrastructure_modification","data.cross_tenant_data"],"failure_mechanisms":["SEA-FM-005"],"consequences":["Destructive data deletion","Data loss"],"confidence":"TENTATIVE","authority_level":"IRREVERSIBLE_EXTERNAL"},"provenance":{"extractor_version":"collectsea-curated-v2","review_status":"machine_extracted","review_notes":["Source re-checked 2026-09-30 (source documents the listed facts). Replaces a link to an unrelated AWS article. GitLab's own postmortem."]},"source_authority":{"document_type":"Vendor postmortem","filing_id":"SEA-POST-009-DOC","reporting_entity":"GitLab B.V.","regulatory_body":"SEC / Regulatory & Engineering Authority"},"safeguards":[{"safeguard_id":"SEA-POST-009-SG1","label":"Verify backups by restoring them","description":"Run scheduled restore tests and alert on empty or failing backup jobs; do not rely on job success alone.","target_failure_mode":"SEA-FM-005","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-POST-009-SG2","label":"Make dangerous commands hard to misdirect","description":"Distinguish production from replicas in prompts and require confirmation for destructive operations on primaries.","target_failure_mode":"SEA-FM-005","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-POST-009-SG1","label":"Verify backups by restoring them","description":"Run scheduled restore tests and alert on empty or failing backup jobs; do not rely on job success alone.","target_failure_mode":"SEA-FM-005","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-POST-009-SG2","label":"Make dangerous commands hard to misdirect","description":"Distinguish production from replicas in prompts and require confirmation for destructive operations on primaries.","target_failure_mode":"SEA-FM-005","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"incident"},{"incident_id":"SEA-POST-010","title":"Deletion script given site IDs instead of app IDs removes 775 customers' sites (Atlassian, 2022)","display_title":"Deletion script given site IDs instead of app IDs removes 775 customers' sites (Atlassian, 2022)","display_summary":"A script meant to retire a deprecated app was given IDs for entire customer sites and did not check whether an ID referred to the app or the whole site.","display_reference":"","display_source_type":"Engineering postmortem","incident_date":"2022-04-05","disclosure_date":"2022-04-05","source_type":"vendor_postmortem","source_url":"https://www.atlassian.com/engineering/post-incident-review-april-2022-outage","source_title":"Post-Incident Review: April 2022 Atlassian outage","source_publisher":"Atlassian","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-09-30T00:00:00.000Z","source_hash":"content-fingerprint:fnv1a-ab99fcd1","affected_system":{"organization":"Enterprise Multi-Tenant Jira & Confluence Cloud Mesh","product":"Cloud Workspace De-provisioning Script","system_type":"Enterprise Cloud & Distributed Systems","is_ai_system":false,"is_agentic":false,"primary_language":"Multi-Language / Distributed Architecture"},"documented_facts":[{"id":"SEA-POST-010-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A script meant to retire a deprecated app was given IDs for entire customer sites and did not check whether an ID referred to the app or the whole site.","source_quote_or_pointer":"Post-Incident Review: April 2022 Atlassian outage","fact_id":"SEA-POST-010-F1","document_citation":"Post-Incident Review: April 2022 Atlassian outage"},{"id":"SEA-POST-010-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"It deleted 883 sites belonging to 775 customers within about 23 minutes; restoration took up to 14 days for a subset of customers.","source_quote_or_pointer":"Post-Incident Review: April 2022 Atlassian outage","fact_id":"SEA-POST-010-F2","document_citation":"Post-Incident Review: April 2022 Atlassian outage"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.infrastructure_modification","arch.multi_tenant"],"failure_mechanisms":["SEA-FM-005","SEA-FM-008"],"consequences":["Destructive data deletion","Service outage (up to 14 days)"],"confidence":"TENTATIVE","authority_level":"IRREVERSIBLE_EXTERNAL"},"provenance":{"extractor_version":"collectsea-curated-v2","review_status":"machine_extracted","review_notes":["Source re-checked 2026-09-30 (source documents the listed facts). Replaces the UniSuper link (a different incident). Atlassian's own post-incident review."]},"source_authority":{"document_type":"Vendor postmortem","filing_id":"SEA-POST-010-DOC","reporting_entity":"Atlassian Corporation","regulatory_body":"SEC / Regulatory & Engineering Authority"},"safeguards":[{"safeguard_id":"SEA-POST-010-SG1","label":"Validate the scope of every ID in destructive scripts","description":"Check whether an ID refers to an app or an entire site and require a dry-run and review before deleting.","target_failure_mode":"SEA-FM-005","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-POST-010-SG2","label":"Soft-delete and rehearse large-scale restore","description":"Delay permanent deletion and practise restoring many customers at once.","target_failure_mode":"SEA-FM-005","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-POST-010-SG1","label":"Validate the scope of every ID in destructive scripts","description":"Check whether an ID refers to an app or an entire site and require a dry-run and review before deleting.","target_failure_mode":"SEA-FM-005","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-POST-010-SG2","label":"Soft-delete and rehearse large-scale restore","description":"Delay permanent deletion and practise restoring many customers at once.","target_failure_mode":"SEA-FM-005","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"incident"},{"incident_id":"SEA-POST-011","title":"CI/CD Environment Variable & GitHub Token Exfiltration via Compromised SSO","display_title":"CI/CD Environment Variable & GitHub Token Exfiltration via Compromised SSO","display_summary":"Malware on an engineer's laptop stole a valid two-factor-backed SSO session, letting the attacker impersonate the employee and reach a subset of production systems.","display_reference":"","display_source_type":"Engineering postmortem","incident_date":"2023-01-04","disclosure_date":"2023-01-04","source_type":"vendor_postmortem","source_url":"https://circleci.com/blog/jan-4-2023-incident-report/","source_title":"CircleCI incident report for January 4, 2023 security incident","source_publisher":"CircleCI","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-09-30T00:00:00.000Z","source_hash":"content-fingerprint:fnv1a-11a57e86","affected_system":{"organization":"Cloud CI/CD Build Runner & Secret Injection Daemon","product":"CI/CD Build Environment & Secrets Store","system_type":"Enterprise Cloud & Distributed Systems","is_ai_system":false,"is_agentic":false,"primary_language":"Multi-Language / Distributed Architecture"},"documented_facts":[{"id":"SEA-POST-011-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Malware on an engineer's laptop stole a valid two-factor-backed SSO session, letting the attacker impersonate the employee and reach a subset of production systems.","source_quote_or_pointer":"CircleCI incident report for January 4, 2023 security incident","fact_id":"SEA-POST-011-F1","document_citation":"CircleCI incident report for January 4, 2023 security incident"},{"id":"SEA-POST-011-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The attacker exfiltrated customer environment variables, tokens and keys; although data was encrypted at rest, they extracted encryption keys from a running process.","source_quote_or_pointer":"CircleCI incident report for January 4, 2023 security incident","fact_id":"SEA-POST-011-F2","document_citation":"CircleCI incident report for January 4, 2023 security incident"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.code_execution","data.credentials_secrets","arch.multi_tenant"],"failure_mechanisms":["SEA-FM-012","SEA-FM-009"],"consequences":["Credential compromise","Data exposure (customer secrets)"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"collectsea-curated-v2","review_status":"machine_extracted","review_notes":["Source re-checked 2026-09-30 (source documents the listed facts). Replaces an unrelated GitHub link. CircleCI's own incident report; the compromise began on December 16, 2022."]},"source_authority":{"document_type":"Vendor incident report","filing_id":"SEA-POST-011-DOC","reporting_entity":"CircleCI","regulatory_body":"SEC / Regulatory & Engineering Authority"},"safeguards":[{"safeguard_id":"SEA-POST-011-SG1","label":"Harden employee endpoints and sessions","description":"Use device posture checks, endpoint detection and short, device-bound sessions so stolen cookies cannot be replayed.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-POST-011-SG2","label":"Limit production token privileges and protect encryption keys","description":"Avoid employees who can mint broad production tokens by default, and keep encryption keys out of extractable process memory.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-POST-011-SG1","label":"Harden employee endpoints and sessions","description":"Use device posture checks, endpoint detection and short, device-bound sessions so stolen cookies cannot be replayed.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-POST-011-SG2","label":"Limit production token privileges and protect encryption keys","description":"Avoid employees who can mint broad production tokens by default, and keep encryption keys out of extractable process memory.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"disclosure"},{"incident_id":"SEA-POST-012","title":"Real-Time Message Cache Inconsistency During Large Redis Cluster Migration","display_title":"Real-Time Message Cache Inconsistency During Large Redis Cluster Migration","display_summary":"Migrating message caches between Redis clusters caused race conditions and state drift between cache and Cassandra persistence layer.","display_reference":"","display_source_type":"Illustrative scenario","incident_date":"2024-03-15","disclosure_date":"2024-03-15","source_type":"vendor_postmortem","source_url":"https://collectsea.com/methodology","source_title":"Illustrative scenario (no primary source)","source_publisher":"CollectSEA illustrative scenario","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026.09.30T00:00:00.000Z","source_hash":"content-fingerprint:fnv1a-38b3c25","affected_system":{"organization":"Distributed Real-Time Voice/Chat Messaging & Redis Tier","product":"Distributed Redis Messaging & Guild Cache","system_type":"Enterprise Cloud & Distributed Systems","is_ai_system":false,"is_agentic":false,"primary_language":"Multi-Language / Distributed Architecture"},"documented_facts":[{"id":"SEA-POST-012-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Migrating message caches between Redis clusters caused race conditions and state drift between cache and Cassandra persistence layer.","source_quote_or_pointer":"CollectSEA illustrative scenario","fact_id":"SEA-POST-012-F1","document_citation":"CollectSEA illustrative scenario"}],"source_stated_contributors":["Migrating message caches between Redis clusters caused race conditions and state drift bet..."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["arch.caching","arch.multi_tenant","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-004","SEA-FM-007"],"consequences":["Financial Loss","Execution Error"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"collectsea-illustrative-scenario-v1","review_status":"machine_extracted","review_notes":["Composite teaching scenario written by CollectSEA. Not a documented real-world incident and not tied to a primary source."]},"source_authority":{"document_type":"Illustrative scenario","filing_id":"SEA-POST-012","reporting_entity":"CollectSEA","regulatory_body":"Not applicable"},"safeguards":[{"safeguard_id":"SEA-POST-012-SG1","label":"Automated Defensive Guardrail","description":"Strictly segregate external untrusted text (emails, web scrapes, user files) from model instruction channels and constrain tool tokens to least-privilege scopes.","target_failure_mode":"Repeat architectural failure","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-POST-012-SG1","label":"Automated Defensive Guardrail","description":"Strictly segregate external untrusted text (emails, web scrapes, user files) from model instruction channels and constrain tool tokens to least-privilege scopes.","target_failure_mode":"Repeat architectural failure","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-POST-013","title":"Network Partition Database Failover Connection Pool Starvation","display_title":"Network Partition Database Failover Connection Pool Starvation","display_summary":"Network partition during database maintenance triggered simultaneous split-brain failovers, causing connection pool exhaustion on all API gateways.","display_reference":"","display_source_type":"Illustrative scenario","incident_date":"2024-03-15","disclosure_date":"2024-03-15","source_type":"vendor_postmortem","source_url":"https://collectsea.com/methodology","source_title":"Illustrative scenario (no primary source)","source_publisher":"CollectSEA illustrative scenario","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026.09.30T00:00:00.000Z","source_hash":"content-fingerprint:fnv1a-ec753ebe","affected_system":{"organization":"Enterprise Collaborative Messaging & Distributed MySQL Vitess","product":"Distributed MySQL Vitess Database Tier","system_type":"Enterprise Cloud & Distributed Systems","is_ai_system":false,"is_agentic":false,"primary_language":"Multi-Language / Distributed Architecture"},"documented_facts":[{"id":"SEA-POST-013-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Network partition during database maintenance triggered simultaneous split-brain failovers, causing connection pool exhaustion on all API gateways.","source_quote_or_pointer":"CollectSEA illustrative scenario","fact_id":"SEA-POST-013-F1","document_citation":"CollectSEA illustrative scenario"}],"source_stated_contributors":["Network partition during database maintenance triggered simultaneous split-brain failovers..."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["arch.multi_tenant","auth.infrastructure_modification","arch.caching"],"failure_mechanisms":["SEA-FM-006","SEA-FM-007"],"consequences":["Financial Loss","Execution Error"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"collectsea-illustrative-scenario-v1","review_status":"machine_extracted","review_notes":["Composite teaching scenario written by CollectSEA. Not a documented real-world incident and not tied to a primary source."]},"source_authority":{"document_type":"Illustrative scenario","filing_id":"SEA-POST-013","reporting_entity":"CollectSEA","regulatory_body":"Not applicable"},"safeguards":[{"safeguard_id":"SEA-POST-013-SG1","label":"Automated Defensive Guardrail","description":"Configure exponential backoff with full randomized jitter on all external dependencies, backed by circuit breakers and iteration budget caps.","target_failure_mode":"Repeat architectural failure","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-POST-013-SG1","label":"Automated Defensive Guardrail","description":"Configure exponential backoff with full randomized jitter on all external dependencies, backed by circuit breakers and iteration budget caps.","target_failure_mode":"Repeat architectural failure","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-POST-014","title":"Viral Flash Sale Checkout Write Lock Amplification & Database Contention","display_title":"Viral Flash Sale Checkout Write Lock Amplification & Database Contention","display_summary":"Synchronized row-level inventory locks on viral merchant flash sales saturated database thread pools, causing cascading timeouts on unrelated stores.","display_reference":"","display_source_type":"Illustrative scenario","incident_date":"2024-03-15","disclosure_date":"2024-03-15","source_type":"vendor_postmortem","source_url":"https://collectsea.com/methodology","source_title":"Illustrative scenario (no primary source)","source_publisher":"CollectSEA illustrative scenario","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026.09.30T00:00:00.000Z","source_hash":"content-fingerprint:fnv1a-9b8a32b6","affected_system":{"organization":"Multi-Tenant E-Commerce Flash Sale & Inventory Lock Service","product":"Flash Sale Checkout & Inventory Reservation Engine","system_type":"Enterprise Cloud & Distributed Systems","is_ai_system":false,"is_agentic":false,"primary_language":"Multi-Language / Distributed Architecture"},"documented_facts":[{"id":"SEA-POST-014-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Synchronized row-level inventory locks on viral merchant flash sales saturated database thread pools, causing cascading timeouts on unrelated stores.","source_quote_or_pointer":"CollectSEA illustrative scenario","fact_id":"SEA-POST-014-F1","document_citation":"CollectSEA illustrative scenario"}],"source_stated_contributors":["Synchronized row-level inventory locks on viral merchant flash sales saturated database th..."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.financial_action","arch.multi_tenant","arch.caching"],"failure_mechanisms":["SEA-FM-006","SEA-FM-007"],"consequences":["Financial Loss","Execution Error"],"confidence":"TENTATIVE","authority_level":"IRREVERSIBLE_EXTERNAL"},"provenance":{"extractor_version":"collectsea-illustrative-scenario-v1","review_status":"machine_extracted","review_notes":["Composite teaching scenario written by CollectSEA. Not a documented real-world incident and not tied to a primary source."]},"source_authority":{"document_type":"Illustrative scenario","filing_id":"SEA-POST-014","reporting_entity":"CollectSEA","regulatory_body":"Not applicable"},"safeguards":[{"safeguard_id":"SEA-POST-014-SG1","label":"Automated Defensive Guardrail","description":"Configure exponential backoff with full randomized jitter on all external dependencies, backed by circuit breakers and iteration budget caps.","target_failure_mode":"Repeat architectural failure","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-POST-014-SG1","label":"Automated Defensive Guardrail","description":"Configure exponential backoff with full randomized jitter on all external dependencies, backed by circuit breakers and iteration budget caps.","target_failure_mode":"Repeat architectural failure","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-POST-015","title":"Real-Time Collaborative Canvas WebSocket State Conflict Storm","display_title":"Real-Time Collaborative Canvas WebSocket State Conflict Storm","display_summary":"Transient cross-region WebSocket disconnect caused client reconciliation loops to send millions of redundant state delta patches, overwhelming sync servers.","display_reference":"","display_source_type":"Illustrative scenario","incident_date":"2024-03-15","disclosure_date":"2024-03-15","source_type":"vendor_postmortem","source_url":"https://collectsea.com/methodology","source_title":"Illustrative scenario (no primary source)","source_publisher":"CollectSEA illustrative scenario","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026.09.30T00:00:00.000Z","source_hash":"content-fingerprint:fnv1a-b945875b","affected_system":{"organization":"Collaborative Multi-User Canvas & Real-Time Sync Engine","product":"Multiplayer Real-Time Canvas Sync Engine","system_type":"Enterprise Cloud & Distributed Systems","is_ai_system":false,"is_agentic":false,"primary_language":"Multi-Language / Distributed Architecture"},"documented_facts":[{"id":"SEA-POST-015-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Transient cross-region WebSocket disconnect caused client reconciliation loops to send millions of redundant state delta patches, overwhelming sync servers.","source_quote_or_pointer":"CollectSEA illustrative scenario","fact_id":"SEA-POST-015-F1","document_citation":"CollectSEA illustrative scenario"}],"source_stated_contributors":["Transient cross-region WebSocket disconnect caused client reconciliation loops to send mil..."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["arch.multi_tenant","arch.caching","auth.infrastructure_modification"],"failure_mechanisms":["SEA-FM-006","SEA-FM-004"],"consequences":["Financial Loss","Execution Error"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"collectsea-illustrative-scenario-v1","review_status":"machine_extracted","review_notes":["Composite teaching scenario written by CollectSEA. Not a documented real-world incident and not tied to a primary source."]},"source_authority":{"document_type":"Illustrative scenario","filing_id":"SEA-POST-015","reporting_entity":"CollectSEA","regulatory_body":"Not applicable"},"safeguards":[{"safeguard_id":"SEA-POST-015-SG1","label":"Automated Defensive Guardrail","description":"Configure exponential backoff with full randomized jitter on all external dependencies, backed by circuit breakers and iteration budget caps.","target_failure_mode":"Repeat architectural failure","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-POST-015-SG1","label":"Automated Defensive Guardrail","description":"Configure exponential backoff with full randomized jitter on all external dependencies, backed by circuit breakers and iteration budget caps.","target_failure_mode":"Repeat architectural failure","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-PUB-040","title":"Autonomous AI Agent Model Context Protocol Token Hijacking","display_title":"Autonomous AI Agent Model Context Protocol Token Hijacking","display_summary":"Model Context Protocol search tool allowed prompt injection to leak bearer tokens in subagent prompt context.","display_reference":"","display_source_type":"Illustrative scenario","incident_date":"2021-05-13","disclosure_date":"2021-05-13","source_type":"vendor_postmortem","source_url":"https://collectsea.com/methodology","source_title":"Illustrative scenario (no primary source)","source_publisher":"CollectSEA illustrative scenario","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026.09.30T00:00:00.000Z","source_hash":"content-fingerprint:fnv1a-3f7f8056","affected_system":{"organization":"AI Agentic Development Platform Infrastructure","product":"Autonomous MCP Agent Execution Sandbox","system_type":"AI Agentic Development Platform","is_ai_system":true,"is_agentic":true,"primary_language":"Cloud & Distributed Systems"},"documented_facts":[{"id":"SEA-PUB-040-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Model Context Protocol search tool allowed prompt injection to leak bearer tokens in subagent prompt context.","source_quote_or_pointer":"CollectSEA illustrative scenario","fact_id":"SEA-PUB-040-F1","document_citation":"CollectSEA illustrative scenario"}],"source_stated_contributors":["Model Context Protocol search tool allowed prompt injection to leak bearer tokens in subag..."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["arch.tool_enabled_agent","data.credentials_secrets","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-010","SEA-FM-001"],"consequences":["Financial Loss","Execution Error"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"collectsea-illustrative-scenario-v1","review_status":"machine_extracted","review_notes":["Composite teaching scenario written by CollectSEA. Not a documented real-world incident and not tied to a primary source."]},"source_authority":{"document_type":"Illustrative scenario","filing_id":"SEA-PUB-040","reporting_entity":"CollectSEA","regulatory_body":"Not applicable"},"safeguards":[{"safeguard_id":"SEA-PUB-040-SG1","label":"Automated Defensive Guardrail","description":"Constrain tool invocation parameters using strict typed schemas with validated enum sets and dry-run preview before committing state.","target_failure_mode":"Repeat architectural failure","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-PUB-040-SG1","label":"Automated Defensive Guardrail","description":"Constrain tool invocation parameters using strict typed schemas with validated enum sets and dry-run preview before committing state.","target_failure_mode":"Repeat architectural failure","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-PUB-041","title":"AI LLM Coding Assistant Arbitrary Terminal Command Execution","display_title":"AI LLM Coding Assistant Arbitrary Terminal Command Execution","display_summary":"AI coding agent accepted unvalidated repository prompt that executed malicious curl script inside local terminal.","display_reference":"","display_source_type":"Illustrative scenario","incident_date":"2022-06-14","disclosure_date":"2022-06-14","source_type":"vendor_postmortem","source_url":"https://collectsea.com/methodology","source_title":"Illustrative scenario (no primary source)","source_publisher":"CollectSEA illustrative scenario","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026.09.30T00:00:00.000Z","source_hash":"content-fingerprint:fnv1a-1b03534c","affected_system":{"organization":"AI Developer Tools Inc. Infrastructure","product":"IDE Agentic Code Generation & Shell Runner","system_type":"AI Developer Tools Inc.","is_ai_system":true,"is_agentic":false,"primary_language":"Cloud & Distributed Systems"},"documented_facts":[{"id":"SEA-PUB-041-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"AI coding agent accepted unvalidated repository prompt that executed malicious curl script inside local terminal.","source_quote_or_pointer":"CollectSEA illustrative scenario","fact_id":"SEA-PUB-041-F1","document_citation":"CollectSEA illustrative scenario"}],"source_stated_contributors":["AI coding agent accepted unvalidated repository prompt that executed malicious curl script..."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.code_execution","arch.tool_enabled_agent","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-010","SEA-FM-003"],"consequences":["Financial Loss","Execution Error"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"collectsea-illustrative-scenario-v1","review_status":"machine_extracted","review_notes":["Composite teaching scenario written by CollectSEA. Not a documented real-world incident and not tied to a primary source."]},"source_authority":{"document_type":"Illustrative scenario","filing_id":"SEA-PUB-041","reporting_entity":"CollectSEA","regulatory_body":"Not applicable"},"safeguards":[{"safeguard_id":"SEA-PUB-041-SG1","label":"Automated Defensive Guardrail","description":"Constrain tool invocation parameters using strict typed schemas with validated enum sets and dry-run preview before committing state.","target_failure_mode":"Repeat architectural failure","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-PUB-041-SG1","label":"Automated Defensive Guardrail","description":"Constrain tool invocation parameters using strict typed schemas with validated enum sets and dry-run preview before committing state.","target_failure_mode":"Repeat architectural failure","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-PUB-042","title":"Distributed Consensus Split-Brain State Divergence","display_title":"Distributed Consensus Split-Brain State Divergence","display_summary":"Asymmetric network partition caused two leader nodes to accept client writes simultaneously, corrupting ledger state.","display_reference":"","display_source_type":"Illustrative scenario","incident_date":"2023-07-15","disclosure_date":"2023-07-15","source_type":"vendor_postmortem","source_url":"https://collectsea.com/methodology","source_title":"Illustrative scenario (no primary source)","source_publisher":"CollectSEA illustrative scenario","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026.09.30T00:00:00.000Z","source_hash":"content-fingerprint:fnv1a-9154ab26","affected_system":{"organization":"Distributed Database Corporation Infrastructure","product":"Raft Consensus Cluster & Replication Log","system_type":"Distributed Database Corporation","is_ai_system":false,"is_agentic":false,"primary_language":"Cloud & Distributed Systems"},"documented_facts":[{"id":"SEA-PUB-042-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Asymmetric network partition caused two leader nodes to accept client writes simultaneously, corrupting ledger state.","source_quote_or_pointer":"CollectSEA illustrative scenario","fact_id":"SEA-PUB-042-F1","document_citation":"CollectSEA illustrative scenario"}],"source_stated_contributors":["Asymmetric network partition caused two leader nodes to accept client writes simultaneousl..."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.infrastructure_modification","arch.caching","data.financial_records"],"failure_mechanisms":["SEA-FM-007","SEA-FM-004"],"consequences":["Financial Loss","Execution Error"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"collectsea-illustrative-scenario-v1","review_status":"machine_extracted","review_notes":["Composite teaching scenario written by CollectSEA. Not a documented real-world incident and not tied to a primary source."]},"source_authority":{"document_type":"Illustrative scenario","filing_id":"SEA-PUB-042","reporting_entity":"CollectSEA","regulatory_body":"Not applicable"},"safeguards":[{"safeguard_id":"SEA-PUB-042-SG1","label":"Automated Defensive Guardrail","description":"Implement transactional outbox patterns or saga orchestrators with monotonic event versioning to guarantee distributed state convergence.","target_failure_mode":"Repeat architectural failure","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-PUB-042-SG1","label":"Automated Defensive Guardrail","description":"Implement transactional outbox patterns or saga orchestrators with monotonic event versioning to guarantee distributed state convergence.","target_failure_mode":"Repeat architectural failure","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-PUB-043","title":"Serverless Function Cold Start Connection Pool Exhaustion","display_title":"Serverless Function Cold Start Connection Pool Exhaustion","display_summary":"Spike in concurrent lambda invocations opened 10,000 direct PostgreSQL connections, crashing primary RDS instance.","display_reference":"","display_source_type":"Illustrative scenario","incident_date":"2024-08-16","disclosure_date":"2024-08-16","source_type":"vendor_postmortem","source_url":"https://collectsea.com/methodology","source_title":"Illustrative scenario (no primary source)","source_publisher":"CollectSEA illustrative scenario","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026.09.30T00:00:00.000Z","source_hash":"content-fingerprint:fnv1a-a1a05fee","affected_system":{"organization":"Serverless Cloud Provider Infrastructure","product":"Managed Serverless Database Connector","system_type":"Serverless Cloud Provider","is_ai_system":false,"is_agentic":false,"primary_language":"Cloud & Distributed Systems"},"documented_facts":[{"id":"SEA-PUB-043-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Spike in concurrent lambda invocations opened 10,000 direct PostgreSQL connections, crashing primary RDS instance.","source_quote_or_pointer":"CollectSEA illustrative scenario","fact_id":"SEA-PUB-043-F1","document_citation":"CollectSEA illustrative scenario"}],"source_stated_contributors":["Spike in concurrent lambda invocations opened 10,000 direct PostgreSQL connections, crashi..."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.infrastructure_modification","arch.multi_tenant","arch.external_api"],"failure_mechanisms":["SEA-FM-006","SEA-FM-007"],"consequences":["Financial Loss","Execution Error"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"collectsea-illustrative-scenario-v1","review_status":"machine_extracted","review_notes":["Composite teaching scenario written by CollectSEA. Not a documented real-world incident and not tied to a primary source."]},"source_authority":{"document_type":"Illustrative scenario","filing_id":"SEA-PUB-043","reporting_entity":"CollectSEA","regulatory_body":"Not applicable"},"safeguards":[{"safeguard_id":"SEA-PUB-043-SG1","label":"Automated Defensive Guardrail","description":"Configure exponential backoff with full randomized jitter on all external dependencies, backed by circuit breakers and iteration budget caps.","target_failure_mode":"Repeat architectural failure","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-PUB-043-SG1","label":"Automated Defensive Guardrail","description":"Configure exponential backoff with full randomized jitter on all external dependencies, backed by circuit breakers and iteration budget caps.","target_failure_mode":"Repeat architectural failure","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-PUB-044","title":"Payment Webhook Out-of-Order Delivery State Machine Corruption","display_title":"Payment Webhook Out-of-Order Delivery State Machine Corruption","display_summary":"Late-arriving paymentfailed webhook processed after subscriptionrenewed, deactivating active paying customer account.","display_reference":"","display_source_type":"Illustrative scenario","incident_date":"2025-09-17","disclosure_date":"2025-09-17","source_type":"vendor_postmortem","source_url":"https://collectsea.com/methodology","source_title":"Illustrative scenario (no primary source)","source_publisher":"CollectSEA illustrative scenario","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026.09.30T00:00:00.000Z","source_hash":"content-fingerprint:fnv1a-d57f599f","affected_system":{"organization":"FinTech Billing Platform Infrastructure","product":"Asynchronous Payment Webhook Event Consumer","system_type":"FinTech Billing Platform","is_ai_system":false,"is_agentic":false,"primary_language":"Cloud & Distributed Systems"},"documented_facts":[{"id":"SEA-PUB-044-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Late-arriving `payment_failed` webhook processed after `subscription_renewed`, deactivating active paying customer account.","source_quote_or_pointer":"CollectSEA illustrative scenario","fact_id":"SEA-PUB-044-F1","document_citation":"CollectSEA illustrative scenario"}],"source_stated_contributors":["Late-arriving `payment_failed` webhook processed after `subscription_renewed`, deactivatin..."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.financial_action","arch.external_api","data.financial_records"],"failure_mechanisms":["SEA-FM-007","SEA-FM-008"],"consequences":["Financial Loss","Execution Error"],"confidence":"TENTATIVE","authority_level":"IRREVERSIBLE_EXTERNAL"},"provenance":{"extractor_version":"collectsea-illustrative-scenario-v1","review_status":"machine_extracted","review_notes":["Composite teaching scenario written by CollectSEA. Not a documented real-world incident and not tied to a primary source."]},"source_authority":{"document_type":"Illustrative scenario","filing_id":"SEA-PUB-044","reporting_entity":"CollectSEA","regulatory_body":"Not applicable"},"safeguards":[{"safeguard_id":"SEA-PUB-044-SG1","label":"Automated Defensive Guardrail","description":"Implement transactional outbox patterns or saga orchestrators with monotonic event versioning to guarantee distributed state convergence.","target_failure_mode":"Repeat architectural failure","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-PUB-044-SG1","label":"Automated Defensive Guardrail","description":"Implement transactional outbox patterns or saga orchestrators with monotonic event versioning to guarantee distributed state convergence.","target_failure_mode":"Repeat architectural failure","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-PUB-045","title":"GraphQL Deeply Nested Query Denial of Service","display_title":"GraphQL Deeply Nested Query Denial of Service","display_summary":"Recursive query execution (user { friends { friends { friends } } }) caused heap memory exhaustion on backend node.","display_reference":"","display_source_type":"Illustrative scenario","incident_date":"2021-10-18","disclosure_date":"2021-10-18","source_type":"vendor_postmortem","source_url":"https://collectsea.com/methodology","source_title":"Illustrative scenario (no primary source)","source_publisher":"CollectSEA illustrative scenario","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026.09.30T00:00:00.000Z","source_hash":"content-fingerprint:fnv1a-fff8096c","affected_system":{"organization":"Enterprise API Gateway Infrastructure","product":"Public GraphQL Query Parser & Resolver","system_type":"Enterprise API Gateway","is_ai_system":false,"is_agentic":false,"primary_language":"Cloud & Distributed Systems"},"documented_facts":[{"id":"SEA-PUB-045-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Recursive query execution (`user { friends { friends { friends } } }`) caused heap memory exhaustion on backend node.","source_quote_or_pointer":"CollectSEA illustrative scenario","fact_id":"SEA-PUB-045-F1","document_citation":"CollectSEA illustrative scenario"}],"source_stated_contributors":["Recursive query execution (`user { friends { friends { friends } } }`) caused heap memory ..."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["arch.multi_tenant","arch.external_api","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006","SEA-FM-003"],"consequences":["Financial Loss","Execution Error"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"collectsea-illustrative-scenario-v1","review_status":"machine_extracted","review_notes":["Composite teaching scenario written by CollectSEA. Not a documented real-world incident and not tied to a primary source."]},"source_authority":{"document_type":"Illustrative scenario","filing_id":"SEA-PUB-045","reporting_entity":"CollectSEA","regulatory_body":"Not applicable"},"safeguards":[{"safeguard_id":"SEA-PUB-045-SG1","label":"Automated Defensive Guardrail","description":"Configure exponential backoff with full randomized jitter on all external dependencies, backed by circuit breakers and iteration budget caps.","target_failure_mode":"Repeat architectural failure","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-PUB-045-SG1","label":"Automated Defensive Guardrail","description":"Configure exponential backoff with full randomized jitter on all external dependencies, backed by circuit breakers and iteration budget caps.","target_failure_mode":"Repeat architectural failure","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-PUB-046","title":"JWT Secret Key Confusion & Privilege Escalation","display_title":"JWT Secret Key Confusion & Privilege Escalation","display_summary":"Backend accepted HMAC-SHA256 tokens signed with public RSA key, allowing attacker to forge administrator tokens.","display_reference":"","display_source_type":"Illustrative scenario","incident_date":"2022-11-19","disclosure_date":"2022-11-19","source_type":"vendor_postmortem","source_url":"https://collectsea.com/methodology","source_title":"Illustrative scenario (no primary source)","source_publisher":"CollectSEA illustrative scenario","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026.09.30T00:00:00.000Z","source_hash":"content-fingerprint:fnv1a-5de5968d","affected_system":{"organization":"Cloud SaaS Authentication Service Infrastructure","product":"OAuth2 / OpenID Connect Token Signer","system_type":"Cloud SaaS Authentication Service","is_ai_system":false,"is_agentic":false,"primary_language":"Cloud & Distributed Systems"},"documented_facts":[{"id":"SEA-PUB-046-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Backend accepted HMAC-SHA256 tokens signed with public RSA key, allowing attacker to forge administrator tokens.","source_quote_or_pointer":"CollectSEA illustrative scenario","fact_id":"SEA-PUB-046-F1","document_citation":"CollectSEA illustrative scenario"}],"source_stated_contributors":["Backend accepted HMAC-SHA256 tokens signed with public RSA key, allowing attacker to forge..."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.credentials_secrets","auth.privileged_action","arch.multi_tenant"],"failure_mechanisms":["SEA-FM-001","SEA-FM-008"],"consequences":["Financial Loss","Execution Error"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"collectsea-illustrative-scenario-v1","review_status":"machine_extracted","review_notes":["Composite teaching scenario written by CollectSEA. Not a documented real-world incident and not tied to a primary source."]},"source_authority":{"document_type":"Illustrative scenario","filing_id":"SEA-PUB-046","reporting_entity":"CollectSEA","regulatory_body":"Not applicable"},"safeguards":[{"safeguard_id":"SEA-PUB-046-SG1","label":"Automated Defensive Guardrail","description":"Attach unique, client-generated idempotency keys (Idempotency-Key header) to all state-mutating requests and reconcile transaction status before retrying.","target_failure_mode":"Repeat architectural failure","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-PUB-046-SG1","label":"Automated Defensive Guardrail","description":"Attach unique, client-generated idempotency keys (Idempotency-Key header) to all state-mutating requests and reconcile transaction status before retrying.","target_failure_mode":"Repeat architectural failure","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-PUB-047","title":"Distributed Rate Limiter Redis Key Collision & Global Lockout","display_title":"Distributed Rate Limiter Redis Key Collision & Global Lockout","display_summary":"Missing tenant namespace prefix in rate limiter Redis key caused single user limit to apply globally to all tenants.","display_reference":"","display_source_type":"Illustrative scenario","incident_date":"2023-12-20","disclosure_date":"2023-12-20","source_type":"vendor_postmortem","source_url":"https://collectsea.com/methodology","source_title":"Illustrative scenario (no primary source)","source_publisher":"CollectSEA illustrative scenario","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026.09.30T00:00:00.000Z","source_hash":"content-fingerprint:fnv1a-ba62cb56","affected_system":{"organization":"Global API Proxy Network Infrastructure","product":"Distributed Redis Token Bucket Rate Limiter","system_type":"Global API Proxy Network","is_ai_system":false,"is_agentic":false,"primary_language":"Cloud & Distributed Systems"},"documented_facts":[{"id":"SEA-PUB-047-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Missing tenant namespace prefix in rate limiter Redis key caused single user limit to apply globally to all tenants.","source_quote_or_pointer":"CollectSEA illustrative scenario","fact_id":"SEA-PUB-047-F1","document_citation":"CollectSEA illustrative scenario"}],"source_stated_contributors":["Missing tenant namespace prefix in rate limiter Redis key caused single user limit to appl..."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["arch.multi_tenant","arch.caching","auth.infrastructure_modification"],"failure_mechanisms":["SEA-FM-001","SEA-FM-006"],"consequences":["Financial Loss","Execution Error"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"collectsea-illustrative-scenario-v1","review_status":"machine_extracted","review_notes":["Composite teaching scenario written by CollectSEA. Not a documented real-world incident and not tied to a primary source."]},"source_authority":{"document_type":"Illustrative scenario","filing_id":"SEA-PUB-047","reporting_entity":"CollectSEA","regulatory_body":"Not applicable"},"safeguards":[{"safeguard_id":"SEA-PUB-047-SG1","label":"Automated Defensive Guardrail","description":"Attach unique, client-generated idempotency keys (Idempotency-Key header) to all state-mutating requests and reconcile transaction status before retrying.","target_failure_mode":"Repeat architectural failure","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-PUB-047-SG1","label":"Automated Defensive Guardrail","description":"Attach unique, client-generated idempotency keys (Idempotency-Key header) to all state-mutating requests and reconcile transaction status before retrying.","target_failure_mode":"Repeat architectural failure","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-PUB-048","title":"Kafka Consumer Group Rebalance Storm Message Lag","display_title":"Kafka Consumer Group Rebalance Storm Message Lag","display_summary":"Slow consumer heartbeat during heavy batch processing triggered infinite rebalance loop, halting all event consumption.","display_reference":"","display_source_type":"Illustrative scenario","incident_date":"2024-01-21","disclosure_date":"2024-01-21","source_type":"vendor_postmortem","source_url":"https://collectsea.com/methodology","source_title":"Illustrative scenario (no primary source)","source_publisher":"CollectSEA illustrative scenario","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026.09.30T00:00:00.000Z","source_hash":"content-fingerprint:fnv1a-3bfc30bf","affected_system":{"organization":"Streaming Analytics Platform Infrastructure","product":"Distributed Event Stream Processing Engine","system_type":"Streaming Analytics Platform","is_ai_system":false,"is_agentic":false,"primary_language":"Cloud & Distributed Systems"},"documented_facts":[{"id":"SEA-PUB-048-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Slow consumer heartbeat during heavy batch processing triggered infinite rebalance loop, halting all event consumption.","source_quote_or_pointer":"CollectSEA illustrative scenario","fact_id":"SEA-PUB-048-F1","document_citation":"CollectSEA illustrative scenario"}],"source_stated_contributors":["Slow consumer heartbeat during heavy batch processing triggered infinite rebalance loop, h..."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.infrastructure_modification","arch.caching","arch.external_api"],"failure_mechanisms":["SEA-FM-006","SEA-FM-007"],"consequences":["Financial Loss","Execution Error"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"collectsea-illustrative-scenario-v1","review_status":"machine_extracted","review_notes":["Composite teaching scenario written by CollectSEA. Not a documented real-world incident and not tied to a primary source."]},"source_authority":{"document_type":"Illustrative scenario","filing_id":"SEA-PUB-048","reporting_entity":"CollectSEA","regulatory_body":"Not applicable"},"safeguards":[{"safeguard_id":"SEA-PUB-048-SG1","label":"Automated Defensive Guardrail","description":"Configure exponential backoff with full randomized jitter on all external dependencies, backed by circuit breakers and iteration budget caps.","target_failure_mode":"Repeat architectural failure","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-PUB-048-SG1","label":"Automated Defensive Guardrail","description":"Configure exponential backoff with full randomized jitter on all external dependencies, backed by circuit breakers and iteration budget caps.","target_failure_mode":"Repeat architectural failure","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-PUB-049","title":"Kubernetes Ingress Controller Memory Leak on Dynamic SSL Reload","display_title":"Kubernetes Ingress Controller Memory Leak on Dynamic SSL Reload","display_summary":"Frequent Let's Encrypt cert renewals triggered daily NGINX reloads, fragmenting heap until pods OOM-killed.","display_reference":"","display_source_type":"Illustrative scenario","incident_date":"2025-02-22","disclosure_date":"2025-02-22","source_type":"vendor_postmortem","source_url":"https://collectsea.com/methodology","source_title":"Illustrative scenario (no primary source)","source_publisher":"CollectSEA illustrative scenario","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026.09.30T00:00:00.000Z","source_hash":"content-fingerprint:fnv1a-246b0110","affected_system":{"organization":"Cloud Orchestration Mesh Infrastructure","product":"NGINX Ingress Controller & Cert-Manager","system_type":"Cloud Orchestration Mesh","is_ai_system":false,"is_agentic":false,"primary_language":"Cloud & Distributed Systems"},"documented_facts":[{"id":"SEA-PUB-049-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Frequent Let's Encrypt cert renewals triggered daily NGINX reloads, fragmenting heap until pods OOM-killed.","source_quote_or_pointer":"CollectSEA illustrative scenario","fact_id":"SEA-PUB-049-F1","document_citation":"CollectSEA illustrative scenario"}],"source_stated_contributors":["Frequent Let's Encrypt cert renewals triggered daily NGINX reloads, fragmenting heap until..."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.infrastructure_modification","data.credentials_secrets","arch.external_api"],"failure_mechanisms":["SEA-FM-006","SEA-FM-005"],"consequences":["Financial Loss","Execution Error"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"collectsea-illustrative-scenario-v1","review_status":"machine_extracted","review_notes":["Composite teaching scenario written by CollectSEA. Not a documented real-world incident and not tied to a primary source."]},"source_authority":{"document_type":"Illustrative scenario","filing_id":"SEA-PUB-049","reporting_entity":"CollectSEA","regulatory_body":"Not applicable"},"safeguards":[{"safeguard_id":"SEA-PUB-049-SG1","label":"Automated Defensive Guardrail","description":"Configure exponential backoff with full randomized jitter on all external dependencies, backed by circuit breakers and iteration budget caps.","target_failure_mode":"Repeat architectural failure","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-PUB-049-SG1","label":"Automated Defensive Guardrail","description":"Configure exponential backoff with full randomized jitter on all external dependencies, backed by circuit breakers and iteration budget caps.","target_failure_mode":"Repeat architectural failure","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-PUB-050","title":"Container Image Registry Tag Mutation Supply Chain Compromise","display_title":"Container Image Registry Tag Mutation Supply Chain Compromise","display_summary":"Mutable :latest container tag overwritten by compromised build runner; deployed vulnerable image to production.","display_reference":"","display_source_type":"Illustrative scenario","incident_date":"2021-03-23","disclosure_date":"2021-03-23","source_type":"vendor_postmortem","source_url":"https://collectsea.com/methodology","source_title":"Illustrative scenario (no primary source)","source_publisher":"CollectSEA illustrative scenario","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026.09.30T00:00:00.000Z","source_hash":"content-fingerprint:fnv1a-947a3109","affected_system":{"organization":"Cloud Native Platform Infrastructure","product":"Public Docker Container Image Registry","system_type":"Cloud Native Platform","is_ai_system":false,"is_agentic":false,"primary_language":"Cloud & Distributed Systems"},"documented_facts":[{"id":"SEA-PUB-050-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Mutable `:latest` container tag overwritten by compromised build runner; deployed vulnerable image to production.","source_quote_or_pointer":"CollectSEA illustrative scenario","fact_id":"SEA-PUB-050-F1","document_citation":"CollectSEA illustrative scenario"}],"source_stated_contributors":["Mutable `:latest` container tag overwritten by compromised build runner; deployed vulnerab..."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.code_execution","auth.infrastructure_modification","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-003","SEA-FM-009"],"consequences":["Financial Loss","Execution Error"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"collectsea-illustrative-scenario-v1","review_status":"machine_extracted","review_notes":["Composite teaching scenario written by CollectSEA. Not a documented real-world incident and not tied to a primary source."]},"source_authority":{"document_type":"Illustrative scenario","filing_id":"SEA-PUB-050","reporting_entity":"CollectSEA","regulatory_body":"Not applicable"},"safeguards":[{"safeguard_id":"SEA-PUB-050-SG1","label":"Automated Defensive Guardrail","description":"Enforce mandatory tenant namespacing (org_{id}:resource_{id}) across all shared cache and database queries, verifying tenant claims exclusively against verified session tokens.","target_failure_mode":"Repeat architectural failure","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-PUB-050-SG1","label":"Automated Defensive Guardrail","description":"Enforce mandatory tenant namespacing (org_{id}:resource_{id}) across all shared cache and database queries, verifying tenant claims exclusively against verified session tokens.","target_failure_mode":"Repeat architectural failure","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-PUB-051","title":"DNSSEC Key Rollback & Global Domain Invalidation","display_title":"DNSSEC Key Rollback & Global Domain Invalidation","display_summary":"Mismatched DS records during planned Key Signing Key (KSK) rollover caused recursive resolvers worldwide to return SERVFAIL.","display_reference":"","display_source_type":"Illustrative scenario","incident_date":"2022-04-24","disclosure_date":"2022-04-24","source_type":"vendor_postmortem","source_url":"https://collectsea.com/methodology","source_title":"Illustrative scenario (no primary source)","source_publisher":"CollectSEA illustrative scenario","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026.09.30T00:00:00.000Z","source_hash":"content-fingerprint:fnv1a-2628a2e2","affected_system":{"organization":"Top-Level Domain Registry Infrastructure","product":"Authoritative DNSSEC Signing Infrastructure","system_type":"Top-Level Domain Registry","is_ai_system":false,"is_agentic":false,"primary_language":"Cloud & Distributed Systems"},"documented_facts":[{"id":"SEA-PUB-051-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Mismatched DS records during planned Key Signing Key (KSK) rollover caused recursive resolvers worldwide to return SERVFAIL.","source_quote_or_pointer":"CollectSEA illustrative scenario","fact_id":"SEA-PUB-051-F1","document_citation":"CollectSEA illustrative scenario"}],"source_stated_contributors":["Mismatched DS records during planned Key Signing Key (KSK) rollover caused recursive resol..."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.infrastructure_modification","data.credentials_secrets","arch.external_api"],"failure_mechanisms":["SEA-FM-008","SEA-FM-005"],"consequences":["Financial Loss","Execution Error"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"collectsea-illustrative-scenario-v1","review_status":"machine_extracted","review_notes":["Composite teaching scenario written by CollectSEA. Not a documented real-world incident and not tied to a primary source."]},"source_authority":{"document_type":"Illustrative scenario","filing_id":"SEA-PUB-051","reporting_entity":"CollectSEA","regulatory_body":"Not applicable"},"safeguards":[{"safeguard_id":"SEA-PUB-051-SG1","label":"Automated Defensive Guardrail","description":"Verify optimistic concurrency version numbers and real-time entitlement tokens immediately prior to committing background mutations.","target_failure_mode":"Repeat architectural failure","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-PUB-051-SG1","label":"Automated Defensive Guardrail","description":"Verify optimistic concurrency version numbers and real-time entitlement tokens immediately prior to committing background mutations.","target_failure_mode":"Repeat architectural failure","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-PUB-052","title":"OAuth Refresh Token Reuse Race Condition & Account Takeover","display_title":"OAuth Refresh Token Reuse Race Condition & Account Takeover","display_summary":"Simultaneous token refresh requests from multi-tab sessions triggered false reuse detection, locking user accounts.","display_reference":"","display_source_type":"Illustrative scenario","incident_date":"2023-05-25","disclosure_date":"2023-05-25","source_type":"vendor_postmortem","source_url":"https://collectsea.com/methodology","source_title":"Illustrative scenario (no primary source)","source_publisher":"CollectSEA illustrative scenario","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026.09.30T00:00:00.000Z","source_hash":"content-fingerprint:fnv1a-28ecfc50","affected_system":{"organization":"Consumer Mobile Platform Infrastructure","product":"Mobile OAuth2 Token Exchange Gateway","system_type":"Consumer Mobile Platform","is_ai_system":false,"is_agentic":false,"primary_language":"Cloud & Distributed Systems"},"documented_facts":[{"id":"SEA-PUB-052-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Simultaneous token refresh requests from multi-tab sessions triggered false reuse detection, locking user accounts.","source_quote_or_pointer":"CollectSEA illustrative scenario","fact_id":"SEA-PUB-052-F1","document_citation":"CollectSEA illustrative scenario"}],"source_stated_contributors":["Simultaneous token refresh requests from multi-tab sessions triggered false reuse detectio..."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.credentials_secrets","arch.multi_tenant","auth.privileged_action"],"failure_mechanisms":["SEA-FM-007","SEA-FM-001"],"consequences":["Financial Loss","Execution Error"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"collectsea-illustrative-scenario-v1","review_status":"machine_extracted","review_notes":["Composite teaching scenario written by CollectSEA. Not a documented real-world incident and not tied to a primary source."]},"source_authority":{"document_type":"Illustrative scenario","filing_id":"SEA-PUB-052","reporting_entity":"CollectSEA","regulatory_body":"Not applicable"},"safeguards":[{"safeguard_id":"SEA-PUB-052-SG1","label":"Automated Defensive Guardrail","description":"Implement transactional outbox patterns or saga orchestrators with monotonic event versioning to guarantee distributed state convergence.","target_failure_mode":"Repeat architectural failure","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-PUB-052-SG1","label":"Automated Defensive Guardrail","description":"Implement transactional outbox patterns or saga orchestrators with monotonic event versioning to guarantee distributed state convergence.","target_failure_mode":"Repeat architectural failure","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-PUB-053","title":"BGP Prefix Hijack Inadvertent Cryptocurrency Wallet Redirection","display_title":"BGP Prefix Hijack Inadvertent Cryptocurrency Wallet Redirection","display_summary":"Rogue BGP route announcement redirected DNS queries for major cryptocurrency portal to malicious server for 2 hours.","display_reference":"","display_source_type":"Illustrative scenario","incident_date":"2024-06-26","disclosure_date":"2024-06-26","source_type":"vendor_postmortem","source_url":"https://collectsea.com/methodology","source_title":"Illustrative scenario (no primary source)","source_publisher":"CollectSEA illustrative scenario","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026.09.30T00:00:00.000Z","source_hash":"content-fingerprint:fnv1a-320c9247","affected_system":{"organization":"Internet Routing Infrastructure Infrastructure","product":"Autonomous System BGP Routing Gateway","system_type":"Internet Routing Infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Cloud & Distributed Systems"},"documented_facts":[{"id":"SEA-PUB-053-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Rogue BGP route announcement redirected DNS queries for major cryptocurrency portal to malicious server for 2 hours.","source_quote_or_pointer":"CollectSEA illustrative scenario","fact_id":"SEA-PUB-053-F1","document_citation":"CollectSEA illustrative scenario"}],"source_stated_contributors":["Rogue BGP route announcement redirected DNS queries for major cryptocurrency portal to mal..."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.infrastructure_modification","arch.external_api","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-001","SEA-FM-005"],"consequences":["Financial Loss","Execution Error"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"collectsea-illustrative-scenario-v1","review_status":"machine_extracted","review_notes":["Composite teaching scenario written by CollectSEA. Not a documented real-world incident and not tied to a primary source."]},"source_authority":{"document_type":"Illustrative scenario","filing_id":"SEA-PUB-053","reporting_entity":"CollectSEA","regulatory_body":"Not applicable"},"safeguards":[{"safeguard_id":"SEA-PUB-053-SG1","label":"Automated Defensive Guardrail","description":"Attach unique, client-generated idempotency keys (Idempotency-Key header) to all state-mutating requests and reconcile transaction status before retrying.","target_failure_mode":"Repeat architectural failure","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-PUB-053-SG1","label":"Automated Defensive Guardrail","description":"Attach unique, client-generated idempotency keys (Idempotency-Key header) to all state-mutating requests and reconcile transaction status before retrying.","target_failure_mode":"Repeat architectural failure","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-PUB-054","title":"Database Auto-Vacuum Starvation Transaction ID Wraparound","display_title":"Database Auto-Vacuum Starvation Transaction ID Wraparound","display_summary":"Aggressive long-running analytics queries blocked auto-vacuum; reached 2-billion transaction ID limit forcing emergency shutdown.","display_reference":"","display_source_type":"Illustrative scenario","incident_date":"2025-07-27","disclosure_date":"2025-07-27","source_type":"vendor_postmortem","source_url":"https://collectsea.com/methodology","source_title":"Illustrative scenario (no primary source)","source_publisher":"CollectSEA illustrative scenario","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026.09.30T00:00:00.000Z","source_hash":"content-fingerprint:fnv1a-15dcd14a","affected_system":{"organization":"Enterprise Managed PostgreSQL Infrastructure","product":"High-Volume Transaction Ledger Database","system_type":"Enterprise Managed PostgreSQL","is_ai_system":false,"is_agentic":false,"primary_language":"Cloud & Distributed Systems"},"documented_facts":[{"id":"SEA-PUB-054-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Aggressive long-running analytics queries blocked auto-vacuum; reached 2-billion transaction ID limit forcing emergency shutdown.","source_quote_or_pointer":"CollectSEA illustrative scenario","fact_id":"SEA-PUB-054-F1","document_citation":"CollectSEA illustrative scenario"}],"source_stated_contributors":["Aggressive long-running analytics queries blocked auto-vacuum; reached 2-billion transacti..."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.financial_records","auth.infrastructure_modification","arch.caching"],"failure_mechanisms":["SEA-FM-005","SEA-FM-006"],"consequences":["Financial Loss","Execution Error"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"collectsea-illustrative-scenario-v1","review_status":"machine_extracted","review_notes":["Composite teaching scenario written by CollectSEA. Not a documented real-world incident and not tied to a primary source."]},"source_authority":{"document_type":"Illustrative scenario","filing_id":"SEA-PUB-054","reporting_entity":"CollectSEA","regulatory_body":"Not applicable"},"safeguards":[{"safeguard_id":"SEA-PUB-054-SG1","label":"Automated Defensive Guardrail","description":"Implement mandatory soft-delete retention grace periods, air-gapped immutable backup snapshots, and multi-factor approval for bulk infrastructure teardown.","target_failure_mode":"Repeat architectural failure","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-PUB-054-SG1","label":"Automated Defensive Guardrail","description":"Implement mandatory soft-delete retention grace periods, air-gapped immutable backup snapshots, and multi-factor approval for bulk infrastructure teardown.","target_failure_mode":"Repeat architectural failure","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-PUB-055","title":"WebSocket Connection Thundering Herd on Load Balancer Restart","display_title":"WebSocket Connection Thundering Herd on Load Balancer Restart","display_summary":"Simultaneous disconnect of 500,000 active WebSocket clients during proxy restart saturated auth services upon reconnection.","display_reference":"","display_source_type":"Illustrative scenario","incident_date":"2021-08-28","disclosure_date":"2021-08-28","source_type":"vendor_postmortem","source_url":"https://collectsea.com/methodology","source_title":"Illustrative scenario (no primary source)","source_publisher":"CollectSEA illustrative scenario","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026.09.30T00:00:00.000Z","source_hash":"content-fingerprint:fnv1a-7ffc1c83","affected_system":{"organization":"Real-Time Collaboration Platform Infrastructure","product":"Edge WebSocket Reverse Proxy Mesh","system_type":"Real-Time Collaboration Platform","is_ai_system":false,"is_agentic":false,"primary_language":"Cloud & Distributed Systems"},"documented_facts":[{"id":"SEA-PUB-055-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Simultaneous disconnect of 500,000 active WebSocket clients during proxy restart saturated auth services upon reconnection.","source_quote_or_pointer":"CollectSEA illustrative scenario","fact_id":"SEA-PUB-055-F1","document_citation":"CollectSEA illustrative scenario"}],"source_stated_contributors":["Simultaneous disconnect of 500,000 active WebSocket clients during proxy restart saturated..."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["arch.multi_tenant","arch.caching","auth.infrastructure_modification"],"failure_mechanisms":["SEA-FM-006","SEA-FM-007"],"consequences":["Financial Loss","Execution Error"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"collectsea-illustrative-scenario-v1","review_status":"machine_extracted","review_notes":["Composite teaching scenario written by CollectSEA. Not a documented real-world incident and not tied to a primary source."]},"source_authority":{"document_type":"Illustrative scenario","filing_id":"SEA-PUB-055","reporting_entity":"CollectSEA","regulatory_body":"Not applicable"},"safeguards":[{"safeguard_id":"SEA-PUB-055-SG1","label":"Automated Defensive Guardrail","description":"Configure exponential backoff with full randomized jitter on all external dependencies, backed by circuit breakers and iteration budget caps.","target_failure_mode":"Repeat architectural failure","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-PUB-055-SG1","label":"Automated Defensive Guardrail","description":"Configure exponential backoff with full randomized jitter on all external dependencies, backed by circuit breakers and iteration budget caps.","target_failure_mode":"Repeat architectural failure","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-PUB-056","title":"LLM Tool Call Hallucination SQL Injection Parameter","display_title":"LLM Tool Call Hallucination SQL Injection Parameter","display_summary":"LLM hallucinated unescaped string concatenation when generating dynamic SQL query from user input, allowing data extraction.","display_reference":"","display_source_type":"Illustrative scenario","incident_date":"2022-09-01","disclosure_date":"2022-09-01","source_type":"vendor_postmortem","source_url":"https://collectsea.com/methodology","source_title":"Illustrative scenario (no primary source)","source_publisher":"CollectSEA illustrative scenario","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026.09.30T00:00:00.000Z","source_hash":"content-fingerprint:fnv1a-1ea97d3","affected_system":{"organization":"Autonomous AI Database Agent Infrastructure","product":"Natural Language SQL Generation Pipeline","system_type":"Autonomous AI Database Agent","is_ai_system":true,"is_agentic":false,"primary_language":"Cloud & Distributed Systems"},"documented_facts":[{"id":"SEA-PUB-056-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"LLM hallucinated unescaped string concatenation when generating dynamic SQL query from user input, allowing data extraction.","source_quote_or_pointer":"CollectSEA illustrative scenario","fact_id":"SEA-PUB-056-F1","document_citation":"CollectSEA illustrative scenario"}],"source_stated_contributors":["LLM hallucinated unescaped string concatenation when generating dynamic SQL query from use..."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.code_execution","arch.tool_enabled_agent","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-010","SEA-FM-001"],"consequences":["Financial Loss","Execution Error"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"collectsea-illustrative-scenario-v1","review_status":"machine_extracted","review_notes":["Composite teaching scenario written by CollectSEA. Not a documented real-world incident and not tied to a primary source."]},"source_authority":{"document_type":"Illustrative scenario","filing_id":"SEA-PUB-056","reporting_entity":"CollectSEA","regulatory_body":"Not applicable"},"safeguards":[{"safeguard_id":"SEA-PUB-056-SG1","label":"Automated Defensive Guardrail","description":"Constrain tool invocation parameters using strict typed schemas with validated enum sets and dry-run preview before committing state.","target_failure_mode":"Repeat architectural failure","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-PUB-056-SG1","label":"Automated Defensive Guardrail","description":"Constrain tool invocation parameters using strict typed schemas with validated enum sets and dry-run preview before committing state.","target_failure_mode":"Repeat architectural failure","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-PUB-057","title":"Cloud IAM Wildcard Permission Lateral Privilege Escalation","display_title":"Cloud IAM Wildcard Permission Lateral Privilege Escalation","display_summary":"Overly permissive iam:PassRole on worker instances allowed compromised application to assume administrator role.","display_reference":"","display_source_type":"Illustrative scenario","incident_date":"2023-10-02","disclosure_date":"2023-10-02","source_type":"vendor_postmortem","source_url":"https://collectsea.com/methodology","source_title":"Illustrative scenario (no primary source)","source_publisher":"CollectSEA illustrative scenario","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026.09.30T00:00:00.000Z","source_hash":"content-fingerprint:fnv1a-a49f0fbf","affected_system":{"organization":"Enterprise Cloud Infrastructure Infrastructure","product":"Cloud IAM Policy & Role Hierarchy","system_type":"Enterprise Cloud Infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Cloud & Distributed Systems"},"documented_facts":[{"id":"SEA-PUB-057-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Overly permissive `iam:PassRole` on worker instances allowed compromised application to assume administrator role.","source_quote_or_pointer":"CollectSEA illustrative scenario","fact_id":"SEA-PUB-057-F1","document_citation":"CollectSEA illustrative scenario"}],"source_stated_contributors":["Overly permissive `iam:PassRole` on worker instances allowed compromised application to as..."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.credentials_secrets","arch.multi_tenant"],"failure_mechanisms":["SEA-FM-001","SEA-FM-009"],"consequences":["Financial Loss","Execution Error"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"collectsea-illustrative-scenario-v1","review_status":"machine_extracted","review_notes":["Composite teaching scenario written by CollectSEA. Not a documented real-world incident and not tied to a primary source."]},"source_authority":{"document_type":"Illustrative scenario","filing_id":"SEA-PUB-057","reporting_entity":"CollectSEA","regulatory_body":"Not applicable"},"safeguards":[{"safeguard_id":"SEA-PUB-057-SG1","label":"Automated Defensive Guardrail","description":"Attach unique, client-generated idempotency keys (Idempotency-Key header) to all state-mutating requests and reconcile transaction status before retrying.","target_failure_mode":"Repeat architectural failure","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-PUB-057-SG1","label":"Automated Defensive Guardrail","description":"Attach unique, client-generated idempotency keys (Idempotency-Key header) to all state-mutating requests and reconcile transaction status before retrying.","target_failure_mode":"Repeat architectural failure","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-PUB-058","title":"S3 Bucket Access Control List (ACL) Misconfiguration Data Leak","display_title":"S3 Bucket Access Control List (ACL) Misconfiguration Data Leak","display_summary":"Default bucket ACL configured as public-read exposed 500,000 passport photos and bank statements to search crawlers.","display_reference":"","display_source_type":"Illustrative scenario","incident_date":"2024-11-03","disclosure_date":"2024-11-03","source_type":"vendor_postmortem","source_url":"https://collectsea.com/methodology","source_title":"Illustrative scenario (no primary source)","source_publisher":"CollectSEA illustrative scenario","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026.09.30T00:00:00.000Z","source_hash":"content-fingerprint:fnv1a-b4b8b2cc","affected_system":{"organization":"Financial Technology Startup Infrastructure","product":"Customer KYC Verification Document Store","system_type":"Financial Technology Startup","is_ai_system":false,"is_agentic":false,"primary_language":"Cloud & Distributed Systems"},"documented_facts":[{"id":"SEA-PUB-058-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Default bucket ACL configured as `public-read` exposed 500,000 passport photos and bank statements to search crawlers.","source_quote_or_pointer":"CollectSEA illustrative scenario","fact_id":"SEA-PUB-058-F1","document_citation":"CollectSEA illustrative scenario"}],"source_stated_contributors":["Default bucket ACL configured as `public-read` exposed 500,000 passport photos and bank st..."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","data.financial_records","auth.privileged_action"],"failure_mechanisms":["SEA-FM-001","SEA-FM-009"],"consequences":["Financial Loss","Execution Error"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"collectsea-illustrative-scenario-v1","review_status":"machine_extracted","review_notes":["Composite teaching scenario written by CollectSEA. Not a documented real-world incident and not tied to a primary source."]},"source_authority":{"document_type":"Illustrative scenario","filing_id":"SEA-PUB-058","reporting_entity":"CollectSEA","regulatory_body":"Not applicable"},"safeguards":[{"safeguard_id":"SEA-PUB-058-SG1","label":"Automated Defensive Guardrail","description":"Attach unique, client-generated idempotency keys (Idempotency-Key header) to all state-mutating requests and reconcile transaction status before retrying.","target_failure_mode":"Repeat architectural failure","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-PUB-058-SG1","label":"Automated Defensive Guardrail","description":"Attach unique, client-generated idempotency keys (Idempotency-Key header) to all state-mutating requests and reconcile transaction status before retrying.","target_failure_mode":"Repeat architectural failure","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-PUB-059","title":"Cross-Tenant Redis Session Hijacking via Unprefixed Cache Keys","display_title":"Cross-Tenant Redis Session Hijacking via Unprefixed Cache Keys","display_summary":"Session store used un-namespaced integer user IDs; tenant A authenticated as user 101 retrieved session of tenant B user 101.","display_reference":"","display_source_type":"Illustrative scenario","incident_date":"2025-12-04","disclosure_date":"2025-12-04","source_type":"vendor_postmortem","source_url":"https://collectsea.com/methodology","source_title":"Illustrative scenario (no primary source)","source_publisher":"CollectSEA illustrative scenario","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026.09.30T00:00:00.000Z","source_hash":"content-fingerprint:fnv1a-140c01e1","affected_system":{"organization":"SaaS CRM Platform Infrastructure","product":"Distributed Redis Session Cache Tier","system_type":"SaaS CRM Platform","is_ai_system":false,"is_agentic":false,"primary_language":"Cloud & Distributed Systems"},"documented_facts":[{"id":"SEA-PUB-059-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Session store used un-namespaced integer user IDs; tenant A authenticated as user 101 retrieved session of tenant B user 101.","source_quote_or_pointer":"CollectSEA illustrative scenario","fact_id":"SEA-PUB-059-F1","document_citation":"CollectSEA illustrative scenario"}],"source_stated_contributors":["Session store used un-namespaced integer user IDs; tenant A authenticated as user 101 retr..."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["arch.multi_tenant","arch.caching","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-003","SEA-FM-008"],"consequences":["Financial Loss","Execution Error"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"collectsea-illustrative-scenario-v1","review_status":"machine_extracted","review_notes":["Composite teaching scenario written by CollectSEA. Not a documented real-world incident and not tied to a primary source."]},"source_authority":{"document_type":"Illustrative scenario","filing_id":"SEA-PUB-059","reporting_entity":"CollectSEA","regulatory_body":"Not applicable"},"safeguards":[{"safeguard_id":"SEA-PUB-059-SG1","label":"Automated Defensive Guardrail","description":"Enforce mandatory tenant namespacing (org_{id}:resource_{id}) across all shared cache and database queries, verifying tenant claims exclusively against verified session tokens.","target_failure_mode":"Repeat architectural failure","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-PUB-059-SG1","label":"Automated Defensive Guardrail","description":"Enforce mandatory tenant namespacing (org_{id}:resource_{id}) across all shared cache and database queries, verifying tenant claims exclusively against verified session tokens.","target_failure_mode":"Repeat architectural failure","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-POST-016","title":"Mistyped input to a capacity-removal command takes down S3 in us-east-1 (AWS, 2017)","display_title":"Mistyped input to a capacity-removal command takes down S3 in us-east-1 (AWS, 2017)","display_summary":"An engineer ran a command meant to remove a small number of servers from an S3 subsystem, but one input was entered incorrectly and more capacity was removed than intended.","display_reference":"","display_source_type":"Engineering postmortem","incident_date":"2017-02-28","disclosure_date":"2017-02-28","source_type":"vendor_postmortem","source_url":"https://aws.amazon.com/message/41926/","source_title":"Summary of the Amazon S3 Service Disruption in the Northern Virginia (US-EAST-1) Region","source_publisher":"Amazon Web Services","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-09-30T00:00:00.000Z","source_hash":"content-fingerprint:fnv1a-f356a466","affected_system":{"organization":"Amazon Web Services","product":"Amazon S3 (US-EAST-1)","system_type":"Cloud object storage","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-POST-016-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"An engineer ran a command meant to remove a small number of servers from an S3 subsystem, but one input was entered incorrectly and more capacity was removed than intended.","source_quote_or_pointer":"Summary of the Amazon S3 Service Disruption in the Northern Virginia (US-EAST-1) Region","fact_id":"SEA-POST-016-F1","document_citation":"Summary of the Amazon S3 Service Disruption in the Northern Virginia (US-EAST-1) Region"},{"id":"SEA-POST-016-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The disruption affected S3 requests (GET, LIST, PUT, DELETE) and dependent services including EC2 launches, EBS snapshots, Lambda and the S3 console in US-EAST-1.","source_quote_or_pointer":"Summary of the Amazon S3 Service Disruption in the Northern Virginia (US-EAST-1) Region","fact_id":"SEA-POST-016-F2","document_citation":"Summary of the Amazon S3 Service Disruption in the Northern Virginia (US-EAST-1) Region"},{"id":"SEA-POST-016-F3","claim_type":"COLLECTSEA_INFERENCE","statement":"AWS changed the tool to remove capacity more slowly and added safeguards that block removals which would take a subsystem below its minimum required capacity.","source_quote_or_pointer":"Summary of the Amazon S3 Service Disruption in the Northern Virginia (US-EAST-1) Region","fact_id":"SEA-POST-016-F3","document_citation":"Summary of the Amazon S3 Service Disruption in the Northern Virginia (US-EAST-1) Region"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.infrastructure_modification","auth.destructive_action","fail.cascading_dep_failure","fail.recovery_failure"],"failure_mechanisms":["SEA-FM-002","SEA-FM-006"],"consequences":["Service outage (regional)","Cascading failure"],"confidence":"TENTATIVE","authority_level":"UNKNOWN"},"provenance":{"extractor_version":"collectsea-curated-v2","review_status":"machine_extracted","review_notes":["Added 2026-09-30 after checking the linked source (source documents the listed facts). AWS's own post-event summary."]},"source_authority":{"document_type":"Vendor postmortem","filing_id":"SEA-POST-016","reporting_entity":"Amazon Web Services","regulatory_body":"Not applicable"},"safeguards":[{"safeguard_id":"SEA-POST-016-SG1","label":"Enforce minimum-capacity limits inside the tool","description":"Refuse removals that would drop a subsystem below its minimum capacity and remove capacity gradually.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-POST-016-SG2","label":"Validate operator input and require a dry run","description":"Check parameters against expected ranges and show what a destructive capacity change will affect before executing it.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-POST-016-SG1","label":"Enforce minimum-capacity limits inside the tool","description":"Refuse removals that would drop a subsystem below its minimum capacity and remove capacity gradually.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-POST-016-SG2","label":"Validate operator input and require a dry run","description":"Check parameters against expected ranges and show what a destructive capacity change will affect before executing it.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"incident"},{"incident_id":"SEA-POST-017","title":"Latent race condition in DNS automation leaves DynamoDB's regional endpoint with an empty record (AWS, 2025)","display_title":"Latent race condition in DNS automation leaves DynamoDB's regional endpoint with an empty record (AWS, 2025)","display_summary":"A latent race condition in DynamoDB's DNS management system produced an empty DNS record for the regional endpoint that the automation could not repair, so clients could not resolve the endpoint.","display_reference":"","display_source_type":"Engineering postmortem","incident_date":"2025-10-19","disclosure_date":"2025-10-19","source_type":"vendor_postmortem","source_url":"https://aws.amazon.com/message/101925/","source_title":"Summary of the Amazon DynamoDB Service Disruption in the Northern Virginia (US-EAST-1) Region","source_publisher":"Amazon Web Services","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-09-30T00:00:00.000Z","source_hash":"content-fingerprint:fnv1a-f027d4b0","affected_system":{"organization":"Amazon Web Services","product":"Amazon DynamoDB (US-EAST-1) DNS management","system_type":"Cloud database control plane","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-POST-017-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A latent race condition in DynamoDB's DNS management system produced an empty DNS record for the regional endpoint that the automation could not repair, so clients could not resolve the endpoint.","source_quote_or_pointer":"Summary of the Amazon DynamoDB Service Disruption in the Northern Virginia (US-EAST-1) Region","fact_id":"SEA-POST-017-F1","document_citation":"Summary of the Amazon DynamoDB Service Disruption in the Northern Virginia (US-EAST-1) Region"},{"id":"SEA-POST-017-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The disruption on October 19-20, 2025 spread to dependent services including EC2, Network Load Balancer, Lambda, container services, Security Token Service and IAM authentication.","source_quote_or_pointer":"Summary of the Amazon DynamoDB Service Disruption in the Northern Virginia (US-EAST-1) Region","fact_id":"SEA-POST-017-F2","document_citation":"Summary of the Amazon DynamoDB Service Disruption in the Northern Virginia (US-EAST-1) Region"},{"id":"SEA-POST-017-F3","claim_type":"COLLECTSEA_INFERENCE","statement":"AWS disabled the DNS automation worldwide until the race condition is fixed, added velocity controls to NLB health checks and improved EC2 recovery testing.","source_quote_or_pointer":"Summary of the Amazon DynamoDB Service Disruption in the Northern Virginia (US-EAST-1) Region","fact_id":"SEA-POST-017-F3","document_citation":"Summary of the Amazon DynamoDB Service Disruption in the Northern Virginia (US-EAST-1) Region"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["fail.stale_state","fail.cascading_dep_failure","fail.recovery_failure","auth.infrastructure_modification"],"failure_mechanisms":["SEA-FM-008","SEA-FM-006"],"consequences":["Service outage (regional)","Cascading failure"],"confidence":"TENTATIVE","authority_level":"UNKNOWN"},"provenance":{"extractor_version":"collectsea-curated-v2","review_status":"machine_extracted","review_notes":["Added 2026-09-30 after checking the linked source (source documents the listed facts). AWS's own post-event summary."]},"source_authority":{"document_type":"Vendor postmortem","filing_id":"SEA-POST-017","reporting_entity":"Amazon Web Services","regulatory_body":"Not applicable"},"safeguards":[{"safeguard_id":"SEA-POST-017-SG1","label":"Make control-plane automation safe against stale plans","description":"Version and verify plans so an older plan cannot overwrite a newer one, and give operators a safe manual path to repair an empty record.","target_failure_mode":"SEA-FM-008","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-POST-017-SG2","label":"Limit how fast health failures remove capacity","description":"Add velocity controls to dependent health checks so one dependency fault cannot cascade through the region.","target_failure_mode":"SEA-FM-008","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-POST-017-SG1","label":"Make control-plane automation safe against stale plans","description":"Version and verify plans so an older plan cannot overwrite a newer one, and give operators a safe manual path to repair an empty record.","target_failure_mode":"SEA-FM-008","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-POST-017-SG2","label":"Limit how fast health failures remove capacity","description":"Add velocity controls to dependent health checks so one dependency fault cannot cascade through the region.","target_failure_mode":"SEA-FM-008","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"incident"},{"incident_id":"SEA-POST-018","title":"Policy change with blank fields crashes Google Cloud's Service Control in a global loop (2025)","display_title":"Policy change with blank fields crashes Google Cloud's Service Control in a global loop (2025)","display_summary":"A policy change containing blank fields was inserted into the quota policy system; when Service Control read it, the code path hit a null pointer and the binaries went into a crash loop.","display_reference":"","display_source_type":"Engineering postmortem","incident_date":"2025-06-12","disclosure_date":"2025-06-12","source_type":"vendor_postmortem","source_url":"https://status.cloud.google.com/incidents/ow5i3PPK96RduMcb1SsW","source_title":"Google Cloud incident report: global outage of June 12, 2025","source_publisher":"Google Cloud","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-09-30T00:00:00.000Z","source_hash":"content-fingerprint:fnv1a-66005759","affected_system":{"organization":"Google Cloud","product":"Service Control / quota policy","system_type":"Cloud API management control plane","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-POST-018-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A policy change containing blank fields was inserted into the quota policy system; when Service Control read it, the code path hit a null pointer and the binaries went into a crash loop.","source_quote_or_pointer":"Google Cloud incident report: global outage of June 12, 2025","fact_id":"SEA-POST-018-F1","document_citation":"Google Cloud incident report: global outage of June 12, 2025"},{"id":"SEA-POST-018-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The faulty code lacked error handling and was not protected by a feature flag, so unvetted behaviour reached production globally.","source_quote_or_pointer":"Google Cloud incident report: global outage of June 12, 2025","fact_id":"SEA-POST-018-F2","document_citation":"Google Cloud incident report: global outage of June 12, 2025"},{"id":"SEA-POST-018-F3","claim_type":"COLLECTSEA_INFERENCE","statement":"More than 40 Google Cloud products returned 503 errors between 10:51 and 18:18 PDT.","source_quote_or_pointer":"Google Cloud incident report: global outage of June 12, 2025","fact_id":"SEA-POST-018-F3","document_citation":"Google Cloud incident report: global outage of June 12, 2025"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.infrastructure_modification","fail.cascading_dep_failure","fail.missing_observability"],"failure_mechanisms":["SEA-FM-011"],"consequences":["Service outage (global)","Cascading failure"],"confidence":"TENTATIVE","authority_level":"UNKNOWN"},"provenance":{"extractor_version":"collectsea-curated-v2","review_status":"machine_extracted","review_notes":["Added 2026-09-30 after checking the linked source (source documents the listed facts). Google Cloud's own incident report."]},"source_authority":{"document_type":"Vendor incident report","filing_id":"SEA-POST-018","reporting_entity":"Google Cloud","regulatory_body":"Not applicable"},"safeguards":[{"safeguard_id":"SEA-POST-018-SG1","label":"Guard risky code paths with feature flags","description":"Ship new behaviour dark, enable it gradually and keep a fast way to turn it off.","target_failure_mode":"SEA-FM-011","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-POST-018-SG2","label":"Validate policy data before global replication","description":"Reject blank or malformed policy fields, handle errors without crashing, and replicate changes region by region.","target_failure_mode":"SEA-FM-011","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-POST-018-SG1","label":"Guard risky code paths with feature flags","description":"Ship new behaviour dark, enable it gradually and keep a fast way to turn it off.","target_failure_mode":"SEA-FM-011","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-POST-018-SG2","label":"Validate policy data before global replication","description":"Reject blank or malformed policy fields, handle errors without crashing, and replicate changes region by region.","target_failure_mode":"SEA-FM-011","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"incident"},{"incident_id":"SEA-POST-019","title":"Backbone maintenance command disconnects Facebook's data centers and locks out recovery tooling (Meta, 2021)","display_title":"Backbone maintenance command disconnects Facebook's data centers and locks out recovery tooling (Meta, 2021)","display_summary":"A command issued to assess global backbone capacity unintentionally took down all the connections in Facebook's backbone network.","display_reference":"","display_source_type":"Engineering postmortem","incident_date":"2021-10-04","disclosure_date":"2021-10-04","source_type":"vendor_postmortem","source_url":"https://engineering.fb.com/2021/10/05/networking-traffic/outage-details/","source_title":"More details about the October 4 outage","source_publisher":"Meta Engineering","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-09-30T00:00:00.000Z","source_hash":"content-fingerprint:fnv1a-4e4b66ac","affected_system":{"organization":"Meta (Facebook)","product":"Global backbone network and DNS","system_type":"Network infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-POST-019-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A command issued to assess global backbone capacity unintentionally took down all the connections in Facebook's backbone network.","source_quote_or_pointer":"More details about the October 4 outage","fact_id":"SEA-POST-019-F1","document_citation":"More details about the October 4 outage"},{"id":"SEA-POST-019-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A bug in the audit tool designed to prevent such commands stopped it from properly blocking this one.","source_quote_or_pointer":"More details about the October 4 outage","fact_id":"SEA-POST-019-F2","document_citation":"More details about the October 4 outage"},{"id":"SEA-POST-019-F3","claim_type":"COLLECTSEA_INFERENCE","statement":"Recovery was slow because engineers could not use normal access paths and DNS also failed, which required onsite intervention at heavily secured data centers.","source_quote_or_pointer":"More details about the October 4 outage","fact_id":"SEA-POST-019-F3","document_citation":"More details about the October 4 outage"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.infrastructure_modification","fail.recovery_failure","fail.cascading_dep_failure"],"failure_mechanisms":["SEA-FM-011","SEA-FM-002"],"consequences":["Service outage (global)","Recovery failure"],"confidence":"TENTATIVE","authority_level":"UNKNOWN"},"provenance":{"extractor_version":"collectsea-curated-v2","review_status":"machine_extracted","review_notes":["Added 2026-09-30 after checking the linked source (source documents the listed facts). Meta's own engineering post."]},"source_authority":{"document_type":"Vendor postmortem","filing_id":"SEA-POST-019","reporting_entity":"Meta Engineering","regulatory_body":"Not applicable"},"safeguards":[{"safeguard_id":"SEA-POST-019-SG1","label":"Test the guard that is meant to stop dangerous commands","description":"Audit tools need their own tests and a second independent check for changes that can disconnect the network.","target_failure_mode":"SEA-FM-011","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-POST-019-SG2","label":"Keep recovery paths independent of the thing being recovered","description":"Ensure out-of-band access and DNS-independent tooling exist so a network failure does not lock operators out.","target_failure_mode":"SEA-FM-011","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-POST-019-SG1","label":"Test the guard that is meant to stop dangerous commands","description":"Audit tools need their own tests and a second independent check for changes that can disconnect the network.","target_failure_mode":"SEA-FM-011","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-POST-019-SG2","label":"Keep recovery paths independent of the thing being recovered","description":"Ensure out-of-band access and DNS-independent tooling exist so a network failure does not lock operators out.","target_failure_mode":"SEA-FM-011","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"incident"},{"incident_id":"SEA-POST-020","title":"43-second network partition triggers database failover and unreplicated writes (GitHub, 2018)","display_title":"43-second network partition triggers database failover and unreplicated writes (GitHub, 2018)","display_summary":"Network maintenance caused a 43-second loss of connectivity between GitHub's US East Coast hub and its primary data center, which led to 24 hours and 11 minutes of degraded service.","display_reference":"","display_source_type":"Engineering postmortem","incident_date":"2018-10-21","disclosure_date":"2018-10-21","source_type":"vendor_postmortem","source_url":"https://github.blog/2018-10-30-oct21-post-incident-analysis/","source_title":"October 21 post-incident analysis","source_publisher":"GitHub","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-09-30T00:00:00.000Z","source_hash":"content-fingerprint:fnv1a-79e7bf12","affected_system":{"organization":"GitHub","product":"MySQL clusters and Orchestrator failover","system_type":"Distributed database","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-POST-020-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Network maintenance caused a 43-second loss of connectivity between GitHub's US East Coast hub and its primary data center, which led to 24 hours and 11 minutes of degraded service.","source_quote_or_pointer":"October 21 post-incident analysis","fact_id":"SEA-POST-020-F1","document_citation":"October 21 post-incident analysis"},{"id":"SEA-POST-020-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Orchestrator failed MySQL primaries over to the West Coast while the East Coast still held writes that had not replicated, leaving data inconsistent and preventing a safe failback.","source_quote_or_pointer":"October 21 post-incident analysis","fact_id":"SEA-POST-020-F2","document_citation":"October 21 post-incident analysis"},{"id":"SEA-POST-020-F3","claim_type":"COLLECTSEA_INFERENCE","statement":"Recovery involved restoring from backups, resynchronising replicas and manually reconciling about 954 unreplicated writes per affected cluster.","source_quote_or_pointer":"October 21 post-incident analysis","fact_id":"SEA-POST-020-F3","document_citation":"October 21 post-incident analysis"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["fail.partial_success","fail.stale_state","arch.distributed_tx","fail.recovery_failure"],"failure_mechanisms":["SEA-FM-007","SEA-FM-008"],"consequences":["Service degradation (24 hours)","Data inconsistency"],"confidence":"TENTATIVE","authority_level":"UNKNOWN"},"provenance":{"extractor_version":"collectsea-curated-v2","review_status":"machine_extracted","review_notes":["Added 2026-09-30 after checking the linked source (source documents the listed facts). GitHub's own post-incident analysis."]},"source_authority":{"document_type":"Vendor postmortem","filing_id":"SEA-POST-020","reporting_entity":"GitHub","regulatory_body":"Not applicable"},"safeguards":[{"safeguard_id":"SEA-POST-020-SG1","label":"Make automatic failover aware of replication state","description":"Do not promote a replica in another region unless it has the writes the old primary acknowledged, or fence the old primary first.","target_failure_mode":"SEA-FM-007","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-POST-020-SG2","label":"Plan for split-brain reconciliation","description":"Keep tooling and runbooks for detecting and reconciling divergent writes after a partition.","target_failure_mode":"SEA-FM-007","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-POST-020-SG1","label":"Make automatic failover aware of replication state","description":"Do not promote a replica in another region unless it has the writes the old primary acknowledged, or fence the old primary first.","target_failure_mode":"SEA-FM-007","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-POST-020-SG2","label":"Plan for split-brain reconciliation","description":"Keep tooling and runbooks for detecting and reconciling divergent writes after a partition.","target_failure_mode":"SEA-FM-007","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"incident"},{"incident_id":"SEA-POST-021","title":"Regular expression in a WAF rule exhausts CPU on every edge server (Cloudflare, 2019)","display_title":"Regular expression in a WAF rule exhausts CPU on every edge server (Cloudflare, 2019)","display_summary":"A new WAF managed rule for XSS detection contained a regular expression that caused catastrophic backtracking and exhausted CPU.","display_reference":"","display_source_type":"Engineering postmortem","incident_date":"2019-07-02","disclosure_date":"2019-07-02","source_type":"vendor_postmortem","source_url":"https://blog.cloudflare.com/details-of-the-cloudflare-outage-on-july-2-2019/","source_title":"Details of the Cloudflare outage on July 2, 2019","source_publisher":"Cloudflare","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-09-30T00:00:00.000Z","source_hash":"content-fingerprint:fnv1a-a024bcbc","affected_system":{"organization":"Cloudflare","product":"Web Application Firewall managed rules","system_type":"Edge proxy and WAF","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-POST-021-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A new WAF managed rule for XSS detection contained a regular expression that caused catastrophic backtracking and exhausted CPU.","source_quote_or_pointer":"Details of the Cloudflare outage on July 2, 2019","fact_id":"SEA-POST-021-F1","document_citation":"Details of the Cloudflare outage on July 2, 2019"},{"id":"SEA-POST-021-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The rule was deployed globally through Cloudflare's configuration system and reached all data centers within seconds.","source_quote_or_pointer":"Details of the Cloudflare outage on July 2, 2019","fact_id":"SEA-POST-021-F2","document_citation":"Details of the Cloudflare outage on July 2, 2019"},{"id":"SEA-POST-021-F3","claim_type":"COLLECTSEA_INFERENCE","statement":"The resulting outage lasted about 27 minutes.","source_quote_or_pointer":"Details of the Cloudflare outage on July 2, 2019","fact_id":"SEA-POST-021-F3","document_citation":"Details of the Cloudflare outage on July 2, 2019"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["fail.cost_resource_exhaustion","auth.infrastructure_modification","fail.cascading_dep_failure"],"failure_mechanisms":["SEA-FM-011","SEA-FM-006"],"consequences":["Service outage (global)","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNKNOWN"},"provenance":{"extractor_version":"collectsea-curated-v2","review_status":"machine_extracted","review_notes":["Added 2026-09-30 after checking the linked source (source documents the listed facts). Cloudflare's own postmortem."]},"source_authority":{"document_type":"Vendor postmortem","filing_id":"SEA-POST-021","reporting_entity":"Cloudflare","regulatory_body":"Not applicable"},"safeguards":[{"safeguard_id":"SEA-POST-021-SG1","label":"Deploy rules through staged rollouts","description":"Release new rules to a small share of traffic first and watch CPU and error rates before going global.","target_failure_mode":"SEA-FM-011","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-POST-021-SG2","label":"Bound rule execution cost","description":"Use regex engines without catastrophic backtracking and enforce per-request CPU limits and a global kill switch.","target_failure_mode":"SEA-FM-011","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-POST-021-SG1","label":"Deploy rules through staged rollouts","description":"Release new rules to a small share of traffic first and watch CPU and error rates before going global.","target_failure_mode":"SEA-FM-011","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-POST-021-SG2","label":"Bound rule execution cost","description":"Use regex engines without catastrophic backtracking and enforce per-request CPU limits and a global kill switch.","target_failure_mode":"SEA-FM-011","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"incident"},{"incident_id":"SEA-POST-022","title":"Holiday traffic surge overloads a Transit Gateway and stalls autoscaling provisioning (Slack, 2021)","display_title":"Holiday traffic surge overloads a Transit Gateway and stalls autoscaling provisioning (Slack, 2021)","display_summary":"After the holidays, an unusual surge of traffic from clients with cold caches overloaded one of Slack's AWS Transit Gateways.","display_reference":"","display_source_type":"Engineering postmortem","incident_date":"2021-01-04","disclosure_date":"2021-01-04","source_type":"vendor_postmortem","source_url":"https://slack.engineering/slacks-outage-on-january-4th-2021/","source_title":"Slack's Outage on January 4th 2021","source_publisher":"Slack Engineering","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-09-30T00:00:00.000Z","source_hash":"content-fingerprint:fnv1a-895d129f","affected_system":{"organization":"Slack","product":"AWS Transit Gateway and provisioning service","system_type":"Messaging platform infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-POST-022-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"After the holidays, an unusual surge of traffic from clients with cold caches overloaded one of Slack's AWS Transit Gateways.","source_quote_or_pointer":"Slack's Outage on January 4th 2021","fact_id":"SEA-POST-022-F1","document_citation":"Slack's Outage on January 4th 2021"},{"id":"SEA-POST-022-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The provisioning service hit resource limits (an open-files limit and an AWS quota) while trying to add about 1,200 servers under degraded network conditions.","source_quote_or_pointer":"Slack's Outage on January 4th 2021","fact_id":"SEA-POST-022-F2","document_citation":"Slack's Outage on January 4th 2021"},{"id":"SEA-POST-022-F3","claim_type":"COLLECTSEA_INFERENCE","statement":"Follow-ups included removing the monitoring dashboards' dependency on the Transit Gateway, regularly load-testing the provisioning service and reviewing autoscaling and health-check settings.","source_quote_or_pointer":"Slack's Outage on January 4th 2021","fact_id":"SEA-POST-022-F3","document_citation":"Slack's Outage on January 4th 2021"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["fail.cost_resource_exhaustion","fail.cascading_dep_failure","arch.async_job","fail.missing_observability"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service outage","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNKNOWN"},"provenance":{"extractor_version":"collectsea-curated-v2","review_status":"machine_extracted","review_notes":["Added 2026-09-30 after checking the linked source (source documents the listed facts). Slack's own engineering postmortem."]},"source_authority":{"document_type":"Vendor postmortem","filing_id":"SEA-POST-022","reporting_entity":"Slack Engineering","regulatory_body":"Not applicable"},"safeguards":[{"safeguard_id":"SEA-POST-022-SG1","label":"Load-test scale-up paths, not just steady state","description":"Regularly exercise the provisioning service at burst scale and check OS and cloud quota limits.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-POST-022-SG2","label":"Keep monitoring independent of the failing path","description":"Place dashboards and alerting where a network-gateway failure cannot blind operators.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-POST-022-SG1","label":"Load-test scale-up paths, not just steady state","description":"Regularly exercise the provisioning service at burst scale and check OS and cloud quota limits.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-POST-022-SG2","label":"Keep monitoring independent of the failing path","description":"Place dashboards and alerting where a network-gateway failure cannot blind operators.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"incident"},{"incident_id":"SEA-POST-023","title":"New Consul streaming feature under heavy load and a BoltDB issue cause a 73-hour outage (Roblox, 2021)","display_title":"New Consul streaming feature under heavy load and a BoltDB issue cause a 73-hour outage (Roblox, 2021)","display_summary":"Enabling a relatively new streaming feature in Consul under unusually high read and write load caused excessive contention, compounded by a pathological performance issue in BoltDB when handling large writes.","display_reference":"","display_source_type":"Engineering postmortem","incident_date":"2021-10-28","disclosure_date":"2021-10-28","source_type":"vendor_postmortem","source_url":"https://about.roblox.com/newsroom/2022/01/roblox-return-to-service-10-28-10-31-2021","source_title":"Roblox Return to Service","source_publisher":"Roblox","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-09-30T00:00:00.000Z","source_hash":"content-fingerprint:fnv1a-8b1ea18b","affected_system":{"organization":"Roblox","product":"Consul service discovery cluster","system_type":"Game platform infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-POST-023-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Enabling a relatively new streaming feature in Consul under unusually high read and write load caused excessive contention, compounded by a pathological performance issue in BoltDB when handling large writes.","source_quote_or_pointer":"Roblox Return to Service","fact_id":"SEA-POST-023-F1","document_citation":"Roblox Return to Service"},{"id":"SEA-POST-023-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A single Consul cluster supported multiple workloads and the monitoring systems relied on the same infrastructure, which hampered diagnosis.","source_quote_or_pointer":"Roblox Return to Service","fact_id":"SEA-POST-023-F2","document_citation":"Roblox Return to Service"},{"id":"SEA-POST-023-F3","claim_type":"COLLECTSEA_INFERENCE","statement":"The outage lasted 73 hours (October 28-31, 2021); recovery included disabling streaming, restoring caches and reintroducing traffic gradually through DNS steering in 10% steps.","source_quote_or_pointer":"Roblox Return to Service","fact_id":"SEA-POST-023-F3","document_citation":"Roblox Return to Service"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["fail.cost_resource_exhaustion","fail.recovery_failure","fail.missing_observability","fail.cascading_dep_failure"],"failure_mechanisms":["SEA-FM-011","SEA-FM-006"],"consequences":["Service outage (73 hours)","Recovery failure"],"confidence":"TENTATIVE","authority_level":"UNKNOWN"},"provenance":{"extractor_version":"collectsea-curated-v2","review_status":"machine_extracted","review_notes":["Added 2026-09-30 after checking the linked source (source documents the listed facts). Roblox's own postmortem."]},"source_authority":{"document_type":"Vendor postmortem","filing_id":"SEA-POST-023","reporting_entity":"Roblox","regulatory_body":"Not applicable"},"safeguards":[{"safeguard_id":"SEA-POST-023-SG1","label":"Roll out new infrastructure features gradually under realistic load","description":"Enable new capabilities on a small portion of traffic and watch contention metrics before full rollout.","target_failure_mode":"SEA-FM-011","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-POST-023-SG2","label":"Separate critical workloads and their monitoring","description":"Avoid one shared cluster for many workloads, and keep observability independent of the system being diagnosed.","target_failure_mode":"SEA-FM-011","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-POST-023-SG1","label":"Roll out new infrastructure features gradually under realistic load","description":"Enable new capabilities on a small portion of traffic and watch contention metrics before full rollout.","target_failure_mode":"SEA-FM-011","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-POST-023-SG2","label":"Separate critical workloads and their monitoring","description":"Avoid one shared cluster for many workloads, and keep observability independent of the system being diagnosed.","target_failure_mode":"SEA-FM-011","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"incident"},{"incident_id":"SEA-SEC-021","title":"MFA fatigue against a contractor gives an attacker access to Uber's internal tools (2022)","display_title":"MFA fatigue against a contractor gives an attacker access to Uber's internal tools (2022)","display_summary":"An attacker likely bought a contractor's corporate password on the dark web after malware infected the contractor's personal device, then repeatedly sent two-factor approval requests until the contractor accepted one.","display_reference":"","display_source_type":"Engineering postmortem","incident_date":"2022-09-16","disclosure_date":"2022-09-16","source_type":"vendor_postmortem","source_url":"https://www.uber.com/newsroom/security-update/","source_title":"Security update","source_publisher":"Uber","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-09-30T00:00:00.000Z","source_hash":"content-fingerprint:fnv1a-461b0fe7","affected_system":{"organization":"Uber","product":"Corporate identity and internal tools","system_type":"Enterprise identity and collaboration","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-SEC-021-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"An attacker likely bought a contractor's corporate password on the dark web after malware infected the contractor's personal device, then repeatedly sent two-factor approval requests until the contractor accepted one.","source_quote_or_pointer":"Security update","fact_id":"SEA-SEC-021-F1","document_citation":"Security update"},{"id":"SEA-SEC-021-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The attacker reached internal tools including G-Suite, Slack, OpenDNS and the HackerOne dashboard and downloaded some internal Slack messages.","source_quote_or_pointer":"Security update","fact_id":"SEA-SEC-021-F2","document_citation":"Security update"},{"id":"SEA-SEC-021-F3","claim_type":"COLLECTSEA_INFERENCE","statement":"Uber reported no breach of production systems or user data, disabled the compromised accounts, rotated service keys and strengthened MFA policies.","source_quote_or_pointer":"Security update","fact_id":"SEA-SEC-021-F3","document_citation":"Security update"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.credentials_secrets","auth.privileged_action","fail.auth_boundary_failure"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential compromise","Internal data exposure"],"confidence":"TENTATIVE","authority_level":"UNKNOWN"},"provenance":{"extractor_version":"collectsea-curated-v2","review_status":"machine_extracted","review_notes":["Added 2026-09-30 after checking the linked source (source documents the listed facts). Uber's own security update, published September 16, 2022."]},"source_authority":{"document_type":"Company security update","filing_id":"SEA-SEC-021","reporting_entity":"Uber","regulatory_body":"Not applicable"},"safeguards":[{"safeguard_id":"SEA-SEC-021-SG1","label":"Use phishing- and fatigue-resistant MFA","description":"Number matching, passkeys or hardware keys prevent approval-prompt spam from being accepted blindly.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-SEC-021-SG2","label":"Treat contractor access as high risk","description":"Require managed devices, rate-limit and alert on repeated MFA prompts, and limit what contractor accounts can reach.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-SEC-021-SG1","label":"Use phishing- and fatigue-resistant MFA","description":"Number matching, passkeys or hardware keys prevent approval-prompt spam from being accepted blindly.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-SEC-021-SG2","label":"Treat contractor access as high risk","description":"Require managed devices, rate-limit and alert on repeated MFA prompts, and limit what contractor accounts can reach.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"disclosure"},{"incident_id":"SEA-SEC-022","title":"AWS access key in a private GitHub repository leads to 57 million rider and driver records taken (Uber, 2016)","display_title":"AWS access key in a private GitHub repository leads to 57 million rider and driver records taken (Uber, 2016)","display_summary":"Between October 13 and November 15, 2016, intruders used an AWS access key that had been posted to a private GitHub repository to access Uber's Amazon S3 datastore.","display_reference":"","display_source_type":"Regulatory or court record","incident_date":"2016-10-13","disclosure_date":"2016-10-13","source_type":"regulator_report","source_url":"https://www.ftc.gov/system/files/documents/cases/1523054_uber_technologies_revised_analysis.pdf","source_title":"FTC analysis of revised proposed consent order: Uber Technologies","source_publisher":"U.S. Federal Trade Commission","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-09-30T00:00:00.000Z","source_hash":"content-fingerprint:fnv1a-a755bb3b","affected_system":{"organization":"Uber","product":"Amazon S3 datastore and GitHub repositories","system_type":"Consumer platform cloud storage","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-SEC-022-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Between October 13 and November 15, 2016, intruders used an AWS access key that had been posted to a private GitHub repository to access Uber's Amazon S3 datastore.","source_quote_or_pointer":"FTC analysis of revised proposed consent order: Uber Technologies","fact_id":"SEA-SEC-022-F1","document_citation":"FTC analysis of revised proposed consent order: Uber Technologies"},{"id":"SEA-SEC-022-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Engineers accessed the repositories through individual accounts without required multi-factor authentication, and the intruders got in using passwords exposed in other breaches.","source_quote_or_pointer":"FTC analysis of revised proposed consent order: Uber Technologies","fact_id":"SEA-SEC-022-F2","document_citation":"FTC analysis of revised proposed consent order: Uber Technologies"},{"id":"SEA-SEC-022-F3","claim_type":"COLLECTSEA_INFERENCE","statement":"They downloaded about 25.6 million names and email addresses, 22.1 million names and mobile phone numbers, and 607,000 names and driver's license numbers; Uber did not disclose the breach until November 2017.","source_quote_or_pointer":"FTC analysis of revised proposed consent order: Uber Technologies","fact_id":"SEA-SEC-022-F3","document_citation":"FTC analysis of revised proposed consent order: Uber Technologies"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.credentials_secrets","data.pii","auth.infrastructure_modification"],"failure_mechanisms":["SEA-FM-012","SEA-FM-013"],"consequences":["Data exposure (rider and driver records)","Compliance exposure"],"confidence":"TENTATIVE","authority_level":"UNKNOWN"},"provenance":{"extractor_version":"collectsea-curated-v2","review_status":"machine_extracted","review_notes":["Added 2026-09-30 after checking the linked source (source documents the core event; some details come from wider reporting or indexed summaries). The FTC PDF could only be identified by its title and date (April 10, 2018); the specific facts below come from the FTC's published description of the case as indexed by search, not from reading the PDF text."]},"source_authority":{"document_type":"Regulator analysis","filing_id":"SEA-SEC-022","reporting_entity":"U.S. Federal Trade Commission","regulatory_body":"Not applicable"},"safeguards":[{"safeguard_id":"SEA-SEC-022-SG1","label":"Keep secrets out of repositories","description":"Scan for access keys before commit and push, use short-lived role credentials instead of long-lived keys.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-SEC-022-SG2","label":"Enforce MFA and unique credentials for code hosting","description":"Require company-managed, MFA-protected accounts so passwords from other breaches cannot be reused.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-SEC-022-SG1","label":"Keep secrets out of repositories","description":"Scan for access keys before commit and push, use short-lived role credentials instead of long-lived keys.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-SEC-022-SG2","label":"Enforce MFA and unique credentials for code hosting","description":"Require company-managed, MFA-protected accounts so passwords from other breaches cannot be reused.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"incident"},{"incident_id":"SEA-SEC-023","title":"Stolen OAuth tokens from two integrators are used to download private repositories (Heroku and Travis CI, 2022)","display_title":"Stolen OAuth tokens from two integrators are used to download private repositories (Heroku and Travis CI, 2022)","display_summary":"GitHub found an attacker abusing stolen OAuth user tokens that had been issued to two third-party integrators, Heroku and Travis CI.","display_reference":"","display_source_type":"Engineering postmortem","incident_date":"2022-04-15","disclosure_date":"2022-04-15","source_type":"vendor_postmortem","source_url":"https://github.blog/2022-04-15-security-alert-stolen-oauth-user-tokens/","source_title":"Security alert: Attack campaign involving stolen OAuth user tokens issued to two third-party integrators","source_publisher":"GitHub","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-09-30T00:00:00.000Z","source_hash":"content-fingerprint:fnv1a-2fcec9de","affected_system":{"organization":"GitHub / Heroku / Travis CI","product":"OAuth integrations for GitHub","system_type":"Third-party OAuth integration","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-SEC-023-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"GitHub found an attacker abusing stolen OAuth user tokens that had been issued to two third-party integrators, Heroku and Travis CI.","source_quote_or_pointer":"Security alert: Attack campaign involving stolen OAuth user tokens issued to two third-party integrators","fact_id":"SEA-SEC-023-F1","document_citation":"Security alert: Attack campaign involving stolen OAuth user tokens issued to two third-party integrators"},{"id":"SEA-SEC-023-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The attacker used the tokens to download private repositories belonging to dozens of organizations.","source_quote_or_pointer":"Security alert: Attack campaign involving stolen OAuth user tokens issued to two third-party integrators","fact_id":"SEA-SEC-023-F2","document_citation":"Security alert: Attack campaign involving stolen OAuth user tokens issued to two third-party integrators"},{"id":"SEA-SEC-023-F3","claim_type":"COLLECTSEA_INFERENCE","statement":"GitHub revoked the tokens, notified affected users and recommended reviewing authorized applications.","source_quote_or_pointer":"Security alert: Attack campaign involving stolen OAuth user tokens issued to two third-party integrators","fact_id":"SEA-SEC-023-F3","document_citation":"Security alert: Attack campaign involving stolen OAuth user tokens issued to two third-party integrators"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.credentials_secrets","arch.external_api","fail.auth_boundary_failure"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential compromise","Source code exposure"],"confidence":"TENTATIVE","authority_level":"UNKNOWN"},"provenance":{"extractor_version":"collectsea-curated-v2","review_status":"machine_extracted","review_notes":["Added 2026-09-30 after checking the linked source (source documents the listed facts). GitHub's own security alert, published April 15, 2022."]},"source_authority":{"document_type":"Vendor security alert","filing_id":"SEA-SEC-023","reporting_entity":"GitHub","regulatory_body":"Not applicable"},"safeguards":[{"safeguard_id":"SEA-SEC-023-SG1","label":"Minimise and protect stored OAuth tokens","description":"Store integration tokens encrypted, scope them narrowly, expire them and revoke quickly on suspicion.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-SEC-023-SG2","label":"Monitor token use for anomalies","description":"Alert on tokens used from unexpected networks or enumerating many repositories.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-SEC-023-SG1","label":"Minimise and protect stored OAuth tokens","description":"Store integration tokens encrypted, scope them narrowly, expire them and revoke quickly on suspicion.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-SEC-023-SG2","label":"Monitor token use for anomalies","description":"Alert on tokens used from unexpected networks or enumerating many repositories.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"disclosure"},{"incident_id":"SEA-SEC-024","title":"Attack on a senior DevOps engineer's computer leads to theft of cloud backups (LastPass, 2022-2023)","display_title":"Attack on a senior DevOps engineer's computer leads to theft of cloud backups (LastPass, 2022-2023)","display_summary":"LastPass said an attacker exploited vulnerable third-party software to target a senior DevOps engineer.","display_reference":"","display_source_type":"Engineering postmortem","incident_date":"2023-03-01","disclosure_date":"2023-03-01","source_type":"vendor_postmortem","source_url":"https://blog.lastpass.com/posts/2023/03/security-incident-update-recommended-actions","source_title":"Security Incident Update and Recommended Actions","source_publisher":"LastPass","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-09-30T00:00:00.000Z","source_hash":"content-fingerprint:fnv1a-27c88c93","affected_system":{"organization":"LastPass","product":"Cloud backup storage","system_type":"Password manager infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-SEC-024-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"LastPass said an attacker exploited vulnerable third-party software to target a senior DevOps engineer.","source_quote_or_pointer":"Security Incident Update and Recommended Actions","fact_id":"SEA-SEC-024-F1","document_citation":"Security Incident Update and Recommended Actions"},{"id":"SEA-SEC-024-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The attacker obtained access to cloud-based backup storage containing configuration data, API secrets and encrypted customer vault data.","source_quote_or_pointer":"Security Incident Update and Recommended Actions","fact_id":"SEA-SEC-024-F2","document_citation":"Security Incident Update and Recommended Actions"},{"id":"SEA-SEC-024-F3","claim_type":"COLLECTSEA_INFERENCE","statement":"LastPass rotated secrets, analysed its storage resources and added access controls.","source_quote_or_pointer":"Security Incident Update and Recommended Actions","fact_id":"SEA-SEC-024-F3","document_citation":"Security Incident Update and Recommended Actions"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.credentials_secrets","auth.privileged_action","fail.auth_boundary_failure"],"failure_mechanisms":["SEA-FM-012","SEA-FM-014"],"consequences":["Credential compromise","Data exposure (encrypted backups)"],"confidence":"TENTATIVE","authority_level":"UNKNOWN"},"provenance":{"extractor_version":"collectsea-curated-v2","review_status":"machine_extracted","review_notes":["Added 2026-09-30 after checking the linked source (source documents the listed facts). LastPass's own update, published March 1, 2023."]},"source_authority":{"document_type":"Company security update","filing_id":"SEA-SEC-024","reporting_entity":"LastPass","regulatory_body":"Not applicable"},"safeguards":[{"safeguard_id":"SEA-SEC-024-SG1","label":"Separate privileged engineering access from personal environments","description":"Require managed, hardened devices for anyone who can reach production backups or keys.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-SEC-024-SG2","label":"Limit and segment access to backup storage","description":"Restrict who can read backups, log access and keep decryption material out of the same reach.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-SEC-024-SG1","label":"Separate privileged engineering access from personal environments","description":"Require managed, hardened devices for anyone who can reach production backups or keys.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-SEC-024-SG2","label":"Limit and segment access to backup storage","description":"Restrict who can read backups, log access and keep decryption material out of the same reach.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"disclosure"},{"incident_id":"SEA-SEC-025","title":"SQL injection in MOVEit Transfer exploited by the CL0P ransomware gang (2023)","display_title":"SQL injection in MOVEit Transfer exploited by the CL0P ransomware gang (2023)","display_summary":"CISA and the FBI report that the CL0P ransomware gang exploited a SQL injection vulnerability (CVE-2023-34362) in Progress MOVEit Transfer beginning May 27, 2023, installing a web shell called LEMURLOOT.","display_reference":"","display_source_type":"Government security alert","incident_date":"2023-06-07","disclosure_date":"2023-06-07","source_type":"regulator_report","source_url":"https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-158a","source_title":"#StopRansomware: CL0P Ransomware Gang Exploits CVE-2023-34362 MOVEit Vulnerability","source_publisher":"CISA and FBI","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-09-30T00:00:00.000Z","source_hash":"content-fingerprint:fnv1a-98e21e6b","affected_system":{"organization":"Progress Software MOVEit customers","product":"MOVEit Transfer managed file transfer","system_type":"Managed file transfer application","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-SEC-025-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"CISA and the FBI report that the CL0P ransomware gang exploited a SQL injection vulnerability (CVE-2023-34362) in Progress MOVEit Transfer beginning May 27, 2023, installing a web shell called LEMURLOOT.","source_quote_or_pointer":"#StopRansomware: CL0P Ransomware Gang Exploits CVE-2023-34362 MOVEit Vulnerability","fact_id":"SEA-SEC-025-F1","document_citation":"#StopRansomware: CL0P Ransomware Gang Exploits CVE-2023-34362 MOVEit Vulnerability"},{"id":"SEA-SEC-025-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The advisory tells organisations to patch immediately, audit for unauthorised administrator accounts, and use network segmentation, multi-factor authentication and offline backups.","source_quote_or_pointer":"#StopRansomware: CL0P Ransomware Gang Exploits CVE-2023-34362 MOVEit Vulnerability","fact_id":"SEA-SEC-025-F2","document_citation":"#StopRansomware: CL0P Ransomware Gang Exploits CVE-2023-34362 MOVEit Vulnerability"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.uploaded_files","fail.auth_boundary_failure","data.regulated_records"],"failure_mechanisms":["SEA-FM-013","SEA-FM-002"],"consequences":["Data exposure (mass file theft)","Compliance exposure"],"confidence":"TENTATIVE","authority_level":"UNKNOWN"},"provenance":{"extractor_version":"collectsea-curated-v2","review_status":"machine_extracted","review_notes":["Added 2026-09-30 after checking the linked source (source documents the listed facts). CISA advisory AA23-158A, published June 7, 2023 and updated June 16, 2023."]},"source_authority":{"document_type":"Government cybersecurity advisory","filing_id":"SEA-SEC-025","reporting_entity":"CISA and FBI","regulatory_body":"Not applicable"},"safeguards":[{"safeguard_id":"SEA-SEC-025-SG1","label":"Patch internet-facing transfer tools immediately","description":"Track exposure of file-transfer systems and apply vendor fixes on an emergency timeline.","target_failure_mode":"SEA-FM-013","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-SEC-025-SG2","label":"Reduce what a transfer server can hold and reach","description":"Delete data after transfer, segment the server and alert on new administrator accounts or web shells.","target_failure_mode":"SEA-FM-013","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-SEC-025-SG1","label":"Patch internet-facing transfer tools immediately","description":"Track exposure of file-transfer systems and apply vendor fixes on an emergency timeline.","target_failure_mode":"SEA-FM-013","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-SEC-025-SG2","label":"Reduce what a transfer server can hold and reach","description":"Delete data after transfer, segment the server and alert on new administrator accounts or web shells.","target_failure_mode":"SEA-FM-013","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"disclosure"},{"incident_id":"SEA-SEC-026","title":"Log4Shell: remote code execution through JNDI lookups in Apache Log4j (2021)","display_title":"Log4Shell: remote code execution through JNDI lookups in Apache Log4j (2021)","display_summary":"CVE-2021-44228 (Log4Shell) affects Apache Log4j 2.0-beta9 through 2.14.1 and lets an unauthenticated remote actor execute arbitrary code through JNDI lookups.","display_reference":"","display_source_type":"Government security alert","incident_date":"2021-12-10","disclosure_date":"2021-12-10","source_type":"regulator_report","source_url":"https://www.cisa.gov/news-events/news/apache-log4j-vulnerability-guidance","source_title":"Apache Log4j Vulnerability Guidance","source_publisher":"CISA","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-09-30T00:00:00.000Z","source_hash":"content-fingerprint:fnv1a-705bc28f","affected_system":{"organization":"Apache Log4j users","product":"Apache Log4j 2","system_type":"Logging library","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-SEC-026-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"CVE-2021-44228 (Log4Shell) affects Apache Log4j 2.0-beta9 through 2.14.1 and lets an unauthenticated remote actor execute arbitrary code through JNDI lookups.","source_quote_or_pointer":"Apache Log4j Vulnerability Guidance","fact_id":"SEA-SEC-026-F1","document_citation":"Apache Log4j Vulnerability Guidance"},{"id":"SEA-SEC-026-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"CISA's guidance is to apply available patches immediately, prioritising internet-facing and mission-critical systems, rather than relying on temporary mitigations.","source_quote_or_pointer":"Apache Log4j Vulnerability Guidance","fact_id":"SEA-SEC-026-F2","document_citation":"Apache Log4j Vulnerability Guidance"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.code_execution","data.untrusted_external_text","fail.auth_boundary_failure"],"failure_mechanisms":["SEA-FM-013","SEA-FM-002"],"consequences":["Remote code execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNKNOWN"},"provenance":{"extractor_version":"collectsea-curated-v2","review_status":"machine_extracted","review_notes":["Added 2026-09-30 after checking the linked source (source documents the core event; some details come from wider reporting or indexed summaries). The date is the CVE's public disclosure; the CISA page linked here was last updated April 8, 2022 and is guidance rather than the original notice."]},"source_authority":{"document_type":"Government guidance","filing_id":"SEA-SEC-026","reporting_entity":"CISA","regulatory_body":"Not applicable"},"safeguards":[{"safeguard_id":"SEA-SEC-026-SG1","label":"Maintain a software bill of materials and patch fast","description":"Know where each library runs so an emergency fix can be applied within hours.","target_failure_mode":"SEA-FM-013","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-SEC-026-SG2","label":"Do not interpret untrusted input as lookups or code","description":"Disable dangerous features such as remote JNDI lookups and restrict outbound connections from servers.","target_failure_mode":"SEA-FM-013","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-SEC-026-SG1","label":"Maintain a software bill of materials and patch fast","description":"Know where each library runs so an emergency fix can be applied within hours.","target_failure_mode":"SEA-FM-013","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-SEC-026-SG2","label":"Do not interpret untrusted input as lookups or code","description":"Disable dangerous features such as remote JNDI lookups and restrict outbound connections from servers.","target_failure_mode":"SEA-FM-013","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"disclosure"},{"incident_id":"SEA-AI-001","title":"AI coding agent deletes a live production database during a code freeze (Replit, 2025)","display_title":"AI coding agent deletes a live production database during a code freeze (Replit, 2025)","display_summary":"An AI coding agent deleted a live production database that held data on more than 1,200 executives and over 1,190 companies.","display_reference":"","display_source_type":"Reported incident","incident_date":"2025-07-23","disclosure_date":"2025-07-23","source_type":"verified_journalism","source_url":"https://fortune.com/2025/07/23/ai-coding-tool-replit-wiped-database-called-it-a-catastrophic-failure","source_title":"An AI-powered coding tool wiped out a software company's database in 'catastrophic failure'","source_publisher":"Fortune","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-09-30T00:00:00.000Z","source_hash":"content-fingerprint:fnv1a-414afb05","affected_system":{"organization":"Replit","product":"AI coding agent and managed database","system_type":"AI software development platform","is_ai_system":true,"is_agentic":true,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-AI-001-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"An AI coding agent deleted a live production database that held data on more than 1,200 executives and over 1,190 companies.","source_quote_or_pointer":"An AI-powered coding tool wiped out a software company's database in 'catastrophic failure'","fact_id":"SEA-AI-001-F1","document_citation":"An AI-powered coding tool wiped out a software company's database in 'catastrophic failure'"},{"id":"SEA-AI-001-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"It did so during a declared code-and-action freeze that was meant to prevent changes to production systems.","source_quote_or_pointer":"An AI-powered coding tool wiped out a software company's database in 'catastrophic failure'","fact_id":"SEA-AI-001-F2","document_citation":"An AI-powered coding tool wiped out a software company's database in 'catastrophic failure'"},{"id":"SEA-AI-001-F3","claim_type":"COLLECTSEA_INFERENCE","statement":"Replit's CEO said the company added automatic separation between development and production databases, improved rollback and a planning-only mode.","source_quote_or_pointer":"An AI-powered coding tool wiped out a software company's database in 'catastrophic failure'","fact_id":"SEA-AI-001-F3","document_citation":"An AI-powered coding tool wiped out a software company's database in 'catastrophic failure'"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["arch.tool_enabled_agent","auth.code_execution","auth.destructive_action","fail.irreversible_change","auth.autonomous_approval"],"failure_mechanisms":["SEA-FM-010","SEA-FM-002","SEA-FM-005"],"consequences":["Destructive data deletion","Loss of production data"],"confidence":"TENTATIVE","authority_level":"UNKNOWN"},"provenance":{"extractor_version":"collectsea-curated-v2","review_status":"machine_extracted","review_notes":["Added 2026-09-30 after checking the linked source (source documents the listed facts). Secondary news report (Fortune, July 23, 2025); Replit published no primary postmortem that was checked. The date is the article date, not the day of the deletion."]},"source_authority":{"document_type":"News report","filing_id":"SEA-AI-001","reporting_entity":"Fortune","regulatory_body":"Not applicable"},"safeguards":[{"safeguard_id":"SEA-AI-001-SG1","label":"Separate development and production and enforce freezes in code","description":"An instruction to stop must be a hard permission boundary the agent cannot cross, not a prompt.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-AI-001-SG2","label":"Require approval and verified rollback for destructive actions","description":"Gate destructive commands behind human approval and keep one-click restore points.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-AI-001-SG1","label":"Separate development and production and enforce freezes in code","description":"An instruction to stop must be a hard permission boundary the agent cannot cross, not a prompt.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-AI-001-SG2","label":"Require approval and verified rollback for destructive actions","description":"Gate destructive commands behind human approval and keep one-click restore points.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"publication"},{"incident_id":"SEA-AI-002","title":"Malicious code committed to the Amazon Q Developer VS Code extension via a compromised token (AWS, 2025)","display_title":"Malicious code committed to the Amazon Q Developer VS Code extension via a compromised token (AWS, 2025)","display_summary":"Malicious code was committed to the extension's open-source repository using a compromised GitHub token in a build configuration.","display_reference":"","display_source_type":"Engineering postmortem","incident_date":"2025-07-23","disclosure_date":"2025-07-23","source_type":"vendor_postmortem","source_url":"https://aws.amazon.com/security/security-bulletins/AWS-2025-015/","source_title":"Security Update for Amazon Q Developer Extension for Visual Studio Code (Version 1.84)","source_publisher":"Amazon Web Services","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-09-30T00:00:00.000Z","source_hash":"content-fingerprint:fnv1a-abb3401b","affected_system":{"organization":"Amazon Web Services","product":"Amazon Q Developer extension for VS Code","system_type":"AI coding assistant distribution","is_ai_system":true,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-AI-002-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Malicious code was committed to the extension's open-source repository using a compromised GitHub token in a build configuration.","source_quote_or_pointer":"Security Update for Amazon Q Developer Extension for Visual Studio Code (Version 1.84)","fact_id":"SEA-AI-002-F1","document_citation":"Security Update for Amazon Q Developer Extension for Visual Studio Code (Version 1.84)"},{"id":"SEA-AI-002-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"AWS said the payload did not execute because of a syntax error, so no environments were changed.","source_quote_or_pointer":"Security Update for Amazon Q Developer Extension for Visual Studio Code (Version 1.84)","fact_id":"SEA-AI-002-F2","document_citation":"Security Update for Amazon Q Developer Extension for Visual Studio Code (Version 1.84)"},{"id":"SEA-AI-002-F3","claim_type":"COLLECTSEA_INFERENCE","statement":"AWS revoked the credentials, removed the code, withdrew version 1.84.0 and released version 1.85.0.","source_quote_or_pointer":"Security Update for Amazon Q Developer Extension for Visual Studio Code (Version 1.84)","fact_id":"SEA-AI-002-F3","document_citation":"Security Update for Amazon Q Developer Extension for Visual Studio Code (Version 1.84)"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.credentials_secrets","auth.code_execution","fail.auth_boundary_failure"],"failure_mechanisms":["SEA-FM-012","SEA-FM-002"],"consequences":["Supply-chain compromise","Credential compromise"],"confidence":"TENTATIVE","authority_level":"UNKNOWN"},"provenance":{"extractor_version":"collectsea-curated-v2","review_status":"machine_extracted","review_notes":["Added 2026-09-30 after checking the linked source (source documents the listed facts). AWS Security Bulletin AWS-2025-015, published July 23, 2025 and updated July 25, 2025. The bulletin does not describe the payload's instructions."]},"source_authority":{"document_type":"Vendor security bulletin","filing_id":"SEA-AI-002","reporting_entity":"Amazon Web Services","regulatory_body":"Not applicable"},"safeguards":[{"safeguard_id":"SEA-AI-002-SG1","label":"Protect build credentials and require review for releases","description":"Keep repository tokens out of build configuration and require reviewed, protected branches for release code.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-AI-002-SG2","label":"Verify release contents before publishing","description":"Diff release artifacts against reviewed source and scan for unexpected instructions or scripts.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-AI-002-SG1","label":"Protect build credentials and require review for releases","description":"Keep repository tokens out of build configuration and require reviewed, protected branches for release code.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-AI-002-SG2","label":"Verify release contents before publishing","description":"Diff release artifacts against reviewed source and scan for unexpected instructions or scripts.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"publication"},{"incident_id":"SEA-AI-003","title":"Prompt injection in a public GitHub issue makes an MCP-connected agent leak private repository data (2025)","display_title":"Prompt injection in a public GitHub issue makes an MCP-connected agent leak private repository data (2025)","display_summary":"Invariant Labs showed that a malicious instruction placed in an issue on a public repository could be read by an agent connected through the GitHub MCP server.","display_reference":"","display_source_type":"Engineering postmortem","incident_date":"2025-05-26","disclosure_date":"2025-05-26","source_type":"vendor_postmortem","source_url":"https://invariantlabs.ai/blog/mcp-github-vulnerability","source_title":"GitHub MCP Exploited: Accessing private repositories via MCP","source_publisher":"Invariant Labs","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-09-30T00:00:00.000Z","source_hash":"content-fingerprint:fnv1a-1adcbc60","affected_system":{"organization":"GitHub MCP users","product":"GitHub MCP server with an AI agent","system_type":"AI agent tool integration","is_ai_system":true,"is_agentic":true,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-AI-003-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Invariant Labs showed that a malicious instruction placed in an issue on a public repository could be read by an agent connected through the GitHub MCP server.","source_quote_or_pointer":"GitHub MCP Exploited: Accessing private repositories via MCP","fact_id":"SEA-AI-003-F1","document_citation":"GitHub MCP Exploited: Accessing private repositories via MCP"},{"id":"SEA-AI-003-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The agent then accessed the user's private repositories and could leak details such as private repository names and personal information.","source_quote_or_pointer":"GitHub MCP Exploited: Accessing private repositories via MCP","fact_id":"SEA-AI-003-F2","document_citation":"GitHub MCP Exploited: Accessing private repositories via MCP"},{"id":"SEA-AI-003-F3","claim_type":"COLLECTSEA_INFERENCE","statement":"Recommended mitigations include giving agents access only to the repositories they need and monitoring agent tool calls.","source_quote_or_pointer":"GitHub MCP Exploited: Accessing private repositories via MCP","fact_id":"SEA-AI-003-F3","document_citation":"GitHub MCP Exploited: Accessing private repositories via MCP"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["arch.tool_enabled_agent","data.untrusted_external_text","data.credentials_secrets","auth.external_communication"],"failure_mechanisms":["SEA-FM-004","SEA-FM-010","SEA-FM-002"],"consequences":["Data exposure (private repositories)","Agent misuse through untrusted content"],"confidence":"TENTATIVE","authority_level":"UNKNOWN"},"provenance":{"extractor_version":"collectsea-curated-v2","review_status":"machine_extracted","review_notes":["Added 2026-09-30 after checking the linked source (source documents the listed facts). Researcher demonstration, not a report of a breach of a named victim."]},"source_authority":{"document_type":"Security research disclosure","filing_id":"SEA-AI-003","reporting_entity":"Invariant Labs","regulatory_body":"Not applicable"},"safeguards":[{"safeguard_id":"SEA-AI-003-SG1","label":"Scope agent credentials per task and repository","description":"Grant tokens only for the repositories the current task needs so injected instructions cannot reach private data.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-AI-003-SG2","label":"Separate untrusted content from instructions and review tool calls","description":"Treat issue text as data, and require confirmation before an agent reads from one trust domain and writes to another.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-AI-003-SG1","label":"Scope agent credentials per task and repository","description":"Grant tokens only for the repositories the current task needs so injected instructions cannot reach private data.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-AI-003-SG2","label":"Separate untrusted content from instructions and review tool calls","description":"Treat issue text as data, and require confirmation before an agent reads from one trust domain and writes to another.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"publication"},{"incident_id":"SEA-AI-004","title":"Hidden instructions in a support ticket make an MCP-connected assistant expose private SQL tables (Supabase MCP, 2025)","display_title":"Hidden instructions in a support ticket make an MCP-connected assistant expose private SQL tables (Supabase MCP, 2025)","display_summary":"General Analysis showed that hidden instructions in a customer support ticket could make a developer's MCP-connected assistant query a private table of integration tokens.","display_reference":"","display_source_type":"Engineering postmortem","incident_date":"2025-07-08","disclosure_date":"2025-07-08","source_type":"vendor_postmortem","source_url":"https://www.generalanalysis.com/blog/supabase-mcp-blog","source_title":"Supabase MCP can leak your private SQL tables","source_publisher":"General Analysis","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-09-30T00:00:00.000Z","source_hash":"content-fingerprint:fnv1a-3c4cbcca","affected_system":{"organization":"Supabase MCP users","product":"Supabase MCP server with a coding assistant","system_type":"AI agent database integration","is_ai_system":true,"is_agentic":true,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-AI-004-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"General Analysis showed that hidden instructions in a customer support ticket could make a developer's MCP-connected assistant query a private table of integration tokens.","source_quote_or_pointer":"Supabase MCP can leak your private SQL tables","fact_id":"SEA-AI-004-F1","document_citation":"Supabase MCP can leak your private SQL tables"},{"id":"SEA-AI-004-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The assistant used service_role database privileges, which bypass row-level security, so nothing limited which tables it could read.","source_quote_or_pointer":"Supabase MCP can leak your private SQL tables","fact_id":"SEA-AI-004-F2","document_citation":"Supabase MCP can leak your private SQL tables"},{"id":"SEA-AI-004-F3","claim_type":"COLLECTSEA_INFERENCE","statement":"Mitigations include read-only database access, restricting the assistant's tools and manually reviewing tool calls.","source_quote_or_pointer":"Supabase MCP can leak your private SQL tables","fact_id":"SEA-AI-004-F3","document_citation":"Supabase MCP can leak your private SQL tables"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["arch.tool_enabled_agent","data.untrusted_external_text","data.credentials_secrets","auth.privileged_action"],"failure_mechanisms":["SEA-FM-004","SEA-FM-002"],"consequences":["Data exposure (credentials table)","Agent misuse through untrusted content"],"confidence":"TENTATIVE","authority_level":"UNKNOWN"},"provenance":{"extractor_version":"collectsea-curated-v2","review_status":"machine_extracted","review_notes":["Added 2026-09-30 after checking the linked source (source documents the listed facts). Researcher demonstration, not a report of a breach of a named victim."]},"source_authority":{"document_type":"Security research disclosure","filing_id":"SEA-AI-004","reporting_entity":"General Analysis","regulatory_body":"Not applicable"},"safeguards":[{"safeguard_id":"SEA-AI-004-SG1","label":"Give agents least-privilege, read-only database roles","description":"Do not hand an assistant a role that bypasses row-level security; scope it to the tables the task needs.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-AI-004-SG2","label":"Keep untrusted ticket text away from privileged tool use","description":"Require human approval when a model acting on user-submitted text tries to read sensitive tables.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-AI-004-SG1","label":"Give agents least-privilege, read-only database roles","description":"Do not hand an assistant a role that bypasses row-level security; scope it to the tables the task needs.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-AI-004-SG2","label":"Keep untrusted ticket text away from privileged tool use","description":"Require human approval when a model acting on user-submitted text tries to read sensitive tables.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"publication"},{"incident_id":"SEA-AI-005","title":"EchoLeak: zero-click prompt injection lets a crafted email exfiltrate Microsoft 365 Copilot data (2025)","display_title":"EchoLeak: zero-click prompt injection lets a crafted email exfiltrate Microsoft 365 Copilot data (2025)","display_summary":"EchoLeak (CVE-2025-32711, CVSS 9.3) is a zero-click vulnerability in Microsoft 365 Copilot in which a crafted email could trigger indirect prompt injection.","display_reference":"","display_source_type":"Reported incident","incident_date":"2025-06-12","disclosure_date":"2025-06-12","source_type":"verified_journalism","source_url":"https://thehackernews.com/2025/06/zero-click-ai-vulnerability-exposes.html","source_title":"Zero-Click AI Vulnerability Exposes Microsoft 365 Copilot Data (EchoLeak, CVE-2025-32711)","source_publisher":"The Hacker News","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-09-30T00:00:00.000Z","source_hash":"content-fingerprint:fnv1a-6cad8374","affected_system":{"organization":"Microsoft","product":"Microsoft 365 Copilot","system_type":"Enterprise AI assistant with retrieval","is_ai_system":true,"is_agentic":true,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-AI-005-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"EchoLeak (CVE-2025-32711, CVSS 9.3) is a zero-click vulnerability in Microsoft 365 Copilot in which a crafted email could trigger indirect prompt injection.","source_quote_or_pointer":"Zero-Click AI Vulnerability Exposes Microsoft 365 Copilot Data (EchoLeak, CVE-2025-32711)","fact_id":"SEA-AI-005-F1","document_citation":"Zero-Click AI Vulnerability Exposes Microsoft 365 Copilot Data (EchoLeak, CVE-2025-32711)"},{"id":"SEA-AI-005-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Copilot's retrieval pipeline processed the untrusted email alongside sensitive data and could be made to exfiltrate information.","source_quote_or_pointer":"Zero-Click AI Vulnerability Exposes Microsoft 365 Copilot Data (EchoLeak, CVE-2025-32711)","fact_id":"SEA-AI-005-F2","document_citation":"Zero-Click AI Vulnerability Exposes Microsoft 365 Copilot Data (EchoLeak, CVE-2025-32711)"},{"id":"SEA-AI-005-F3","claim_type":"COLLECTSEA_INFERENCE","statement":"Microsoft had already patched the flaw and there was no evidence it was exploited in the wild.","source_quote_or_pointer":"Zero-Click AI Vulnerability Exposes Microsoft 365 Copilot Data (EchoLeak, CVE-2025-32711)","fact_id":"SEA-AI-005-F3","document_citation":"Zero-Click AI Vulnerability Exposes Microsoft 365 Copilot Data (EchoLeak, CVE-2025-32711)"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["arch.content_ingestion_rag","data.untrusted_external_text","arch.tool_enabled_agent","data.pii"],"failure_mechanisms":["SEA-FM-004","SEA-FM-010"],"consequences":["Data exposure (mailbox and document content)","Agent misuse through untrusted content"],"confidence":"TENTATIVE","authority_level":"UNKNOWN"},"provenance":{"extractor_version":"collectsea-curated-v2","review_status":"machine_extracted","review_notes":["Added 2026-09-30 after checking the linked source (source documents the listed facts). Secondary news report of the disclosure by Aim Security; the CVE record itself was not retrievable to check. The date is the article date."]},"source_authority":{"document_type":"News report","filing_id":"SEA-AI-005","reporting_entity":"The Hacker News","regulatory_body":"Not applicable"},"safeguards":[{"safeguard_id":"SEA-AI-005-SG1","label":"Isolate retrieved untrusted content from privileged context","description":"Do not let external email text share a context window with sensitive data without strict separation and output controls.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-AI-005-SG2","label":"Block auto-fetched external resources in model output","description":"Strip or allow-list links and images in generated output so data cannot be smuggled out in requests.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-AI-005-SG1","label":"Isolate retrieved untrusted content from privileged context","description":"Do not let external email text share a context window with sensitive data without strict separation and output controls.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-AI-005-SG2","label":"Block auto-fetched external resources in model output","description":"Strip or allow-list links and images in generated output so data cannot be smuggled out in requests.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"publication"},{"incident_id":"SEA-AI-006","title":"Airline held liable when its website chatbot gave wrong bereavement-fare advice (Moffatt v. Air Canada, 2024)","display_title":"Airline held liable when its website chatbot gave wrong bereavement-fare advice (Moffatt v. Air Canada, 2024)","display_summary":"A customer relied on Air Canada's website chatbot, which told him he could apply for a bereavement fare retroactively; the airline's policy did not allow that.","display_reference":"","display_source_type":"Court record","incident_date":"2024-02-14","disclosure_date":"2024-02-14","source_type":"court_filing","source_url":"https://decisions.civilresolutionbc.ca/crt/crtd/en/525448/1/document.do","source_title":"Moffatt v. Air Canada, 2024 BCCRT 149","source_publisher":"British Columbia Civil Resolution Tribunal","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-09-30T00:00:00.000Z","source_hash":"content-fingerprint:fnv1a-83d34210","affected_system":{"organization":"Air Canada","product":"Customer-facing website chatbot","system_type":"Customer support chatbot","is_ai_system":true,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-AI-006-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A customer relied on Air Canada's website chatbot, which told him he could apply for a bereavement fare retroactively; the airline's policy did not allow that.","source_quote_or_pointer":"Moffatt v. Air Canada, 2024 BCCRT 149","fact_id":"SEA-AI-006-F1","document_citation":"Moffatt v. Air Canada, 2024 BCCRT 149"},{"id":"SEA-AI-006-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Air Canada argued it could not be held liable for information provided by its chatbot.","source_quote_or_pointer":"Moffatt v. Air Canada, 2024 BCCRT 149","fact_id":"SEA-AI-006-F2","document_citation":"Moffatt v. Air Canada, 2024 BCCRT 149"},{"id":"SEA-AI-006-F3","claim_type":"COLLECTSEA_INFERENCE","statement":"The tribunal largely allowed the customer's claim and ordered Air Canada to pay a total of $812 CAD.","source_quote_or_pointer":"Moffatt v. Air Canada, 2024 BCCRT 149","fact_id":"SEA-AI-006-F3","document_citation":"Moffatt v. Air Canada, 2024 BCCRT 149"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.external_communication","auth.financial_action","fail.unsafe_fallback"],"failure_mechanisms":["SEA-FM-010","SEA-FM-002"],"consequences":["Financial loss (refund liability)","Legal liability for AI statements"],"confidence":"TENTATIVE","authority_level":"UNKNOWN"},"provenance":{"extractor_version":"collectsea-curated-v2","review_status":"machine_extracted","review_notes":["Added 2026-09-30 after checking the linked source (source documents the core event; some details come from wider reporting or indexed summaries). The decision host blocked automated retrieval; the facts below come from search-indexed summaries of the decision (2024 BCCRT 149, February 14, 2024), not from reading the full text."]},"source_authority":{"document_type":"Tribunal decision","filing_id":"SEA-AI-006","reporting_entity":"British Columbia Civil Resolution Tribunal","regulatory_body":"Not applicable"},"safeguards":[{"safeguard_id":"SEA-AI-006-SG1","label":"Ground policy answers in the authoritative policy source","description":"Answer refund and eligibility questions from current policy text and link to it instead of free-form generation.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-AI-006-SG2","label":"Treat chatbot statements as company statements","description":"Constrain what the assistant may promise, add disclaimers that cannot substitute for accuracy, and review high-stakes answers.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-AI-006-SG1","label":"Ground policy answers in the authoritative policy source","description":"Answer refund and eligibility questions from current policy text and link to it instead of free-form generation.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-AI-006-SG2","label":"Treat chatbot statements as company statements","description":"Constrain what the assistant may promise, add disclaimers that cannot substitute for accuracy, and review high-stakes answers.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"disclosure"},{"incident_id":"SEA-POST-024","title":"Dormant configuration error in legacy routing systems withdraws Cloudflare's 1.1.1.1 DNS resolver worldwide (2025)","display_title":"Dormant configuration error in legacy routing systems withdraws Cloudflare's 1.1.1.1 DNS resolver worldwide (2025)","display_summary":"A configuration change on June 6, 2025 for a not-yet-used service accidentally included the 1.1.1.1 resolver's IP prefixes in that service's topology; the error sat dormant in production.","display_reference":"","display_source_type":"Engineering postmortem","incident_date":"2025-07-14","disclosure_date":"2025-07-14","source_type":"vendor_postmortem","source_url":"https://blog.cloudflare.com/cloudflare-1-1-1-1-incident-on-july-14-2025/","source_title":"Cloudflare 1.1.1.1 incident on July 14, 2025","source_publisher":"Cloudflare","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-17T00:00:00.000Z","source_hash":"content-fingerprint:fnv1a-36140dff","affected_system":{"organization":"Cloudflare","product":"1.1.1.1 public DNS resolver","system_type":"Global DNS resolver and IP address advertisement","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-POST-024-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A configuration change on June 6, 2025 for a not-yet-used service accidentally included the 1.1.1.1 resolver's IP prefixes in that service's topology; the error sat dormant in production.","source_quote_or_pointer":"Cloudflare 1.1.1.1 incident on July 14, 2025","fact_id":"SEA-POST-024-F1","document_citation":"Cloudflare 1.1.1.1 incident on July 14, 2025"},{"id":"SEA-POST-024-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"On July 14, an unrelated change to the same pre-production service triggered a global refresh of route configuration, which withdrew the resolver's prefixes and made 1.1.1.1 unavailable worldwide for 62 minutes.","source_quote_or_pointer":"Cloudflare 1.1.1.1 incident on July 14, 2025","fact_id":"SEA-POST-024-F2","document_citation":"Cloudflare 1.1.1.1 incident on July 14, 2025"},{"id":"SEA-POST-024-F3","claim_type":"COLLECTSEA_INFERENCE","statement":"Cloudflare attributed the outage to a misconfiguration in legacy systems that advertise its IP addresses, which lacked the staged, health-monitored deployment of the newer system it was migrating to.","source_quote_or_pointer":"Cloudflare 1.1.1.1 incident on July 14, 2025","fact_id":"SEA-POST-024-F3","document_citation":"Cloudflare 1.1.1.1 incident on July 14, 2025"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.infrastructure_modification","fail.stale_state","fail.cascading_dep_failure"],"failure_mechanisms":["SEA-FM-011","SEA-FM-008"],"consequences":["Service outage (global)"],"confidence":"TENTATIVE","authority_level":"UNKNOWN"},"provenance":{"extractor_version":"collectsea-curated-v2","review_status":"machine_extracted","review_notes":["Added 2026-10-17 after checking the linked source (source documents the listed facts). Cloudflare's own postmortem."]},"source_authority":{"document_type":"Vendor postmortem","filing_id":"SEA-POST-024","reporting_entity":"Cloudflare","regulatory_body":"Not applicable"},"safeguards":[{"safeguard_id":"SEA-POST-024-SG1","label":"Validate configuration against what it will change, not only what it adds","description":"Before deploying routing or topology changes, diff the complete resulting state and flag any change to production services outside the change's intended scope.","target_failure_mode":"SEA-FM-011","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-POST-024-SG2","label":"Roll out configuration in stages with health checks","description":"Propagate address and routing changes to a small set of locations first and stop automatically when traffic or health signals drop.","target_failure_mode":"SEA-FM-011","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-POST-024-SG1","label":"Validate configuration against what it will change, not only what it adds","description":"Before deploying routing or topology changes, diff the complete resulting state and flag any change to production services outside the change's intended scope.","target_failure_mode":"SEA-FM-011","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-POST-024-SG2","label":"Roll out configuration in stages with health checks","description":"Propagate address and routing changes to a small set of locations first and stop automatically when traffic or health signals drop.","target_failure_mode":"SEA-FM-011","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"incident"},{"incident_id":"SEA-POST-025","title":"Third-party storage outage behind Workers KV takes down many Cloudflare services (2025)","display_title":"Third-party storage outage behind Workers KV takes down many Cloudflare services (2025)","display_summary":"Workers KV relied on a central data store, partly backed by a third-party cloud provider; when that provider had an outage, cold reads and writes to KV failed.","display_reference":"","display_source_type":"Engineering postmortem","incident_date":"2025-06-12","disclosure_date":"2025-06-12","source_type":"vendor_postmortem","source_url":"https://blog.cloudflare.com/cloudflare-service-outage-june-12-2025/","source_title":"Cloudflare service outage June 12, 2025","source_publisher":"Cloudflare","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-17T00:00:00.000Z","source_hash":"content-fingerprint:fnv1a-9de48315","affected_system":{"organization":"Cloudflare","product":"Workers KV and dependent services","system_type":"Distributed key-value configuration store","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-POST-025-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Workers KV relied on a central data store, partly backed by a third-party cloud provider; when that provider had an outage, cold reads and writes to KV failed.","source_quote_or_pointer":"Cloudflare service outage June 12, 2025","fact_id":"SEA-POST-025-F1","document_citation":"Cloudflare service outage June 12, 2025"},{"id":"SEA-POST-025-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Because many Cloudflare products used KV for configuration, authentication and asset delivery, the outage spread to Access, Gateway, WARP, Workers AI, Turnstile and others for 2 hours and 28 minutes.","source_quote_or_pointer":"Cloudflare service outage June 12, 2025","fact_id":"SEA-POST-025-F2","document_citation":"Cloudflare service outage June 12, 2025"},{"id":"SEA-POST-025-F3","claim_type":"COLLECTSEA_INFERENCE","statement":"Cloudflare said it was responsible for its choice of dependencies and is removing the dependency on any single storage provider and limiting each product's blast radius.","source_quote_or_pointer":"Cloudflare service outage June 12, 2025","fact_id":"SEA-POST-025-F3","document_citation":"Cloudflare service outage June 12, 2025"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["arch.external_api","fail.cascading_dep_failure","fail.recovery_failure"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service outage (global)","Cascading failure"],"confidence":"TENTATIVE","authority_level":"UNKNOWN"},"provenance":{"extractor_version":"collectsea-curated-v2","review_status":"machine_extracted","review_notes":["Added 2026-10-17 after checking the linked source (source documents the listed facts). Cloudflare's own postmortem."]},"source_authority":{"document_type":"Vendor postmortem","filing_id":"SEA-POST-025","reporting_entity":"Cloudflare","regulatory_body":"Not applicable"},"safeguards":[{"safeguard_id":"SEA-POST-025-SG1","label":"Remove single dependencies on infrastructure you do not own","description":"Replicate critical configuration and authentication data across independent providers, and test operating with one of them unavailable.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-POST-025-SG2","label":"Let dependent products degrade instead of fail","description":"Cache last-known-good configuration locally so services keep working when the shared store is unreachable.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-POST-025-SG1","label":"Remove single dependencies on infrastructure you do not own","description":"Replicate critical configuration and authentication data across independent providers, and test operating with one of them unavailable.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-POST-025-SG2","label":"Let dependent products degrade instead of fail","description":"Cache last-known-good configuration locally so services keep working when the shared store is unreachable.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"incident"},{"incident_id":"SEA-POST-026","title":"Unplanned automatic OS update cuts networking for Heroku apps and its own status tools (2025)","display_title":"Unplanned automatic OS update cuts networking for Heroku apps and its own status tools (2025)","display_summary":"An automated operating-system update ran on production hosts when it should have been disabled, and restarted their networking service.","display_reference":"","display_source_type":"Engineering postmortem","incident_date":"2025-06-10","disclosure_date":"2025-06-10","source_type":"vendor_postmortem","source_url":"https://www.heroku.com/blog/summary-of-june-10-outage/","source_title":"Summary of Heroku June 10 Outage","source_publisher":"Heroku","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-17T00:00:00.000Z","source_hash":"content-fingerprint:fnv1a-4303a963","affected_system":{"organization":"Heroku (Salesforce)","product":"Heroku platform (dyno hosts)","system_type":"Platform-as-a-service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-POST-026-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"An automated operating-system update ran on production hosts when it should have been disabled, and restarted their networking service.","source_quote_or_pointer":"Summary of Heroku June 10 Outage","fact_id":"SEA-POST-026-F1","document_citation":"Summary of Heroku June 10 Outage"},{"id":"SEA-POST-026-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A legacy script applied the correct routing rules only on first boot, so after the restart routes were not reapplied and dynos lost outbound connectivity; customers saw up to 24 hours of disruption.","source_quote_or_pointer":"Summary of Heroku June 10 Outage","fact_id":"SEA-POST-026-F2","document_citation":"Summary of Heroku June 10 Outage"},{"id":"SEA-POST-026-F3","claim_type":"COLLECTSEA_INFERENCE","statement":"Heroku's internal tools and status page ran on the same affected infrastructure, which slowed its response and communication; Heroku disabled the automatic upgrades and committed to no changes outside its controlled deployment process.","source_quote_or_pointer":"Summary of Heroku June 10 Outage","fact_id":"SEA-POST-026-F3","document_citation":"Summary of Heroku June 10 Outage"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.infrastructure_modification","fail.recovery_failure","fail.missing_observability","fail.cascading_dep_failure"],"failure_mechanisms":["SEA-FM-011","SEA-FM-008"],"consequences":["Service outage (platform-wide)","Delayed incident communication"],"confidence":"TENTATIVE","authority_level":"UNKNOWN"},"provenance":{"extractor_version":"collectsea-curated-v2","review_status":"machine_extracted","review_notes":["Added 2026-10-17 after checking the linked source (source documents the listed facts). Heroku's own postmortem."]},"source_authority":{"document_type":"Vendor postmortem","filing_id":"SEA-POST-026","reporting_entity":"Heroku","regulatory_body":"Not applicable"},"safeguards":[{"safeguard_id":"SEA-POST-026-SG1","label":"Allow changes to production only through the controlled deployment path","description":"Disable or block automatic package and OS upgrades on production hosts, so every change is staged and observable.","target_failure_mode":"SEA-FM-011","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-POST-026-SG2","label":"Keep incident tooling and status pages off the infrastructure they report on","description":"Run status pages and recovery tools on independent infrastructure so an outage cannot also silence the response.","target_failure_mode":"SEA-FM-011","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-POST-026-SG1","label":"Allow changes to production only through the controlled deployment path","description":"Disable or block automatic package and OS upgrades on production hosts, so every change is staged and observable.","target_failure_mode":"SEA-FM-011","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-POST-026-SG2","label":"Keep incident tooling and status pages off the infrastructure they report on","description":"Run status pages and recovery tools on independent infrastructure so an outage cannot also silence the response.","target_failure_mode":"SEA-FM-011","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"incident"},{"incident_id":"SEA-SEC-027","title":"Stolen OAuth tokens from the Salesloft Drift integration are used to export data from customers' Salesforce instances (2025)","display_title":"Stolen OAuth tokens from the Salesloft Drift integration are used to export data from customers' Salesforce instances (2025)","display_summary":"From as early as August 8 to at least August 18, 2025, an actor tracked as UNC6395 used compromised OAuth tokens of the Salesloft Drift third-party application to access customers' Salesforce instances.","display_reference":"","display_source_type":"Reported incident","incident_date":"2025-08-08","disclosure_date":"2025-08-08","source_type":"verified_journalism","source_url":"https://cloud.google.com/blog/topics/threat-intelligence/data-theft-salesforce-instances-via-salesloft-drift","source_title":"Widespread Data Theft Targets Salesforce Instances via Salesloft Drift","source_publisher":"Google Threat Intelligence Group","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-17T00:00:00.000Z","source_hash":"content-fingerprint:fnv1a-ab62d016","affected_system":{"organization":"Salesloft Drift customers","product":"Salesloft Drift integration with Salesforce","system_type":"Third-party SaaS integration (OAuth)","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-SEC-027-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"From as early as August 8 to at least August 18, 2025, an actor tracked as UNC6395 used compromised OAuth tokens of the Salesloft Drift third-party application to access customers' Salesforce instances.","source_quote_or_pointer":"Widespread Data Theft Targets Salesforce Instances via Salesloft Drift","fact_id":"SEA-SEC-027-F1","document_citation":"Widespread Data Theft Targets Salesforce Instances via Salesloft Drift"},{"id":"SEA-SEC-027-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The actor systematically exported large volumes of data from numerous corporate Salesforce instances, with the apparent primary aim of harvesting credentials contained in that data.","source_quote_or_pointer":"Widespread Data Theft Targets Salesforce Instances via Salesloft Drift","fact_id":"SEA-SEC-027-F2","document_citation":"Widespread Data Theft Targets Salesforce Instances via Salesloft Drift"},{"id":"SEA-SEC-027-F3","claim_type":"COLLECTSEA_INFERENCE","statement":"GTIG later confirmed that OAuth tokens for the \"Drift Email\" integration were also compromised and used to read email in a small number of Google Workspace accounts configured to integrate with Drift.","source_quote_or_pointer":"Widespread Data Theft Targets Salesforce Instances via Salesloft Drift","fact_id":"SEA-SEC-027-F3","document_citation":"Widespread Data Theft Targets Salesforce Instances via Salesloft Drift"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.credentials_secrets","arch.external_api","data.pii","fail.auth_boundary_failure"],"failure_mechanisms":["SEA-FM-012","SEA-FM-002"],"consequences":["Data exposure (customer records)","Credential compromise"],"confidence":"TENTATIVE","authority_level":"UNKNOWN"},"provenance":{"extractor_version":"collectsea-curated-v2","review_status":"machine_extracted","review_notes":["Added 2026-10-17 after checking the linked source (source documents the listed facts). Google Threat Intelligence Group's advisory, updated as its investigation continued."]},"source_authority":{"document_type":"Threat intelligence advisory","filing_id":"SEA-SEC-027","reporting_entity":"Google Threat Intelligence Group","regulatory_body":"Not applicable"},"safeguards":[{"safeguard_id":"SEA-SEC-027-SG1","label":"Scope and expire third-party integration tokens","description":"Grant integrations the narrowest data access they need, rotate their tokens, and revoke them quickly when the vendor reports a compromise.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-SEC-027-SG2","label":"Monitor integrations for bulk export","description":"Alert on unusually large queries or exports performed through a connected app's credentials.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-SEC-027-SG1","label":"Scope and expire third-party integration tokens","description":"Grant integrations the narrowest data access they need, rotate their tokens, and revoke them quickly when the vendor reports a compromise.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-SEC-027-SG2","label":"Monitor integrations for bulk export","description":"Alert on unusually large queries or exports performed through a connected app's credentials.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"incident"},{"incident_id":"SEA-SEC-028","title":"GitHub Actions injection leaks Nx's npm token; malicious packages use local AI coding tools to hunt for secrets (2025)","display_title":"GitHub Actions injection leaks Nx's npm token; malicious packages use local AI coding tools to hunt for secrets (2025)","display_summary":"A pull-request title validation workflow used pullrequesttarget, which runs with repository secrets, and echoed the unsanitized PR title, creating an injection point; the workflow's token also had read/write permissions.","display_reference":"","display_source_type":"Engineering postmortem","incident_date":"2025-08-26","disclosure_date":"2025-08-26","source_type":"vendor_postmortem","source_url":"https://nx.dev/blog/s1ngularity-postmortem","source_title":"S1ngularity - What Happened, How We Responded, What We Learned","source_publisher":"Nx","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-17T00:00:00.000Z","source_hash":"content-fingerprint:fnv1a-f5d8b2b","affected_system":{"organization":"Nx (Nrwl)","product":"Nx npm packages and release pipeline","system_type":"Open-source build tool release pipeline","is_ai_system":true,"is_agentic":true,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-SEC-028-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A pull-request title validation workflow used pull_request_target, which runs with repository secrets, and echoed the unsanitized PR title, creating an injection point; the workflow's token also had read/write permissions.","source_quote_or_pointer":"S1ngularity - What Happened, How We Responded, What We Learned","fact_id":"SEA-SEC-028-F1","document_citation":"S1ngularity - What Happened, How We Responded, What We Learned"},{"id":"SEA-SEC-028-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Attackers used it to run a malicious publish workflow, stole Nx's npm token and published malicious versions of several Nx packages for 4 hours on August 26, 2025.","source_quote_or_pointer":"S1ngularity - What Happened, How We Responded, What We Learned","fact_id":"SEA-SEC-028-F2","document_citation":"S1ngularity - What Happened, How We Responded, What We Learned"},{"id":"SEA-SEC-028-F3","claim_type":"COLLECTSEA_INFERENCE","statement":"The packages' post-install script scanned users' machines for sensitive data, tried to use locally installed AI tools such as Claude and Gemini, and uploaded results to public GitHub repositories; Nx moved to npm Trusted Publishers with manual release approval.","source_quote_or_pointer":"S1ngularity - What Happened, How We Responded, What We Learned","fact_id":"SEA-SEC-028-F3","document_citation":"S1ngularity - What Happened, How We Responded, What We Learned"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.code_execution","data.credentials_secrets","data.untrusted_external_text","arch.tool_enabled_agent","auth.public_publication"],"failure_mechanisms":["SEA-FM-002","SEA-FM-012","SEA-FM-010"],"consequences":["Supply-chain compromise","Credential compromise"],"confidence":"TENTATIVE","authority_level":"UNKNOWN"},"provenance":{"extractor_version":"collectsea-curated-v2","review_status":"machine_extracted","review_notes":["Added 2026-10-17 after checking the linked source (source documents the listed facts). Nx's own postmortem."]},"source_authority":{"document_type":"Vendor postmortem","filing_id":"SEA-SEC-028","reporting_entity":"Nx","regulatory_body":"Not applicable"},"safeguards":[{"safeguard_id":"SEA-SEC-028-SG1","label":"Never run untrusted pull-request input with secrets","description":"Avoid pull_request_target for workflows that read PR content, treat titles and bodies as untrusted input, and give workflow tokens read-only permissions by default.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-SEC-028-SG2","label":"Require trusted publishing and human approval for releases","description":"Publish packages through short-lived trusted-publisher credentials and a manual approval step rather than a long-lived token in CI.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-SEC-028-SG1","label":"Never run untrusted pull-request input with secrets","description":"Avoid pull_request_target for workflows that read PR content, treat titles and bodies as untrusted input, and give workflow tokens read-only permissions by default.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-SEC-028-SG2","label":"Require trusted publishing and human approval for releases","description":"Publish packages through short-lived trusted-publisher credentials and a manual approval step rather than a long-lived token in CI.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"incident"},{"incident_id":"SEA-SEC-029","title":"Self-replicating \"Shai-Hulud\" worm compromises more than 500 npm packages by stealing developer tokens (2025)","display_title":"Self-replicating \"Shai-Hulud\" worm compromises more than 500 npm packages by stealing developer tokens (2025)","display_summary":"CISA reported that a self-replicating worm known as \"Shai-Hulud\" had compromised more than 500 npm packages.","display_reference":"","display_source_type":"Government security alert","incident_date":"2025-09-23","disclosure_date":"2025-09-23","source_type":"regulator_report","source_url":"https://www.cisa.gov/news-events/alerts/2025/09/23/widespread-supply-chain-compromise-impacting-npm-ecosystem","source_title":"Widespread Supply Chain Compromise Impacting npm Ecosystem","source_publisher":"Cybersecurity and Infrastructure Security Agency (CISA)","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-17T00:00:00.000Z","source_hash":"content-fingerprint:fnv1a-34e52731","affected_system":{"organization":"npm ecosystem","product":"npm registry packages","system_type":"Open-source package registry","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-SEC-029-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"CISA reported that a self-replicating worm known as \"Shai-Hulud\" had compromised more than 500 npm packages.","source_quote_or_pointer":"Widespread Supply Chain Compromise Impacting npm Ecosystem","fact_id":"SEA-SEC-029-F1","document_citation":"Widespread Supply Chain Compromise Impacting npm Ecosystem"},{"id":"SEA-SEC-029-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The malware scanned environments for credentials such as GitHub personal access tokens and AWS, Google Cloud and Azure API keys, sent them to the actor and also uploaded them to public GitHub repositories.","source_quote_or_pointer":"Widespread Supply Chain Compromise Impacting npm Ecosystem","fact_id":"SEA-SEC-029-F2","document_citation":"Widespread Supply Chain Compromise Impacting npm Ecosystem"},{"id":"SEA-SEC-029-F3","claim_type":"COLLECTSEA_INFERENCE","statement":"It spread by authenticating to npm as the compromised developer, injecting code into that developer's other packages and publishing new versions; CISA advised rotating all developer credentials and requiring phishing-resistant MFA.","source_quote_or_pointer":"Widespread Supply Chain Compromise Impacting npm Ecosystem","fact_id":"SEA-SEC-029-F3","document_citation":"Widespread Supply Chain Compromise Impacting npm Ecosystem"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.credentials_secrets","auth.code_execution","auth.public_publication","fail.cascading_dep_failure"],"failure_mechanisms":["SEA-FM-012","SEA-FM-014"],"consequences":["Supply-chain compromise","Credential compromise"],"confidence":"TENTATIVE","authority_level":"UNKNOWN"},"provenance":{"extractor_version":"collectsea-curated-v2","review_status":"machine_extracted","review_notes":["Added 2026-10-17 after checking the linked source (source documents the listed facts). CISA alert."]},"source_authority":{"document_type":"Government security alert","filing_id":"SEA-SEC-029","reporting_entity":"Cybersecurity and Infrastructure Security Agency (CISA)","regulatory_body":"Not applicable"},"safeguards":[{"safeguard_id":"SEA-SEC-029-SG1","label":"Keep publishing credentials out of developer environments","description":"Use short-lived, scoped publishing tokens or trusted publishing, so malware on a laptop or CI runner cannot republish packages.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-SEC-029-SG2","label":"Pin and review dependency updates","description":"Install from a lockfile, delay adopting brand-new package versions and block install scripts where possible.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-SEC-029-SG1","label":"Keep publishing credentials out of developer environments","description":"Use short-lived, scoped publishing tokens or trusted publishing, so malware on a laptop or CI runner cannot republish packages.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-SEC-029-SG2","label":"Pin and review dependency updates","description":"Install from a lockfile, delay adopting brand-new package versions and block install scripts where possible.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"disclosure"},{"incident_id":"SEA-SEC-030","title":"\"ToolShell\" vulnerabilities in on-premises SharePoint are exploited to steal server keys (2025)","display_title":"\"ToolShell\" vulnerabilities in on-premises SharePoint are exploited to steal server keys (2025)","display_summary":"Microsoft observed attackers exploiting on-premises SharePoint Server vulnerabilities (CVE-2025-53770 and CVE-2025-53771, related to CVE-2025-49704 and CVE-2025-49706) against internet-facing servers, with attempts as…","display_reference":"","display_source_type":"Engineering postmortem","incident_date":"2025-07-22","disclosure_date":"2025-07-22","source_type":"vendor_postmortem","source_url":"https://www.microsoft.com/en-us/security/blog/2025/07/22/disrupting-active-exploitation-of-on-premises-sharepoint-vulnerabilities/","source_title":"Disrupting active exploitation of on-premises SharePoint vulnerabilities","source_publisher":"Microsoft Security","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-17T00:00:00.000Z","source_hash":"content-fingerprint:fnv1a-6e7e95b5","affected_system":{"organization":"Microsoft SharePoint Server customers","product":"SharePoint Server (on-premises)","system_type":"Internet-facing collaboration server","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-SEC-030-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Microsoft observed attackers exploiting on-premises SharePoint Server vulnerabilities (CVE-2025-53770 and CVE-2025-53771, related to CVE-2025-49704 and CVE-2025-49706) against internet-facing servers, with attempts as early as July 7, 2025.","source_quote_or_pointer":"Disrupting active exploitation of on-premises SharePoint vulnerabilities","fact_id":"SEA-SEC-030-F1","document_citation":"Disrupting active exploitation of on-premises SharePoint vulnerabilities"},{"id":"SEA-SEC-030-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Microsoft named Chinese state actors Linen Typhoon and Violet Typhoon and the China-based actor Storm-2603 among those exploiting them.","source_quote_or_pointer":"Disrupting active exploitation of on-premises SharePoint vulnerabilities","fact_id":"SEA-SEC-030-F2","document_citation":"Disrupting active exploitation of on-premises SharePoint vulnerabilities"},{"id":"SEA-SEC-030-F3","claim_type":"COLLECTSEA_INFERENCE","statement":"Besides installing the updates, Microsoft told customers to rotate SharePoint servers' ASP.NET machine keys and restart IIS, because exploitation exposed those keys.","source_quote_or_pointer":"Disrupting active exploitation of on-premises SharePoint vulnerabilities","fact_id":"SEA-SEC-030-F3","document_citation":"Disrupting active exploitation of on-premises SharePoint vulnerabilities"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.code_execution","data.credentials_secrets","fail.auth_boundary_failure"],"failure_mechanisms":["SEA-FM-013","SEA-FM-012"],"consequences":["Server compromise","Credential compromise"],"confidence":"TENTATIVE","authority_level":"UNKNOWN"},"provenance":{"extractor_version":"collectsea-curated-v2","review_status":"machine_extracted","review_notes":["Added 2026-10-17 after checking the linked source (source documents the listed facts). Microsoft's own threat intelligence post."]},"source_authority":{"document_type":"Vendor security advisory","filing_id":"SEA-SEC-030","reporting_entity":"Microsoft Security","regulatory_body":"Not applicable"},"safeguards":[{"safeguard_id":"SEA-SEC-030-SG1","label":"Patch internet-facing servers on a short deadline","description":"Track exposed systems and apply emergency updates within days when exploitation is reported.","target_failure_mode":"SEA-FM-013","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-SEC-030-SG2","label":"Rotate secrets after a compromise, not only patch","description":"Treat cryptographic keys and tokens on an exploited server as stolen and replace them as part of remediation.","target_failure_mode":"SEA-FM-013","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-SEC-030-SG1","label":"Patch internet-facing servers on a short deadline","description":"Track exposed systems and apply emergency updates within days when exploitation is reported.","target_failure_mode":"SEA-FM-013","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-SEC-030-SG2","label":"Rotate secrets after a compromise, not only patch","description":"Treat cryptographic keys and tokens on an exploited server as stolen and replace them as part of remediation.","target_failure_mode":"SEA-FM-013","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"disclosure"},{"incident_id":"SEA-AI-007","title":"Prompt injection makes GitHub Copilot turn off its own confirmations and run commands (CVE-2025-53773)","display_title":"Prompt injection makes GitHub Copilot turn off its own confirmations and run commands (CVE-2025-53773)","display_summary":"Instructions planted in content the agent reads could make GitHub Copilot write \"chat.tools.autoApprove\": true into the project's .vscode/settings.json, which turns off all user confirmations.","display_reference":"","display_source_type":"Research paper","incident_date":"2025-08-12","disclosure_date":"2025-08-12","source_type":"academic_research","source_url":"https://embracethered.com/blog/posts/2025/github-copilot-remote-code-execution-via-prompt-injection/","source_title":"GitHub Copilot: Remote Code Execution via Prompt Injection (CVE-2025-53773)","source_publisher":"Embrace The Red (Johann Rehberger)","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-17T00:00:00.000Z","source_hash":"content-fingerprint:fnv1a-f2c4df3a","affected_system":{"organization":"GitHub Copilot users","product":"GitHub Copilot agent mode in VS Code","system_type":"AI coding agent","is_ai_system":true,"is_agentic":true,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-AI-007-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Instructions planted in content the agent reads could make GitHub Copilot write \"chat.tools.autoApprove\": true into the project's .vscode/settings.json, which turns off all user confirmations.","source_quote_or_pointer":"GitHub Copilot: Remote Code Execution via Prompt Injection (CVE-2025-53773)","fact_id":"SEA-AI-007-F1","document_citation":"GitHub Copilot: Remote Code Execution via Prompt Injection (CVE-2025-53773)"},{"id":"SEA-AI-007-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"With confirmations off, the agent could run shell commands and browse the web without approval, leading to full compromise of the developer's machine on Windows, macOS and Linux.","source_quote_or_pointer":"GitHub Copilot: Remote Code Execution via Prompt Injection (CVE-2025-53773)","fact_id":"SEA-AI-007-F2","document_citation":"GitHub Copilot: Remote Code Execution via Prompt Injection (CVE-2025-53773)"},{"id":"SEA-AI-007-F3","claim_type":"COLLECTSEA_INFERENCE","statement":"The researcher noted the general pattern: an agent that can write files and change its own configuration or security settings can escalate to code execution; Microsoft fixed it in the August 2025 Patch Tuesday release.","source_quote_or_pointer":"GitHub Copilot: Remote Code Execution via Prompt Injection (CVE-2025-53773)","fact_id":"SEA-AI-007-F3","document_citation":"GitHub Copilot: Remote Code Execution via Prompt Injection (CVE-2025-53773)"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["arch.tool_enabled_agent","data.untrusted_external_text","auth.code_execution","auth.privileged_action"],"failure_mechanisms":["SEA-FM-004","SEA-FM-010","SEA-FM-002"],"consequences":["Developer machine compromise"],"confidence":"TENTATIVE","authority_level":"UNKNOWN"},"provenance":{"extractor_version":"collectsea-curated-v2","review_status":"machine_extracted","review_notes":["Added 2026-10-17 after checking the linked source (source documents the listed facts). The researcher's own write-up; Microsoft fixed the issue in its August 2025 updates."]},"source_authority":{"document_type":"Security research disclosure","filing_id":"SEA-AI-007","reporting_entity":"Embrace The Red (Johann Rehberger)","regulatory_body":"Not applicable"},"safeguards":[{"safeguard_id":"SEA-AI-007-SG1","label":"Never let an agent change its own permissions","description":"Protect agent configuration and security settings from the agent's file-writing tools, and require a human to change approval modes.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-AI-007-SG2","label":"Treat repository content as untrusted input","description":"Content the agent reads must not be able to trigger tool calls without the same confirmation as any other risky action.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-AI-007-SG1","label":"Never let an agent change its own permissions","description":"Protect agent configuration and security settings from the agent's file-writing tools, and require a human to change approval modes.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-AI-007-SG2","label":"Treat repository content as untrusted input","description":"Content the agent reads must not be able to trigger tool calls without the same confirmation as any other risky action.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"publication"},{"incident_id":"SEA-AI-008","title":"Prompt injection in a README plus weak allow-list matching lets Gemini CLI silently run attacker commands (2025)","display_title":"Prompt injection in a README plus weak allow-list matching lets Gemini CLI silently run attacker commands (2025)","display_summary":"Researchers hid a prompt injection inside a README.md (in the text of a software license) so that Gemini CLI, asked only to inspect a codebase, would request shell commands.","display_reference":"","display_source_type":"Research paper","incident_date":"2025-07-28","disclosure_date":"2025-07-28","source_type":"academic_research","source_url":"https://tracebit.com/blog/code-exec-deception-gemini-ai-cli-hijack","source_title":"Code Execution Through Deception: Gemini AI CLI Hijack","source_publisher":"Tracebit","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-17T00:00:00.000Z","source_hash":"content-fingerprint:fnv1a-97a0bf09","affected_system":{"organization":"Google Gemini CLI users","product":"Gemini CLI","system_type":"AI coding agent (terminal)","is_ai_system":true,"is_agentic":true,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-AI-008-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Researchers hid a prompt injection inside a README.md (in the text of a software license) so that Gemini CLI, asked only to inspect a codebase, would request shell commands.","source_quote_or_pointer":"Code Execution Through Deception: Gemini AI CLI Hijack","fact_id":"SEA-AI-008-F1","document_citation":"Code Execution Through Deception: Gemini AI CLI Hijack"},{"id":"SEA-AI-008-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Users can allow-list a command such as grep for the session; Gemini CLI matched commands against that list too loosely, so \"grep\" followed by a second, malicious command was treated as allowed and ran without asking.","source_quote_or_pointer":"Code Execution Through Deception: Gemini AI CLI Hijack","fact_id":"SEA-AI-008-F2","document_citation":"Code Execution Through Deception: Gemini AI CLI Hijack"},{"id":"SEA-AI-008-F3","claim_type":"COLLECTSEA_INFERENCE","statement":"The demonstrated command silently sent the user's environment variables, which may contain secrets, to an attacker; Google rated it P1/S1 and fixed it in v0.1.14 on July 25, 2025.","source_quote_or_pointer":"Code Execution Through Deception: Gemini AI CLI Hijack","fact_id":"SEA-AI-008-F3","document_citation":"Code Execution Through Deception: Gemini AI CLI Hijack"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["arch.tool_enabled_agent","data.untrusted_external_text","auth.code_execution","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-004","SEA-FM-010"],"consequences":["Credential exposure","Developer machine compromise"],"confidence":"TENTATIVE","authority_level":"UNKNOWN"},"provenance":{"extractor_version":"collectsea-curated-v2","review_status":"machine_extracted","review_notes":["Added 2026-10-17 after checking the linked source (source documents the listed facts). The researchers' own write-up; Google fixed it in Gemini CLI v0.1.14."]},"source_authority":{"document_type":"Security research disclosure","filing_id":"SEA-AI-008","reporting_entity":"Tracebit","regulatory_body":"Not applicable"},"safeguards":[{"safeguard_id":"SEA-AI-008-SG1","label":"Match allow-listed commands exactly","description":"Parse the full command, including chained and piped commands, before treating it as pre-approved.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-AI-008-SG2","label":"Show the user exactly what will run","description":"Display the complete command text for any execution request and never hide output that an agent produced from untrusted content.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-AI-008-SG1","label":"Match allow-listed commands exactly","description":"Parse the full command, including chained and piped commands, before treating it as pre-approved.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-AI-008-SG2","label":"Show the user exactly what will run","description":"Display the complete command text for any execution request and never hide output that an agent produced from untrusted content.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"publication"},{"incident_id":"SEA-AI-009","title":"Default password and an IDOR in McDonald's AI hiring chatbot platform expose data on 64 million applicants (2025)","display_title":"Default password and an IDOR in McDonald's AI hiring chatbot platform expose data on 64 million applicants (2025)","display_summary":"McHire, the chatbot recruiting platform used by most McDonald's franchisees, lets applicants chat with a bot named Olivia, built by Paradox.ai, that collects personal information.","display_reference":"","display_source_type":"Research paper","incident_date":"2025-07-01","disclosure_date":"2025-07-01","source_type":"academic_research","source_url":"https://ian.sh/mcdonalds","source_title":"Would you like an IDOR with that? Leaking 64 million McDonald's job applications","source_publisher":"Ian Carroll and Sam Curry","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-17T00:00:00.000Z","source_hash":"content-fingerprint:fnv1a-6d1b770","affected_system":{"organization":"Paradox.ai (McHire)","product":"McHire recruiting chatbot platform","system_type":"AI recruiting chatbot (multi-tenant SaaS)","is_ai_system":true,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-AI-009-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"McHire, the chatbot recruiting platform used by most McDonald's franchisees, lets applicants chat with a bot named Olivia, built by Paradox.ai, that collects personal information.","source_quote_or_pointer":"Would you like an IDOR with that? Leaking 64 million McDonald's job applications","fact_id":"SEA-AI-009-F1","document_citation":"Would you like an IDOR with that? Leaking 64 million McDonald's job applications"},{"id":"SEA-AI-009-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Researchers found the restaurant administration interface accepted the default credentials 123456:123456, and an internal API had an insecure direct object reference that returned any applicant's contacts and chats.","source_quote_or_pointer":"Would you like an IDOR with that? Leaking 64 million McDonald's job applications","fact_id":"SEA-AI-009-F2","document_citation":"Would you like an IDOR with that? Leaking 64 million McDonald's job applications"},{"id":"SEA-AI-009-F3","claim_type":"COLLECTSEA_INFERENCE","statement":"Together these exposed personal data of more than 64 million applicants; Paradox.ai confirmed the issues were resolved on July 1, 2025.","source_quote_or_pointer":"Would you like an IDOR with that? Leaking 64 million McDonald's job applications","fact_id":"SEA-AI-009-F3","document_citation":"Would you like an IDOR with that? Leaking 64 million McDonald's job applications"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","arch.multi_tenant","auth.privileged_action","fail.auth_boundary_failure","fail.cross_tenant_leak"],"failure_mechanisms":["SEA-FM-003","SEA-FM-012"],"consequences":["Data exposure (personal data)"],"confidence":"TENTATIVE","authority_level":"UNKNOWN"},"provenance":{"extractor_version":"collectsea-curated-v2","review_status":"machine_extracted","review_notes":["Added 2026-10-17 after checking the linked source (source documents the listed facts). The researchers' own write-up, including the disclosure timeline."]},"source_authority":{"document_type":"Security research disclosure","filing_id":"SEA-AI-009","reporting_entity":"Ian Carroll and Sam Curry","regulatory_body":"Not applicable"},"safeguards":[{"safeguard_id":"SEA-AI-009-SG1","label":"Remove default and test accounts before production","description":"Block default credentials, require MFA for administrative interfaces and audit for dormant test accounts.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-AI-009-SG2","label":"Authorize every object access on the server","description":"Check that the caller may access the specific record requested, not only that the caller is signed in.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-AI-009-SG1","label":"Remove default and test accounts before production","description":"Block default credentials, require MFA for administrative interfaces and audit for dormant test accounts.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-AI-009-SG2","label":"Authorize every object access on the server","description":"Check that the caller may access the specific record requested, not only that the caller is signed in.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"disclosure"},{"incident_id":"SEA-AI-010","title":"Non-secret app ID lets anyone register for private apps built on the Base44 AI app builder (2025)","display_title":"Non-secret app ID lets anyone register for private apps built on the Base44 AI app builder (2025)","display_summary":"By supplying only an application's non-secret appid to undocumented registration and email-verification endpoints, an attacker could create a verified account on private applications built with Base44.","display_reference":"","display_source_type":"Research paper","incident_date":"2025-07-09","disclosure_date":"2025-07-09","source_type":"academic_research","source_url":"https://www.wiz.io/blog/critical-vulnerability-base44","source_title":"Wiz Research Uncovers Critical Vulnerability in AI Vibe Coding Platform Base44","source_publisher":"Wiz Research","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-17T00:00:00.000Z","source_hash":"content-fingerprint:fnv1a-37d2d85f","affected_system":{"organization":"Base44 (Wix)","product":"Base44 AI app-building platform","system_type":"AI app builder (multi-tenant)","is_ai_system":true,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-AI-010-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"By supplying only an application's non-secret app_id to undocumented registration and email-verification endpoints, an attacker could create a verified account on private applications built with Base44.","source_quote_or_pointer":"Wiz Research Uncovers Critical Vulnerability in AI Vibe Coding Platform Base44","fact_id":"SEA-AI-010-F1","document_citation":"Wiz Research Uncovers Critical Vulnerability in AI Vibe Coding Platform Base44"},{"id":"SEA-AI-010-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"This bypassed every authentication control the platform offered, including single sign-on, giving access to private enterprise apps and their data.","source_quote_or_pointer":"Wiz Research Uncovers Critical Vulnerability in AI Vibe Coding Platform Base44","fact_id":"SEA-AI-010-F2","document_citation":"Wiz Research Uncovers Critical Vulnerability in AI Vibe Coding Platform Base44"},{"id":"SEA-AI-010-F3","claim_type":"COLLECTSEA_INFERENCE","statement":"Wiz reported it on July 9, 2025; Wix fixed it within 24 hours by validating app privacy settings before registration and found no evidence of past abuse.","source_quote_or_pointer":"Wiz Research Uncovers Critical Vulnerability in AI Vibe Coding Platform Base44","fact_id":"SEA-AI-010-F3","document_citation":"Wiz Research Uncovers Critical Vulnerability in AI Vibe Coding Platform Base44"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["arch.multi_tenant","data.pii","fail.auth_boundary_failure","data.cross_tenant_data"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized access to private applications"],"confidence":"TENTATIVE","authority_level":"UNKNOWN"},"provenance":{"extractor_version":"collectsea-curated-v2","review_status":"machine_extracted","review_notes":["Added 2026-10-17 after checking the linked source (source documents the listed facts). Wiz's write-up, including Wix's statement."]},"source_authority":{"document_type":"Security research disclosure","filing_id":"SEA-AI-010","reporting_entity":"Wiz Research","regulatory_body":"Not applicable"},"safeguards":[{"safeguard_id":"SEA-AI-010-SG1","label":"Never use an identifier as an authorization check","description":"An app or tenant id says which resource is meant, not that the caller may access it; enforce each app's access policy on every endpoint.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-AI-010-SG2","label":"Inventory and protect undocumented endpoints","description":"Apply the same authentication and privacy checks to internal or undocumented APIs as to the documented sign-in flow.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-AI-010-SG1","label":"Never use an identifier as an authorization check","description":"An app or tenant id says which resource is meant, not that the caller may access it; enforce each app's access policy on every endpoint.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"},{"safeguard_id":"SEA-AI-010-SG2","label":"Inventory and protect undocumented endpoints","description":"Apply the same authentication and privacy checks to internal or undocumented APIs as to the documented sign-in flow.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"disclosure"},{"incident_id":"SEA-GHSA-pw5q-rjx4-7f7p","title":"Arcane: Delegated users:update permission allows admin account takeover via password reset (no privilege-hierarchy check)","display_title":"github.com/getarcaneapp/arcane/backend/v2 issue could expose accounts or credentials","display_summary":"A user holding the delegated users:update permission can reset the global administrator's password and take over the admin account.","display_reference":"CVE-2026-96627","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-pw5q-rjx4-7f7p","source_title":"Arcane: Delegated users:update permission allows admin account takeover via password reset (no privilege-hierarchy check)","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-17T00:24:11.223Z","source_hash":"content-fingerprint:fnv1a-398a8ce0","affected_system":{"organization":"github.com/getarcaneapp/arcane/backend/v2 project","product":"github.com/getarcaneapp/arcane/backend/v2","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Go"},"documented_facts":[{"id":"SEA-GHSA-pw5q-rjx4-7f7p-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Arcane: Delegated users:update permission allows admin account takeover via password reset (no privilege-hierarchy check)","source_quote_or_pointer":"Security Advisory GHSA-pw5q-rjx4-7f7p","fact_id":"SEA-GHSA-pw5q-rjx4-7f7p-F1","document_citation":"Security Advisory GHSA-pw5q-rjx4-7f7p"},{"id":"SEA-GHSA-pw5q-rjx4-7f7p-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A user holding the delegated users:update permission can reset the global administrator's password and take over the admin account. UpdateUser sets the target user's PasswordHash from the request body for ANY target with no comparison of caller-vs-target privilege.","source_quote_or_pointer":"Advisory description (GHSA-pw5q-rjx4-7f7p)","fact_id":"SEA-GHSA-pw5q-rjx4-7f7p-F2","document_citation":"Advisory description (GHSA-pw5q-rjx4-7f7p)"}],"source_stated_contributors":["A user holding the delegated users:update permission can reset the global administrator's password and take over the admin account. UpdateUser sets the target user's PasswordHash from the request body for ANY target with no comparison of caller-vs-target privilege."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.write_action","data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-pw5q-rjx4-7f7p","reporting_entity":"CVE-2026-96627","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-pw5q-rjx4-7f7p-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-pw5q-rjx4-7f7p-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-96627"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-mp22-58ff-6fhr","title":"Arcane: Environment access token bypasses the admin-required authorization gate on /api/debug/pprof","display_title":"github.com/getarcaneapp/arcane/backend/v2 issue could expose accounts or credentials","display_summary":"Arcane v2.10.2 contains an authorization inconsistency in AuthMiddleware.managerAuth.","display_reference":"CVE-2026-96628","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-mp22-58ff-6fhr","source_title":"Arcane: Environment access token bypasses the admin-required authorization gate on /api/debug/pprof","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-17T00:24:11.226Z","source_hash":"content-fingerprint:fnv1a-c007d22b","affected_system":{"organization":"github.com/getarcaneapp/arcane/backend/v2 project","product":"github.com/getarcaneapp/arcane/backend/v2","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Go"},"documented_facts":[{"id":"SEA-GHSA-mp22-58ff-6fhr-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Arcane: Environment access token bypasses the admin-required authorization gate on /api/debug/pprof","source_quote_or_pointer":"Security Advisory GHSA-mp22-58ff-6fhr","fact_id":"SEA-GHSA-mp22-58ff-6fhr-F1","document_citation":"Security Advisory GHSA-mp22-58ff-6fhr"},{"id":"SEA-GHSA-mp22-58ff-6fhr-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Arcane v2.10.2 contains an authorization inconsistency in AuthMiddleware.managerAuth.","source_quote_or_pointer":"Advisory description (GHSA-mp22-58ff-6fhr)","fact_id":"SEA-GHSA-mp22-58ff-6fhr-F2","document_citation":"Advisory description (GHSA-mp22-58ff-6fhr)"}],"source_stated_contributors":["Arcane v2.10.2 contains an authorization inconsistency in AuthMiddleware.managerAuth."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-mp22-58ff-6fhr","reporting_entity":"CVE-2026-96628","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-mp22-58ff-6fhr-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-mp22-58ff-6fhr-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-96628"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-6fj4-rcr3-r7rr","title":"lopdf has a stack overflow via deeply nested PDF objects","display_title":"Security issue reported in lopdf","display_summary":"lopdf::Document::loadmem (and the other load entry points) parses nested PDF arrays and dictionaries with unbounded recursion.","display_reference":"GHSA-6fj4-rcr3-r7rr","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-6fj4-rcr3-r7rr","source_title":"lopdf has a stack overflow via deeply nested PDF objects","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T21:01:20.124Z","source_hash":"content-fingerprint:fnv1a-6107532","affected_system":{"organization":"lopdf project","product":"lopdf","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Rust"},"documented_facts":[{"id":"SEA-GHSA-6fj4-rcr3-r7rr-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"lopdf has a stack overflow via deeply nested PDF objects","source_quote_or_pointer":"Security Advisory GHSA-6fj4-rcr3-r7rr","fact_id":"SEA-GHSA-6fj4-rcr3-r7rr-F1","document_citation":"Security Advisory GHSA-6fj4-rcr3-r7rr"},{"id":"SEA-GHSA-6fj4-rcr3-r7rr-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"lopdf::Document::loadmem (and the other load entry points) parses nested PDF arrays and dictionaries with unbounded recursion. A small crafted PDF whose Catalog contains a deeply nested array (/X [[[ … ]]], on the order of 10,000 levels) exhausts the call stack and aborts the process with SIGABRT.","source_quote_or_pointer":"Advisory description (GHSA-6fj4-rcr3-r7rr)","fact_id":"SEA-GHSA-6fj4-rcr3-r7rr-F2","document_citation":"Advisory description (GHSA-6fj4-rcr3-r7rr)"}],"source_stated_contributors":["lopdf::Document::loadmem (and the other load entry points) parses nested PDF arrays and dictionaries with unbounded recursion. A small crafted PDF whose Catalog contains a deeply nested array (/X [[[ … ]]], on the order of 10,000 levels) exhausts the call stack and aborts the process with SIGABRT."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.uploaded_files"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-6fj4-rcr3-r7rr","reporting_entity":"GitHub Security Advisory Database","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-6fj4-rcr3-r7rr-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-6fj4-rcr3-r7rr-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":[],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-h4mw-j7qp-8mwm","title":"Claude Agent SDK: Argument Injection via resume Option Allows Arbitrary Command Execution","display_title":"claude-agent-sdk issue could allow unintended commands to run","display_summary":"The Claude Agent SDK for Python passed the resume option to the Claude CLI without validation, allowing a value beginning with - to be interpreted as a separate CLI flag.","display_reference":"CVE-2026-96620","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-h4mw-j7qp-8mwm","source_title":"Claude Agent SDK: Argument Injection via resume Option Allows Arbitrary Command Execution","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T21:01:20.128Z","source_hash":"content-fingerprint:fnv1a-e3c620b0","affected_system":{"organization":"claude-agent-sdk project","product":"claude-agent-sdk","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Python"},"documented_facts":[{"id":"SEA-GHSA-h4mw-j7qp-8mwm-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Claude Agent SDK: Argument Injection via resume Option Allows Arbitrary Command Execution","source_quote_or_pointer":"Security Advisory GHSA-h4mw-j7qp-8mwm","fact_id":"SEA-GHSA-h4mw-j7qp-8mwm-F1","document_citation":"Security Advisory GHSA-h4mw-j7qp-8mwm"},{"id":"SEA-GHSA-h4mw-j7qp-8mwm-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Claude Agent SDK for Python passed the resume option to the Claude CLI without validation, allowing a value beginning with - to be interpreted as a separate CLI flag.","source_quote_or_pointer":"Advisory description (GHSA-h4mw-j7qp-8mwm)","fact_id":"SEA-GHSA-h4mw-j7qp-8mwm-F2","document_citation":"Advisory description (GHSA-h4mw-j7qp-8mwm)"}],"source_stated_contributors":["The Claude Agent SDK for Python passed the resume option to the Claude CLI without validation, allowing a value beginning with - to be interpreted as a separate CLI flag."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-004","SEA-FM-002","SEA-FM-010"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-h4mw-j7qp-8mwm","reporting_entity":"CVE-2026-96620","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-h4mw-j7qp-8mwm-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-h4mw-j7qp-8mwm-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-96620"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-vqff-r82h-9crc","title":"ckan-mcp-server: DataStore Table UI resource does not validate postMessage origin (in) and posts to targetOrigin \"\" (out)","display_title":"Security issue reported in @aborruso/ckan-mcp-server","display_summary":"The MCP Apps UI resource (an interactive DataStore table rendered in the host's webview/iframe) communicates with its parent via postMessage.","display_reference":"CVE-2026-76894","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-vqff-r82h-9crc","source_title":"ckan-mcp-server: DataStore Table UI resource does not validate postMessage origin (in) and posts to targetOrigin \"\" (out)","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T21:01:20.131Z","source_hash":"content-fingerprint:fnv1a-6e83b13f","affected_system":{"organization":"@aborruso/ckan-mcp-server project","product":"@aborruso/ckan-mcp-server","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"JavaScript / TypeScript"},"documented_facts":[{"id":"SEA-GHSA-vqff-r82h-9crc-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"ckan-mcp-server: DataStore Table UI resource does not validate postMessage origin (in) and posts to targetOrigin \"\" (out)","source_quote_or_pointer":"Security Advisory GHSA-vqff-r82h-9crc","fact_id":"SEA-GHSA-vqff-r82h-9crc-F1","document_citation":"Security Advisory GHSA-vqff-r82h-9crc"},{"id":"SEA-GHSA-vqff-r82h-9crc-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The MCP Apps UI resource (an interactive DataStore table rendered in the host's webview/iframe) communicates with its parent via postMessage. Its inbound message listener performs no event.origin validation, and its outbound messages are sent with target origin ''.","source_quote_or_pointer":"Advisory description (GHSA-vqff-r82h-9crc)","fact_id":"SEA-GHSA-vqff-r82h-9crc-F2","document_citation":"Advisory description (GHSA-vqff-r82h-9crc)"}],"source_stated_contributors":["The MCP Apps UI resource (an interactive DataStore table rendered in the host's webview/iframe) communicates with its parent via postMessage. Its inbound message listener performs no event.origin validation, and its outbound messages are sent with target origin ''."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["arch.event_driven","arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-010"],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-vqff-r82h-9crc","reporting_entity":"CVE-2026-76894","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-vqff-r82h-9crc-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-vqff-r82h-9crc-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-76894"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-754j-98wh-57rf","title":"swoosh has email-derived URL path injection in Microsoft Graph endpoint","display_title":"Security issue reported in swoosh","display_summary":"Swoosh.Adapters.MsGraph builds its Microsoft Graph API request URL by interpolating the sender's email address directly into the URL path (/users/{from}/sendMail) without percent-encoding or validation.","display_reference":"CVE-2026-54893","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-754j-98wh-57rf","source_title":"swoosh has email-derived URL path injection in Microsoft Graph endpoint","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T21:01:20.133Z","source_hash":"content-fingerprint:fnv1a-fce70925","affected_system":{"organization":"swoosh project","product":"swoosh","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Erlang / Elixir"},"documented_facts":[{"id":"SEA-GHSA-754j-98wh-57rf-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"swoosh has email-derived URL path injection in Microsoft Graph endpoint","source_quote_or_pointer":"Security Advisory GHSA-754j-98wh-57rf","fact_id":"SEA-GHSA-754j-98wh-57rf-F1","document_citation":"Security Advisory GHSA-754j-98wh-57rf"},{"id":"SEA-GHSA-754j-98wh-57rf-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Swoosh.Adapters.MsGraph builds its Microsoft Graph API request URL by interpolating the sender's email address directly into the URL path (/users/{from}/sendMail) without percent-encoding or validation.","source_quote_or_pointer":"Advisory description (GHSA-754j-98wh-57rf)","fact_id":"SEA-GHSA-754j-98wh-57rf-F2","document_citation":"Advisory description (GHSA-754j-98wh-57rf)"}],"source_stated_contributors":["Swoosh.Adapters.MsGraph builds its Microsoft Graph API request URL by interpolating the sender's email address directly into the URL path (/users/{from}/sendMail) without percent-encoding or validation."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-754j-98wh-57rf","reporting_entity":"CVE-2026-54893","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-754j-98wh-57rf-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-754j-98wh-57rf-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-54893"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-vgf9-9mxx-hq54","title":"ClickMigrate has Path Traversal in \"revision -m\" argument","display_title":"ClickMigrate issue could expose restricted files","display_summary":"A path traversal vulnerability in the revision command allowed a crafted migration name supplied via the -m argument to escape the intended migrations directory.","display_reference":"CVE-2026-68549","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-vgf9-9mxx-hq54","source_title":"ClickMigrate has Path Traversal in \"revision -m\" argument","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T21:01:20.133Z","source_hash":"content-fingerprint:fnv1a-d9e8bf97","affected_system":{"organization":"ClickMigrate project","product":"ClickMigrate","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Python"},"documented_facts":[{"id":"SEA-GHSA-vgf9-9mxx-hq54-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"ClickMigrate has Path Traversal in \"revision -m\" argument","source_quote_or_pointer":"Security Advisory GHSA-vgf9-9mxx-hq54","fact_id":"SEA-GHSA-vgf9-9mxx-hq54-F1","document_citation":"Security Advisory GHSA-vgf9-9mxx-hq54"},{"id":"SEA-GHSA-vgf9-9mxx-hq54-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A path traversal vulnerability in the revision command allowed a crafted migration name supplied via the -m argument to escape the intended migrations directory.","source_quote_or_pointer":"Advisory description (GHSA-vgf9-9mxx-hq54)","fact_id":"SEA-GHSA-vgf9-9mxx-hq54-F2","document_citation":"Advisory description (GHSA-vgf9-9mxx-hq54)"}],"source_stated_contributors":["A path traversal vulnerability in the revision command allowed a crafted migration name supplied via the -m argument to escape the intended migrations directory."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Restricted file exposure","File overwrite"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-vgf9-9mxx-hq54","reporting_entity":"CVE-2026-68549","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-vgf9-9mxx-hq54-SG1","label":"Confine file access to a fixed root","description":"Resolve paths to canonical form and reject anything outside the intended directory before opening files.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-vgf9-9mxx-hq54-SG1","label":"Confine file access to a fixed root","description":"Resolve paths to canonical form and reject anything outside the intended directory before opening files.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"File paths supplied by a caller escaped the intended directory. Canonicalise paths and confine file access to a fixed root.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-68549"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-cv23-7vc5-jfh7","title":"gomarkdown/markdown IsSafeURL panics on short URLs","display_title":"Security issue reported in github.com/gomarkdown/markdown","display_summary":"IsSafeURL slices url[:nPath] before checking that len(url) = nPath, so a URL shorter than a path prefix (0, 1 or 2 bytes) triggers a slice-bounds panic, and this is reached end to end when the html.Safelink hardening…","display_reference":"CVE-2026-102941","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-cv23-7vc5-jfh7","source_title":"gomarkdown/markdown IsSafeURL panics on short URLs","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T16:33:34.348Z","source_hash":"content-fingerprint:fnv1a-7f4ea217","affected_system":{"organization":"github.com/gomarkdown/markdown project","product":"github.com/gomarkdown/markdown","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Go"},"documented_facts":[{"id":"SEA-GHSA-cv23-7vc5-jfh7-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"gomarkdown/markdown IsSafeURL panics on short URLs","source_quote_or_pointer":"Security Advisory GHSA-cv23-7vc5-jfh7","fact_id":"SEA-GHSA-cv23-7vc5-jfh7-F1","document_citation":"Security Advisory GHSA-cv23-7vc5-jfh7"},{"id":"SEA-GHSA-cv23-7vc5-jfh7-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"IsSafeURL slices url[:nPath] before checking that len(url) = nPath, so a URL shorter than a path prefix (0, 1 or 2 bytes) triggers a slice-bounds panic, and this is reached end to end when the html.Safelink hardening flag is enabled and the input contains an empty or very short link destination, giving an…","source_quote_or_pointer":"Advisory description (GHSA-cv23-7vc5-jfh7)","fact_id":"SEA-GHSA-cv23-7vc5-jfh7-F2","document_citation":"Advisory description (GHSA-cv23-7vc5-jfh7)"}],"source_stated_contributors":["IsSafeURL slices url[:nPath] before checking that len(url) = nPath, so a URL shorter than a path prefix (0, 1 or 2 bytes) triggers a slice-bounds panic, and this is reached end to end when the html.Safelink hardening flag is enabled and the input contains an empty or very short link destination, giving an…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-cv23-7vc5-jfh7","reporting_entity":"CVE-2026-102941","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-cv23-7vc5-jfh7-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-cv23-7vc5-jfh7-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-102941"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-96542","title":"Incorrect permission assignment (CWE-732) in the standalone installer for EA Javelin Anticheat (versions 1.0.14329371, 1.0.14547437, 1.0.14789537, and 1.0.14940698) on Windows allows a local non-administrative user to elevate privileges to NT AUTHORITY\\SYSTEM by modifying the EAAntiCheatService service configuration and executable path. This vulnerability requires non-standard manual execution of the standalone installer and does not affect standard game installations via the EA App and Steam. This issue is corrected in version 1.0.14940699 and later; service permissions automatically self-heal upon launching an integrated EA game title.","display_title":"Security issue reported in Software component","display_summary":"Incorrect permission assignment (CWE-732) in the standalone installer for EA Javelin Anticheat (versions 1.0.14329371, 1.0.14547437, 1.0.14789537, and 1.0.14940698) on Windows allows a local non-administrative user to…","display_reference":"CVE-2026-96542","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-96542","source_title":"Incorrect permission assignment (CWE-732) in the standalone installer for EA Javelin Anticheat (versions 1.0.14329371, 1.0.14547437, 1.0.14789537, and 1.0.14940698) on Windows allows a local non-administrative user to elevate privileges to NT AUTHORITY\\SYSTEM by modifying the EAAntiCheatService service configuration and executable path. This vulnerability requires non-standard manual execution of the standalone installer and does not affect standard game installations via the EA App and Steam. This issue is corrected in version 1.0.14940699 and later; service permissions automatically self-heal upon launching an integrated EA game title.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-17T00:24:19.368Z","source_hash":"content-fingerprint:fnv1a-e515df2b","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-96542-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Incorrect permission assignment (CWE-732) in the standalone installer for EA Javelin Anticheat (versions 1.0.14329371, 1.0.14547437, 1.0.14789537, and 1.0.14940698) on Windows allows a local non-administrative user to elevate privileges to NT AUTHORITY\\SYSTEM by modifying the EAAntiCheatService service configuration and executable path. This vulnerability requires non-standard manual execution of the standalone installer and does not affect standard game installations via the EA App and Steam. This issue is corrected in version 1.0.14940699 and later; service permissions automatically self-heal upon launching an integrated EA game title.","source_quote_or_pointer":"Security Advisory CVE-2026-96542","fact_id":"SEA-CVE-2026-96542-F1","document_citation":"Security Advisory CVE-2026-96542"},{"id":"SEA-CVE-2026-96542-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Incorrect permission assignment (CWE-732) in the standalone installer for EA Javelin Anticheat (versions 1.0.14329371, 1.0.14547437, 1.0.14789537, and 1.0.14940698) on Windows allows a local non-administrative user to elevate privileges to NT AUTHORITY\\SYSTEM by modifying the EAAntiCheatService service configuration…","source_quote_or_pointer":"Advisory description (CVE-2026-96542)","fact_id":"SEA-CVE-2026-96542-F2","document_citation":"Advisory description (CVE-2026-96542)"}],"source_stated_contributors":["Incorrect permission assignment (CWE-732) in the standalone installer for EA Javelin Anticheat (versions 1.0.14329371, 1.0.14547437, 1.0.14789537, and 1.0.14940698) on Windows allows a local non-administrative user to elevate privileges to NT AUTHORITY\\SYSTEM by modifying the EAAntiCheatService service configuration…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-96542","reporting_entity":"CVE-2026-96542","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-96542-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-96542-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-96542"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-88755","title":"Z.ai ZCode v3.11.2.6792 was discovered to automatically establish connections with MCP servers declared inside a repository's workspace configuration, possibly allowing attackers to execute arbitrary code via opening a crafted repository.","display_title":"Software component issue could allow unintended commands to run","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-88755","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-88755","source_title":"Z.ai ZCode v3.11.2.6792 was discovered to automatically establish connections with MCP servers declared inside a repository's workspace configuration, possibly allowing attackers to execute arbitrary code via opening a crafted repository.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-17T00:24:19.375Z","source_hash":"content-fingerprint:fnv1a-5dcd82a0","affected_system":{"organization":"Software component project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-88755-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Z.ai ZCode v3.11.2.6792 was discovered to automatically establish connections with MCP servers declared inside a repository's workspace configuration, possibly allowing attackers to execute arbitrary code via opening a crafted repository.","source_quote_or_pointer":"Security Advisory CVE-2026-88755","fact_id":"SEA-CVE-2026-88755-F1","document_citation":"Security Advisory CVE-2026-88755"},{"id":"SEA-CVE-2026-88755-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Z.ai ZCode v3.11.2.6792 was discovered to automatically establish connections with MCP servers declared inside a repository's workspace configuration, possibly allowing attackers to execute arbitrary code via opening a crafted repository.","source_quote_or_pointer":"Advisory description (CVE-2026-88755)","fact_id":"SEA-CVE-2026-88755-F2","document_citation":"Advisory description (CVE-2026-88755)"}],"source_stated_contributors":["Z.ai ZCode v3.11.2.6792 was discovered to automatically establish connections with MCP servers declared inside a repository's workspace configuration, possibly allowing attackers to execute arbitrary code via opening a crafted repository."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-004","SEA-FM-002","SEA-FM-010"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-88755","reporting_entity":"CVE-2026-88755","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-88755-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-88755-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-88755"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-85231","title":"A flaw was found in libtirpc. An authenticated remote attacker could exploit this vulnerability by sending oversized wrapped data requests to an RPC (Remote Procedure Call) service configured with RPCSEC_GSS (Remote Procedure Call Security-Generic Security Service) integrity or privacy. This can lead to unbounded memory allocation, resulting in a Denial of Service (DoS) by exhausting system resources and causing the service to become unstable or terminate.","display_title":"Software component issue could make the service unavailable","display_summary":"A flaw was found in libtirpc. An authenticated remote attacker could exploit this vulnerability by sending oversized wrapped data requests to an RPC (Remote Procedure Call) service configured with RPCSECGSS (Remote…","display_reference":"CVE-2026-85231","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85231","source_title":"A flaw was found in libtirpc. An authenticated remote attacker could exploit this vulnerability by sending oversized wrapped data requests to an RPC (Remote Procedure Call) service configured with RPCSEC_GSS (Remote Procedure Call Security-Generic Security Service) integrity or privacy. This can lead to unbounded memory allocation, resulting in a Denial of Service (DoS) by exhausting system resources and causing the service to become unstable or terminate.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-17T00:24:19.375Z","source_hash":"content-fingerprint:fnv1a-891e0f3c","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-85231-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A flaw was found in libtirpc. An authenticated remote attacker could exploit this vulnerability by sending oversized wrapped data requests to an RPC (Remote Procedure Call) service configured with RPCSEC_GSS (Remote Procedure Call Security-Generic Security Service) integrity or privacy. This can lead to unbounded memory allocation, resulting in a Denial of Service (DoS) by exhausting system resources and causing the service to become unstable or terminate.","source_quote_or_pointer":"Security Advisory CVE-2026-85231","fact_id":"SEA-CVE-2026-85231-F1","document_citation":"Security Advisory CVE-2026-85231"},{"id":"SEA-CVE-2026-85231-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A flaw was found in libtirpc. An authenticated remote attacker could exploit this vulnerability by sending oversized wrapped data requests to an RPC (Remote Procedure Call) service configured with RPCSECGSS (Remote Procedure Call Security-Generic Security Service) integrity or privacy.","source_quote_or_pointer":"Advisory description (CVE-2026-85231)","fact_id":"SEA-CVE-2026-85231-F2","document_citation":"Advisory description (CVE-2026-85231)"}],"source_stated_contributors":["A flaw was found in libtirpc. An authenticated remote attacker could exploit this vulnerability by sending oversized wrapped data requests to an RPC (Remote Procedure Call) service configured with RPCSECGSS (Remote Procedure Call Security-Generic Security Service) integrity or privacy."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-85231","reporting_entity":"CVE-2026-85231","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-85231-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-85231-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-85231"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-61726","title":"Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.12, StepViewSet and IngredientViewSet filter only by active Space and use role-level CustomIsUser checks instead of the private-recipe owner or sharing predicate when an authenticated user with read and write API scope in the victim's Space supplies a private recipe or step identifier to the Step API. Request processing uses StepViewSet, IngredientViewSet, api/step/, api/step/{step_id}/, CustomIsUser, CustomRecipePermission. The attack works because the sub-resource querysets return and update private-recipe steps for non-owners because Space membership is accepted without recipe-level authorization. This can read and silently modify another same-Space member's private recipe instructions, while cross-Space access remains out of scope. This issue is fixed in version 2.6.12.","display_title":"Security issue reported in Software component","display_summary":"Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.12, StepViewSet and IngredientViewSet filter only by active Space and use role-level CustomIsUser checks…","display_reference":"CVE-2026-61726","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-61726","source_title":"Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.12, StepViewSet and IngredientViewSet filter only by active Space and use role-level CustomIsUser checks instead of the private-recipe owner or sharing predicate when an authenticated user with read and write API scope in the victim's Space supplies a private recipe or step identifier to the Step API. Request processing uses StepViewSet, IngredientViewSet, api/step/, api/step/{step_id}/, CustomIsUser, CustomRecipePermission. The attack works because the sub-resource querysets return and update private-recipe steps for non-owners because Space membership is accepted without recipe-level authorization. This can read and silently modify another same-Space member's private recipe instructions, while cross-Space access remains out of scope. This issue is fixed in version 2.6.12.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-17T00:24:19.376Z","source_hash":"content-fingerprint:fnv1a-404377bb","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-61726-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.12, StepViewSet and IngredientViewSet filter only by active Space and use role-level CustomIsUser checks instead of the private-recipe owner or sharing predicate when an authenticated user with read and write API scope in the victim's Space supplies a private recipe or step identifier to the Step API. Request processing uses StepViewSet, IngredientViewSet, api/step/, api/step/{step_id}/, CustomIsUser, CustomRecipePermission. The attack works because the sub-resource querysets return and update private-recipe steps for non-owners because Space membership is accepted without recipe-level authorization. This can read and silently modify another same-Space member's private recipe instructions, while cross-Space access remains out of scope. This issue is fixed in version 2.6.12.","source_quote_or_pointer":"Security Advisory CVE-2026-61726","fact_id":"SEA-CVE-2026-61726-F1","document_citation":"Security Advisory CVE-2026-61726"},{"id":"SEA-CVE-2026-61726-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.12, StepViewSet and IngredientViewSet filter only by active Space and use role-level CustomIsUser checks instead of the private-recipe owner or sharing predicate when an authenticated user with read and…","source_quote_or_pointer":"Advisory description (CVE-2026-61726)","fact_id":"SEA-CVE-2026-61726-F2","document_citation":"Advisory description (CVE-2026-61726)"}],"source_stated_contributors":["Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.12, StepViewSet and IngredientViewSet filter only by active Space and use role-level CustomIsUser checks instead of the private-recipe owner or sharing predicate when an authenticated user with read and…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.pii","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-61726","reporting_entity":"CVE-2026-61726","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-61726-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-61726-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-61726"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-59970","title":"Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.10, passes an administrator-controlled AI provider URL directly to LiteLLM without applying the server's outbound-request SSRF checks when an authenticated user creates a Space, configures an AI provider with a URL targeting an internal address, and invokes an AI action. In cookbook/views/api.py, the affected AI actions call completion through TARGET/api/ai-import/ and api/ai-step-sort/ while bypassing safe_request. The attack works because the server connects to the supplied provider URL from each AI action and exposes connection success, refusal, or timeout as a blind network-reachability oracle. This can reach internal services, other hosts on the server network, and cloud metadata endpoints and map reachable internal hosts and ports. This issue is fixed in version 2.6.10.","display_title":"Software component issue could reach internal services","display_summary":"Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.10, passes an administrator-controlled AI provider URL directly to LiteLLM without applying the server's…","display_reference":"CVE-2026-59970","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-59970","source_title":"Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.10, passes an administrator-controlled AI provider URL directly to LiteLLM without applying the server's outbound-request SSRF checks when an authenticated user creates a Space, configures an AI provider with a URL targeting an internal address, and invokes an AI action. In cookbook/views/api.py, the affected AI actions call completion through TARGET/api/ai-import/ and api/ai-step-sort/ while bypassing safe_request. The attack works because the server connects to the supplied provider URL from each AI action and exposes connection success, refusal, or timeout as a blind network-reachability oracle. This can reach internal services, other hosts on the server network, and cloud metadata endpoints and map reachable internal hosts and ports. This issue is fixed in version 2.6.10.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-17T00:24:19.376Z","source_hash":"content-fingerprint:fnv1a-9cd08c1f","affected_system":{"organization":"Software component project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-59970-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.10, passes an administrator-controlled AI provider URL directly to LiteLLM without applying the server's outbound-request SSRF checks when an authenticated user creates a Space, configures an AI provider with a URL targeting an internal address, and invokes an AI action. In cookbook/views/api.py, the affected AI actions call completion through TARGET/api/ai-import/ and api/ai-step-sort/ while bypassing safe_request. The attack works because the server connects to the supplied provider URL from each AI action and exposes connection success, refusal, or timeout as a blind network-reachability oracle. This can reach internal services, other hosts on the server network, and cloud metadata endpoints and map reachable internal hosts and ports. This issue is fixed in version 2.6.10.","source_quote_or_pointer":"Security Advisory CVE-2026-59970","fact_id":"SEA-CVE-2026-59970-F1","document_citation":"Security Advisory CVE-2026-59970"},{"id":"SEA-CVE-2026-59970-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.10, passes an administrator-controlled AI provider URL directly to LiteLLM without applying the server's outbound-request SSRF checks when an authenticated user creates a Space, configures an AI provider…","source_quote_or_pointer":"Advisory description (CVE-2026-59970)","fact_id":"SEA-CVE-2026-59970-F2","document_citation":"Advisory description (CVE-2026-59970)"}],"source_stated_contributors":["Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.10, passes an administrator-controlled AI provider URL directly to LiteLLM without applying the server's outbound-request SSRF checks when an authenticated user creates a Space, configures an AI provider…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.write_action","data.pii","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Internal network access","Cloud metadata or credential exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-59970","reporting_entity":"CVE-2026-59970","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-59970-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-59970-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"The service fetched a URL chosen by the caller and could be steered at internal systems. Restrict outbound destinations and block internal address ranges.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-59970"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-59963","title":"Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.10, recipe utility endpoints retrieve same-Space Recipe objects without invoking the private-recipe owner or sharing permission when an authenticated member of a shared Space supplies another member's private recipe identifier to AI import, file, external-link, or share-link endpoints. Request processing uses api/ai-import/, api/get_recipe_file/, api/get_external_file_link/, api/share-link/, CustomRecipePermission. The attack works because the endpoints read private recipe files, send file bytes to the configured AI provider, or create and disclose external links without object-level authorization, and api/share-link/ can create a public link when Space sharing is enabled. This can expose private recipe files and sensitive uploaded content to another same-Space user and to configured external services. This issue is fixed in version 2.6.10.","display_title":"Security issue reported in Software component","display_summary":"Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.10, recipe utility endpoints retrieve same-Space Recipe objects without invoking the private-recipe owner…","display_reference":"CVE-2026-59963","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-59963","source_title":"Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.10, recipe utility endpoints retrieve same-Space Recipe objects without invoking the private-recipe owner or sharing permission when an authenticated member of a shared Space supplies another member's private recipe identifier to AI import, file, external-link, or share-link endpoints. Request processing uses api/ai-import/, api/get_recipe_file/, api/get_external_file_link/, api/share-link/, CustomRecipePermission. The attack works because the endpoints read private recipe files, send file bytes to the configured AI provider, or create and disclose external links without object-level authorization, and api/share-link/ can create a public link when Space sharing is enabled. This can expose private recipe files and sensitive uploaded content to another same-Space user and to configured external services. This issue is fixed in version 2.6.10.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-17T00:24:19.377Z","source_hash":"content-fingerprint:fnv1a-9350b79b","affected_system":{"organization":"Software component project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-59963-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.10, recipe utility endpoints retrieve same-Space Recipe objects without invoking the private-recipe owner or sharing permission when an authenticated member of a shared Space supplies another member's private recipe identifier to AI import, file, external-link, or share-link endpoints. Request processing uses api/ai-import/, api/get_recipe_file/, api/get_external_file_link/, api/share-link/, CustomRecipePermission. The attack works because the endpoints read private recipe files, send file bytes to the configured AI provider, or create and disclose external links without object-level authorization, and api/share-link/ can create a public link when Space sharing is enabled. This can expose private recipe files and sensitive uploaded content to another same-Space user and to configured external services. This issue is fixed in version 2.6.10.","source_quote_or_pointer":"Security Advisory CVE-2026-59963","fact_id":"SEA-CVE-2026-59963-F1","document_citation":"Security Advisory CVE-2026-59963"},{"id":"SEA-CVE-2026-59963-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.10, recipe utility endpoints retrieve same-Space Recipe objects without invoking the private-recipe owner or sharing permission when an authenticated member of a shared Space supplies another member's…","source_quote_or_pointer":"Advisory description (CVE-2026-59963)","fact_id":"SEA-CVE-2026-59963-F2","document_citation":"Advisory description (CVE-2026-59963)"}],"source_stated_contributors":["Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.10, recipe utility endpoints retrieve same-Space Recipe objects without invoking the private-recipe owner or sharing permission when an authenticated member of a shared Space supplies another member's…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.write_action","auth.public_publication","data.pii","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-59963","reporting_entity":"CVE-2026-59963","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-59963-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-59963-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-59963"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-57488","title":"pupnp is an SDK for development of UPnP device and control point applications. Prior to 2.0.2, raw_to_int in upnp/src/genlib/net/http/httpparser.c parses Content-Length with strtol and casts the resulting long to a 32-bit int before the caller stores it as unsigned int. On LP64 systems, values greater than INT_MAX can truncate or wrap, so the HTTP parser can accept a body length different from the declared value. A remote adjacent-network peer can use the resulting parser disagreement to leave bytes to be interpreted as another request in persistent or proxied contexts, or can make a worker wait for an extremely large body and cause denial of service. This issue is fixed in 2.0.2.","display_title":"Software component issue could make the service unavailable","display_summary":"pupnp is an SDK for development of UPnP device and control point applications. Prior to 2.0.2, rawtoint in upnp/src/genlib/net/http/httpparser.c parses Content-Length with strtol and casts the resulting long to a 32-bit…","display_reference":"CVE-2026-57488","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-57488","source_title":"pupnp is an SDK for development of UPnP device and control point applications. Prior to 2.0.2, raw_to_int in upnp/src/genlib/net/http/httpparser.c parses Content-Length with strtol and casts the resulting long to a 32-bit int before the caller stores it as unsigned int. On LP64 systems, values greater than INT_MAX can truncate or wrap, so the HTTP parser can accept a body length different from the declared value. A remote adjacent-network peer can use the resulting parser disagreement to leave bytes to be interpreted as another request in persistent or proxied contexts, or can make a worker wait for an extremely large body and cause denial of service. This issue is fixed in 2.0.2.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-17T00:24:19.377Z","source_hash":"content-fingerprint:fnv1a-820303f9","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-57488-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"pupnp is an SDK for development of UPnP device and control point applications. Prior to 2.0.2, raw_to_int in upnp/src/genlib/net/http/httpparser.c parses Content-Length with strtol and casts the resulting long to a 32-bit int before the caller stores it as unsigned int. On LP64 systems, values greater than INT_MAX can truncate or wrap, so the HTTP parser can accept a body length different from the declared value. A remote adjacent-network peer can use the resulting parser disagreement to leave bytes to be interpreted as another request in persistent or proxied contexts, or can make a worker wait for an extremely large body and cause denial of service. This issue is fixed in 2.0.2.","source_quote_or_pointer":"Security Advisory CVE-2026-57488","fact_id":"SEA-CVE-2026-57488-F1","document_citation":"Security Advisory CVE-2026-57488"},{"id":"SEA-CVE-2026-57488-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"pupnp is an SDK for development of UPnP device and control point applications. Prior to 2.0.2, rawtoint in upnp/src/genlib/net/http/httpparser.c parses Content-Length with strtol and casts the resulting long to a 32-bit int before the caller stores it as unsigned int.","source_quote_or_pointer":"Advisory description (CVE-2026-57488)","fact_id":"SEA-CVE-2026-57488-F2","document_citation":"Advisory description (CVE-2026-57488)"}],"source_stated_contributors":["pupnp is an SDK for development of UPnP device and control point applications. Prior to 2.0.2, rawtoint in upnp/src/genlib/net/http/httpparser.c parses Content-Length with strtol and casts the resulting long to a 32-bit int before the caller stores it as unsigned int."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","arch.async_job"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-57488","reporting_entity":"CVE-2026-57488","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-57488-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-57488-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-57488"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-111718","title":"AipexBase through commit 690adb9 contains a sql injection vulnerability that allows attackers to inject SQL through the order_by and group_by fields of the /api/data/invoke endpoint. Attackers can supply subqueries or EXTRACTVALUE and UPDATEXML functions that bypass the SqlGuard denylist and row-level security, reading other users' rows and tables.","display_title":"Software component issue could expose or alter stored data","display_summary":"AipexBase through commit 690adb9 contains a sql injection vulnerability that allows attackers to inject SQL through the orderby and groupby fields of the /api/data/invoke endpoint.","display_reference":"CVE-2026-111718","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111718","source_title":"AipexBase through commit 690adb9 contains a sql injection vulnerability that allows attackers to inject SQL through the order_by and group_by fields of the /api/data/invoke endpoint. Attackers can supply subqueries or EXTRACTVALUE and UPDATEXML functions that bypass the SqlGuard denylist and row-level security, reading other users' rows and tables.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-17T00:24:19.378Z","source_hash":"content-fingerprint:fnv1a-5daf3e94","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-111718-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"AipexBase through commit 690adb9 contains a sql injection vulnerability that allows attackers to inject SQL through the order_by and group_by fields of the /api/data/invoke endpoint. Attackers can supply subqueries or EXTRACTVALUE and UPDATEXML functions that bypass the SqlGuard denylist and row-level security, reading other users' rows and tables.","source_quote_or_pointer":"Security Advisory CVE-2026-111718","fact_id":"SEA-CVE-2026-111718-F1","document_citation":"Security Advisory CVE-2026-111718"},{"id":"SEA-CVE-2026-111718-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"AipexBase through commit 690adb9 contains a sql injection vulnerability that allows attackers to inject SQL through the orderby and groupby fields of the /api/data/invoke endpoint.","source_quote_or_pointer":"Advisory description (CVE-2026-111718)","fact_id":"SEA-CVE-2026-111718-F2","document_citation":"Advisory description (CVE-2026-111718)"}],"source_stated_contributors":["AipexBase through commit 690adb9 contains a sql injection vulnerability that allows attackers to inject SQL through the orderby and groupby fields of the /api/data/invoke endpoint."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii","data.cross_tenant_data","arch.multi_tenant"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-111718","reporting_entity":"CVE-2026-111718","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-111718-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-111718-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-111718"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-111708","title":"WhaTicket Community through commit cf04795 contains an authentication bypass vulnerability that allows unauthenticated attackers to self-register as administrators via POST /auth/signup. Attackers can omit the profile field or set it to admin, gaining user management, settings, and access to all tickets, contacts, messages, and WhatsApp connections.","display_title":"Software component issue could allow unauthorized access","display_summary":"WhaTicket Community through commit cf04795 contains an authentication bypass vulnerability that allows unauthenticated attackers to self-register as administrators via POST /auth/signup.","display_reference":"CVE-2026-111708","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111708","source_title":"WhaTicket Community through commit cf04795 contains an authentication bypass vulnerability that allows unauthenticated attackers to self-register as administrators via POST /auth/signup. Attackers can omit the profile field or set it to admin, gaining user management, settings, and access to all tickets, contacts, messages, and WhatsApp connections.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-17T00:24:19.378Z","source_hash":"content-fingerprint:fnv1a-19496a05","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-111708-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"WhaTicket Community through commit cf04795 contains an authentication bypass vulnerability that allows unauthenticated attackers to self-register as administrators via POST /auth/signup. Attackers can omit the profile field or set it to admin, gaining user management, settings, and access to all tickets, contacts, messages, and WhatsApp connections.","source_quote_or_pointer":"Security Advisory CVE-2026-111708","fact_id":"SEA-CVE-2026-111708-F1","document_citation":"Security Advisory CVE-2026-111708"},{"id":"SEA-CVE-2026-111708-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"WhaTicket Community through commit cf04795 contains an authentication bypass vulnerability that allows unauthenticated attackers to self-register as administrators via POST /auth/signup.","source_quote_or_pointer":"Advisory description (CVE-2026-111708)","fact_id":"SEA-CVE-2026-111708-F2","document_citation":"Advisory description (CVE-2026-111708)"}],"source_stated_contributors":["WhaTicket Community through commit cf04795 contains an authentication bypass vulnerability that allows unauthenticated attackers to self-register as administrators via POST /auth/signup."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-111708","reporting_entity":"CVE-2026-111708","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-111708-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-111708-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-111708"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-111698","title":"HUIZHI ChargeOS cloud through 3.0.9 contains a missing authorization vulnerability in the hcp-mp PayController.xcxRecharge endpoint that allows attackers to modify any member's wallet balance without payment. Attackers can send requests with arbitrary amount and userId parameters to credit or reduce balances and consume charging services for free.","display_title":"Security issue reported in Software component","display_summary":"HUIZHI ChargeOS cloud through 3.0.9 contains a missing authorization vulnerability in the hcp-mp PayController.xcxRecharge endpoint that allows attackers to modify any member's wallet balance without payment.","display_reference":"CVE-2026-111698","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111698","source_title":"HUIZHI ChargeOS cloud through 3.0.9 contains a missing authorization vulnerability in the hcp-mp PayController.xcxRecharge endpoint that allows attackers to modify any member's wallet balance without payment. Attackers can send requests with arbitrary amount and userId parameters to credit or reduce balances and consume charging services for free.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-17T00:24:19.378Z","source_hash":"content-fingerprint:fnv1a-9963c98f","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Cloud & container infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-111698-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"HUIZHI ChargeOS cloud through 3.0.9 contains a missing authorization vulnerability in the hcp-mp PayController.xcxRecharge endpoint that allows attackers to modify any member's wallet balance without payment. Attackers can send requests with arbitrary amount and userId parameters to credit or reduce balances and consume charging services for free.","source_quote_or_pointer":"Security Advisory CVE-2026-111698","fact_id":"SEA-CVE-2026-111698-F1","document_citation":"Security Advisory CVE-2026-111698"},{"id":"SEA-CVE-2026-111698-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"HUIZHI ChargeOS cloud through 3.0.9 contains a missing authorization vulnerability in the hcp-mp PayController.xcxRecharge endpoint that allows attackers to modify any member's wallet balance without payment.","source_quote_or_pointer":"Advisory description (CVE-2026-111698)","fact_id":"SEA-CVE-2026-111698-F2","document_citation":"Advisory description (CVE-2026-111698)"}],"source_stated_contributors":["HUIZHI ChargeOS cloud through 3.0.9 contains a missing authorization vulnerability in the hcp-mp PayController.xcxRecharge endpoint that allows attackers to modify any member's wallet balance without payment."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.financial_action","auth.write_action"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-111698","reporting_entity":"CVE-2026-111698","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-111698-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-111698-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-111698"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-111692","title":"DataBuff ai-apm-web through 0.1.10 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge admin session tokens by using the hardcoded HMAC secret in JwtTokenService. Attackers can sign a payload of admin and a future expiry with the default dev-secret to gain full administrative access to protected /webapi routes, including the Doris SQL query API.","display_title":"Software component issue could allow unauthorized access","display_summary":"DataBuff ai-apm-web through 0.1.10 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge admin session tokens by using the hardcoded HMAC secret in JwtTokenService.","display_reference":"CVE-2026-111692","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111692","source_title":"DataBuff ai-apm-web through 0.1.10 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge admin session tokens by using the hardcoded HMAC secret in JwtTokenService. Attackers can sign a payload of admin and a future expiry with the default dev-secret to gain full administrative access to protected /webapi routes, including the Doris SQL query API.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-17T00:24:19.379Z","source_hash":"content-fingerprint:fnv1a-2c903313","affected_system":{"organization":"Software component project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-111692-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"DataBuff ai-apm-web through 0.1.10 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge admin session tokens by using the hardcoded HMAC secret in JwtTokenService. Attackers can sign a payload of admin and a future expiry with the default dev-secret to gain full administrative access to protected /webapi routes, including the Doris SQL query API.","source_quote_or_pointer":"Security Advisory CVE-2026-111692","fact_id":"SEA-CVE-2026-111692-F1","document_citation":"Security Advisory CVE-2026-111692"},{"id":"SEA-CVE-2026-111692-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"DataBuff ai-apm-web through 0.1.10 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge admin session tokens by using the hardcoded HMAC secret in JwtTokenService.","source_quote_or_pointer":"Advisory description (CVE-2026-111692)","fact_id":"SEA-CVE-2026-111692-F2","document_citation":"Advisory description (CVE-2026-111692)"}],"source_stated_contributors":["DataBuff ai-apm-web through 0.1.10 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge admin session tokens by using the hardcoded HMAC secret in JwtTokenService."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.credentials_secrets","arch.caching"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-111692","reporting_entity":"CVE-2026-111692","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-111692-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-111692-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-111692"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-111687","title":"WeRSS (we-mp-rss) through 1.5.3 contains a remote code execution vulnerability that allows unauthenticated attackers to run code via the template parameter of the public GET /rss/{feed_id} endpoint. Attackers can supply a non-built-in ext value and a {{=expression}} template whose object-subclass traversal bypasses the eval denylist to run OS commands as the service account.","display_title":"Software component issue could allow unintended commands to run","display_summary":"WeRSS (we-mp-rss) through 1.5.3 contains a remote code execution vulnerability that allows unauthenticated attackers to run code via the template parameter of the public GET /rss/{feedid} endpoint.","display_reference":"CVE-2026-111687","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111687","source_title":"WeRSS (we-mp-rss) through 1.5.3 contains a remote code execution vulnerability that allows unauthenticated attackers to run code via the template parameter of the public GET /rss/{feed_id} endpoint. Attackers can supply a non-built-in ext value and a {{=expression}} template whose object-subclass traversal bypasses the eval denylist to run OS commands as the service account.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-17T00:24:19.379Z","source_hash":"content-fingerprint:fnv1a-54601283","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-111687-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"WeRSS (we-mp-rss) through 1.5.3 contains a remote code execution vulnerability that allows unauthenticated attackers to run code via the template parameter of the public GET /rss/{feed_id} endpoint. Attackers can supply a non-built-in ext value and a {{=expression}} template whose object-subclass traversal bypasses the eval denylist to run OS commands as the service account.","source_quote_or_pointer":"Security Advisory CVE-2026-111687","fact_id":"SEA-CVE-2026-111687-F1","document_citation":"Security Advisory CVE-2026-111687"},{"id":"SEA-CVE-2026-111687-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"WeRSS (we-mp-rss) through 1.5.3 contains a remote code execution vulnerability that allows unauthenticated attackers to run code via the template parameter of the public GET /rss/{feedid} endpoint.","source_quote_or_pointer":"Advisory description (CVE-2026-111687)","fact_id":"SEA-CVE-2026-111687-F2","document_citation":"Advisory description (CVE-2026-111687)"}],"source_stated_contributors":["WeRSS (we-mp-rss) through 1.5.3 contains a remote code execution vulnerability that allows unauthenticated attackers to run code via the template parameter of the public GET /rss/{feedid} endpoint."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.code_execution","auth.public_publication","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-111687","reporting_entity":"CVE-2026-111687","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-111687-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-111687-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-111687"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-111682","title":"EFAK 5.0.0 through 5.1.0 contains a missing authorization vulnerability that allows authenticated low-privilege users to read LLM provider API keys through the /api/model-config REST API. Attackers with any ROLE_USER account can query /api/model-config/page or /api/model-config/{id} to retrieve unmasked keys, enabling provider account access and incurred costs.","display_title":"Security issue reported in Software component","display_summary":"EFAK 5.0.0 through 5.1.0 contains a missing authorization vulnerability that allows authenticated low-privilege users to read LLM provider API keys through the /api/model-config REST API.","display_reference":"CVE-2026-111682","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111682","source_title":"EFAK 5.0.0 through 5.1.0 contains a missing authorization vulnerability that allows authenticated low-privilege users to read LLM provider API keys through the /api/model-config REST API. Attackers with any ROLE_USER account can query /api/model-config/page or /api/model-config/{id} to retrieve unmasked keys, enabling provider account access and incurred costs.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-17T00:24:19.380Z","source_hash":"content-fingerprint:fnv1a-18712204","affected_system":{"organization":"Software component project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-111682-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"EFAK 5.0.0 through 5.1.0 contains a missing authorization vulnerability that allows authenticated low-privilege users to read LLM provider API keys through the /api/model-config REST API. Attackers with any ROLE_USER account can query /api/model-config/page or /api/model-config/{id} to retrieve unmasked keys, enabling provider account access and incurred costs.","source_quote_or_pointer":"Security Advisory CVE-2026-111682","fact_id":"SEA-CVE-2026-111682-F1","document_citation":"Security Advisory CVE-2026-111682"},{"id":"SEA-CVE-2026-111682-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"EFAK 5.0.0 through 5.1.0 contains a missing authorization vulnerability that allows authenticated low-privilege users to read LLM provider API keys through the /api/model-config REST API.","source_quote_or_pointer":"Advisory description (CVE-2026-111682)","fact_id":"SEA-CVE-2026-111682-F2","document_citation":"Advisory description (CVE-2026-111682)"}],"source_stated_contributors":["EFAK 5.0.0 through 5.1.0 contains a missing authorization vulnerability that allows authenticated low-privilege users to read LLM provider API keys through the /api/model-config REST API."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-111682","reporting_entity":"CVE-2026-111682","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-111682-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-111682-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-111682"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-111673","title":"IceCMS through 4.1.5 contains a missing authentication vulnerability that allows unauthenticated attackers to modify, delete, or disable any account because /User/ is excluded from the Shiro jwt filter. Attackers can send PUT requests to /User/updateUser to set a new password and role on any userId, including administrators, enabling full account takeover.","display_title":"Software component issue could expose accounts or credentials","display_summary":"IceCMS through 4.1.5 contains a missing authentication vulnerability that allows unauthenticated attackers to modify, delete, or disable any account because /User/ is excluded from the Shiro jwt filter.","display_reference":"CVE-2026-111673","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111673","source_title":"IceCMS through 4.1.5 contains a missing authentication vulnerability that allows unauthenticated attackers to modify, delete, or disable any account because /User/ is excluded from the Shiro jwt filter. Attackers can send PUT requests to /User/updateUser to set a new password and role on any userId, including administrators, enabling full account takeover.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-17T00:24:19.380Z","source_hash":"content-fingerprint:fnv1a-853b196a","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-111673-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"IceCMS through 4.1.5 contains a missing authentication vulnerability that allows unauthenticated attackers to modify, delete, or disable any account because /User/ is excluded from the Shiro jwt filter. Attackers can send PUT requests to /User/updateUser to set a new password and role on any userId, including administrators, enabling full account takeover.","source_quote_or_pointer":"Security Advisory CVE-2026-111673","fact_id":"SEA-CVE-2026-111673-F1","document_citation":"Security Advisory CVE-2026-111673"},{"id":"SEA-CVE-2026-111673-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"IceCMS through 4.1.5 contains a missing authentication vulnerability that allows unauthenticated attackers to modify, delete, or disable any account because /User/ is excluded from the Shiro jwt filter.","source_quote_or_pointer":"Advisory description (CVE-2026-111673)","fact_id":"SEA-CVE-2026-111673-F2","document_citation":"Advisory description (CVE-2026-111673)"}],"source_stated_contributors":["IceCMS through 4.1.5 contains a missing authentication vulnerability that allows unauthenticated attackers to modify, delete, or disable any account because /User/ is excluded from the Shiro jwt filter."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.write_action","data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-111673","reporting_entity":"CVE-2026-111673","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-111673-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-111673-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-111673"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-111662","title":"Chaskiq through 2.0.3 contains a server-side request forgery vulnerability that allows unauthenticated attackers to make the server fetch arbitrary URLs via the url parameter of the /oembed endpoint. Attackers can target loopback, private, or cloud-metadata addresses through FetchLinkCardService, which follows redirects and skips TLS verification, to read internal page titles and descriptions.","display_title":"Software component issue could reach internal services","display_summary":"Chaskiq through 2.0.3 contains a server-side request forgery vulnerability that allows unauthenticated attackers to make the server fetch arbitrary URLs via the url parameter of the /oembed endpoint.","display_reference":"CVE-2026-111662","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111662","source_title":"Chaskiq through 2.0.3 contains a server-side request forgery vulnerability that allows unauthenticated attackers to make the server fetch arbitrary URLs via the url parameter of the /oembed endpoint. Attackers can target loopback, private, or cloud-metadata addresses through FetchLinkCardService, which follows redirects and skips TLS verification, to read internal page titles and descriptions.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-17T00:24:19.380Z","source_hash":"content-fingerprint:fnv1a-be9bff38","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Cloud & container infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-111662-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Chaskiq through 2.0.3 contains a server-side request forgery vulnerability that allows unauthenticated attackers to make the server fetch arbitrary URLs via the url parameter of the /oembed endpoint. Attackers can target loopback, private, or cloud-metadata addresses through FetchLinkCardService, which follows redirects and skips TLS verification, to read internal page titles and descriptions.","source_quote_or_pointer":"Security Advisory CVE-2026-111662","fact_id":"SEA-CVE-2026-111662-F1","document_citation":"Security Advisory CVE-2026-111662"},{"id":"SEA-CVE-2026-111662-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Chaskiq through 2.0.3 contains a server-side request forgery vulnerability that allows unauthenticated attackers to make the server fetch arbitrary URLs via the url parameter of the /oembed endpoint.","source_quote_or_pointer":"Advisory description (CVE-2026-111662)","fact_id":"SEA-CVE-2026-111662-F2","document_citation":"Advisory description (CVE-2026-111662)"}],"source_stated_contributors":["Chaskiq through 2.0.3 contains a server-side request forgery vulnerability that allows unauthenticated attackers to make the server fetch arbitrary URLs via the url parameter of the /oembed endpoint."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Internal network access","Cloud metadata or credential exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-111662","reporting_entity":"CVE-2026-111662","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-111662-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-111662-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"The service fetched a URL chosen by the caller and could be steered at internal systems. Restrict outbound destinations and block internal address ranges.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-111662"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-111642","title":"FastapiAdmin through 3.0 contains a hard-coded JWT signing secret in backend/app/config/setting.py that allows low-privileged users to forge tokens impersonating the superuser. Attackers can register via the unauthenticated /api/v1/system/user/register endpoint, log in, and forge an HS256 token keeping their session_id but naming the superuser in user_name to gain superuser privileges.","display_title":"Software component issue could expose accounts or credentials","display_summary":"FastapiAdmin through 3.0 contains a hard-coded JWT signing secret in backend/app/config/setting.py that allows low-privileged users to forge tokens impersonating the superuser.","display_reference":"CVE-2026-111642","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111642","source_title":"FastapiAdmin through 3.0 contains a hard-coded JWT signing secret in backend/app/config/setting.py that allows low-privileged users to forge tokens impersonating the superuser. Attackers can register via the unauthenticated /api/v1/system/user/register endpoint, log in, and forge an HS256 token keeping their session_id but naming the superuser in user_name to gain superuser privileges.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-17T00:24:19.380Z","source_hash":"content-fingerprint:fnv1a-44d9b45a","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-111642-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"FastapiAdmin through 3.0 contains a hard-coded JWT signing secret in backend/app/config/setting.py that allows low-privileged users to forge tokens impersonating the superuser. Attackers can register via the unauthenticated /api/v1/system/user/register endpoint, log in, and forge an HS256 token keeping their session_id but naming the superuser in user_name to gain superuser privileges.","source_quote_or_pointer":"Security Advisory CVE-2026-111642","fact_id":"SEA-CVE-2026-111642-F1","document_citation":"Security Advisory CVE-2026-111642"},{"id":"SEA-CVE-2026-111642-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"FastapiAdmin through 3.0 contains a hard-coded JWT signing secret in backend/app/config/setting.py that allows low-privileged users to forge tokens impersonating the superuser.","source_quote_or_pointer":"Advisory description (CVE-2026-111642)","fact_id":"SEA-CVE-2026-111642-F2","document_citation":"Advisory description (CVE-2026-111642)"}],"source_stated_contributors":["FastapiAdmin through 3.0 contains a hard-coded JWT signing secret in backend/app/config/setting.py that allows low-privileged users to forge tokens impersonating the superuser."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-111642","reporting_entity":"CVE-2026-111642","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-111642-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-111642-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-111642"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-111637","title":"NexoPOS through 6.2.4 contains a missing authentication vulnerability that allows unauthenticated attackers to read accounting transaction records via GET /api/fields/{resource}/{identifier}. Attackers can request transaction field classes like ns.entity-transaction with sequential ids to retrieve names, values, account ids, and descriptions without nexopos.read.transactions permission.","display_title":"Security issue reported in Software component","display_summary":"NexoPOS through 6.2.4 contains a missing authentication vulnerability that allows unauthenticated attackers to read accounting transaction records via GET /api/fields/{resource}/{identifier}.","display_reference":"CVE-2026-111637","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111637","source_title":"NexoPOS through 6.2.4 contains a missing authentication vulnerability that allows unauthenticated attackers to read accounting transaction records via GET /api/fields/{resource}/{identifier}. Attackers can request transaction field classes like ns.entity-transaction with sequential ids to retrieve names, values, account ids, and descriptions without nexopos.read.transactions permission.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-17T00:24:19.380Z","source_hash":"content-fingerprint:fnv1a-8396245c","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-111637-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"NexoPOS through 6.2.4 contains a missing authentication vulnerability that allows unauthenticated attackers to read accounting transaction records via GET /api/fields/{resource}/{identifier}. Attackers can request transaction field classes like ns.entity-transaction with sequential ids to retrieve names, values, account ids, and descriptions without nexopos.read.transactions permission.","source_quote_or_pointer":"Security Advisory CVE-2026-111637","fact_id":"SEA-CVE-2026-111637-F1","document_citation":"Security Advisory CVE-2026-111637"},{"id":"SEA-CVE-2026-111637-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"NexoPOS through 6.2.4 contains a missing authentication vulnerability that allows unauthenticated attackers to read accounting transaction records via GET /api/fields/{resource}/{identifier}.","source_quote_or_pointer":"Advisory description (CVE-2026-111637)","fact_id":"SEA-CVE-2026-111637-F2","document_citation":"Advisory description (CVE-2026-111637)"}],"source_stated_contributors":["NexoPOS through 6.2.4 contains a missing authentication vulnerability that allows unauthenticated attackers to read accounting transaction records via GET /api/fields/{resource}/{identifier}."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-111637","reporting_entity":"CVE-2026-111637","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-111637-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-111637-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-111637"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-111632","title":"Aureus ERP through 1.6.0 contains an authorization bypass vulnerability that allows authenticated API users to create or move records into disallowed companies by supplying a foreign company_id. Attackers can submit create or update requests to plugin REST API endpoints such as partners, sales, or inventories to break multi-company data segregation.","display_title":"Software component issue could allow unauthorized access","display_summary":"Aureus ERP through 1.6.0 contains an authorization bypass vulnerability that allows authenticated API users to create or move records into disallowed companies by supplying a foreign companyid.","display_reference":"CVE-2026-111632","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111632","source_title":"Aureus ERP through 1.6.0 contains an authorization bypass vulnerability that allows authenticated API users to create or move records into disallowed companies by supplying a foreign company_id. Attackers can submit create or update requests to plugin REST API endpoints such as partners, sales, or inventories to break multi-company data segregation.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-17T00:24:19.380Z","source_hash":"content-fingerprint:fnv1a-c0127143","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-111632-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Aureus ERP through 1.6.0 contains an authorization bypass vulnerability that allows authenticated API users to create or move records into disallowed companies by supplying a foreign company_id. Attackers can submit create or update requests to plugin REST API endpoints such as partners, sales, or inventories to break multi-company data segregation.","source_quote_or_pointer":"Security Advisory CVE-2026-111632","fact_id":"SEA-CVE-2026-111632-F1","document_citation":"Security Advisory CVE-2026-111632"},{"id":"SEA-CVE-2026-111632-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Aureus ERP through 1.6.0 contains an authorization bypass vulnerability that allows authenticated API users to create or move records into disallowed companies by supplying a foreign companyid.","source_quote_or_pointer":"Advisory description (CVE-2026-111632)","fact_id":"SEA-CVE-2026-111632-F2","document_citation":"Advisory description (CVE-2026-111632)"}],"source_stated_contributors":["Aureus ERP through 1.6.0 contains an authorization bypass vulnerability that allows authenticated API users to create or move records into disallowed companies by supplying a foreign companyid."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.pii"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-111632","reporting_entity":"CVE-2026-111632","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-111632-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-111632-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-111632"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-111622","title":"smart-sso through 2.1.1 contains an open redirect vulnerability in the /login handler that allows unauthenticated attackers to steal OAuth2 authorization codes by supplying an unvalidated redirectUri parameter. Attackers can send crafted /login links to users with active SSO sessions, then redeem stolen codes at /oauth2/access_token with any valid client credentials to obtain victims' access tokens.","display_title":"Software component issue could expose accounts or credentials","display_summary":"smart-sso through 2.1.1 contains an open redirect vulnerability in the /login handler that allows unauthenticated attackers to steal OAuth2 authorization codes by supplying an unvalidated redirectUri parameter.","display_reference":"CVE-2026-111622","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111622","source_title":"smart-sso through 2.1.1 contains an open redirect vulnerability in the /login handler that allows unauthenticated attackers to steal OAuth2 authorization codes by supplying an unvalidated redirectUri parameter. Attackers can send crafted /login links to users with active SSO sessions, then redeem stolen codes at /oauth2/access_token with any valid client credentials to obtain victims' access tokens.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-17T00:24:19.381Z","source_hash":"content-fingerprint:fnv1a-ca8be114","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-111622-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"smart-sso through 2.1.1 contains an open redirect vulnerability in the /login handler that allows unauthenticated attackers to steal OAuth2 authorization codes by supplying an unvalidated redirectUri parameter. Attackers can send crafted /login links to users with active SSO sessions, then redeem stolen codes at /oauth2/access_token with any valid client credentials to obtain victims' access tokens.","source_quote_or_pointer":"Security Advisory CVE-2026-111622","fact_id":"SEA-CVE-2026-111622-F1","document_citation":"Security Advisory CVE-2026-111622"},{"id":"SEA-CVE-2026-111622-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"smart-sso through 2.1.1 contains an open redirect vulnerability in the /login handler that allows unauthenticated attackers to steal OAuth2 authorization codes by supplying an unvalidated redirectUri parameter.","source_quote_or_pointer":"Advisory description (CVE-2026-111622)","fact_id":"SEA-CVE-2026-111622-F2","document_citation":"Advisory description (CVE-2026-111622)"}],"source_stated_contributors":["smart-sso through 2.1.1 contains an open redirect vulnerability in the /login handler that allows unauthenticated attackers to steal OAuth2 authorization codes by supplying an unvalidated redirectUri parameter."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-111622","reporting_entity":"CVE-2026-111622","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-111622-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-111622-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-111622"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-111612","title":"netdisk-fast-download through 0.4.8 contains an information disclosure vulnerability that allows unauthenticated attackers to retrieve donated netdisk credentials via the /v2/randomAuth endpoint in ParserApi. Attackers can repeatedly call the endpoint and decrypt the encryptedAuth blob using the hard-coded AES key nfd_auth_key2026 to recover other users' cloud-drive cookies, tokens, or passwords.","display_title":"Software component issue could expose accounts or credentials","display_summary":"netdisk-fast-download through 0.4.8 contains an information disclosure vulnerability that allows unauthenticated attackers to retrieve donated netdisk credentials via the /v2/randomAuth endpoint in ParserApi.","display_reference":"CVE-2026-111612","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111612","source_title":"netdisk-fast-download through 0.4.8 contains an information disclosure vulnerability that allows unauthenticated attackers to retrieve donated netdisk credentials via the /v2/randomAuth endpoint in ParserApi. Attackers can repeatedly call the endpoint and decrypt the encryptedAuth blob using the hard-coded AES key nfd_auth_key2026 to recover other users' cloud-drive cookies, tokens, or passwords.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-17T00:24:19.381Z","source_hash":"content-fingerprint:fnv1a-61545177","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Cloud & container infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-111612-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"netdisk-fast-download through 0.4.8 contains an information disclosure vulnerability that allows unauthenticated attackers to retrieve donated netdisk credentials via the /v2/randomAuth endpoint in ParserApi. Attackers can repeatedly call the endpoint and decrypt the encryptedAuth blob using the hard-coded AES key nfd_auth_key2026 to recover other users' cloud-drive cookies, tokens, or passwords.","source_quote_or_pointer":"Security Advisory CVE-2026-111612","fact_id":"SEA-CVE-2026-111612-F1","document_citation":"Security Advisory CVE-2026-111612"},{"id":"SEA-CVE-2026-111612-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"netdisk-fast-download through 0.4.8 contains an information disclosure vulnerability that allows unauthenticated attackers to retrieve donated netdisk credentials via the /v2/randomAuth endpoint in ParserApi.","source_quote_or_pointer":"Advisory description (CVE-2026-111612)","fact_id":"SEA-CVE-2026-111612-F2","document_citation":"Advisory description (CVE-2026-111612)"}],"source_stated_contributors":["netdisk-fast-download through 0.4.8 contains an information disclosure vulnerability that allows unauthenticated attackers to retrieve donated netdisk credentials via the /v2/randomAuth endpoint in ParserApi."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-111612","reporting_entity":"CVE-2026-111612","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-111612-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-111612-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-111612"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-102693","title":"RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. Prior to 2026.04, the ATWINC15x0 driver's _atwinc15x0_sta_set_current_ssid function uses strcpy to copy an SSID without checking the destination size. When MODULE_ATWINC15X0_DYNAMIC_CONNECT is enabled, a nearby attacker can advertise a malformed or oversized SSID that is processed during Wi-Fi scanning, causing memory corruption and potentially a hard fault, denial of service, or code execution. This issue is fixed in version 2026.04.","display_title":"Software component issue could allow unintended commands to run","display_summary":"RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems.","display_reference":"CVE-2026-102693","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-102693","source_title":"RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. Prior to 2026.04, the ATWINC15x0 driver's _atwinc15x0_sta_set_current_ssid function uses strcpy to copy an SSID without checking the destination size. When MODULE_ATWINC15X0_DYNAMIC_CONNECT is enabled, a nearby attacker can advertise a malformed or oversized SSID that is processed during Wi-Fi scanning, causing memory corruption and potentially a hard fault, denial of service, or code execution. This issue is fixed in version 2026.04.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-17T00:24:19.383Z","source_hash":"content-fingerprint:fnv1a-dfd85256","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-102693-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. Prior to 2026.04, the ATWINC15x0 driver's _atwinc15x0_sta_set_current_ssid function uses strcpy to copy an SSID without checking the destination size. When MODULE_ATWINC15X0_DYNAMIC_CONNECT is enabled, a nearby attacker can advertise a malformed or oversized SSID that is processed during Wi-Fi scanning, causing memory corruption and potentially a hard fault, denial of service, or code execution. This issue is fixed in version 2026.04.","source_quote_or_pointer":"Security Advisory CVE-2026-102693","fact_id":"SEA-CVE-2026-102693-F1","document_citation":"Security Advisory CVE-2026-102693"},{"id":"SEA-CVE-2026-102693-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. Prior to 2026.04, the ATWINC15x0 driver's atwinc15x0stasetcurrentssid function uses strcpy to copy an SSID without checking the destination size.","source_quote_or_pointer":"Advisory description (CVE-2026-102693)","fact_id":"SEA-CVE-2026-102693-F2","document_citation":"Advisory description (CVE-2026-102693)"}],"source_stated_contributors":["RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. Prior to 2026.04, the ATWINC15x0 driver's atwinc15x0stasetcurrentssid function uses strcpy to copy an SSID without checking the destination size."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-102693","reporting_entity":"CVE-2026-102693","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-102693-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-102693-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-102693"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-102607","title":"ZoneMinder is a free, open source closed-circuit television software application. Prior to 1.38.3, the exportEvents() function concatenates the attacker-controlled exportFile request parameter into a shell command without neutralizing shell metacharacters when an authenticated user with View Events or View Snapshots permission submits an event export request with a crafted exportFile value, a valid CSRF token, and exportDetail enabled. The affected components are exportEvents(), exportFile, web/ajax/event.php, web/skins/classic/includes/export_functions.php. In this attack mechanism, the crafted exportFile value reaches the trailing directory argument of a tar or zip command executed by exec(). The attacker can execute arbitrary operating system commands as the web server user. This issue is fixed in version 1.38.3.","display_title":"Security issue reported in Software component","display_summary":"ZoneMinder is a free, open source closed-circuit television software application. Prior to 1.38.3, the exportEvents() function concatenates the attacker-controlled exportFile request parameter into a shell command…","display_reference":"CVE-2026-102607","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-102607","source_title":"ZoneMinder is a free, open source closed-circuit television software application. Prior to 1.38.3, the exportEvents() function concatenates the attacker-controlled exportFile request parameter into a shell command without neutralizing shell metacharacters when an authenticated user with View Events or View Snapshots permission submits an event export request with a crafted exportFile value, a valid CSRF token, and exportDetail enabled. The affected components are exportEvents(), exportFile, web/ajax/event.php, web/skins/classic/includes/export_functions.php. In this attack mechanism, the crafted exportFile value reaches the trailing directory argument of a tar or zip command executed by exec(). The attacker can execute arbitrary operating system commands as the web server user. This issue is fixed in version 1.38.3.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-17T00:24:19.383Z","source_hash":"content-fingerprint:fnv1a-a25616c3","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-102607-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"ZoneMinder is a free, open source closed-circuit television software application. Prior to 1.38.3, the exportEvents() function concatenates the attacker-controlled exportFile request parameter into a shell command without neutralizing shell metacharacters when an authenticated user with View Events or View Snapshots permission submits an event export request with a crafted exportFile value, a valid CSRF token, and exportDetail enabled. The affected components are exportEvents(), exportFile, web/ajax/event.php, web/skins/classic/includes/export_functions.php. In this attack mechanism, the crafted exportFile value reaches the trailing directory argument of a tar or zip command executed by exec(). The attacker can execute arbitrary operating system commands as the web server user. This issue is fixed in version 1.38.3.","source_quote_or_pointer":"Security Advisory CVE-2026-102607","fact_id":"SEA-CVE-2026-102607-F1","document_citation":"Security Advisory CVE-2026-102607"},{"id":"SEA-CVE-2026-102607-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"ZoneMinder is a free, open source closed-circuit television software application. Prior to 1.38.3, the exportEvents() function concatenates the attacker-controlled exportFile request parameter into a shell command without neutralizing shell metacharacters when an authenticated user with View Events or View Snapshots…","source_quote_or_pointer":"Advisory description (CVE-2026-102607)","fact_id":"SEA-CVE-2026-102607-F2","document_citation":"Advisory description (CVE-2026-102607)"}],"source_stated_contributors":["ZoneMinder is a free, open source closed-circuit television software application. Prior to 1.38.3, the exportEvents() function concatenates the attacker-controlled exportFile request parameter into a shell command without neutralizing shell metacharacters when an authenticated user with View Events or View Snapshots…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.code_execution","auth.privileged_action","data.pii","arch.event_driven"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-102607","reporting_entity":"CVE-2026-102607","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-102607-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-102607-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-102607"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-107674","title":"IBM i 7.3, 7.4, 7.5, and 7.6 is vulnerable to a denial of service to Digital Certificate Manager (DCM) for System TLS using applications attempting to create secure network connections. A bad actor could use this to prevent a service from starting or cause it to fallback to non-secure connections.","display_title":"Software component issue could make the service unavailable","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-107674","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107674","source_title":"IBM i 7.3, 7.4, 7.5, and 7.6 is vulnerable to a denial of service to Digital Certificate Manager (DCM) for System TLS using applications attempting to create secure network connections. A bad actor could use this to prevent a service from starting or cause it to fallback to non-secure connections.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T21:01:43.262Z","source_hash":"content-fingerprint:fnv1a-d60efed2","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-107674-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM i 7.3, 7.4, 7.5, and 7.6 is vulnerable to a denial of service to Digital Certificate Manager (DCM) for System TLS using applications attempting to create secure network connections. A bad actor could use this to prevent a service from starting or cause it to fallback to non-secure connections.","source_quote_or_pointer":"Security Advisory CVE-2026-107674","fact_id":"SEA-CVE-2026-107674-F1","document_citation":"Security Advisory CVE-2026-107674"},{"id":"SEA-CVE-2026-107674-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM i 7.3, 7.4, 7.5, and 7.6 is vulnerable to a denial of service to Digital Certificate Manager (DCM) for System TLS using applications attempting to create secure network connections. A bad actor could use this to prevent a service from starting or cause it to fallback to non-secure connections.","source_quote_or_pointer":"Advisory description (CVE-2026-107674)","fact_id":"SEA-CVE-2026-107674-F2","document_citation":"Advisory description (CVE-2026-107674)"}],"source_stated_contributors":["IBM i 7.3, 7.4, 7.5, and 7.6 is vulnerable to a denial of service to Digital Certificate Manager (DCM) for System TLS using applications attempting to create secure network connections. A bad actor could use this to prevent a service from starting or cause it to fallback to non-secure connections."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-107674","reporting_entity":"CVE-2026-107674","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-107674-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-107674-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-107674"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109812","title":"A missing authorization vulnerability exists in the internal API /api/v1/secrets/ of some of Moxa's industrial computing products. A low-privileged authenticated attacker with adjacent network access could exploit this vulnerability to access sensitive information, potentially resulting in the disclosure of confidential data, including cryptographic key material.","display_title":"Software component issue could expose accounts or credentials","display_summary":"A missing authorization vulnerability exists in the internal API /api/v1/secrets/ of some of Moxa's industrial computing products.","display_reference":"CVE-2026-109812","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109812","source_title":"A missing authorization vulnerability exists in the internal API /api/v1/secrets/ of some of Moxa's industrial computing products. A low-privileged authenticated attacker with adjacent network access could exploit this vulnerability to access sensitive information, potentially resulting in the disclosure of confidential data, including cryptographic key material.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T21:01:43.278Z","source_hash":"content-fingerprint:fnv1a-40ae7590","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109812-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A missing authorization vulnerability exists in the internal API /api/v1/secrets/ of some of Moxa's industrial computing products. A low-privileged authenticated attacker with adjacent network access could exploit this vulnerability to access sensitive information, potentially resulting in the disclosure of confidential data, including cryptographic key material.","source_quote_or_pointer":"Security Advisory CVE-2026-109812","fact_id":"SEA-CVE-2026-109812-F1","document_citation":"Security Advisory CVE-2026-109812"},{"id":"SEA-CVE-2026-109812-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A missing authorization vulnerability exists in the internal API /api/v1/secrets/ of some of Moxa's industrial computing products. A low-privileged authenticated attacker with adjacent network access could exploit this vulnerability to access sensitive information, potentially resulting in the disclosure of…","source_quote_or_pointer":"Advisory description (CVE-2026-109812)","fact_id":"SEA-CVE-2026-109812-F2","document_citation":"Advisory description (CVE-2026-109812)"}],"source_stated_contributors":["A missing authorization vulnerability exists in the internal API /api/v1/secrets/ of some of Moxa's industrial computing products. A low-privileged authenticated attacker with adjacent network access could exploit this vulnerability to access sensitive information, potentially resulting in the disclosure of…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109812","reporting_entity":"CVE-2026-109812","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109812-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109812-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-109812"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-111237","title":"A weakness has been identified in Ultralytics FastSAM up to b4ed20c2fed75eadc5aa7d8b09fedd137b873b52. This affects the function session.get_modelmeta.custom_metadata_map of the file ultralytics/nn/autobackend.py of the component AutoBackend Model Loading. This manipulation of the argument imgsz/names/kpt_shape causes improper neutralization of directives in dynamically evaluated code. The attack requires local access. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available. The project was informed of the problem early through an issue report but has not responded yet.","display_title":"Security issue reported in Software component","display_summary":"A weakness has been identified in Ultralytics FastSAM up to b4ed20c2fed75eadc5aa7d8b09fedd137b873b52. This affects the function session.getmodelmeta.custommetadatamap of the file ultralytics/nn/autobackend.py of the…","display_reference":"CVE-2026-111237","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111237","source_title":"A weakness has been identified in Ultralytics FastSAM up to b4ed20c2fed75eadc5aa7d8b09fedd137b873b52. This affects the function session.get_modelmeta.custom_metadata_map of the file ultralytics/nn/autobackend.py of the component AutoBackend Model Loading. This manipulation of the argument imgsz/names/kpt_shape causes improper neutralization of directives in dynamically evaluated code. The attack requires local access. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available. The project was informed of the problem early through an issue report but has not responded yet.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T21:01:43.279Z","source_hash":"content-fingerprint:fnv1a-d51472bc","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-111237-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A weakness has been identified in Ultralytics FastSAM up to b4ed20c2fed75eadc5aa7d8b09fedd137b873b52. This affects the function session.get_modelmeta.custom_metadata_map of the file ultralytics/nn/autobackend.py of the component AutoBackend Model Loading. This manipulation of the argument imgsz/names/kpt_shape causes improper neutralization of directives in dynamically evaluated code. The attack requires local access. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available. The project was informed of the problem early through an issue report but has not responded yet.","source_quote_or_pointer":"Security Advisory CVE-2026-111237","fact_id":"SEA-CVE-2026-111237-F1","document_citation":"Security Advisory CVE-2026-111237"},{"id":"SEA-CVE-2026-111237-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A weakness has been identified in Ultralytics FastSAM up to b4ed20c2fed75eadc5aa7d8b09fedd137b873b52. This affects the function session.getmodelmeta.custommetadatamap of the file ultralytics/nn/autobackend.py of the component AutoBackend Model Loading.","source_quote_or_pointer":"Advisory description (CVE-2026-111237)","fact_id":"SEA-CVE-2026-111237-F2","document_citation":"Advisory description (CVE-2026-111237)"}],"source_stated_contributors":["A weakness has been identified in Ultralytics FastSAM up to b4ed20c2fed75eadc5aa7d8b09fedd137b873b52. This affects the function session.getmodelmeta.custommetadatamap of the file ultralytics/nn/autobackend.py of the component AutoBackend Model Loading."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-111237","reporting_entity":"CVE-2026-111237","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-111237-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-111237-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-111237"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-106705","title":"ELADMIN (eladmin-mp) up to 2.7 contains an improper access control vulnerability in the role management module. The endpoint PUT /api/roles/menu (RoleController.updateRoleMenu) authorizes the request only by comparing the target role's level with the caller's minimum level. The application neither validates the granted menu set nor prevents a caller from modifying its own role. A logged-in non-admin user whose role holds the delegated roles:edit permission can submit its own role id together with an arbitrary list of menu ids.","display_title":"Software component issue could allow unauthorized access","display_summary":"ELADMIN (eladmin-mp) up to 2.7 contains an improper access control vulnerability in the role management module. The endpoint PUT /api/roles/menu (RoleController.updateRoleMenu) authorizes the request only by comparing…","display_reference":"CVE-2026-106705","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-106705","source_title":"ELADMIN (eladmin-mp) up to 2.7 contains an improper access control vulnerability in the role management module. The endpoint PUT /api/roles/menu (RoleController.updateRoleMenu) authorizes the request only by comparing the target role's level with the caller's minimum level. The application neither validates the granted menu set nor prevents a caller from modifying its own role. A logged-in non-admin user whose role holds the delegated roles:edit permission can submit its own role id together with an arbitrary list of menu ids.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T21:01:43.279Z","source_hash":"content-fingerprint:fnv1a-ebf44e9e","affected_system":{"organization":"ELADMIN (eladmin-mp) up to 2.7 contains an improper access control vulnerability in the role management module. The endpoint PUT /api/roles/menu (RoleController.updateRoleMenu) authorizes the request only by comparing the target role's level with the caller's minimum level. The application neither validates the granted menu set nor prevents a caller from modifying its own role. A logged-in non-admin user whose role holds the delegated roles project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-106705-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"ELADMIN (eladmin-mp) up to 2.7 contains an improper access control vulnerability in the role management module. The endpoint PUT /api/roles/menu (RoleController.updateRoleMenu) authorizes the request only by comparing the target role's level with the caller's minimum level. The application neither validates the granted menu set nor prevents a caller from modifying its own role. A logged-in non-admin user whose role holds the delegated roles:edit permission can submit its own role id together with an arbitrary list of menu ids.","source_quote_or_pointer":"Security Advisory CVE-2026-106705","fact_id":"SEA-CVE-2026-106705-F1","document_citation":"Security Advisory CVE-2026-106705"},{"id":"SEA-CVE-2026-106705-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"ELADMIN (eladmin-mp) up to 2.7 contains an improper access control vulnerability in the role management module. The endpoint PUT /api/roles/menu (RoleController.updateRoleMenu) authorizes the request only by comparing the target role's level with the caller's minimum level.","source_quote_or_pointer":"Advisory description (CVE-2026-106705)","fact_id":"SEA-CVE-2026-106705-F2","document_citation":"Advisory description (CVE-2026-106705)"}],"source_stated_contributors":["ELADMIN (eladmin-mp) up to 2.7 contains an improper access control vulnerability in the role management module. The endpoint PUT /api/roles/menu (RoleController.updateRoleMenu) authorizes the request only by comparing the target role's level with the caller's minimum level."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-106705","reporting_entity":"CVE-2026-106705","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-106705-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-106705-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-106705"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2025-66969","title":"Integer overflow in OpenModSim (<=1.11.0), leading to denial of service","display_title":"Software component issue could make the service unavailable","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2025-66969","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2025-66969","source_title":"Integer overflow in OpenModSim (<=1.11.0), leading to denial of service","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T21:01:43.280Z","source_hash":"content-fingerprint:fnv1a-64d8d1f2","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2025-66969-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Integer overflow in OpenModSim (<=1.11.0), leading to denial of service","source_quote_or_pointer":"Security Advisory CVE-2025-66969","fact_id":"SEA-CVE-2025-66969-F1","document_citation":"Security Advisory CVE-2025-66969"},{"id":"SEA-CVE-2025-66969-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Integer overflow in OpenModSim (<=1.11.0), leading to denial of service","source_quote_or_pointer":"Advisory description (CVE-2025-66969)","fact_id":"SEA-CVE-2025-66969-F2","document_citation":"Advisory description (CVE-2025-66969)"}],"source_stated_contributors":["Integer overflow in OpenModSim (<=1.11.0), leading to denial of service"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2025-66969","reporting_entity":"CVE-2025-66969","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2025-66969-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2025-66969-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2025-66969"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-110287","title":"Improper access control in asset contact password in Devolutions Server 2026.3.8.0 and earlier allows an authenticated user with general Edit but without Edit asset permission to modify the asset contact password via a crafted direct request to the partial-save endpoint.","display_title":"Software component issue could allow unauthorized access","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-110287","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110287","source_title":"Improper access control in asset contact password in Devolutions Server 2026.3.8.0 and earlier allows an authenticated user with general Edit but without Edit asset permission to modify the asset contact password via a crafted direct request to the partial-save endpoint.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T16:33:35.951Z","source_hash":"content-fingerprint:fnv1a-3b7c9a96","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-110287-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Improper access control in asset contact password in Devolutions Server 2026.3.8.0 and earlier allows an authenticated user with general Edit but without Edit asset permission to modify the asset contact password via a crafted direct request to the partial-save endpoint.","source_quote_or_pointer":"Security Advisory CVE-2026-110287","fact_id":"SEA-CVE-2026-110287-F1","document_citation":"Security Advisory CVE-2026-110287"},{"id":"SEA-CVE-2026-110287-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Improper access control in asset contact password in Devolutions Server 2026.3.8.0 and earlier allows an authenticated user with general Edit but without Edit asset permission to modify the asset contact password via a crafted direct request to the partial-save endpoint.","source_quote_or_pointer":"Advisory description (CVE-2026-110287)","fact_id":"SEA-CVE-2026-110287-F2","document_citation":"Advisory description (CVE-2026-110287)"}],"source_stated_contributors":["Improper access control in asset contact password in Devolutions Server 2026.3.8.0 and earlier allows an authenticated user with general Edit but without Edit asset permission to modify the asset contact password via a crafted direct request to the partial-save endpoint."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.write_action","data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-110287","reporting_entity":"CVE-2026-110287","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-110287-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-110287-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-110287"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-110804","title":"Improperly controlled modification of JIT elevation settings in PAM checkout in Devolutions Server 2026.3.8.0 and earlier allows an authenticated user with PAM checkout access to delete arbitrary Active Directory groups or retain elevated privileges via client-supplied JIT elevation settings in a checkout update request.","display_title":"Security issue reported in Software component","display_summary":"Improperly controlled modification of JIT elevation settings in PAM checkout in Devolutions Server 2026.3.8.0 and earlier allows an authenticated user with PAM checkout access to delete arbitrary Active Directory groups…","display_reference":"CVE-2026-110804","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110804","source_title":"Improperly controlled modification of JIT elevation settings in PAM checkout in Devolutions Server 2026.3.8.0 and earlier allows an authenticated user with PAM checkout access to delete arbitrary Active Directory groups or retain elevated privileges via client-supplied JIT elevation settings in a checkout update request.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T16:33:35.955Z","source_hash":"content-fingerprint:fnv1a-63b2c609","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-110804-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Improperly controlled modification of JIT elevation settings in PAM checkout in Devolutions Server 2026.3.8.0 and earlier allows an authenticated user with PAM checkout access to delete arbitrary Active Directory groups or retain elevated privileges via client-supplied JIT elevation settings in a checkout update request.","source_quote_or_pointer":"Security Advisory CVE-2026-110804","fact_id":"SEA-CVE-2026-110804-F1","document_citation":"Security Advisory CVE-2026-110804"},{"id":"SEA-CVE-2026-110804-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Improperly controlled modification of JIT elevation settings in PAM checkout in Devolutions Server 2026.3.8.0 and earlier allows an authenticated user with PAM checkout access to delete arbitrary Active Directory groups or retain elevated privileges via client-supplied JIT elevation settings in a checkout update…","source_quote_or_pointer":"Advisory description (CVE-2026-110804)","fact_id":"SEA-CVE-2026-110804-F2","document_citation":"Advisory description (CVE-2026-110804)"}],"source_stated_contributors":["Improperly controlled modification of JIT elevation settings in PAM checkout in Devolutions Server 2026.3.8.0 and earlier allows an authenticated user with PAM checkout access to delete arbitrary Active Directory groups or retain elevated privileges via client-supplied JIT elevation settings in a checkout update…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.financial_action","auth.destructive_action","auth.privileged_action","auth.write_action","data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-110804","reporting_entity":"CVE-2026-110804","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-110804-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-110804-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-110804"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-110805","title":"Server-side request forgery in PingOne groups endpoint in Devolutions Server 2026.3.8.0 and earlier allows an authenticated low-privileged user to exfiltrate the stored PingOne application secret via an attacker-controlled PingOne configuration in the request parameter.","display_title":"Software component issue could reach internal services","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-110805","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110805","source_title":"Server-side request forgery in PingOne groups endpoint in Devolutions Server 2026.3.8.0 and earlier allows an authenticated low-privileged user to exfiltrate the stored PingOne application secret via an attacker-controlled PingOne configuration in the request parameter.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T16:33:35.955Z","source_hash":"content-fingerprint:fnv1a-78fa455c","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-110805-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Server-side request forgery in PingOne groups endpoint in Devolutions Server 2026.3.8.0 and earlier allows an authenticated low-privileged user to exfiltrate the stored PingOne application secret via an attacker-controlled PingOne configuration in the request parameter.","source_quote_or_pointer":"Security Advisory CVE-2026-110805","fact_id":"SEA-CVE-2026-110805-F1","document_citation":"Security Advisory CVE-2026-110805"},{"id":"SEA-CVE-2026-110805-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Server-side request forgery in PingOne groups endpoint in Devolutions Server 2026.3.8.0 and earlier allows an authenticated low-privileged user to exfiltrate the stored PingOne application secret via an attacker-controlled PingOne configuration in the request parameter.","source_quote_or_pointer":"Advisory description (CVE-2026-110805)","fact_id":"SEA-CVE-2026-110805-F2","document_citation":"Advisory description (CVE-2026-110805)"}],"source_stated_contributors":["Server-side request forgery in PingOne groups endpoint in Devolutions Server 2026.3.8.0 and earlier allows an authenticated low-privileged user to exfiltrate the stored PingOne application secret via an attacker-controlled PingOne configuration in the request parameter."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Internal network access","Cloud metadata or credential exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-110805","reporting_entity":"CVE-2026-110805","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-110805-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-110805-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"The service fetched a URL chosen by the caller and could be steered at internal systems. Restrict outbound destinations and block internal address ranges.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-110805"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-110806","title":"Incorrect authorization in add-on properties in Devolutions Server 2026.3.8.0 and earlier allows an authenticated user with only View permission to obtain add-on passwords via the unredacted add-on properties returned in connection data.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-110806","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110806","source_title":"Incorrect authorization in add-on properties in Devolutions Server 2026.3.8.0 and earlier allows an authenticated user with only View permission to obtain add-on passwords via the unredacted add-on properties returned in connection data.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T16:33:35.956Z","source_hash":"content-fingerprint:fnv1a-6aa51f3","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-110806-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Incorrect authorization in add-on properties in Devolutions Server 2026.3.8.0 and earlier allows an authenticated user with only View permission to obtain add-on passwords via the unredacted add-on properties returned in connection data.","source_quote_or_pointer":"Security Advisory CVE-2026-110806","fact_id":"SEA-CVE-2026-110806-F1","document_citation":"Security Advisory CVE-2026-110806"},{"id":"SEA-CVE-2026-110806-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Incorrect authorization in add-on properties in Devolutions Server 2026.3.8.0 and earlier allows an authenticated user with only View permission to obtain add-on passwords via the unredacted add-on properties returned in connection data.","source_quote_or_pointer":"Advisory description (CVE-2026-110806)","fact_id":"SEA-CVE-2026-110806-F2","document_citation":"Advisory description (CVE-2026-110806)"}],"source_stated_contributors":["Incorrect authorization in add-on properties in Devolutions Server 2026.3.8.0 and earlier allows an authenticated user with only View permission to obtain add-on passwords via the unredacted add-on properties returned in connection data."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-110806","reporting_entity":"CVE-2026-110806","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-110806-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-110806-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-110806"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-63619","title":"Missing Authorization vulnerability in Apache Kylin. A backend metadata dump API misses the enough authorization and the path-confinement. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin deployments are mostly not impacted. This issue affects Apache Kylin: from 4 through 5.0.4. Users are recommended to upgrade to version 5.0.5, which fixes the issue.","display_title":"Security issue reported in Software component","display_summary":"Missing Authorization vulnerability in Apache Kylin. A backend metadata dump API misses the enough authorization and the path-confinement.","display_reference":"CVE-2026-63619","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63619","source_title":"Missing Authorization vulnerability in Apache Kylin. A backend metadata dump API misses the enough authorization and the path-confinement. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin deployments are mostly not impacted. This issue affects Apache Kylin: from 4 through 5.0.4. Users are recommended to upgrade to version 5.0.5, which fixes the issue.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T16:33:35.963Z","source_hash":"content-fingerprint:fnv1a-5145dd72","affected_system":{"organization":"Missing Authorization vulnerability in Apache Kylin. A backend metadata dump API misses the enough authorization and the path-confinement. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin deployments are mostly not impacted. This issue affects Apache Kylin project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-63619-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Missing Authorization vulnerability in Apache Kylin. A backend metadata dump API misses the enough authorization and the path-confinement. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin deployments are mostly not impacted. This issue affects Apache Kylin: from 4 through 5.0.4. Users are recommended to upgrade to version 5.0.5, which fixes the issue.","source_quote_or_pointer":"Security Advisory CVE-2026-63619","fact_id":"SEA-CVE-2026-63619-F1","document_citation":"Security Advisory CVE-2026-63619"},{"id":"SEA-CVE-2026-63619-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Missing Authorization vulnerability in Apache Kylin. A backend metadata dump API misses the enough authorization and the path-confinement. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin deployments are mostly not impacted.","source_quote_or_pointer":"Advisory description (CVE-2026-63619)","fact_id":"SEA-CVE-2026-63619-F2","document_citation":"Advisory description (CVE-2026-63619)"}],"source_stated_contributors":["Missing Authorization vulnerability in Apache Kylin. A backend metadata dump API misses the enough authorization and the path-confinement. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin deployments are mostly not impacted."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.public_publication","data.pii"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-63619","reporting_entity":"CVE-2026-63619","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-63619-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-63619-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-63619"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-64610","title":"Deserialization of Untrusted Data vulnerability in Apache Kylin. Unsafe Java deserialization could happen from a broken external cache service. This issue affects Apache Kylin: from 4 through 5.0.4. Users are recommended to upgrade to version 5.0.5, which fixes the issue.","display_title":"Software component issue could make the application process unsafe input","display_summary":"Deserialization of Untrusted Data vulnerability in Apache Kylin. Unsafe Java deserialization could happen from a broken external cache service.","display_reference":"CVE-2026-64610","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64610","source_title":"Deserialization of Untrusted Data vulnerability in Apache Kylin. Unsafe Java deserialization could happen from a broken external cache service. This issue affects Apache Kylin: from 4 through 5.0.4. Users are recommended to upgrade to version 5.0.5, which fixes the issue.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T16:33:35.964Z","source_hash":"content-fingerprint:fnv1a-abd49636","affected_system":{"organization":"Deserialization of Untrusted Data vulnerability in Apache Kylin. Unsafe Java deserialization could happen from a broken external cache service. This issue affects Apache Kylin project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-64610-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Deserialization of Untrusted Data vulnerability in Apache Kylin. Unsafe Java deserialization could happen from a broken external cache service. This issue affects Apache Kylin: from 4 through 5.0.4. Users are recommended to upgrade to version 5.0.5, which fixes the issue.","source_quote_or_pointer":"Security Advisory CVE-2026-64610","fact_id":"SEA-CVE-2026-64610-F1","document_citation":"Security Advisory CVE-2026-64610"},{"id":"SEA-CVE-2026-64610-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Deserialization of Untrusted Data vulnerability in Apache Kylin. Unsafe Java deserialization could happen from a broken external cache service.","source_quote_or_pointer":"Advisory description (CVE-2026-64610)","fact_id":"SEA-CVE-2026-64610-F2","document_citation":"Advisory description (CVE-2026-64610)"}],"source_stated_contributors":["Deserialization of Untrusted Data vulnerability in Apache Kylin. Unsafe Java deserialization could happen from a broken external cache service."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","arch.caching"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unsafe object construction","Possible code execution"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-64610","reporting_entity":"CVE-2026-64610","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-64610-SG1","label":"Use schema-validated data formats","description":"Parse untrusted input into plain data with an explicit schema; never deserialize into arbitrary types.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-64610-SG1","label":"Use schema-validated data formats","description":"Parse untrusted input into plain data with an explicit schema; never deserialize into arbitrary types.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"The application rebuilt objects from untrusted data. Use data-only formats with schema validation instead of native object deserialization.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-64610"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-64959","title":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'), Missing Authentication for Critical Function vulnerability in Apache Kylin. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin deployments are mostly not impacted. This issue affects Apache Kylin: from 5 through 5.0.4. Certain backend cache API misses required authentication and can cause execution of injected SQL. Users are recommended to upgrade to version 5.0.5, which fixes the issue.","display_title":"Software component issue could expose or alter stored data","display_summary":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'), Missing Authentication for Critical Function vulnerability in Apache Kylin.","display_reference":"CVE-2026-64959","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64959","source_title":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'), Missing Authentication for Critical Function vulnerability in Apache Kylin. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin deployments are mostly not impacted. This issue affects Apache Kylin: from 5 through 5.0.4. Certain backend cache API misses required authentication and can cause execution of injected SQL. Users are recommended to upgrade to version 5.0.5, which fixes the issue.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T16:33:35.964Z","source_hash":"content-fingerprint:fnv1a-91b691d8","affected_system":{"organization":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'), Missing Authentication for Critical Function vulnerability in Apache Kylin. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin deployments are mostly not impacted. This issue affects Apache Kylin project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-64959-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'), Missing Authentication for Critical Function vulnerability in Apache Kylin. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin deployments are mostly not impacted. This issue affects Apache Kylin: from 5 through 5.0.4. Certain backend cache API misses required authentication and can cause execution of injected SQL. Users are recommended to upgrade to version 5.0.5, which fixes the issue.","source_quote_or_pointer":"Security Advisory CVE-2026-64959","fact_id":"SEA-CVE-2026-64959-F1","document_citation":"Security Advisory CVE-2026-64959"},{"id":"SEA-CVE-2026-64959-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'), Missing Authentication for Critical Function vulnerability in Apache Kylin. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin deployments are mostly not impacted.","source_quote_or_pointer":"Advisory description (CVE-2026-64959)","fact_id":"SEA-CVE-2026-64959-F2","document_citation":"Advisory description (CVE-2026-64959)"}],"source_stated_contributors":["Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'), Missing Authentication for Critical Function vulnerability in Apache Kylin. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin deployments are mostly not impacted."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.public_publication","data.pii","arch.caching"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-64959","reporting_entity":"CVE-2026-64959","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-64959-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-64959-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-64959"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-111444","title":"Wheels through 4.1.2 allows SQL injection on MySQL/MariaDB with backslash escaping enabled (NO_BACKSLASH_ESCAPES absent) when an application supplies request data to inline-literal paths. These include opt-in parameterize=false queries and IN lists, and positions in developer-written where strings that the parser does not bind, such as BETWEEN bounds, function arguments and LIKE ESCAPE literals. Doubling single quotes without accounting for backslash escapes allows a value to alter the query. Bound paths are not affected; whereBetween() is bound from 4.1.2. This is fixed in 4.2.0.","display_title":"Software component issue could expose or alter stored data","display_summary":"Wheels through 4.1.2 allows SQL injection on MySQL/MariaDB with backslash escaping enabled (NOBACKSLASHESCAPES absent) when an application supplies request data to inline-literal paths.","display_reference":"CVE-2026-111444","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111444","source_title":"Wheels through 4.1.2 allows SQL injection on MySQL/MariaDB with backslash escaping enabled (NO_BACKSLASH_ESCAPES absent) when an application supplies request data to inline-literal paths. These include opt-in parameterize=false queries and IN lists, and positions in developer-written where strings that the parser does not bind, such as BETWEEN bounds, function arguments and LIKE ESCAPE literals. Doubling single quotes without accounting for backslash escapes allows a value to alter the query. Bound paths are not affected; whereBetween() is bound from 4.1.2. This is fixed in 4.2.0.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T16:33:35.965Z","source_hash":"content-fingerprint:fnv1a-bb35afbc","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-111444-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Wheels through 4.1.2 allows SQL injection on MySQL/MariaDB with backslash escaping enabled (NO_BACKSLASH_ESCAPES absent) when an application supplies request data to inline-literal paths. These include opt-in parameterize=false queries and IN lists, and positions in developer-written where strings that the parser does not bind, such as BETWEEN bounds, function arguments and LIKE ESCAPE literals. Doubling single quotes without accounting for backslash escapes allows a value to alter the query. Bound paths are not affected; whereBetween() is bound from 4.1.2. This is fixed in 4.2.0.","source_quote_or_pointer":"Security Advisory CVE-2026-111444","fact_id":"SEA-CVE-2026-111444-F1","document_citation":"Security Advisory CVE-2026-111444"},{"id":"SEA-CVE-2026-111444-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Wheels through 4.1.2 allows SQL injection on MySQL/MariaDB with backslash escaping enabled (NOBACKSLASHESCAPES absent) when an application supplies request data to inline-literal paths.","source_quote_or_pointer":"Advisory description (CVE-2026-111444)","fact_id":"SEA-CVE-2026-111444-F2","document_citation":"Advisory description (CVE-2026-111444)"}],"source_stated_contributors":["Wheels through 4.1.2 allows SQL injection on MySQL/MariaDB with backslash escaping enabled (NOBACKSLASHESCAPES absent) when an application supplies request data to inline-literal paths."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-111444","reporting_entity":"CVE-2026-111444","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-111444-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-111444-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-111444"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-111445","title":"Wheels 4.0.0 through 4.1.2 before 4.2.0 replaces incoming scope conditions with a primary-key condition in findByKey() and exists(key=). For exists(key=), production with error information disabled returns true for an out-of-scope key instead of throwing. Applications relying on scopes for ownership or tenant authorization can therefore load and subsequently modify or delete another user's or tenant's record when the key comes from a request. The 4.2.0 fix combines key conditions with incoming scope, query-builder or where conditions in findByKey(), exists(key=), updateByKey() and deleteByKey(). Other scope-aware finders, aggregates, updateAll() and deleteAll() are not affected.","display_title":"Security issue reported in Software component","display_summary":"Wheels 4.0.0 through 4.1.2 before 4.2.0 replaces incoming scope conditions with a primary-key condition in findByKey() and exists(key=).","display_reference":"CVE-2026-111445","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111445","source_title":"Wheels 4.0.0 through 4.1.2 before 4.2.0 replaces incoming scope conditions with a primary-key condition in findByKey() and exists(key=). For exists(key=), production with error information disabled returns true for an out-of-scope key instead of throwing. Applications relying on scopes for ownership or tenant authorization can therefore load and subsequently modify or delete another user's or tenant's record when the key comes from a request. The 4.2.0 fix combines key conditions with incoming scope, query-builder or where conditions in findByKey(), exists(key=), updateByKey() and deleteByKey(). Other scope-aware finders, aggregates, updateAll() and deleteAll() are not affected.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T16:33:35.966Z","source_hash":"content-fingerprint:fnv1a-f4516433","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-111445-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Wheels 4.0.0 through 4.1.2 before 4.2.0 replaces incoming scope conditions with a primary-key condition in findByKey() and exists(key=). For exists(key=), production with error information disabled returns true for an out-of-scope key instead of throwing. Applications relying on scopes for ownership or tenant authorization can therefore load and subsequently modify or delete another user's or tenant's record when the key comes from a request. The 4.2.0 fix combines key conditions with incoming scope, query-builder or where conditions in findByKey(), exists(key=), updateByKey() and deleteByKey(). Other scope-aware finders, aggregates, updateAll() and deleteAll() are not affected.","source_quote_or_pointer":"Security Advisory CVE-2026-111445","fact_id":"SEA-CVE-2026-111445-F1","document_citation":"Security Advisory CVE-2026-111445"},{"id":"SEA-CVE-2026-111445-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Wheels 4.0.0 through 4.1.2 before 4.2.0 replaces incoming scope conditions with a primary-key condition in findByKey() and exists(key=). For exists(key=), production with error information disabled returns true for an out-of-scope key instead of throwing.","source_quote_or_pointer":"Advisory description (CVE-2026-111445)","fact_id":"SEA-CVE-2026-111445-F2","document_citation":"Advisory description (CVE-2026-111445)"}],"source_stated_contributors":["Wheels 4.0.0 through 4.1.2 before 4.2.0 replaces incoming scope conditions with a primary-key condition in findByKey() and exists(key=). For exists(key=), production with error information disabled returns true for an out-of-scope key instead of throwing."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.write_action","data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-111445","reporting_entity":"CVE-2026-111445","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-111445-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-111445-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-111445"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-111450","title":"Wheels through 4.1.1 derives its default production error-email address from the Host header of the request that starts the application. If no explicit error-email recipient is configured, a mail server is configured, and the server accepts an attacker-chosen Host, an attacker whose request triggers a cold start can direct later error emails to an address under their control for that application's lifetime. Emails disclose error and request metadata; on engines/versions where scope dumps render, they may also disclose configuration secrets and other users' session/cookie data. On the Lucee 7 engine, scope dumps fail to render, limiting disclosure to header fields. This is fixed in 4.1.2.","display_title":"Software component issue could expose accounts or credentials","display_summary":"Wheels through 4.1.1 derives its default production error-email address from the Host header of the request that starts the application.","display_reference":"CVE-2026-111450","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111450","source_title":"Wheels through 4.1.1 derives its default production error-email address from the Host header of the request that starts the application. If no explicit error-email recipient is configured, a mail server is configured, and the server accepts an attacker-chosen Host, an attacker whose request triggers a cold start can direct later error emails to an address under their control for that application's lifetime. Emails disclose error and request metadata; on engines/versions where scope dumps render, they may also disclose configuration secrets and other users' session/cookie data. On the Lucee 7 engine, scope dumps fail to render, limiting disclosure to header fields. This is fixed in 4.1.2.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T16:33:35.967Z","source_hash":"content-fingerprint:fnv1a-234c2925","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-111450-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Wheels through 4.1.1 derives its default production error-email address from the Host header of the request that starts the application. If no explicit error-email recipient is configured, a mail server is configured, and the server accepts an attacker-chosen Host, an attacker whose request triggers a cold start can direct later error emails to an address under their control for that application's lifetime. Emails disclose error and request metadata; on engines/versions where scope dumps render, they may also disclose configuration secrets and other users' session/cookie data. On the Lucee 7 engine, scope dumps fail to render, limiting disclosure to header fields. This is fixed in 4.1.2.","source_quote_or_pointer":"Security Advisory CVE-2026-111450","fact_id":"SEA-CVE-2026-111450-F1","document_citation":"Security Advisory CVE-2026-111450"},{"id":"SEA-CVE-2026-111450-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Wheels through 4.1.1 derives its default production error-email address from the Host header of the request that starts the application. If no explicit error-email recipient is configured, a mail server is configured, and the server accepts an attacker-chosen Host, an attacker whose request triggers a cold start can…","source_quote_or_pointer":"Advisory description (CVE-2026-111450)","fact_id":"SEA-CVE-2026-111450-F2","document_citation":"Advisory description (CVE-2026-111450)"}],"source_stated_contributors":["Wheels through 4.1.1 derives its default production error-email address from the Host header of the request that starts the application. If no explicit error-email recipient is configured, a mail server is configured, and the server accepts an attacker-chosen Host, an attacker whose request triggers a cold start can…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-111450","reporting_entity":"CVE-2026-111450","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-111450-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-111450-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-111450"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-111451","title":"Wheels CLI 4.0.0 through 4.1.1 insufficiently validates or escapes caller-supplied values and package contents. Deploy release/version/rollback values can execute shell commands on deploy hosts as the SSH user and on the CI runner during builds. Package removal and destroy paths can delete unintended files; package extraction can overwrite other vendor files; generator names can write outside the project or inject executable CFML into generated code. Inputs may originate from CI variables, branch names, packages or an AI agent using the CLI's MCP tools. Also relevant are unencoded display properties in generated scaffold show views since 4.1.0 and in generated admin views, permitting stored XSS, and stale process-ID handling in RustCFML server commands that can terminate an unrelated process. This is fixed in 4.1.2; existing affected generated views also require the documented edit.","display_title":"Software component issue could run attacker-controlled scripts in a browser","display_summary":"Wheels CLI 4.0.0 through 4.1.1 insufficiently validates or escapes caller-supplied values and package contents. Deploy release/version/rollback values can execute shell commands on deploy hosts as the SSH user and on the…","display_reference":"CVE-2026-111451","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111451","source_title":"Wheels CLI 4.0.0 through 4.1.1 insufficiently validates or escapes caller-supplied values and package contents. Deploy release/version/rollback values can execute shell commands on deploy hosts as the SSH user and on the CI runner during builds. Package removal and destroy paths can delete unintended files; package extraction can overwrite other vendor files; generator names can write outside the project or inject executable CFML into generated code. Inputs may originate from CI variables, branch names, packages or an AI agent using the CLI's MCP tools. Also relevant are unencoded display properties in generated scaffold show views since 4.1.0 and in generated admin views, permitting stored XSS, and stale process-ID handling in RustCFML server commands that can terminate an unrelated process. This is fixed in 4.1.2; existing affected generated views also require the documented edit.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T16:33:35.968Z","source_hash":"content-fingerprint:fnv1a-f5179c6","affected_system":{"organization":"Software component project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-111451-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Wheels CLI 4.0.0 through 4.1.1 insufficiently validates or escapes caller-supplied values and package contents. Deploy release/version/rollback values can execute shell commands on deploy hosts as the SSH user and on the CI runner during builds. Package removal and destroy paths can delete unintended files; package extraction can overwrite other vendor files; generator names can write outside the project or inject executable CFML into generated code. Inputs may originate from CI variables, branch names, packages or an AI agent using the CLI's MCP tools. Also relevant are unencoded display properties in generated scaffold show views since 4.1.0 and in generated admin views, permitting stored XSS, and stale process-ID handling in RustCFML server commands that can terminate an unrelated process. This is fixed in 4.1.2; existing affected generated views also require the documented edit.","source_quote_or_pointer":"Security Advisory CVE-2026-111451","fact_id":"SEA-CVE-2026-111451-F1","document_citation":"Security Advisory CVE-2026-111451"},{"id":"SEA-CVE-2026-111451-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Wheels CLI 4.0.0 through 4.1.1 insufficiently validates or escapes caller-supplied values and package contents. Deploy release/version/rollback values can execute shell commands on deploy hosts as the SSH user and on the CI runner during builds.","source_quote_or_pointer":"Advisory description (CVE-2026-111451)","fact_id":"SEA-CVE-2026-111451-F2","document_citation":"Advisory description (CVE-2026-111451)"}],"source_stated_contributors":["Wheels CLI 4.0.0 through 4.1.1 insufficiently validates or escapes caller-supplied values and package contents. Deploy release/version/rollback values can execute shell commands on deploy hosts as the SSH user and on the CI runner during builds."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.privileged_action","auth.write_action","data.pii","arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-010"],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-111451","reporting_entity":"CVE-2026-111451","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-111451-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-111451-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-111451"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-94388","title":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in halfdata Green Popups halfdata-green-popups allows Blind SQL Injection.This issue affects Green Popups: from n/a before 7.6.3.","display_title":"Software component issue could expose or alter stored data","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-94388","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-94388","source_title":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in halfdata Green Popups halfdata-green-popups allows Blind SQL Injection.This issue affects Green Popups: from n/a before 7.6.3.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T16:33:35.968Z","source_hash":"content-fingerprint:fnv1a-94b46fd3","affected_system":{"organization":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in halfdata Green Popups halfdata-green-popups allows Blind SQL Injection.This issue affects Green Popups project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-94388-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in halfdata Green Popups halfdata-green-popups allows Blind SQL Injection.This issue affects Green Popups: from n/a before 7.6.3.","source_quote_or_pointer":"Security Advisory CVE-2026-94388","fact_id":"SEA-CVE-2026-94388-F1","document_citation":"Security Advisory CVE-2026-94388"},{"id":"SEA-CVE-2026-94388-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in halfdata Green Popups halfdata-green-popups allows Blind SQL Injection.This issue affects Green Popups: from n/a before 7.6.3.","source_quote_or_pointer":"Advisory description (CVE-2026-94388)","fact_id":"SEA-CVE-2026-94388-F2","document_citation":"Advisory description (CVE-2026-94388)"}],"source_stated_contributors":["Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in halfdata Green Popups halfdata-green-popups allows Blind SQL Injection.This issue affects Green Popups: from n/a before 7.6.3."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-94388","reporting_entity":"CVE-2026-94388","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-94388-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-94388-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-94388"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-101300","title":"Server-Side Request Forgery (SSRF) reported in the ticket sales chart PDF export functionality of Wegow. According to the report, an authenticated user with a promoter account can manipulate the <svg> parameter of the POST request generated by selecting Download PDF. The content is processed by the export.highcharts.com service, which sends HTTP requests to attacker-controlled external resources and embeds their responses in the generated PDF. The reported behavior allows the export service to be used as an intermediary for these requests.","display_title":"Software component issue could reach internal services","display_summary":"Server-Side Request Forgery (SSRF) reported in the ticket sales chart PDF export functionality of Wegow. According to the report, an authenticated user with a promoter account can manipulate the parameter of the POST…","display_reference":"CVE-2026-101300","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-101300","source_title":"Server-Side Request Forgery (SSRF) reported in the ticket sales chart PDF export functionality of Wegow. According to the report, an authenticated user with a promoter account can manipulate the <svg> parameter of the POST request generated by selecting Download PDF. The content is processed by the export.highcharts.com service, which sends HTTP requests to attacker-controlled external resources and embeds their responses in the generated PDF. The reported behavior allows the export service to be used as an intermediary for these requests.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T16:33:35.969Z","source_hash":"content-fingerprint:fnv1a-bbb811de","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-101300-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Server-Side Request Forgery (SSRF) reported in the ticket sales chart PDF export functionality of Wegow. According to the report, an authenticated user with a promoter account can manipulate the <svg> parameter of the POST request generated by selecting Download PDF. The content is processed by the export.highcharts.com service, which sends HTTP requests to attacker-controlled external resources and embeds their responses in the generated PDF. The reported behavior allows the export service to be used as an intermediary for these requests.","source_quote_or_pointer":"Security Advisory CVE-2026-101300","fact_id":"SEA-CVE-2026-101300-F1","document_citation":"Security Advisory CVE-2026-101300"},{"id":"SEA-CVE-2026-101300-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Server-Side Request Forgery (SSRF) reported in the ticket sales chart PDF export functionality of Wegow. According to the report, an authenticated user with a promoter account can manipulate the parameter of the POST request generated by selecting Download PDF.","source_quote_or_pointer":"Advisory description (CVE-2026-101300)","fact_id":"SEA-CVE-2026-101300-F2","document_citation":"Advisory description (CVE-2026-101300)"}],"source_stated_contributors":["Server-Side Request Forgery (SSRF) reported in the ticket sales chart PDF export functionality of Wegow. According to the report, an authenticated user with a promoter account can manipulate the parameter of the POST request generated by selecting Download PDF."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","data.uploaded_files"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Internal network access","Cloud metadata or credential exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-101300","reporting_entity":"CVE-2026-101300","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-101300-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-101300-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"The service fetched a URL chosen by the caller and could be steered at internal systems. Restrict outbound destinations and block internal address ranges.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-101300"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-111472","title":"An SQL injection vulnerability has been discovered in TSG Profleet. The vulnerability could allow an attacker to retrieve, create, update and delete data from the database by sending a GET request using the ‘Identificación’ parameter of the ‘/cgi-bin/index.php’ endpoint.","display_title":"Software component issue could expose or alter stored data","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-111472","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111472","source_title":"An SQL injection vulnerability has been discovered in TSG Profleet. The vulnerability could allow an attacker to retrieve, create, update and delete data from the database by sending a GET request using the ‘Identificación’ parameter of the ‘/cgi-bin/index.php’ endpoint.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T16:33:35.970Z","source_hash":"content-fingerprint:fnv1a-5ea9c4b1","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-111472-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"An SQL injection vulnerability has been discovered in TSG Profleet. The vulnerability could allow an attacker to retrieve, create, update and delete data from the database by sending a GET request using the ‘Identificación’ parameter of the ‘/cgi-bin/index.php’ endpoint.","source_quote_or_pointer":"Security Advisory CVE-2026-111472","fact_id":"SEA-CVE-2026-111472-F1","document_citation":"Security Advisory CVE-2026-111472"},{"id":"SEA-CVE-2026-111472-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"An SQL injection vulnerability has been discovered in TSG Profleet. The vulnerability could allow an attacker to retrieve, create, update and delete data from the database by sending a GET request using the ‘Identificación’ parameter of the ‘/cgi-bin/index.php’ endpoint.","source_quote_or_pointer":"Advisory description (CVE-2026-111472)","fact_id":"SEA-CVE-2026-111472-F2","document_citation":"Advisory description (CVE-2026-111472)"}],"source_stated_contributors":["An SQL injection vulnerability has been discovered in TSG Profleet. The vulnerability could allow an attacker to retrieve, create, update and delete data from the database by sending a GET request using the ‘Identificación’ parameter of the ‘/cgi-bin/index.php’ endpoint."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.write_action"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-111472","reporting_entity":"CVE-2026-111472","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-111472-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-111472-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-111472"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-111399","title":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows SQL Injection.This issue affects MapSVG: from n/a through 8.16.1.","display_title":"Software component issue could expose or alter stored data","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-111399","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111399","source_title":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows SQL Injection.This issue affects MapSVG: from n/a through 8.16.1.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T16:33:35.970Z","source_hash":"content-fingerprint:fnv1a-1457b149","affected_system":{"organization":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows SQL Injection.This issue affects MapSVG project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-111399-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows SQL Injection.This issue affects MapSVG: from n/a through 8.16.1.","source_quote_or_pointer":"Security Advisory CVE-2026-111399","fact_id":"SEA-CVE-2026-111399-F1","document_citation":"Security Advisory CVE-2026-111399"},{"id":"SEA-CVE-2026-111399-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows SQL Injection.This issue affects MapSVG: from n/a through 8.16.1.","source_quote_or_pointer":"Advisory description (CVE-2026-111399)","fact_id":"SEA-CVE-2026-111399-F2","document_citation":"Advisory description (CVE-2026-111399)"}],"source_stated_contributors":["Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows SQL Injection.This issue affects MapSVG: from n/a through 8.16.1."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["arch.content_ingestion_rag"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-111399","reporting_entity":"CVE-2026-111399","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-111399-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-111399-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-111399"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-96570","title":"The Schema & Structured Data for WP & AMP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'saswp_review_text' parameter in all versions up to, and including, 1.67 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The nonce that serves as the only authorization gate is publicly printed in the [saswp-reviews-form] shortcode HTML, making it obtainable by any anonymous visitor and rendering it ineffective as an access control boundary.","display_title":"Software component issue could allow unauthorized access","display_summary":"The Schema & Structured Data for WP & AMP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'saswpreviewtext' parameter in all versions up to, and including, 1.67 due to insufficient input…","display_reference":"CVE-2026-96570","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-96570","source_title":"The Schema & Structured Data for WP & AMP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'saswp_review_text' parameter in all versions up to, and including, 1.67 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The nonce that serves as the only authorization gate is publicly printed in the [saswp-reviews-form] shortcode HTML, making it obtainable by any anonymous visitor and rendering it ineffective as an access control boundary.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T16:33:35.971Z","source_hash":"content-fingerprint:fnv1a-bb560d14","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-96570-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Schema & Structured Data for WP & AMP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'saswp_review_text' parameter in all versions up to, and including, 1.67 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The nonce that serves as the only authorization gate is publicly printed in the [saswp-reviews-form] shortcode HTML, making it obtainable by any anonymous visitor and rendering it ineffective as an access control boundary.","source_quote_or_pointer":"Security Advisory CVE-2026-96570","fact_id":"SEA-CVE-2026-96570-F1","document_citation":"Security Advisory CVE-2026-96570"},{"id":"SEA-CVE-2026-96570-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Schema & Structured Data for WP & AMP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'saswpreviewtext' parameter in all versions up to, and including, 1.67 due to insufficient input sanitization and output escaping.","source_quote_or_pointer":"Advisory description (CVE-2026-96570)","fact_id":"SEA-CVE-2026-96570-F2","document_citation":"Advisory description (CVE-2026-96570)"}],"source_stated_contributors":["The Schema & Structured Data for WP & AMP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'saswpreviewtext' parameter in all versions up to, and including, 1.67 due to insufficient input sanitization and output escaping."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-96570","reporting_entity":"CVE-2026-96570","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-96570-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-96570-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-96570"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-96562","title":"The The Broken Link Checker plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.4.14.1. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes. Exploitation requires that a submitted comment containing the shortcode payload in an href or src attribute is approved through the site's normal comment moderation workflow; once approved, the shortcode is executed automatically via WP-Cron without any further attacker interaction.","display_title":"Software component issue could allow unintended commands to run","display_summary":"The The Broken Link Checker plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.4.14.1.","display_reference":"CVE-2026-96562","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-96562","source_title":"The The Broken Link Checker plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.4.14.1. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes. Exploitation requires that a submitted comment containing the shortcode payload in an href or src attribute is approved through the site's normal comment moderation workflow; once approved, the shortcode is executed automatically via WP-Cron without any further attacker interaction.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T16:33:35.971Z","source_hash":"content-fingerprint:fnv1a-59256eff","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-96562-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The The Broken Link Checker plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.4.14.1. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes. Exploitation requires that a submitted comment containing the shortcode payload in an href or src attribute is approved through the site's normal comment moderation workflow; once approved, the shortcode is executed automatically via WP-Cron without any further attacker interaction.","source_quote_or_pointer":"Security Advisory CVE-2026-96562","fact_id":"SEA-CVE-2026-96562-F1","document_citation":"Security Advisory CVE-2026-96562"},{"id":"SEA-CVE-2026-96562-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The The Broken Link Checker plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.4.14.1. This is due to the software allowing users to execute an action that does not properly validate a value before running doshortcode.","source_quote_or_pointer":"Advisory description (CVE-2026-96562)","fact_id":"SEA-CVE-2026-96562-F2","document_citation":"Advisory description (CVE-2026-96562)"}],"source_stated_contributors":["The The Broken Link Checker plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.4.14.1. This is due to the software allowing users to execute an action that does not properly validate a value before running doshortcode."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","arch.async_job"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-96562","reporting_entity":"CVE-2026-96562","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-96562-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-96562-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-96562"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-95809","title":"The Opti-Behavior – Self-Hosted Heatmaps, Session Recordings, Funnels, A/B Testing & Smart Insights plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via 'country_name' Location Parameter in all versions up to, and including, 1.9.2.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The heatmap recording endpoint accepts unauthenticated requests protected only by a nonce that any visitor can freely obtain via the public opti_behavior_refresh_nonces AJAX action, removing any practical barrier to injecting the malicious payload.","display_title":"Software component issue could run attacker-controlled scripts in a browser","display_summary":"The Opti-Behavior – Self-Hosted Heatmaps, Session Recordings, Funnels, A/B Testing & Smart Insights plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via 'countryname' Location Parameter in all…","display_reference":"CVE-2026-95809","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95809","source_title":"The Opti-Behavior – Self-Hosted Heatmaps, Session Recordings, Funnels, A/B Testing & Smart Insights plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via 'country_name' Location Parameter in all versions up to, and including, 1.9.2.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The heatmap recording endpoint accepts unauthenticated requests protected only by a nonce that any visitor can freely obtain via the public opti_behavior_refresh_nonces AJAX action, removing any practical barrier to injecting the malicious payload.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T16:33:35.972Z","source_hash":"content-fingerprint:fnv1a-a75edc80","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-95809-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Opti-Behavior – Self-Hosted Heatmaps, Session Recordings, Funnels, A/B Testing & Smart Insights plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via 'country_name' Location Parameter in all versions up to, and including, 1.9.2.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The heatmap recording endpoint accepts unauthenticated requests protected only by a nonce that any visitor can freely obtain via the public opti_behavior_refresh_nonces AJAX action, removing any practical barrier to injecting the malicious payload.","source_quote_or_pointer":"Security Advisory CVE-2026-95809","fact_id":"SEA-CVE-2026-95809-F1","document_citation":"Security Advisory CVE-2026-95809"},{"id":"SEA-CVE-2026-95809-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Opti-Behavior – Self-Hosted Heatmaps, Session Recordings, Funnels, A/B Testing & Smart Insights plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via 'countryname' Location Parameter in all versions up to, and including, 1.9.2.1 due to insufficient input sanitization and output escaping.","source_quote_or_pointer":"Advisory description (CVE-2026-95809)","fact_id":"SEA-CVE-2026-95809-F2","document_citation":"Advisory description (CVE-2026-95809)"}],"source_stated_contributors":["The Opti-Behavior – Self-Hosted Heatmaps, Session Recordings, Funnels, A/B Testing & Smart Insights plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via 'countryname' Location Parameter in all versions up to, and including, 1.9.2.1 due to insufficient input sanitization and output escaping."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.public_publication","data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-95809","reporting_entity":"CVE-2026-95809","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-95809-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-95809-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-95809"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-95686","title":"The Opti-Behavior – Self-Hosted Heatmaps, Session Recordings, Funnels, A/B Testing & Smart Insights plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'targetUrl' parameter in all versions up to, and including, 1.9.2.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The ingest endpoint is gated only by a nonce that is publicly emitted to every anonymous visitor on tracked pages via optiBehaviorHeatmapConfig.nonce, meaning no account or authentication of any kind is required to write the malicious payload.","display_title":"Software component issue could run attacker-controlled scripts in a browser","display_summary":"The Opti-Behavior – Self-Hosted Heatmaps, Session Recordings, Funnels, A/B Testing & Smart Insights plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'targetUrl' parameter in all…","display_reference":"CVE-2026-95686","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95686","source_title":"The Opti-Behavior – Self-Hosted Heatmaps, Session Recordings, Funnels, A/B Testing & Smart Insights plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'targetUrl' parameter in all versions up to, and including, 1.9.2.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The ingest endpoint is gated only by a nonce that is publicly emitted to every anonymous visitor on tracked pages via optiBehaviorHeatmapConfig.nonce, meaning no account or authentication of any kind is required to write the malicious payload.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T16:33:35.972Z","source_hash":"content-fingerprint:fnv1a-c26c85c1","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-95686-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Opti-Behavior – Self-Hosted Heatmaps, Session Recordings, Funnels, A/B Testing & Smart Insights plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'targetUrl' parameter in all versions up to, and including, 1.9.2.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The ingest endpoint is gated only by a nonce that is publicly emitted to every anonymous visitor on tracked pages via optiBehaviorHeatmapConfig.nonce, meaning no account or authentication of any kind is required to write the malicious payload.","source_quote_or_pointer":"Security Advisory CVE-2026-95686","fact_id":"SEA-CVE-2026-95686-F1","document_citation":"Security Advisory CVE-2026-95686"},{"id":"SEA-CVE-2026-95686-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Opti-Behavior – Self-Hosted Heatmaps, Session Recordings, Funnels, A/B Testing & Smart Insights plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'targetUrl' parameter in all versions up to, and including, 1.9.2.1 due to insufficient input sanitization and output escaping.","source_quote_or_pointer":"Advisory description (CVE-2026-95686)","fact_id":"SEA-CVE-2026-95686-F2","document_citation":"Advisory description (CVE-2026-95686)"}],"source_stated_contributors":["The Opti-Behavior – Self-Hosted Heatmaps, Session Recordings, Funnels, A/B Testing & Smart Insights plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'targetUrl' parameter in all versions up to, and including, 1.9.2.1 due to insufficient input sanitization and output escaping."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-95686","reporting_entity":"CVE-2026-95686","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-95686-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-95686-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-95686"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-93953","title":"The Backuply – Backup, Restore, Migrate and Clone plugin for WordPress is vulnerable to SQL Injection via the Biographical Info field (second-order, via restore) in all versions up to, and including, 1.5.8 due to insufficient escaping on the user supplied parameter and the lack of sufficient preparation on an existing SQL query. Backuply exports the Biographical Info value verbatim inside an INSERT statement written to the backup's SQL dump (wp_usermeta). When an Administrator later restores such a backup, the crafted payload breaks out of that INSERT statement and appends attacker-controlled SQL that executes with full database privileges. This makes it possible for authenticated attackers, with subscriber-level access and above, to write arbitrary data to the database — in particular to update the default_role option in wp_options to administrator (and enable open user registration) — so that a subsequently registered account is automatically granted the Administrator role, resulting in privilege escalation and full site takeover. Because the injection executes inside an INSERT during restore with no response returned to the attacker, the primitive is used to modify database records rather than to read existing data directly.","display_title":"Software component issue could expose or alter stored data","display_summary":"The Backuply – Backup, Restore, Migrate and Clone plugin for WordPress is vulnerable to SQL Injection via the Biographical Info field (second-order, via restore) in all versions up to, and including, 1.5.8 due to…","display_reference":"CVE-2026-93953","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93953","source_title":"The Backuply – Backup, Restore, Migrate and Clone plugin for WordPress is vulnerable to SQL Injection via the Biographical Info field (second-order, via restore) in all versions up to, and including, 1.5.8 due to insufficient escaping on the user supplied parameter and the lack of sufficient preparation on an existing SQL query. Backuply exports the Biographical Info value verbatim inside an INSERT statement written to the backup's SQL dump (wp_usermeta). When an Administrator later restores such a backup, the crafted payload breaks out of that INSERT statement and appends attacker-controlled SQL that executes with full database privileges. This makes it possible for authenticated attackers, with subscriber-level access and above, to write arbitrary data to the database — in particular to update the default_role option in wp_options to administrator (and enable open user registration) — so that a subsequently registered account is automatically granted the Administrator role, resulting in privilege escalation and full site takeover. Because the injection executes inside an INSERT during restore with no response returned to the attacker, the primitive is used to modify database records rather than to read existing data directly.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T16:33:35.973Z","source_hash":"content-fingerprint:fnv1a-6094af4","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-93953-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Backuply – Backup, Restore, Migrate and Clone plugin for WordPress is vulnerable to SQL Injection via the Biographical Info field (second-order, via restore) in all versions up to, and including, 1.5.8 due to insufficient escaping on the user supplied parameter and the lack of sufficient preparation on an existing SQL query. Backuply exports the Biographical Info value verbatim inside an INSERT statement written to the backup's SQL dump (wp_usermeta). When an Administrator later restores such a backup, the crafted payload breaks out of that INSERT statement and appends attacker-controlled SQL that executes with full database privileges. This makes it possible for authenticated attackers, with subscriber-level access and above, to write arbitrary data to the database — in particular to update the default_role option in wp_options to administrator (and enable open user registration) — so that a subsequently registered account is automatically granted the Administrator role, resulting in privilege escalation and full site takeover. Because the injection executes inside an INSERT during restore with no response returned to the attacker, the primitive is used to modify database records rather than to read existing data directly.","source_quote_or_pointer":"Security Advisory CVE-2026-93953","fact_id":"SEA-CVE-2026-93953-F1","document_citation":"Security Advisory CVE-2026-93953"},{"id":"SEA-CVE-2026-93953-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Backuply – Backup, Restore, Migrate and Clone plugin for WordPress is vulnerable to SQL Injection via the Biographical Info field (second-order, via restore) in all versions up to, and including, 1.5.8 due to insufficient escaping on the user supplied parameter and the lack of sufficient preparation on an existing…","source_quote_or_pointer":"Advisory description (CVE-2026-93953)","fact_id":"SEA-CVE-2026-93953-F2","document_citation":"Advisory description (CVE-2026-93953)"}],"source_stated_contributors":["The Backuply – Backup, Restore, Migrate and Clone plugin for WordPress is vulnerable to SQL Injection via the Biographical Info field (second-order, via restore) in all versions up to, and including, 1.5.8 due to insufficient escaping on the user supplied parameter and the lack of sufficient preparation on an existing…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.write_action","data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-93953","reporting_entity":"CVE-2026-93953","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-93953-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-93953-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-93953"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-92766","title":"The Vitepos – Point of Sale (POS) for WooCommerce plugin for WordPress is vulnerable to generic SQL Injection via the 'src_by' parameter in all versions up to, and including, 3.5.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. This makes it possible for unauthenticated attackers, or authenticated attackers holding any POS role (such as vtpos-cashier), to exploit the vulnerability, as the /vitepos/v1/vendor/list REST route's permission callback requires only a POS role assignment rather than any elevated WordPress capability.","display_title":"Software component issue could expose or alter stored data","display_summary":"The Vitepos – Point of Sale (POS) for WooCommerce plugin for WordPress is vulnerable to generic SQL Injection via the 'srcby' parameter in all versions up to, and including, 3.5.1 due to insufficient escaping on the user…","display_reference":"CVE-2026-92766","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92766","source_title":"The Vitepos – Point of Sale (POS) for WooCommerce plugin for WordPress is vulnerable to generic SQL Injection via the 'src_by' parameter in all versions up to, and including, 3.5.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. This makes it possible for unauthenticated attackers, or authenticated attackers holding any POS role (such as vtpos-cashier), to exploit the vulnerability, as the /vitepos/v1/vendor/list REST route's permission callback requires only a POS role assignment rather than any elevated WordPress capability.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T16:33:35.974Z","source_hash":"content-fingerprint:fnv1a-f3f2e0b7","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-92766-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Vitepos – Point of Sale (POS) for WooCommerce plugin for WordPress is vulnerable to generic SQL Injection via the 'src_by' parameter in all versions up to, and including, 3.5.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. This makes it possible for unauthenticated attackers, or authenticated attackers holding any POS role (such as vtpos-cashier), to exploit the vulnerability, as the /vitepos/v1/vendor/list REST route's permission callback requires only a POS role assignment rather than any elevated WordPress capability.","source_quote_or_pointer":"Security Advisory CVE-2026-92766","fact_id":"SEA-CVE-2026-92766-F1","document_citation":"Security Advisory CVE-2026-92766"},{"id":"SEA-CVE-2026-92766-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Vitepos – Point of Sale (POS) for WooCommerce plugin for WordPress is vulnerable to generic SQL Injection via the 'srcby' parameter in all versions up to, and including, 3.5.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.","source_quote_or_pointer":"Advisory description (CVE-2026-92766)","fact_id":"SEA-CVE-2026-92766-F2","document_citation":"Advisory description (CVE-2026-92766)"}],"source_stated_contributors":["The Vitepos – Point of Sale (POS) for WooCommerce plugin for WordPress is vulnerable to generic SQL Injection via the 'srcby' parameter in all versions up to, and including, 3.5.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.write_action","data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-92766","reporting_entity":"CVE-2026-92766","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-92766-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-92766-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-92766"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-92553","title":"The YaySMTP – WP Mail SMTP with Email Logs, Tracking & Reports plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.7.7 via the putFile function. This is due to insufficient file type validation in the putFile function, as sanitize_file_name() does not strip executable extensions and no allow-list, MIME check, or safe-extension rename is applied. This makes it possible for authenticated attackers, with subscriber-level access and above, to upload files that may be executable, which makes remote code execution possible. The only server-side guard is a .htaccess file containing 'Require all denied' written by writeGuards(), which is silently ignored by nginx and by Apache configured with AllowOverride None, meaning RCE is fully achievable on those server configurations.","display_title":"Software component issue could allow unintended commands to run","display_summary":"The YaySMTP – WP Mail SMTP with Email Logs, Tracking & Reports plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.7.7 via the putFile function.","display_reference":"CVE-2026-92553","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92553","source_title":"The YaySMTP – WP Mail SMTP with Email Logs, Tracking & Reports plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.7.7 via the putFile function. This is due to insufficient file type validation in the putFile function, as sanitize_file_name() does not strip executable extensions and no allow-list, MIME check, or safe-extension rename is applied. This makes it possible for authenticated attackers, with subscriber-level access and above, to upload files that may be executable, which makes remote code execution possible. The only server-side guard is a .htaccess file containing 'Require all denied' written by writeGuards(), which is silently ignored by nginx and by Apache configured with AllowOverride None, meaning RCE is fully achievable on those server configurations.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T16:33:35.975Z","source_hash":"content-fingerprint:fnv1a-4cffe53f","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-92553-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The YaySMTP – WP Mail SMTP with Email Logs, Tracking & Reports plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.7.7 via the putFile function. This is due to insufficient file type validation in the putFile function, as sanitize_file_name() does not strip executable extensions and no allow-list, MIME check, or safe-extension rename is applied. This makes it possible for authenticated attackers, with subscriber-level access and above, to upload files that may be executable, which makes remote code execution possible. The only server-side guard is a .htaccess file containing 'Require all denied' written by writeGuards(), which is silently ignored by nginx and by Apache configured with AllowOverride None, meaning RCE is fully achievable on those server configurations.","source_quote_or_pointer":"Security Advisory CVE-2026-92553","fact_id":"SEA-CVE-2026-92553-F1","document_citation":"Security Advisory CVE-2026-92553"},{"id":"SEA-CVE-2026-92553-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The YaySMTP – WP Mail SMTP with Email Logs, Tracking & Reports plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.7.7 via the putFile function.","source_quote_or_pointer":"Advisory description (CVE-2026-92553)","fact_id":"SEA-CVE-2026-92553-F2","document_citation":"Advisory description (CVE-2026-92553)"}],"source_stated_contributors":["The YaySMTP – WP Mail SMTP with Email Logs, Tracking & Reports plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.7.7 via the putFile function."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.uploaded_files"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-92553","reporting_entity":"CVE-2026-92553","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-92553-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-92553-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-92553"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-92427","title":"The Coinsnap Bitcoin Crowdfunding WordPress plugin through 1.2.0 does not restrict access to the secret used to authenticate its payment gateway webhook, disclosing it to unauthenticated users and rendering the webhook's signature check ineffective. This allows unauthenticated attackers to forge payment-confirmation notifications and record arbitrary donations as completed, with attacker-chosen amounts, donor names and messages.","display_title":"Software component issue could expose accounts or credentials","display_summary":"The Coinsnap Bitcoin Crowdfunding WordPress plugin through 1.2.0 does not restrict access to the secret used to authenticate its payment gateway webhook, disclosing it to unauthenticated users and rendering the webhook's…","display_reference":"CVE-2026-92427","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92427","source_title":"The Coinsnap Bitcoin Crowdfunding WordPress plugin through 1.2.0 does not restrict access to the secret used to authenticate its payment gateway webhook, disclosing it to unauthenticated users and rendering the webhook's signature check ineffective. This allows unauthenticated attackers to forge payment-confirmation notifications and record arbitrary donations as completed, with attacker-chosen amounts, donor names and messages.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T16:33:35.976Z","source_hash":"content-fingerprint:fnv1a-f45549bd","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-92427-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Coinsnap Bitcoin Crowdfunding WordPress plugin through 1.2.0 does not restrict access to the secret used to authenticate its payment gateway webhook, disclosing it to unauthenticated users and rendering the webhook's signature check ineffective. This allows unauthenticated attackers to forge payment-confirmation notifications and record arbitrary donations as completed, with attacker-chosen amounts, donor names and messages.","source_quote_or_pointer":"Security Advisory CVE-2026-92427","fact_id":"SEA-CVE-2026-92427-F1","document_citation":"Security Advisory CVE-2026-92427"},{"id":"SEA-CVE-2026-92427-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Coinsnap Bitcoin Crowdfunding WordPress plugin through 1.2.0 does not restrict access to the secret used to authenticate its payment gateway webhook, disclosing it to unauthenticated users and rendering the webhook's signature check ineffective.","source_quote_or_pointer":"Advisory description (CVE-2026-92427)","fact_id":"SEA-CVE-2026-92427-F2","document_citation":"Advisory description (CVE-2026-92427)"}],"source_stated_contributors":["The Coinsnap Bitcoin Crowdfunding WordPress plugin through 1.2.0 does not restrict access to the secret used to authenticate its payment gateway webhook, disclosing it to unauthenticated users and rendering the webhook's signature check ineffective."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.financial_action","data.pii","data.credentials_secrets","arch.external_api","arch.event_driven"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-92427","reporting_entity":"CVE-2026-92427","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-92427-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-92427-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-92427"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-92115","title":"The WP Photo Album Plus plugin for WordPress is vulnerable to authenticated Command Injection in all versions up to, and including, 9.3.02.002 via the value parameter of the update-photo AJAX action. This is due to insufficient shell escaping within the wppa_image_magick_a() function, where the attacker-controlled value parameter is concatenated raw — without escapeshellarg() — into an ImageMagick command string before being passed to exec(); further, wppa_decode() actively restores percent-encoded shell metacharacters (e.g., %26→&, %23→) rather than stripping them, allowing crafted payloads to survive sanitization and break out of the ImageMagick argument context. This makes it possible for authenticated attackers holding the plugin-defined wppa_upload capability to execute arbitrary operating-system commands as the web-server user, achieving full remote code execution on the underlying server. Exploitation requires ImageMagick to be enabled on the server; the wppa_upload capability is a plugin-level privilege that site administrators may grant to lower-privileged WordPress roles via the plugin's Users settings, broadening the pool of potential attackers beyond administrators.","display_title":"Software component issue could allow unintended commands to run","display_summary":"The WP Photo Album Plus plugin for WordPress is vulnerable to authenticated Command Injection in all versions up to, and including, 9.3.02.002 via the value parameter of the update-photo AJAX action.","display_reference":"CVE-2026-92115","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92115","source_title":"The WP Photo Album Plus plugin for WordPress is vulnerable to authenticated Command Injection in all versions up to, and including, 9.3.02.002 via the value parameter of the update-photo AJAX action. This is due to insufficient shell escaping within the wppa_image_magick_a() function, where the attacker-controlled value parameter is concatenated raw — without escapeshellarg() — into an ImageMagick command string before being passed to exec(); further, wppa_decode() actively restores percent-encoded shell metacharacters (e.g., %26→&, %23→) rather than stripping them, allowing crafted payloads to survive sanitization and break out of the ImageMagick argument context. This makes it possible for authenticated attackers holding the plugin-defined wppa_upload capability to execute arbitrary operating-system commands as the web-server user, achieving full remote code execution on the underlying server. Exploitation requires ImageMagick to be enabled on the server; the wppa_upload capability is a plugin-level privilege that site administrators may grant to lower-privileged WordPress roles via the plugin's Users settings, broadening the pool of potential attackers beyond administrators.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T16:33:35.977Z","source_hash":"content-fingerprint:fnv1a-d5247c31","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-92115-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The WP Photo Album Plus plugin for WordPress is vulnerable to authenticated Command Injection in all versions up to, and including, 9.3.02.002 via the value parameter of the update-photo AJAX action. This is due to insufficient shell escaping within the wppa_image_magick_a() function, where the attacker-controlled value parameter is concatenated raw — without escapeshellarg() — into an ImageMagick command string before being passed to exec(); further, wppa_decode() actively restores percent-encoded shell metacharacters (e.g., %26→&, %23→) rather than stripping them, allowing crafted payloads to survive sanitization and break out of the ImageMagick argument context. This makes it possible for authenticated attackers holding the plugin-defined wppa_upload capability to execute arbitrary operating-system commands as the web-server user, achieving full remote code execution on the underlying server. Exploitation requires ImageMagick to be enabled on the server; the wppa_upload capability is a plugin-level privilege that site administrators may grant to lower-privileged WordPress roles via the plugin's Users settings, broadening the pool of potential attackers beyond administrators.","source_quote_or_pointer":"Security Advisory CVE-2026-92115","fact_id":"SEA-CVE-2026-92115-F1","document_citation":"Security Advisory CVE-2026-92115"},{"id":"SEA-CVE-2026-92115-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The WP Photo Album Plus plugin for WordPress is vulnerable to authenticated Command Injection in all versions up to, and including, 9.3.02.002 via the value parameter of the update-photo AJAX action.","source_quote_or_pointer":"Advisory description (CVE-2026-92115)","fact_id":"SEA-CVE-2026-92115-F2","document_citation":"Advisory description (CVE-2026-92115)"}],"source_stated_contributors":["The WP Photo Album Plus plugin for WordPress is vulnerable to authenticated Command Injection in all versions up to, and including, 9.3.02.002 via the value parameter of the update-photo AJAX action."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.write_action","data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-92115","reporting_entity":"CVE-2026-92115","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-92115-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-92115-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-92115"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-91833","title":"The WX Subscribe 微信支付付费订阅 WordPress plugin through 1.2.1 does not sanitise and escape a parameter before using it in a SQL statement, allowing unauthenticated attackers to perform SQL injection attacks on installs where the payment key has not been configured.","display_title":"Software component issue could expose or alter stored data","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-91833","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91833","source_title":"The WX Subscribe 微信支付付费订阅 WordPress plugin through 1.2.1 does not sanitise and escape a parameter before using it in a SQL statement, allowing unauthenticated attackers to perform SQL injection attacks on installs where the payment key has not been configured.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T16:33:35.977Z","source_hash":"content-fingerprint:fnv1a-956bfd61","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-91833-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The WX Subscribe 微信支付付费订阅 WordPress plugin through 1.2.1 does not sanitise and escape a parameter before using it in a SQL statement, allowing unauthenticated attackers to perform SQL injection attacks on installs where the payment key has not been configured.","source_quote_or_pointer":"Security Advisory CVE-2026-91833","fact_id":"SEA-CVE-2026-91833-F1","document_citation":"Security Advisory CVE-2026-91833"},{"id":"SEA-CVE-2026-91833-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The WX Subscribe 微信支付付费订阅 WordPress plugin through 1.2.1 does not sanitise and escape a parameter before using it in a SQL statement, allowing unauthenticated attackers to perform SQL injection attacks on installs where the payment key has not been configured.","source_quote_or_pointer":"Advisory description (CVE-2026-91833)","fact_id":"SEA-CVE-2026-91833-F2","document_citation":"Advisory description (CVE-2026-91833)"}],"source_stated_contributors":["The WX Subscribe 微信支付付费订阅 WordPress plugin through 1.2.1 does not sanitise and escape a parameter before using it in a SQL statement, allowing unauthenticated attackers to perform SQL injection attacks on installs where the payment key has not been configured."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.financial_action"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-91833","reporting_entity":"CVE-2026-91833","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-91833-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-91833-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-91833"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-89280","title":"The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.2.1 via the 'password' parameter due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with custom-level access and above, to change the WordPress account password of any customer who has placed at least one order with the attacking vendor, enabling login as that customer and resulting in a limited account takeover. Vendor-level access, required to exploit this vulnerability, can be self-registered through the public 'I am a vendor' registration flow when that option is enabled on the site.","display_title":"The Dokan issue could expose accounts or credentials","display_summary":"The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.2.1…","display_reference":"CVE-2026-89280","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89280","source_title":"The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.2.1 via the 'password' parameter due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with custom-level access and above, to change the WordPress account password of any customer who has placed at least one order with the attacking vendor, enabling login as that customer and resulting in a limited account takeover. Vendor-level access, required to exploit this vulnerability, can be self-registered through the public 'I am a vendor' registration flow when that option is enabled on the site.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T16:33:35.978Z","source_hash":"content-fingerprint:fnv1a-3f208208","affected_system":{"organization":"The Dokan project","product":"The Dokan","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-89280-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.2.1 via the 'password' parameter due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with custom-level access and above, to change the WordPress account password of any customer who has placed at least one order with the attacking vendor, enabling login as that customer and resulting in a limited account takeover. Vendor-level access, required to exploit this vulnerability, can be self-registered through the public 'I am a vendor' registration flow when that option is enabled on the site.","source_quote_or_pointer":"Security Advisory CVE-2026-89280","fact_id":"SEA-CVE-2026-89280-F1","document_citation":"Security Advisory CVE-2026-89280"},{"id":"SEA-CVE-2026-89280-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.2.1 via the 'password' parameter due to missing validation on a user controlled key.","source_quote_or_pointer":"Advisory description (CVE-2026-89280)","fact_id":"SEA-CVE-2026-89280-F2","document_citation":"Advisory description (CVE-2026-89280)"}],"source_stated_contributors":["The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.2.1 via the 'password' parameter due to missing validation on a user controlled key."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.public_publication","data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-89280","reporting_entity":"CVE-2026-89280","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-89280-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-89280-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-89280"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-85659","title":"The PilotPress plugin for WordPress is vulnerable to Privilege Escalation via Account Takeover in all versions up to, and including, 2.0.43. The vulnerability exists because the update_cc_details() AJAX handler forwards an attacker-supplied username parameter to ONTRAPORT via api_call('update_cc_details', ...) before performing the local username_exists() collision check, and aborts without rolling back the remote rename when a collision is detected — leaving the remote ONTRAPORT contact renamed to an existing WordPress Administrator's login. On a subsequent login attempt, user_login() (hooked to wp_authenticate) authenticates against ONTRAPORT using the renamed login and the attacker's own password, resolves the local WordPress user row via get_user_by('login', $username) — which now selects the real Administrator's row — and calls wp_set_password() against that Administrator's user ID; because the user_level != 10 guard only suppresses PilotPress's own cookie issuance rather than returning a WP_Error to core, WordPress proceeds to validate the newly-synchronized password and issues a full Administrator authentication cookie to the attacker. This makes it possible for authenticated attackers with Subscriber-level access and above — specifically any PilotPress member holding a valid ONTRAPORT contact and the Customer Center nonce — to fully take over an Administrator account.","display_title":"Software component issue could expose accounts or credentials","display_summary":"The PilotPress plugin for WordPress is vulnerable to Privilege Escalation via Account Takeover in all versions up to, and including, 2.0.43.","display_reference":"CVE-2026-85659","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85659","source_title":"The PilotPress plugin for WordPress is vulnerable to Privilege Escalation via Account Takeover in all versions up to, and including, 2.0.43. The vulnerability exists because the update_cc_details() AJAX handler forwards an attacker-supplied username parameter to ONTRAPORT via api_call('update_cc_details', ...) before performing the local username_exists() collision check, and aborts without rolling back the remote rename when a collision is detected — leaving the remote ONTRAPORT contact renamed to an existing WordPress Administrator's login. On a subsequent login attempt, user_login() (hooked to wp_authenticate) authenticates against ONTRAPORT using the renamed login and the attacker's own password, resolves the local WordPress user row via get_user_by('login', $username) — which now selects the real Administrator's row — and calls wp_set_password() against that Administrator's user ID; because the user_level != 10 guard only suppresses PilotPress's own cookie issuance rather than returning a WP_Error to core, WordPress proceeds to validate the newly-synchronized password and issues a full Administrator authentication cookie to the attacker. This makes it possible for authenticated attackers with Subscriber-level access and above — specifically any PilotPress member holding a valid ONTRAPORT contact and the Customer Center nonce — to fully take over an Administrator account.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T16:33:35.980Z","source_hash":"content-fingerprint:fnv1a-ca857d38","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-85659-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The PilotPress plugin for WordPress is vulnerable to Privilege Escalation via Account Takeover in all versions up to, and including, 2.0.43. The vulnerability exists because the update_cc_details() AJAX handler forwards an attacker-supplied username parameter to ONTRAPORT via api_call('update_cc_details', ...) before performing the local username_exists() collision check, and aborts without rolling back the remote rename when a collision is detected — leaving the remote ONTRAPORT contact renamed to an existing WordPress Administrator's login. On a subsequent login attempt, user_login() (hooked to wp_authenticate) authenticates against ONTRAPORT using the renamed login and the attacker's own password, resolves the local WordPress user row via get_user_by('login', $username) — which now selects the real Administrator's row — and calls wp_set_password() against that Administrator's user ID; because the user_level != 10 guard only suppresses PilotPress's own cookie issuance rather than returning a WP_Error to core, WordPress proceeds to validate the newly-synchronized password and issues a full Administrator authentication cookie to the attacker. This makes it possible for authenticated attackers with Subscriber-level access and above — specifically any PilotPress member holding a valid ONTRAPORT contact and the Customer Center nonce — to fully take over an Administrator account.","source_quote_or_pointer":"Security Advisory CVE-2026-85659","fact_id":"SEA-CVE-2026-85659-F1","document_citation":"Security Advisory CVE-2026-85659"},{"id":"SEA-CVE-2026-85659-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The PilotPress plugin for WordPress is vulnerable to Privilege Escalation via Account Takeover in all versions up to, and including, 2.0.43. The vulnerability exists because the updateccdetails() AJAX handler forwards an attacker-supplied username parameter to ONTRAPORT via apicall('updateccdetails', ...) before…","source_quote_or_pointer":"Advisory description (CVE-2026-85659)","fact_id":"SEA-CVE-2026-85659-F2","document_citation":"Advisory description (CVE-2026-85659)"}],"source_stated_contributors":["The PilotPress plugin for WordPress is vulnerable to Privilege Escalation via Account Takeover in all versions up to, and including, 2.0.43. The vulnerability exists because the updateccdetails() AJAX handler forwards an attacker-supplied username parameter to ONTRAPORT via apicall('updateccdetails', ...) before…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-85659","reporting_entity":"CVE-2026-85659","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-85659-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-85659-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-85659"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-75903","title":"The Vulnity Security plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 1.4.3 This is due to insufficient protection of the delegated-login pairing credential file on Nginx-based installations, where the plugin's generated server configuration snippet guards the wrong directory path. This makes it possible for unauthenticated attackers to retrieve the stored credentials, forge signed REST API requests, and log in as an administrator.","display_title":"Software component issue could allow unauthorized access","display_summary":"The Vulnity Security plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 1.4.3 This is due to insufficient protection of the delegated-login pairing credential file on…","display_reference":"CVE-2026-75903","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-75903","source_title":"The Vulnity Security plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 1.4.3 This is due to insufficient protection of the delegated-login pairing credential file on Nginx-based installations, where the plugin's generated server configuration snippet guards the wrong directory path. This makes it possible for unauthenticated attackers to retrieve the stored credentials, forge signed REST API requests, and log in as an administrator.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T16:33:35.980Z","source_hash":"content-fingerprint:fnv1a-29dde92f","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-75903-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Vulnity Security plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 1.4.3 This is due to insufficient protection of the delegated-login pairing credential file on Nginx-based installations, where the plugin's generated server configuration snippet guards the wrong directory path. This makes it possible for unauthenticated attackers to retrieve the stored credentials, forge signed REST API requests, and log in as an administrator.","source_quote_or_pointer":"Security Advisory CVE-2026-75903","fact_id":"SEA-CVE-2026-75903-F1","document_citation":"Security Advisory CVE-2026-75903"},{"id":"SEA-CVE-2026-75903-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Vulnity Security plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 1.4.3 This is due to insufficient protection of the delegated-login pairing credential file on Nginx-based installations, where the plugin's generated server configuration snippet guards the wrong…","source_quote_or_pointer":"Advisory description (CVE-2026-75903)","fact_id":"SEA-CVE-2026-75903-F2","document_citation":"Advisory description (CVE-2026-75903)"}],"source_stated_contributors":["The Vulnity Security plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 1.4.3 This is due to insufficient protection of the delegated-login pairing credential file on Nginx-based installations, where the plugin's generated server configuration snippet guards the wrong…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-75903","reporting_entity":"CVE-2026-75903","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-75903-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-75903-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-75903"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-15222","title":"The The User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 5.2.8. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for authenticated attackers, with subscriber-level access and above, to execute arbitrary shortcodes.","display_title":"Software component issue could allow unintended commands to run","display_summary":"The The User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder plugin for WordPress is vulnerable to arbitrary shortcode…","display_reference":"CVE-2026-15222","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-15222","source_title":"The The User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 5.2.8. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for authenticated attackers, with subscriber-level access and above, to execute arbitrary shortcodes.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T16:33:35.981Z","source_hash":"content-fingerprint:fnv1a-b7d8cedb","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-15222-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The The User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 5.2.8. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for authenticated attackers, with subscriber-level access and above, to execute arbitrary shortcodes.","source_quote_or_pointer":"Security Advisory CVE-2026-15222","fact_id":"SEA-CVE-2026-15222-F1","document_citation":"Security Advisory CVE-2026-15222"},{"id":"SEA-CVE-2026-15222-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The The User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 5.2.8.","source_quote_or_pointer":"Advisory description (CVE-2026-15222)","fact_id":"SEA-CVE-2026-15222-F2","document_citation":"Advisory description (CVE-2026-15222)"}],"source_stated_contributors":["The The User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 5.2.8."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-15222","reporting_entity":"CVE-2026-15222","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-15222-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-15222-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-15222"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-111178","title":"The WP Booking System – Booking Calendar plugin for WordPress is vulnerable to generic SQL Injection via the 'data[orderby]' parameter in all versions up to, and including, 2.1.0.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Exploitation requires the targeted calendar to have more than 200 bookings, as the orderby value is only forwarded to the database layer when the AJAX handler takes the use_ajax branch; an Administrator can satisfy this condition by creating bookings directly.","display_title":"Software component issue could expose or alter stored data","display_summary":"The WP Booking System – Booking Calendar plugin for WordPress is vulnerable to generic SQL Injection via the 'data[orderby]' parameter in all versions up to, and including, 2.1.0.1 due to insufficient escaping on the…","display_reference":"CVE-2026-111178","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111178","source_title":"The WP Booking System – Booking Calendar plugin for WordPress is vulnerable to generic SQL Injection via the 'data[orderby]' parameter in all versions up to, and including, 2.1.0.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Exploitation requires the targeted calendar to have more than 200 bookings, as the orderby value is only forwarded to the database layer when the AJAX handler takes the use_ajax branch; an Administrator can satisfy this condition by creating bookings directly.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T16:33:35.983Z","source_hash":"content-fingerprint:fnv1a-7ec7f978","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-111178-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The WP Booking System – Booking Calendar plugin for WordPress is vulnerable to generic SQL Injection via the 'data[orderby]' parameter in all versions up to, and including, 2.1.0.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Exploitation requires the targeted calendar to have more than 200 bookings, as the orderby value is only forwarded to the database layer when the AJAX handler takes the use_ajax branch; an Administrator can satisfy this condition by creating bookings directly.","source_quote_or_pointer":"Security Advisory CVE-2026-111178","fact_id":"SEA-CVE-2026-111178-F1","document_citation":"Security Advisory CVE-2026-111178"},{"id":"SEA-CVE-2026-111178-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The WP Booking System – Booking Calendar plugin for WordPress is vulnerable to generic SQL Injection via the 'data[orderby]' parameter in all versions up to, and including, 2.1.0.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.","source_quote_or_pointer":"Advisory description (CVE-2026-111178)","fact_id":"SEA-CVE-2026-111178-F2","document_citation":"Advisory description (CVE-2026-111178)"}],"source_stated_contributors":["The WP Booking System – Booking Calendar plugin for WordPress is vulnerable to generic SQL Injection via the 'data[orderby]' parameter in all versions up to, and including, 2.1.0.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.write_action","data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-111178","reporting_entity":"CVE-2026-111178","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-111178-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-111178-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-111178"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-111106","title":"The Mail Mint plugin for WordPress is vulnerable to SQL Injection via the 'filters' parameter of the /wp-json/mrm/v1/segments/contacts REST endpoint in versions up to, and including, 1.31.4 This is due to insufficient escaping on the user supplied filter 'value' before it is appended to a SQL query in SegmentFilterService::get_meta_join_query() at line 797, where the value is string-interpolated into the WHERE fragment in a numeric (unquoted) context and the surrounding $wpdb->prepare() calls do not cover the injected value. This makes it possible for authenticated attackers, with the custom 'mint_read_contacts' capability (granted to Administrators by default, and configurable to lower roles via the plugin's role manager), to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.","display_title":"Software component issue could expose or alter stored data","display_summary":"The Mail Mint plugin for WordPress is vulnerable to SQL Injection via the 'filters' parameter of the /wp-json/mrm/v1/segments/contacts REST endpoint in versions up to, and including, 1.31.4 This is due to insufficient…","display_reference":"CVE-2026-111106","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111106","source_title":"The Mail Mint plugin for WordPress is vulnerable to SQL Injection via the 'filters' parameter of the /wp-json/mrm/v1/segments/contacts REST endpoint in versions up to, and including, 1.31.4 This is due to insufficient escaping on the user supplied filter 'value' before it is appended to a SQL query in SegmentFilterService::get_meta_join_query() at line 797, where the value is string-interpolated into the WHERE fragment in a numeric (unquoted) context and the surrounding $wpdb->prepare() calls do not cover the injected value. This makes it possible for authenticated attackers, with the custom 'mint_read_contacts' capability (granted to Administrators by default, and configurable to lower roles via the plugin's role manager), to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T16:33:35.983Z","source_hash":"content-fingerprint:fnv1a-aa0407b5","affected_system":{"organization":"The Mail Mint plugin for WordPress is vulnerable to SQL Injection via the 'filters' parameter of the /wp-json/mrm/v1/segments/contacts REST endpoint in versions up to, and including, 1.31.4 This is due to insufficient escaping on the user supplied filter 'value' before it is appended to a SQL query in SegmentFilterService project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-111106-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Mail Mint plugin for WordPress is vulnerable to SQL Injection via the 'filters' parameter of the /wp-json/mrm/v1/segments/contacts REST endpoint in versions up to, and including, 1.31.4 This is due to insufficient escaping on the user supplied filter 'value' before it is appended to a SQL query in SegmentFilterService::get_meta_join_query() at line 797, where the value is string-interpolated into the WHERE fragment in a numeric (unquoted) context and the surrounding $wpdb->prepare() calls do not cover the injected value. This makes it possible for authenticated attackers, with the custom 'mint_read_contacts' capability (granted to Administrators by default, and configurable to lower roles via the plugin's role manager), to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.","source_quote_or_pointer":"Security Advisory CVE-2026-111106","fact_id":"SEA-CVE-2026-111106-F1","document_citation":"Security Advisory CVE-2026-111106"},{"id":"SEA-CVE-2026-111106-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Mail Mint plugin for WordPress is vulnerable to SQL Injection via the 'filters' parameter of the /wp-json/mrm/v1/segments/contacts REST endpoint in versions up to, and including, 1.31.4 This is due to insufficient escaping on the user supplied filter 'value' before it is appended to a SQL query in…","source_quote_or_pointer":"Advisory description (CVE-2026-111106)","fact_id":"SEA-CVE-2026-111106-F2","document_citation":"Advisory description (CVE-2026-111106)"}],"source_stated_contributors":["The Mail Mint plugin for WordPress is vulnerable to SQL Injection via the 'filters' parameter of the /wp-json/mrm/v1/segments/contacts REST endpoint in versions up to, and including, 1.31.4 This is due to insufficient escaping on the user supplied filter 'value' before it is appended to a SQL query in…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-111106","reporting_entity":"CVE-2026-111106","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-111106-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-111106-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-111106"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-110721","title":"The NotificationX plugin for WordPress is vulnerable to Missing Authorization leading to arbitrary content injection in versions up to, and including, 3.3.3 The /notificationx/v1/popup-submit REST route is registered with permission_callback => '__return_true', and the handler at PopupNotification::handle_popup_submission() accepts an attacker-controlled nx_id, loads whichever NotificationX campaign that id points to, and copies that campaign's own source into the new entry without verifying that the campaign is a Popup Notification or Exit Intent Popup (the two sources this form is intended to serve). This makes it possible for unauthenticated attackers to inject forged social-proof entries (name, title, message, email, theme) into any enabled non-popup NotificationX campaign — WP Comments, WooCommerce/EDD/Give sales, reviews, etc.","display_title":"Security issue reported in Software component","display_summary":"The NotificationX plugin for WordPress is vulnerable to Missing Authorization leading to arbitrary content injection in versions up to, and including, 3.3.3 The /notificationx/v1/popup-submit REST route is registered…","display_reference":"CVE-2026-110721","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110721","source_title":"The NotificationX plugin for WordPress is vulnerable to Missing Authorization leading to arbitrary content injection in versions up to, and including, 3.3.3 The /notificationx/v1/popup-submit REST route is registered with permission_callback => '__return_true', and the handler at PopupNotification::handle_popup_submission() accepts an attacker-controlled nx_id, loads whichever NotificationX campaign that id points to, and copies that campaign's own source into the new entry without verifying that the campaign is a Popup Notification or Exit Intent Popup (the two sources this form is intended to serve). This makes it possible for unauthenticated attackers to inject forged social-proof entries (name, title, message, email, theme) into any enabled non-popup NotificationX campaign — WP Comments, WooCommerce/EDD/Give sales, reviews, etc.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T16:33:35.984Z","source_hash":"content-fingerprint:fnv1a-7df1043f","affected_system":{"organization":"The NotificationX plugin for WordPress is vulnerable to Missing Authorization leading to arbitrary content injection in versions up to, and including, 3.3.3 The /notificationx/v1/popup-submit REST route is registered with permissioncallback => 'returntrue', and the handler at PopupNotification project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-110721-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The NotificationX plugin for WordPress is vulnerable to Missing Authorization leading to arbitrary content injection in versions up to, and including, 3.3.3 The /notificationx/v1/popup-submit REST route is registered with permission_callback => '__return_true', and the handler at PopupNotification::handle_popup_submission() accepts an attacker-controlled nx_id, loads whichever NotificationX campaign that id points to, and copies that campaign's own source into the new entry without verifying that the campaign is a Popup Notification or Exit Intent Popup (the two sources this form is intended to serve). This makes it possible for unauthenticated attackers to inject forged social-proof entries (name, title, message, email, theme) into any enabled non-popup NotificationX campaign — WP Comments, WooCommerce/EDD/Give sales, reviews, etc.","source_quote_or_pointer":"Security Advisory CVE-2026-110721","fact_id":"SEA-CVE-2026-110721-F1","document_citation":"Security Advisory CVE-2026-110721"},{"id":"SEA-CVE-2026-110721-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The NotificationX plugin for WordPress is vulnerable to Missing Authorization leading to arbitrary content injection in versions up to, and including, 3.3.3 The /notificationx/v1/popup-submit REST route is registered with permissioncallback = 'returntrue', and the handler at PopupNotification::handlepopupsubmission()…","source_quote_or_pointer":"Advisory description (CVE-2026-110721)","fact_id":"SEA-CVE-2026-110721-F2","document_citation":"Advisory description (CVE-2026-110721)"}],"source_stated_contributors":["The NotificationX plugin for WordPress is vulnerable to Missing Authorization leading to arbitrary content injection in versions up to, and including, 3.3.3 The /notificationx/v1/popup-submit REST route is registered with permissioncallback = 'returntrue', and the handler at PopupNotification::handlepopupsubmission()…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-110721","reporting_entity":"CVE-2026-110721","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-110721-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-110721-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-110721"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-110590","title":"The Klarna for WooCommerce plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.13.3 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to access any order's secret order_key and full billing and shipping PII — including first name, last name, email address, phone number, street address, postcode, city, region, and country — emitted inline as the klarna_payments_params JavaScript variable, enabling full store-wide order enumeration. Because WooCommerce order IDs are sequential integers and no order_key or authenticated session is required, every order in the store can be trivially enumerated with sequential GET requests to the order-pay endpoint.","display_title":"Software component issue could allow unauthorized access","display_summary":"The Klarna for WooCommerce plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.13.3 This is due to the plugin not properly verifying that a user is authorized to perform an…","display_reference":"CVE-2026-110590","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110590","source_title":"The Klarna for WooCommerce plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.13.3 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to access any order's secret order_key and full billing and shipping PII — including first name, last name, email address, phone number, street address, postcode, city, region, and country — emitted inline as the klarna_payments_params JavaScript variable, enabling full store-wide order enumeration. Because WooCommerce order IDs are sequential integers and no order_key or authenticated session is required, every order in the store can be trivially enumerated with sequential GET requests to the order-pay endpoint.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T16:33:35.985Z","source_hash":"content-fingerprint:fnv1a-7b072e93","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-110590-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Klarna for WooCommerce plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.13.3 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to access any order's secret order_key and full billing and shipping PII — including first name, last name, email address, phone number, street address, postcode, city, region, and country — emitted inline as the klarna_payments_params JavaScript variable, enabling full store-wide order enumeration. Because WooCommerce order IDs are sequential integers and no order_key or authenticated session is required, every order in the store can be trivially enumerated with sequential GET requests to the order-pay endpoint.","source_quote_or_pointer":"Security Advisory CVE-2026-110590","fact_id":"SEA-CVE-2026-110590-F1","document_citation":"Security Advisory CVE-2026-110590"},{"id":"SEA-CVE-2026-110590-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Klarna for WooCommerce plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.13.3 This is due to the plugin not properly verifying that a user is authorized to perform an action.","source_quote_or_pointer":"Advisory description (CVE-2026-110590)","fact_id":"SEA-CVE-2026-110590-F2","document_citation":"Advisory description (CVE-2026-110590)"}],"source_stated_contributors":["The Klarna for WooCommerce plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.13.3 This is due to the plugin not properly verifying that a user is authorized to perform an action."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.financial_action","auth.write_action","data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-110590","reporting_entity":"CVE-2026-110590","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-110590-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-110590-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-110590"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-111311","title":"The DoubleScale | All-in-One CRM – Sales, Multi-Channel Marketing, Newsletter, Booking, Helpdesk, Automation, MCP & More plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.5.1 via the store_upload function. This is due to a fail-open extension allow-list in extension_is_allowed() that returns true when wp_check_filetype() yields an empty type for unrecognized extensions such as .php, combined with magic-byte-only MIME detection and no capability check beyond is_user_logged_in(). This makes it possible for authenticated attackers, with subscriber-level access and above, to upload files that may be executable, which makes remote code execution possible. Exploitation requires the Helpdesk module to be enabled, as the vulnerable REST endpoint is only registered when that module is active.","display_title":"Software component issue could allow unintended commands to run","display_summary":"The DoubleScale | All-in-One CRM – Sales, Multi-Channel Marketing, Newsletter, Booking, Helpdesk, Automation, MCP & More plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including,…","display_reference":"CVE-2026-111311","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111311","source_title":"The DoubleScale | All-in-One CRM – Sales, Multi-Channel Marketing, Newsletter, Booking, Helpdesk, Automation, MCP & More plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.5.1 via the store_upload function. This is due to a fail-open extension allow-list in extension_is_allowed() that returns true when wp_check_filetype() yields an empty type for unrecognized extensions such as .php, combined with magic-byte-only MIME detection and no capability check beyond is_user_logged_in(). This makes it possible for authenticated attackers, with subscriber-level access and above, to upload files that may be executable, which makes remote code execution possible. Exploitation requires the Helpdesk module to be enabled, as the vulnerable REST endpoint is only registered when that module is active.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T11:15:24.922Z","source_hash":"content-fingerprint:fnv1a-31cc559","affected_system":{"organization":"Software component project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-111311-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The DoubleScale | All-in-One CRM – Sales, Multi-Channel Marketing, Newsletter, Booking, Helpdesk, Automation, MCP & More plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.5.1 via the store_upload function. This is due to a fail-open extension allow-list in extension_is_allowed() that returns true when wp_check_filetype() yields an empty type for unrecognized extensions such as .php, combined with magic-byte-only MIME detection and no capability check beyond is_user_logged_in(). This makes it possible for authenticated attackers, with subscriber-level access and above, to upload files that may be executable, which makes remote code execution possible. Exploitation requires the Helpdesk module to be enabled, as the vulnerable REST endpoint is only registered when that module is active.","source_quote_or_pointer":"Security Advisory CVE-2026-111311","fact_id":"SEA-CVE-2026-111311-F1","document_citation":"Security Advisory CVE-2026-111311"},{"id":"SEA-CVE-2026-111311-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The DoubleScale | All-in-One CRM – Sales, Multi-Channel Marketing, Newsletter, Booking, Helpdesk, Automation, MCP & More plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.5.1 via the storeupload function.","source_quote_or_pointer":"Advisory description (CVE-2026-111311)","fact_id":"SEA-CVE-2026-111311-F2","document_citation":"Advisory description (CVE-2026-111311)"}],"source_stated_contributors":["The DoubleScale | All-in-One CRM – Sales, Multi-Channel Marketing, Newsletter, Booking, Helpdesk, Automation, MCP & More plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.5.1 via the storeupload function."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.uploaded_files","arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-004","SEA-FM-002","SEA-FM-010"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-111311","reporting_entity":"CVE-2026-111311","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-111311-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-111311-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-111311"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-104003","title":"The WP User Avatar / ProfilePress plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in versions up to, and including, 4.17.5. This is due to the get_user_profile_structure() function assembling the front-end profile buffer — which includes raw comment excerpts inlined by author_comment_query() — and passing the entire buffer to do_shortcode() after only a narrow neutralization pass (ppress_neutralize_buffer_shortcodes) that blocks pp-custom-html and bracket fragments containing HTML delimiters but leaves any other well-formed shortcode intact. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject arbitrary shortcodes (from any active plugin or theme) with attacker-chosen attributes by posting a comment whose body contains the shortcode markup; the shortcode is then executed server-side when any visitor loads the target's front-end profile Comments tab, letting the attacker reach capability-gated or data-returning shortcodes and inject raw HTML markup into a publicly viewable page.","display_title":"Software component issue could allow unintended commands to run","display_summary":"The WP User Avatar / ProfilePress plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in versions up to, and including, 4.17.5.","display_reference":"CVE-2026-104003","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104003","source_title":"The WP User Avatar / ProfilePress plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in versions up to, and including, 4.17.5. This is due to the get_user_profile_structure() function assembling the front-end profile buffer — which includes raw comment excerpts inlined by author_comment_query() — and passing the entire buffer to do_shortcode() after only a narrow neutralization pass (ppress_neutralize_buffer_shortcodes) that blocks pp-custom-html and bracket fragments containing HTML delimiters but leaves any other well-formed shortcode intact. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject arbitrary shortcodes (from any active plugin or theme) with attacker-chosen attributes by posting a comment whose body contains the shortcode markup; the shortcode is then executed server-side when any visitor loads the target's front-end profile Comments tab, letting the attacker reach capability-gated or data-returning shortcodes and inject raw HTML markup into a publicly viewable page.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T11:15:24.923Z","source_hash":"content-fingerprint:fnv1a-65c6eb65","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-104003-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The WP User Avatar / ProfilePress plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in versions up to, and including, 4.17.5. This is due to the get_user_profile_structure() function assembling the front-end profile buffer — which includes raw comment excerpts inlined by author_comment_query() — and passing the entire buffer to do_shortcode() after only a narrow neutralization pass (ppress_neutralize_buffer_shortcodes) that blocks pp-custom-html and bracket fragments containing HTML delimiters but leaves any other well-formed shortcode intact. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject arbitrary shortcodes (from any active plugin or theme) with attacker-chosen attributes by posting a comment whose body contains the shortcode markup; the shortcode is then executed server-side when any visitor loads the target's front-end profile Comments tab, letting the attacker reach capability-gated or data-returning shortcodes and inject raw HTML markup into a publicly viewable page.","source_quote_or_pointer":"Security Advisory CVE-2026-104003","fact_id":"SEA-CVE-2026-104003-F1","document_citation":"Security Advisory CVE-2026-104003"},{"id":"SEA-CVE-2026-104003-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The WP User Avatar / ProfilePress plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in versions up to, and including, 4.17.5. This is due to the getuserprofilestructure() function assembling the front-end profile buffer — which includes raw comment excerpts inlined by authorcommentquery() — and…","source_quote_or_pointer":"Advisory description (CVE-2026-104003)","fact_id":"SEA-CVE-2026-104003-F2","document_citation":"Advisory description (CVE-2026-104003)"}],"source_stated_contributors":["The WP User Avatar / ProfilePress plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in versions up to, and including, 4.17.5. This is due to the getuserprofilestructure() function assembling the front-end profile buffer — which includes raw comment excerpts inlined by authorcommentquery() — and…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-104003","reporting_entity":"CVE-2026-104003","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-104003-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-104003-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-104003"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-19621","title":"Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8.5 fail to strip action integration secrets from post payloads before broadcasting post-deletion web socket events and returning thread API responses, which allows an authenticated channel member to obtain server-side webhook URLs and authentication context from interactive-message posts via the post_deleted websocket event or the threads REST API.. Mattermost Advisory ID: MMSA-2026-00766","display_title":"Software component issue could expose accounts or credentials","display_summary":"Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8.5 fail to strip action integration secrets from post payloads before broadcasting post-deletion web socket events and returning…","display_reference":"CVE-2026-19621","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-19621","source_title":"Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8.5 fail to strip action integration secrets from post payloads before broadcasting post-deletion web socket events and returning thread API responses, which allows an authenticated channel member to obtain server-side webhook URLs and authentication context from interactive-message posts via the post_deleted websocket event or the threads REST API.. Mattermost Advisory ID: MMSA-2026-00766","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T11:15:24.928Z","source_hash":"content-fingerprint:fnv1a-e0088e80","affected_system":{"organization":"Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8.5 fail to strip action integration secrets from post payloads before broadcasting post-deletion web socket events and returning thread API responses, which allows an authenticated channel member to obtain server-side webhook URLs and authentication context from interactive-message posts via the postdeleted websocket event or the threads REST API.. Mattermost Advisory ID project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-19621-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8.5 fail to strip action integration secrets from post payloads before broadcasting post-deletion web socket events and returning thread API responses, which allows an authenticated channel member to obtain server-side webhook URLs and authentication context from interactive-message posts via the post_deleted websocket event or the threads REST API.. Mattermost Advisory ID: MMSA-2026-00766","source_quote_or_pointer":"Security Advisory CVE-2026-19621","fact_id":"SEA-CVE-2026-19621-F1","document_citation":"Security Advisory CVE-2026-19621"},{"id":"SEA-CVE-2026-19621-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8.5 fail to strip action integration secrets from post payloads before broadcasting post-deletion web socket events and returning thread API responses, which allows an authenticated channel member to obtain server-side webhook…","source_quote_or_pointer":"Advisory description (CVE-2026-19621)","fact_id":"SEA-CVE-2026-19621-F2","document_citation":"Advisory description (CVE-2026-19621)"}],"source_stated_contributors":["Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8.5 fail to strip action integration secrets from post payloads before broadcasting post-deletion web socket events and returning thread API responses, which allows an authenticated channel member to obtain server-side webhook…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","arch.external_api","arch.event_driven"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-19621","reporting_entity":"CVE-2026-19621","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-19621-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-19621-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-19621"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-19600","title":"Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1 fail to sanitize authentication tokens before writing them to server log entries, which allows an attacker with access to server logs to obtain valid session tokens or OAuth access tokens and impersonate authenticated users via the debug-level Mattermost server log.. Mattermost Advisory ID: MMSA-2026-00763","display_title":"Software component issue could expose accounts or credentials","display_summary":"Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1 fail to sanitize authentication tokens before writing them to server log entries, which allows an attacker with access to…","display_reference":"CVE-2026-19600","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-19600","source_title":"Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1 fail to sanitize authentication tokens before writing them to server log entries, which allows an attacker with access to server logs to obtain valid session tokens or OAuth access tokens and impersonate authenticated users via the debug-level Mattermost server log.. Mattermost Advisory ID: MMSA-2026-00763","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T11:15:24.929Z","source_hash":"content-fingerprint:fnv1a-781bf5f3","affected_system":{"organization":"Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1 fail to sanitize authentication tokens before writing them to server log entries, which allows an attacker with access to server logs to obtain valid session tokens or OAuth access tokens and impersonate authenticated users via the debug-level Mattermost server log.. Mattermost Advisory ID project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-19600-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1 fail to sanitize authentication tokens before writing them to server log entries, which allows an attacker with access to server logs to obtain valid session tokens or OAuth access tokens and impersonate authenticated users via the debug-level Mattermost server log.. Mattermost Advisory ID: MMSA-2026-00763","source_quote_or_pointer":"Security Advisory CVE-2026-19600","fact_id":"SEA-CVE-2026-19600-F1","document_citation":"Security Advisory CVE-2026-19600"},{"id":"SEA-CVE-2026-19600-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1 fail to sanitize authentication tokens before writing them to server log entries, which allows an attacker with access to server logs to obtain valid session tokens or OAuth access tokens and impersonate authenticated users…","source_quote_or_pointer":"Advisory description (CVE-2026-19600)","fact_id":"SEA-CVE-2026-19600-F2","document_citation":"Advisory description (CVE-2026-19600)"}],"source_stated_contributors":["Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1 fail to sanitize authentication tokens before writing them to server log entries, which allows an attacker with access to server logs to obtain valid session tokens or OAuth access tokens and impersonate authenticated users…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii","data.credentials_secrets","arch.caching"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-19600","reporting_entity":"CVE-2026-19600","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-19600-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-19600-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-19600"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-19541","title":"Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1 fail to require re-entry of the stored client secret when validating an outgoing OAuth connection, which allows an authenticated user with permission to manage outgoing OAuth connections to obtain the secret via pointing the token URL at an attacker-controlled endpoint and triggering validation.. Mattermost Advisory ID: MMSA-2026-00761","display_title":"Software component issue could expose accounts or credentials","display_summary":"Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1 fail to require re-entry of the stored client secret when validating an outgoing OAuth connection, which allows an…","display_reference":"CVE-2026-19541","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-19541","source_title":"Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1 fail to require re-entry of the stored client secret when validating an outgoing OAuth connection, which allows an authenticated user with permission to manage outgoing OAuth connections to obtain the secret via pointing the token URL at an attacker-controlled endpoint and triggering validation.. Mattermost Advisory ID: MMSA-2026-00761","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T11:15:24.934Z","source_hash":"content-fingerprint:fnv1a-20891a25","affected_system":{"organization":"Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1 fail to require re-entry of the stored client secret when validating an outgoing OAuth connection, which allows an authenticated user with permission to manage outgoing OAuth connections to obtain the secret via pointing the token URL at an attacker-controlled endpoint and triggering validation.. Mattermost Advisory ID project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-19541-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1 fail to require re-entry of the stored client secret when validating an outgoing OAuth connection, which allows an authenticated user with permission to manage outgoing OAuth connections to obtain the secret via pointing the token URL at an attacker-controlled endpoint and triggering validation.. Mattermost Advisory ID: MMSA-2026-00761","source_quote_or_pointer":"Security Advisory CVE-2026-19541","fact_id":"SEA-CVE-2026-19541-F1","document_citation":"Security Advisory CVE-2026-19541"},{"id":"SEA-CVE-2026-19541-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1 fail to require re-entry of the stored client secret when validating an outgoing OAuth connection, which allows an authenticated user with permission to manage outgoing OAuth connections to obtain the secret via pointing the…","source_quote_or_pointer":"Advisory description (CVE-2026-19541)","fact_id":"SEA-CVE-2026-19541-F2","document_citation":"Advisory description (CVE-2026-19541)"}],"source_stated_contributors":["Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1 fail to require re-entry of the stored client secret when validating an outgoing OAuth connection, which allows an authenticated user with permission to manage outgoing OAuth connections to obtain the secret via pointing the…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-19541","reporting_entity":"CVE-2026-19541","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-19541-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-19541-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-19541"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-110179","title":"The affiliate-toolkit WordPress plugin before 3.8.9 does not validate a user-supplied sort value against an allowlist before using it in a database query, and the affected administrative list screen requires only a lower-privilege capability rather than an administrator one, so users with editor-level access and above can perform SQL injection and read arbitrary information from the database. On multisite a sub-site editor can read the network-global users table, including the super administrator's password hash.","display_title":"Software component issue could expose or alter stored data","display_summary":"The affiliate-toolkit WordPress plugin before 3.8.9 does not validate a user-supplied sort value against an allowlist before using it in a database query, and the affected administrative list screen requires only a…","display_reference":"CVE-2026-110179","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110179","source_title":"The affiliate-toolkit WordPress plugin before 3.8.9 does not validate a user-supplied sort value against an allowlist before using it in a database query, and the affected administrative list screen requires only a lower-privilege capability rather than an administrator one, so users with editor-level access and above can perform SQL injection and read arbitrary information from the database. On multisite a sub-site editor can read the network-global users table, including the super administrator's password hash.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T11:15:24.936Z","source_hash":"content-fingerprint:fnv1a-805f0c8c","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-110179-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The affiliate-toolkit WordPress plugin before 3.8.9 does not validate a user-supplied sort value against an allowlist before using it in a database query, and the affected administrative list screen requires only a lower-privilege capability rather than an administrator one, so users with editor-level access and above can perform SQL injection and read arbitrary information from the database. On multisite a sub-site editor can read the network-global users table, including the super administrator's password hash.","source_quote_or_pointer":"Security Advisory CVE-2026-110179","fact_id":"SEA-CVE-2026-110179-F1","document_citation":"Security Advisory CVE-2026-110179"},{"id":"SEA-CVE-2026-110179-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The affiliate-toolkit WordPress plugin before 3.8.9 does not validate a user-supplied sort value against an allowlist before using it in a database query, and the affected administrative list screen requires only a lower-privilege capability rather than an administrator one, so users with editor-level access and above…","source_quote_or_pointer":"Advisory description (CVE-2026-110179)","fact_id":"SEA-CVE-2026-110179-F2","document_citation":"Advisory description (CVE-2026-110179)"}],"source_stated_contributors":["The affiliate-toolkit WordPress plugin before 3.8.9 does not validate a user-supplied sort value against an allowlist before using it in a database query, and the affected administrative list screen requires only a lower-privilege capability rather than an administrator one, so users with editor-level access and above…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.write_action","data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-110179","reporting_entity":"CVE-2026-110179","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-110179-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-110179-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-110179"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-110015","title":"The Salon Booking System WordPress plugin before 10.31.9 does not correctly verify the authenticity of REST API requests and discards WordPress core's nonce check for cookie-authenticated sessions across the whole REST API, allowing unauthenticated attackers who trick a logged-in administrator into clicking a crafted link to forge requests in that administrator's browser, up to creating a new administrator account.","display_title":"Security issue reported in Software component","display_summary":"The Salon Booking System WordPress plugin before 10.31.9 does not correctly verify the authenticity of REST API requests and discards WordPress core's nonce check for cookie-authenticated sessions across the whole REST…","display_reference":"CVE-2026-110015","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110015","source_title":"The Salon Booking System WordPress plugin before 10.31.9 does not correctly verify the authenticity of REST API requests and discards WordPress core's nonce check for cookie-authenticated sessions across the whole REST API, allowing unauthenticated attackers who trick a logged-in administrator into clicking a crafted link to forge requests in that administrator's browser, up to creating a new administrator account.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T11:15:24.936Z","source_hash":"content-fingerprint:fnv1a-1a7f4999","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-110015-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Salon Booking System WordPress plugin before 10.31.9 does not correctly verify the authenticity of REST API requests and discards WordPress core's nonce check for cookie-authenticated sessions across the whole REST API, allowing unauthenticated attackers who trick a logged-in administrator into clicking a crafted link to forge requests in that administrator's browser, up to creating a new administrator account.","source_quote_or_pointer":"Security Advisory CVE-2026-110015","fact_id":"SEA-CVE-2026-110015-F1","document_citation":"Security Advisory CVE-2026-110015"},{"id":"SEA-CVE-2026-110015-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Salon Booking System WordPress plugin before 10.31.9 does not correctly verify the authenticity of REST API requests and discards WordPress core's nonce check for cookie-authenticated sessions across the whole REST API, allowing unauthenticated attackers who trick a logged-in administrator into clicking a crafted…","source_quote_or_pointer":"Advisory description (CVE-2026-110015)","fact_id":"SEA-CVE-2026-110015-F2","document_citation":"Advisory description (CVE-2026-110015)"}],"source_stated_contributors":["The Salon Booking System WordPress plugin before 10.31.9 does not correctly verify the authenticity of REST API requests and discards WordPress core's nonce check for cookie-authenticated sessions across the whole REST API, allowing unauthenticated attackers who trick a logged-in administrator into clicking a crafted…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-110015","reporting_entity":"CVE-2026-110015","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-110015-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-110015-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-110015"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-110014","title":"The Salon Booking System WordPress plugin before 10.31.9 does not properly check authorization before creating a booking and trusts a caller-supplied user identifier and booking status, allowing unauthenticated attackers to create bookings attributed to arbitrary users, overwrite those users' stored contact details, and mark bookings as paid or confirmed without any payment.","display_title":"Security issue reported in Software component","display_summary":"The Salon Booking System WordPress plugin before 10.31.9 does not properly check authorization before creating a booking and trusts a caller-supplied user identifier and booking status, allowing unauthenticated attackers…","display_reference":"CVE-2026-110014","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110014","source_title":"The Salon Booking System WordPress plugin before 10.31.9 does not properly check authorization before creating a booking and trusts a caller-supplied user identifier and booking status, allowing unauthenticated attackers to create bookings attributed to arbitrary users, overwrite those users' stored contact details, and mark bookings as paid or confirmed without any payment.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T11:15:24.937Z","source_hash":"content-fingerprint:fnv1a-93719ae0","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-110014-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Salon Booking System WordPress plugin before 10.31.9 does not properly check authorization before creating a booking and trusts a caller-supplied user identifier and booking status, allowing unauthenticated attackers to create bookings attributed to arbitrary users, overwrite those users' stored contact details, and mark bookings as paid or confirmed without any payment.","source_quote_or_pointer":"Security Advisory CVE-2026-110014","fact_id":"SEA-CVE-2026-110014-F1","document_citation":"Security Advisory CVE-2026-110014"},{"id":"SEA-CVE-2026-110014-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Salon Booking System WordPress plugin before 10.31.9 does not properly check authorization before creating a booking and trusts a caller-supplied user identifier and booking status, allowing unauthenticated attackers to create bookings attributed to arbitrary users, overwrite those users' stored contact details,…","source_quote_or_pointer":"Advisory description (CVE-2026-110014)","fact_id":"SEA-CVE-2026-110014-F2","document_citation":"Advisory description (CVE-2026-110014)"}],"source_stated_contributors":["The Salon Booking System WordPress plugin before 10.31.9 does not properly check authorization before creating a booking and trusts a caller-supplied user identifier and booking status, allowing unauthenticated attackers to create bookings attributed to arbitrary users, overwrite those users' stored contact details,…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.financial_action","data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-110014","reporting_entity":"CVE-2026-110014","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-110014-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-110014-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-110014"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-110013","title":"The Salon Booking System WordPress plugin before 10.31.9 does not generate its booking-API access tokens from a secure random source, instead deriving them from a value hardcoded in the Salon Booking System WordPress plugin before 10.31.9 and the second at which a token was issued. An attacker able to constrain when a staff or administrator token was issued can compute a valid token and access the booking API as that user, including an administrator.","display_title":"Software component issue could expose accounts or credentials","display_summary":"The Salon Booking System WordPress plugin before 10.31.9 does not generate its booking-API access tokens from a secure random source, instead deriving them from a value hardcoded in the Salon Booking System WordPress…","display_reference":"CVE-2026-110013","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110013","source_title":"The Salon Booking System WordPress plugin before 10.31.9 does not generate its booking-API access tokens from a secure random source, instead deriving them from a value hardcoded in the Salon Booking System WordPress plugin before 10.31.9 and the second at which a token was issued. An attacker able to constrain when a staff or administrator token was issued can compute a valid token and access the booking API as that user, including an administrator.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T11:15:24.937Z","source_hash":"content-fingerprint:fnv1a-f060c921","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-110013-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Salon Booking System WordPress plugin before 10.31.9 does not generate its booking-API access tokens from a secure random source, instead deriving them from a value hardcoded in the Salon Booking System WordPress plugin before 10.31.9 and the second at which a token was issued. An attacker able to constrain when a staff or administrator token was issued can compute a valid token and access the booking API as that user, including an administrator.","source_quote_or_pointer":"Security Advisory CVE-2026-110013","fact_id":"SEA-CVE-2026-110013-F1","document_citation":"Security Advisory CVE-2026-110013"},{"id":"SEA-CVE-2026-110013-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Salon Booking System WordPress plugin before 10.31.9 does not generate its booking-API access tokens from a secure random source, instead deriving them from a value hardcoded in the Salon Booking System WordPress plugin before 10.31.9 and the second at which a token was issued.","source_quote_or_pointer":"Advisory description (CVE-2026-110013)","fact_id":"SEA-CVE-2026-110013-F2","document_citation":"Advisory description (CVE-2026-110013)"}],"source_stated_contributors":["The Salon Booking System WordPress plugin before 10.31.9 does not generate its booking-API access tokens from a secure random source, instead deriving them from a value hardcoded in the Salon Booking System WordPress plugin before 10.31.9 and the second at which a token was issued."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-110013","reporting_entity":"CVE-2026-110013","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-110013-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-110013-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-110013"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109382","title":"The WSP MCP AI Agents Connector plugin for WordPress is vulnerable to Sensitive Information Disclosure in versions up to, and including, 2.9.5. This is due to the wsp_get_posts MCP tool being registered with an empty capability requirement while the MCP endpoint's authenticate() method accepts any logged-in user, and the wsp_execute_get_posts() callback honouring a caller-supplied status=all argument that expands into a WP_Query over 'publish', 'draft', 'pending' and 'future' posts with no author or ownership filter. This makes it possible for authenticated attackers, with Subscriber-level access and above, to read the titles, URLs, authors, categories, tags and 40-word excerpts of every unpublished (draft/pending/scheduled) post on the site.","display_title":"Security issue reported in Software component","display_summary":"The WSP MCP AI Agents Connector plugin for WordPress is vulnerable to Sensitive Information Disclosure in versions up to, and including, 2.9.5.","display_reference":"CVE-2026-109382","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109382","source_title":"The WSP MCP AI Agents Connector plugin for WordPress is vulnerable to Sensitive Information Disclosure in versions up to, and including, 2.9.5. This is due to the wsp_get_posts MCP tool being registered with an empty capability requirement while the MCP endpoint's authenticate() method accepts any logged-in user, and the wsp_execute_get_posts() callback honouring a caller-supplied status=all argument that expands into a WP_Query over 'publish', 'draft', 'pending' and 'future' posts with no author or ownership filter. This makes it possible for authenticated attackers, with Subscriber-level access and above, to read the titles, URLs, authors, categories, tags and 40-word excerpts of every unpublished (draft/pending/scheduled) post on the site.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T11:15:24.938Z","source_hash":"content-fingerprint:fnv1a-3ce2606a","affected_system":{"organization":"Software component project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109382-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The WSP MCP AI Agents Connector plugin for WordPress is vulnerable to Sensitive Information Disclosure in versions up to, and including, 2.9.5. This is due to the wsp_get_posts MCP tool being registered with an empty capability requirement while the MCP endpoint's authenticate() method accepts any logged-in user, and the wsp_execute_get_posts() callback honouring a caller-supplied status=all argument that expands into a WP_Query over 'publish', 'draft', 'pending' and 'future' posts with no author or ownership filter. This makes it possible for authenticated attackers, with Subscriber-level access and above, to read the titles, URLs, authors, categories, tags and 40-word excerpts of every unpublished (draft/pending/scheduled) post on the site.","source_quote_or_pointer":"Security Advisory CVE-2026-109382","fact_id":"SEA-CVE-2026-109382-F1","document_citation":"Security Advisory CVE-2026-109382"},{"id":"SEA-CVE-2026-109382-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The WSP MCP AI Agents Connector plugin for WordPress is vulnerable to Sensitive Information Disclosure in versions up to, and including, 2.9.5. This is due to the wspgetposts MCP tool being registered with an empty capability requirement while the MCP endpoint's authenticate() method accepts any logged-in user, and…","source_quote_or_pointer":"Advisory description (CVE-2026-109382)","fact_id":"SEA-CVE-2026-109382-F2","document_citation":"Advisory description (CVE-2026-109382)"}],"source_stated_contributors":["The WSP MCP AI Agents Connector plugin for WordPress is vulnerable to Sensitive Information Disclosure in versions up to, and including, 2.9.5. This is due to the wspgetposts MCP tool being registered with an empty capability requirement while the MCP endpoint's authenticate() method accepts any logged-in user, and…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.public_publication","data.pii","arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-010"],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109382","reporting_entity":"CVE-2026-109382","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109382-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109382-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-109382"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109193","title":"The HivePress – Business Directory, Listings & Classified Ads Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '<custom user attribute slug> (e.g. hp_custom_link)' parameter in all versions up to, and including, 1.7.32 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Exploitation requires that an administrator has configured a custom user attribute with a display_format template placing the %value% token inside an href, src, or style attribute context, which is a documented and expected use of the plugin's attribute display feature.","display_title":"Software component issue could run attacker-controlled scripts in a browser","display_summary":"The HivePress – Business Directory, Listings & Classified Ads Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ' (e.g.","display_reference":"CVE-2026-109193","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109193","source_title":"The HivePress – Business Directory, Listings & Classified Ads Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '<custom user attribute slug> (e.g. hp_custom_link)' parameter in all versions up to, and including, 1.7.32 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Exploitation requires that an administrator has configured a custom user attribute with a display_format template placing the %value% token inside an href, src, or style attribute context, which is a documented and expected use of the plugin's attribute display feature.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T11:15:24.940Z","source_hash":"content-fingerprint:fnv1a-b9d54d4a","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109193-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The HivePress – Business Directory, Listings & Classified Ads Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '<custom user attribute slug> (e.g. hp_custom_link)' parameter in all versions up to, and including, 1.7.32 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Exploitation requires that an administrator has configured a custom user attribute with a display_format template placing the %value% token inside an href, src, or style attribute context, which is a documented and expected use of the plugin's attribute display feature.","source_quote_or_pointer":"Security Advisory CVE-2026-109193","fact_id":"SEA-CVE-2026-109193-F1","document_citation":"Security Advisory CVE-2026-109193"},{"id":"SEA-CVE-2026-109193-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The HivePress – Business Directory, Listings & Classified Ads Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ' (e.g. hpcustomlink)' parameter in all versions up to, and including, 1.7.32 due to insufficient input sanitization and output escaping.","source_quote_or_pointer":"Advisory description (CVE-2026-109193)","fact_id":"SEA-CVE-2026-109193-F2","document_citation":"Advisory description (CVE-2026-109193)"}],"source_stated_contributors":["The HivePress – Business Directory, Listings & Classified Ads Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ' (e.g. hpcustomlink)' parameter in all versions up to, and including, 1.7.32 due to insufficient input sanitization and output escaping."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109193","reporting_entity":"CVE-2026-109193","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109193-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109193-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-109193"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-107770","title":"The Photo Engine (Media Organizer & Lightroom) plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.5.6 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to permanently delete arbitrary media attachments via wp_delete_attachment and upload new attachments to the site, actions that require the upload_files or edit_others_posts capabilities. A Subscriber-level user can obtain their own wplr_auth_token directly from the profile.php page source, because the admin screen guard in Meow_WPLR_Sync_Admin::__construct() is commented out, causing wp_localize_script to leak the token into every admin page view; this token can then be used from a cookie-less HTTP session to invoke destructive actions on the /?wplr-sync-api endpoint.","display_title":"Software component issue could allow unauthorized access","display_summary":"The Photo Engine (Media Organizer & Lightroom) plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.5.6 This is due to the plugin not properly verifying that a user is…","display_reference":"CVE-2026-107770","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107770","source_title":"The Photo Engine (Media Organizer & Lightroom) plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.5.6 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to permanently delete arbitrary media attachments via wp_delete_attachment and upload new attachments to the site, actions that require the upload_files or edit_others_posts capabilities. A Subscriber-level user can obtain their own wplr_auth_token directly from the profile.php page source, because the admin screen guard in Meow_WPLR_Sync_Admin::__construct() is commented out, causing wp_localize_script to leak the token into every admin page view; this token can then be used from a cookie-less HTTP session to invoke destructive actions on the /?wplr-sync-api endpoint.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T11:15:24.940Z","source_hash":"content-fingerprint:fnv1a-833c2109","affected_system":{"organization":"The Photo Engine (Media Organizer & Lightroom) plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.5.6 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to permanently delete arbitrary media attachments via wpdeleteattachment and upload new attachments to the site, actions that require the uploadfiles or editothersposts capabilities. A Subscriber-level user can obtain their own wplrauthtoken directly from the profile.php page source, because the admin screen guard in MeowWPLRSyncAdmin project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-107770-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Photo Engine (Media Organizer & Lightroom) plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.5.6 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to permanently delete arbitrary media attachments via wp_delete_attachment and upload new attachments to the site, actions that require the upload_files or edit_others_posts capabilities. A Subscriber-level user can obtain their own wplr_auth_token directly from the profile.php page source, because the admin screen guard in Meow_WPLR_Sync_Admin::__construct() is commented out, causing wp_localize_script to leak the token into every admin page view; this token can then be used from a cookie-less HTTP session to invoke destructive actions on the /?wplr-sync-api endpoint.","source_quote_or_pointer":"Security Advisory CVE-2026-107770","fact_id":"SEA-CVE-2026-107770-F1","document_citation":"Security Advisory CVE-2026-107770"},{"id":"SEA-CVE-2026-107770-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Photo Engine (Media Organizer & Lightroom) plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.5.6 This is due to the plugin not properly verifying that a user is authorized to perform an action.","source_quote_or_pointer":"Advisory description (CVE-2026-107770)","fact_id":"SEA-CVE-2026-107770-F2","document_citation":"Advisory description (CVE-2026-107770)"}],"source_stated_contributors":["The Photo Engine (Media Organizer & Lightroom) plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.5.6 This is due to the plugin not properly verifying that a user is authorized to perform an action."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.privileged_action","auth.write_action","data.pii","data.uploaded_files"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-107770","reporting_entity":"CVE-2026-107770","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-107770-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-107770-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-107770"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-107646","title":"The HUSKY – Products Filter for WooCommerce Professional plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.5 via the 'woof_settings[woof_stat][server_options]' parameter. This makes it possible for unauthenticated attackers to extract the external MySQL host, database name, username, and plaintext password stored in woof_settings[woof_stat][server_options] from the inline woof_tm_data script object on any public frontend filter page. This is only exploitable when an administrator has enabled the Statistics extension, saved external MySQL connection credentials, and enabled Turbo Mode — all supported, documented plugin configurations.","display_title":"Software component issue could expose accounts or credentials","display_summary":"The HUSKY – Products Filter for WooCommerce Professional plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.5 via the 'woofsettings[woofstat][serveroptions]'…","display_reference":"CVE-2026-107646","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107646","source_title":"The HUSKY – Products Filter for WooCommerce Professional plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.5 via the 'woof_settings[woof_stat][server_options]' parameter. This makes it possible for unauthenticated attackers to extract the external MySQL host, database name, username, and plaintext password stored in woof_settings[woof_stat][server_options] from the inline woof_tm_data script object on any public frontend filter page. This is only exploitable when an administrator has enabled the Statistics extension, saved external MySQL connection credentials, and enabled Turbo Mode — all supported, documented plugin configurations.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T11:15:24.941Z","source_hash":"content-fingerprint:fnv1a-74d395d1","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-107646-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The HUSKY – Products Filter for WooCommerce Professional plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.5 via the 'woof_settings[woof_stat][server_options]' parameter. This makes it possible for unauthenticated attackers to extract the external MySQL host, database name, username, and plaintext password stored in woof_settings[woof_stat][server_options] from the inline woof_tm_data script object on any public frontend filter page. This is only exploitable when an administrator has enabled the Statistics extension, saved external MySQL connection credentials, and enabled Turbo Mode — all supported, documented plugin configurations.","source_quote_or_pointer":"Security Advisory CVE-2026-107646","fact_id":"SEA-CVE-2026-107646-F1","document_citation":"Security Advisory CVE-2026-107646"},{"id":"SEA-CVE-2026-107646-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The HUSKY – Products Filter for WooCommerce Professional plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.5 via the 'woofsettings[woofstat][serveroptions]' parameter.","source_quote_or_pointer":"Advisory description (CVE-2026-107646)","fact_id":"SEA-CVE-2026-107646-F2","document_citation":"Advisory description (CVE-2026-107646)"}],"source_stated_contributors":["The HUSKY – Products Filter for WooCommerce Professional plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.5 via the 'woofsettings[woofstat][serveroptions]' parameter."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.write_action","auth.public_publication","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-107646","reporting_entity":"CVE-2026-107646","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-107646-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-107646-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-107646"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-105974","title":"The Visual Form Builder WordPress plugin through 3.1 does not perform an authorization check before displaying recent form submission data in a dashboard widget, allowing any authenticated user (Subscriber and above) to read other users' submitted contact information, including names, email addresses, form titles and timestamps.","display_title":"Security issue reported in Software component","display_summary":"The Visual Form Builder WordPress plugin through 3.1 does not perform an authorization check before displaying recent form submission data in a dashboard widget, allowing any authenticated user (Subscriber and above) to…","display_reference":"CVE-2026-105974","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105974","source_title":"The Visual Form Builder WordPress plugin through 3.1 does not perform an authorization check before displaying recent form submission data in a dashboard widget, allowing any authenticated user (Subscriber and above) to read other users' submitted contact information, including names, email addresses, form titles and timestamps.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T11:15:24.941Z","source_hash":"content-fingerprint:fnv1a-99e059c5","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-105974-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Visual Form Builder WordPress plugin through 3.1 does not perform an authorization check before displaying recent form submission data in a dashboard widget, allowing any authenticated user (Subscriber and above) to read other users' submitted contact information, including names, email addresses, form titles and timestamps.","source_quote_or_pointer":"Security Advisory CVE-2026-105974","fact_id":"SEA-CVE-2026-105974-F1","document_citation":"Security Advisory CVE-2026-105974"},{"id":"SEA-CVE-2026-105974-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Visual Form Builder WordPress plugin through 3.1 does not perform an authorization check before displaying recent form submission data in a dashboard widget, allowing any authenticated user (Subscriber and above) to read other users' submitted contact information, including names, email addresses, form titles and…","source_quote_or_pointer":"Advisory description (CVE-2026-105974)","fact_id":"SEA-CVE-2026-105974-F2","document_citation":"Advisory description (CVE-2026-105974)"}],"source_stated_contributors":["The Visual Form Builder WordPress plugin through 3.1 does not perform an authorization check before displaying recent form submission data in a dashboard widget, allowing any authenticated user (Subscriber and above) to read other users' submitted contact information, including names, email addresses, form titles and…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-105974","reporting_entity":"CVE-2026-105974","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-105974-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-105974-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-105974"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-105973","title":"The Visual Form Builder WordPress plugin through 3.1 does not perform authorization or nonce checks when reordering form fields, allowing any authenticated user (Subscriber and above) to alter the field structure of any form on the site, persistently breaking its public rendering.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-105973","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105973","source_title":"The Visual Form Builder WordPress plugin through 3.1 does not perform authorization or nonce checks when reordering form fields, allowing any authenticated user (Subscriber and above) to alter the field structure of any form on the site, persistently breaking its public rendering.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T11:15:24.942Z","source_hash":"content-fingerprint:fnv1a-56f0d04e","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-105973-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Visual Form Builder WordPress plugin through 3.1 does not perform authorization or nonce checks when reordering form fields, allowing any authenticated user (Subscriber and above) to alter the field structure of any form on the site, persistently breaking its public rendering.","source_quote_or_pointer":"Security Advisory CVE-2026-105973","fact_id":"SEA-CVE-2026-105973-F1","document_citation":"Security Advisory CVE-2026-105973"},{"id":"SEA-CVE-2026-105973-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Visual Form Builder WordPress plugin through 3.1 does not perform authorization or nonce checks when reordering form fields, allowing any authenticated user (Subscriber and above) to alter the field structure of any form on the site, persistently breaking its public rendering.","source_quote_or_pointer":"Advisory description (CVE-2026-105973)","fact_id":"SEA-CVE-2026-105973-F2","document_citation":"Advisory description (CVE-2026-105973)"}],"source_stated_contributors":["The Visual Form Builder WordPress plugin through 3.1 does not perform authorization or nonce checks when reordering form fields, allowing any authenticated user (Subscriber and above) to alter the field structure of any form on the site, persistently breaking its public rendering."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.public_publication","data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-105973","reporting_entity":"CVE-2026-105973","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-105973-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-105973-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-105973"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-104755","title":"The WP Compress – Instant Performance & Speed Optimization plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 7.25.00 The vulnerability exists because the start_comms dispatcher (wps_ic_comms::start_comms), hooked on every front-end request, gates access only by comparing the caller-supplied apikey parameter against the stored plugin API key with no WordPress capability check and no nonce verification, then passes the unvalidated group, setting, and value parameters directly to change_setting(), which writes them into the WPS_IC_SETTINGS option without an allow-list. This makes it possible for unauthenticated attackers to write arbitrary permission keys into the plugin's settings, causing wps_ic_users::checkAndAddCaps() to grant any WordPress role — including Subscriber — the manage_wpc_settings capability and thereby achieve plugin-administrator-equivalent control over the plugin's optimization, CDN, and critical-CSS surfaces. The API key required to pass the authorization check can itself be obtained without authentication via the wpc_send_critical_remote nopriv AJAX action: when the external critical-CSS service returns an apiResults field, initCritical() echoes the stored plugin API key back to the caller in a wp_send_json_success response, completing the exploit chain entirely without a WordPress login.","display_title":"Software component issue could grant elevated privileges","display_summary":"The WP Compress – Instant Performance & Speed Optimization plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 7.25.00 The vulnerability exists because the startcomms…","display_reference":"CVE-2026-104755","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104755","source_title":"The WP Compress – Instant Performance & Speed Optimization plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 7.25.00 The vulnerability exists because the start_comms dispatcher (wps_ic_comms::start_comms), hooked on every front-end request, gates access only by comparing the caller-supplied apikey parameter against the stored plugin API key with no WordPress capability check and no nonce verification, then passes the unvalidated group, setting, and value parameters directly to change_setting(), which writes them into the WPS_IC_SETTINGS option without an allow-list. This makes it possible for unauthenticated attackers to write arbitrary permission keys into the plugin's settings, causing wps_ic_users::checkAndAddCaps() to grant any WordPress role — including Subscriber — the manage_wpc_settings capability and thereby achieve plugin-administrator-equivalent control over the plugin's optimization, CDN, and critical-CSS surfaces. The API key required to pass the authorization check can itself be obtained without authentication via the wpc_send_critical_remote nopriv AJAX action: when the external critical-CSS service returns an apiResults field, initCritical() echoes the stored plugin API key back to the caller in a wp_send_json_success response, completing the exploit chain entirely without a WordPress login.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T11:15:24.943Z","source_hash":"content-fingerprint:fnv1a-8f39dd5","affected_system":{"organization":"The WP Compress – Instant Performance & Speed Optimization plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 7.25.00 The vulnerability exists because the startcomms dispatcher (wpsiccomms project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-104755-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The WP Compress – Instant Performance & Speed Optimization plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 7.25.00 The vulnerability exists because the start_comms dispatcher (wps_ic_comms::start_comms), hooked on every front-end request, gates access only by comparing the caller-supplied apikey parameter against the stored plugin API key with no WordPress capability check and no nonce verification, then passes the unvalidated group, setting, and value parameters directly to change_setting(), which writes them into the WPS_IC_SETTINGS option without an allow-list. This makes it possible for unauthenticated attackers to write arbitrary permission keys into the plugin's settings, causing wps_ic_users::checkAndAddCaps() to grant any WordPress role — including Subscriber — the manage_wpc_settings capability and thereby achieve plugin-administrator-equivalent control over the plugin's optimization, CDN, and critical-CSS surfaces. The API key required to pass the authorization check can itself be obtained without authentication via the wpc_send_critical_remote nopriv AJAX action: when the external critical-CSS service returns an apiResults field, initCritical() echoes the stored plugin API key back to the caller in a wp_send_json_success response, completing the exploit chain entirely without a WordPress login.","source_quote_or_pointer":"Security Advisory CVE-2026-104755","fact_id":"SEA-CVE-2026-104755-F1","document_citation":"Security Advisory CVE-2026-104755"},{"id":"SEA-CVE-2026-104755-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The WP Compress – Instant Performance & Speed Optimization plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 7.25.00 The vulnerability exists because the startcomms dispatcher (wpsiccomms::startcomms), hooked on every front-end request, gates access only by comparing the…","source_quote_or_pointer":"Advisory description (CVE-2026-104755)","fact_id":"SEA-CVE-2026-104755-F2","document_citation":"Advisory description (CVE-2026-104755)"}],"source_stated_contributors":["The WP Compress – Instant Performance & Speed Optimization plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 7.25.00 The vulnerability exists because the startcomms dispatcher (wpsiccomms::startcomms), hooked on every front-end request, gates access only by comparing the…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.infrastructure_modification","auth.write_action","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-104755","reporting_entity":"CVE-2026-104755","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-104755-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-104755-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-104755"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-104730","title":"The Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.7.4 via deserialization of untrusted input . This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP chain is present in the vulnerable software, which means this vulnerability has no impact unless another plugin or theme containing a POP chain is installed on the site. If a POP chain is present via an additional plugin or theme installed on the target system, it may allow the attacker to perform actions like delete arbitrary files, retrieve sensitive data, or execute code depending on the POP chain present. If a POP chain is present via an additional plugin or theme installed on the target system, the attacker can store the malicious payload unauthenticated via the public favorites page and trigger deserialization by viewing any image in a non-viewable or private gallery.","display_title":"Software component issue could make the application process unsafe input","display_summary":"The Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.7.4 via deserialization of untrusted…","display_reference":"CVE-2026-104730","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104730","source_title":"The Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.7.4 via deserialization of untrusted input . This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP chain is present in the vulnerable software, which means this vulnerability has no impact unless another plugin or theme containing a POP chain is installed on the site. If a POP chain is present via an additional plugin or theme installed on the target system, it may allow the attacker to perform actions like delete arbitrary files, retrieve sensitive data, or execute code depending on the POP chain present. If a POP chain is present via an additional plugin or theme installed on the target system, the attacker can store the malicious payload unauthenticated via the public favorites page and trigger deserialization by viewing any image in a non-viewable or private gallery.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T11:15:24.944Z","source_hash":"content-fingerprint:fnv1a-cf2afdb4","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-104730-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.7.4 via deserialization of untrusted input . This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP chain is present in the vulnerable software, which means this vulnerability has no impact unless another plugin or theme containing a POP chain is installed on the site. If a POP chain is present via an additional plugin or theme installed on the target system, it may allow the attacker to perform actions like delete arbitrary files, retrieve sensitive data, or execute code depending on the POP chain present. If a POP chain is present via an additional plugin or theme installed on the target system, the attacker can store the malicious payload unauthenticated via the public favorites page and trigger deserialization by viewing any image in a non-viewable or private gallery.","source_quote_or_pointer":"Security Advisory CVE-2026-104730","fact_id":"SEA-CVE-2026-104730-F1","document_citation":"Security Advisory CVE-2026-104730"},{"id":"SEA-CVE-2026-104730-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.7.4 via deserialization of untrusted input . This makes it possible for unauthenticated attackers to inject a PHP Object.","source_quote_or_pointer":"Advisory description (CVE-2026-104730)","fact_id":"SEA-CVE-2026-104730-F2","document_citation":"Advisory description (CVE-2026-104730)"}],"source_stated_contributors":["The Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.7.4 via deserialization of untrusted input . This makes it possible for unauthenticated attackers to inject a PHP Object."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.code_execution","auth.destructive_action","auth.write_action","auth.public_publication"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unsafe object construction","Possible code execution"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-104730","reporting_entity":"CVE-2026-104730","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-104730-SG1","label":"Use schema-validated data formats","description":"Parse untrusted input into plain data with an explicit schema; never deserialize into arbitrary types.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-104730-SG1","label":"Use schema-validated data formats","description":"Parse untrusted input into plain data with an explicit schema; never deserialize into arbitrary types.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"The application rebuilt objects from untrusted data. Use data-only formats with schema validation instead of native object deserialization.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-104730"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-104715","title":"A flaw was found in cifs-utils. This flaw allows an unprivileged local user to achieve privilege escalation. When a privileged service mounts a Common Internet File System (CIFS) share using a user-controlled credentials file, input values are not properly sanitized before being assembled into mount options. A local attacker can exploit this vulnerability to inject unauthorized mount options, allowing them to bypass permission checks and execute files with administrative (root) privileges.","display_title":"Software component issue could expose accounts or credentials","display_summary":"A flaw was found in cifs-utils. This flaw allows an unprivileged local user to achieve privilege escalation. When a privileged service mounts a Common Internet File System (CIFS) share using a user-controlled credentials…","display_reference":"CVE-2026-104715","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104715","source_title":"A flaw was found in cifs-utils. This flaw allows an unprivileged local user to achieve privilege escalation. When a privileged service mounts a Common Internet File System (CIFS) share using a user-controlled credentials file, input values are not properly sanitized before being assembled into mount options. A local attacker can exploit this vulnerability to inject unauthorized mount options, allowing them to bypass permission checks and execute files with administrative (root) privileges.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T11:15:24.945Z","source_hash":"content-fingerprint:fnv1a-388e6cab","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-104715-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A flaw was found in cifs-utils. This flaw allows an unprivileged local user to achieve privilege escalation. When a privileged service mounts a Common Internet File System (CIFS) share using a user-controlled credentials file, input values are not properly sanitized before being assembled into mount options. A local attacker can exploit this vulnerability to inject unauthorized mount options, allowing them to bypass permission checks and execute files with administrative (root) privileges.","source_quote_or_pointer":"Security Advisory CVE-2026-104715","fact_id":"SEA-CVE-2026-104715-F1","document_citation":"Security Advisory CVE-2026-104715"},{"id":"SEA-CVE-2026-104715-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A flaw was found in cifs-utils. This flaw allows an unprivileged local user to achieve privilege escalation. When a privileged service mounts a Common Internet File System (CIFS) share using a user-controlled credentials file, input values are not properly sanitized before being assembled into mount options.","source_quote_or_pointer":"Advisory description (CVE-2026-104715)","fact_id":"SEA-CVE-2026-104715-F2","document_citation":"Advisory description (CVE-2026-104715)"}],"source_stated_contributors":["A flaw was found in cifs-utils. This flaw allows an unprivileged local user to achieve privilege escalation. When a privileged service mounts a Common Internet File System (CIFS) share using a user-controlled credentials file, input values are not properly sanitized before being assembled into mount options."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-104715","reporting_entity":"CVE-2026-104715","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-104715-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-104715-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-104715"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-103696","title":"The Mobile builder WordPress plugin through 1.4.2 does not sanitise and escape a parameter before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks on sites that also run the WCFM Delivery add-on.","display_title":"Software component issue could expose or alter stored data","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-103696","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103696","source_title":"The Mobile builder WordPress plugin through 1.4.2 does not sanitise and escape a parameter before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks on sites that also run the WCFM Delivery add-on.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T11:15:24.945Z","source_hash":"content-fingerprint:fnv1a-f786892c","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-103696-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Mobile builder WordPress plugin through 1.4.2 does not sanitise and escape a parameter before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks on sites that also run the WCFM Delivery add-on.","source_quote_or_pointer":"Security Advisory CVE-2026-103696","fact_id":"SEA-CVE-2026-103696-F1","document_citation":"Security Advisory CVE-2026-103696"},{"id":"SEA-CVE-2026-103696-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Mobile builder WordPress plugin through 1.4.2 does not sanitise and escape a parameter before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks on sites that also run the WCFM Delivery add-on.","source_quote_or_pointer":"Advisory description (CVE-2026-103696)","fact_id":"SEA-CVE-2026-103696-F2","document_citation":"Advisory description (CVE-2026-103696)"}],"source_stated_contributors":["The Mobile builder WordPress plugin through 1.4.2 does not sanitise and escape a parameter before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks on sites that also run the WCFM Delivery add-on."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-103696","reporting_entity":"CVE-2026-103696","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-103696-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-103696-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-103696"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-93767","title":"The Tainacan plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.3.0 via the 'guid' parameter parameter. This makes it possible for authenticated attackers, with subscriber-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information. This vulnerability is exploitable only when the uploads/tainacan directory does not exist on the server, as this condition causes realpath() to return false, collapsing the base path to an empty string and rendering the containment check ineffective.","display_title":"Software component issue could expose restricted files","display_summary":"The Tainacan plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.3.0 via the 'guid' parameter parameter.","display_reference":"CVE-2026-93767","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93767","source_title":"The Tainacan plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.3.0 via the 'guid' parameter parameter. This makes it possible for authenticated attackers, with subscriber-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information. This vulnerability is exploitable only when the uploads/tainacan directory does not exist on the server, as this condition causes realpath() to return false, collapsing the base path to an empty string and rendering the containment check ineffective.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T11:15:24.948Z","source_hash":"content-fingerprint:fnv1a-e6390593","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-93767-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Tainacan plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.3.0 via the 'guid' parameter parameter. This makes it possible for authenticated attackers, with subscriber-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information. This vulnerability is exploitable only when the uploads/tainacan directory does not exist on the server, as this condition causes realpath() to return false, collapsing the base path to an empty string and rendering the containment check ineffective.","source_quote_or_pointer":"Security Advisory CVE-2026-93767","fact_id":"SEA-CVE-2026-93767-F1","document_citation":"Security Advisory CVE-2026-93767"},{"id":"SEA-CVE-2026-93767-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Tainacan plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.3.0 via the 'guid' parameter parameter. This makes it possible for authenticated attackers, with subscriber-level access and above, to read the contents of arbitrary files on the server, which can contain…","source_quote_or_pointer":"Advisory description (CVE-2026-93767)","fact_id":"SEA-CVE-2026-93767-F2","document_citation":"Advisory description (CVE-2026-93767)"}],"source_stated_contributors":["The Tainacan plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.3.0 via the 'guid' parameter parameter. This makes it possible for authenticated attackers, with subscriber-level access and above, to read the contents of arbitrary files on the server, which can contain…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Restricted file exposure","File overwrite"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-93767","reporting_entity":"CVE-2026-93767","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-93767-SG1","label":"Confine file access to a fixed root","description":"Resolve paths to canonical form and reject anything outside the intended directory before opening files.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-93767-SG1","label":"Confine file access to a fixed root","description":"Resolve paths to canonical form and reject anything outside the intended directory before opening files.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"File paths supplied by a caller escaped the intended directory. Canonicalise paths and confine file access to a fixed root.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-93767"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-89079","title":"The Theme My Login plugin for WordPress is vulnerable to privilege escalation via account takeover in versions up to, and including, 7.2.1. This is due to the plugin not properly validating a user's identity prior to updating their password. This makes it possible for unauthenticated attackers to change arbitrary user's passwords on multi-site setups in certain configurations.","display_title":"Software component issue could expose accounts or credentials","display_summary":"The Theme My Login plugin for WordPress is vulnerable to privilege escalation via account takeover in versions up to, and including, 7.2.1.","display_reference":"CVE-2026-89079","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89079","source_title":"The Theme My Login plugin for WordPress is vulnerable to privilege escalation via account takeover in versions up to, and including, 7.2.1. This is due to the plugin not properly validating a user's identity prior to updating their password. This makes it possible for unauthenticated attackers to change arbitrary user's passwords on multi-site setups in certain configurations.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T11:15:24.948Z","source_hash":"content-fingerprint:fnv1a-3fe78f84","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-89079-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Theme My Login plugin for WordPress is vulnerable to privilege escalation via account takeover in versions up to, and including, 7.2.1. This is due to the plugin not properly validating a user's identity prior to updating their password. This makes it possible for unauthenticated attackers to change arbitrary user's passwords on multi-site setups in certain configurations.","source_quote_or_pointer":"Security Advisory CVE-2026-89079","fact_id":"SEA-CVE-2026-89079-F1","document_citation":"Security Advisory CVE-2026-89079"},{"id":"SEA-CVE-2026-89079-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Theme My Login plugin for WordPress is vulnerable to privilege escalation via account takeover in versions up to, and including, 7.2.1. This is due to the plugin not properly validating a user's identity prior to updating their password.","source_quote_or_pointer":"Advisory description (CVE-2026-89079)","fact_id":"SEA-CVE-2026-89079-F2","document_citation":"Advisory description (CVE-2026-89079)"}],"source_stated_contributors":["The Theme My Login plugin for WordPress is vulnerable to privilege escalation via account takeover in versions up to, and including, 7.2.1. This is due to the plugin not properly validating a user's identity prior to updating their password."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-89079","reporting_entity":"CVE-2026-89079","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-89079-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-89079-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-89079"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-12272","title":"The Lightweight Cookie Notice – Cookie Banner for Cookie Consent plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.19 This is due to the W3TC_DYNAMIC_SECURITY constant being hardcoded to a publicly known value. This makes it possible for unauthenticated attackers to know the W3 Total Cache mfunc security key, which when W3 Total Cache is installed may allow arbitrary PHP code injection.","display_title":"Security issue reported in Software component","display_summary":"The Lightweight Cookie Notice – Cookie Banner for Cookie Consent plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.19 This is due to the W3TCDYNAMICSECURITY…","display_reference":"CVE-2026-12272","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-12272","source_title":"The Lightweight Cookie Notice – Cookie Banner for Cookie Consent plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.19 This is due to the W3TC_DYNAMIC_SECURITY constant being hardcoded to a publicly known value. This makes it possible for unauthenticated attackers to know the W3 Total Cache mfunc security key, which when W3 Total Cache is installed may allow arbitrary PHP code injection.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T11:15:24.953Z","source_hash":"content-fingerprint:fnv1a-a88c80b3","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-12272-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Lightweight Cookie Notice – Cookie Banner for Cookie Consent plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.19 This is due to the W3TC_DYNAMIC_SECURITY constant being hardcoded to a publicly known value. This makes it possible for unauthenticated attackers to know the W3 Total Cache mfunc security key, which when W3 Total Cache is installed may allow arbitrary PHP code injection.","source_quote_or_pointer":"Security Advisory CVE-2026-12272","fact_id":"SEA-CVE-2026-12272-F1","document_citation":"Security Advisory CVE-2026-12272"},{"id":"SEA-CVE-2026-12272-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Lightweight Cookie Notice – Cookie Banner for Cookie Consent plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.19 This is due to the W3TCDYNAMICSECURITY constant being hardcoded to a publicly known value.","source_quote_or_pointer":"Advisory description (CVE-2026-12272)","fact_id":"SEA-CVE-2026-12272-F2","document_citation":"Advisory description (CVE-2026-12272)"}],"source_stated_contributors":["The Lightweight Cookie Notice – Cookie Banner for Cookie Consent plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.19 This is due to the W3TCDYNAMICSECURITY constant being hardcoded to a publicly known value."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["arch.caching"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-12272","reporting_entity":"CVE-2026-12272","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-12272-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-12272-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-12272"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-111458","title":"The fanx_fingerprint function in ssl/sslxprint.c of ssldump allocates a heap buffer for formatting FAN/1 X.509 certificate fingerprints. The allocation size is computed as strlen(b64) + strlen(hex) + 31, but the format string \"fan1:x509:server:passive:%s:sha256:%s\" contains 33 fixed characters in addition to the two variable-length fields and a null terminator, requiring strlen(b64) + strlen(hex) + 34 bytes. This miscalculation results in a 3-byte heap-based buffer overflow on every invocation of the function with valid inputs. The overflow occurs because sprintf writes the full formatted string into the undersized heap buffer without bounds checking. An attacker who can supply a crafted pcap file containing a TLS X.509 certificate to a user running ssldump with FAN/1 fingerprinting enabled (for example with the -j -N options) can trigger the overflow. The resulting heap corruption may lead to denial of service through a crash or, in a worst-case scenario, arbitrary code execution in the context of the user running ssldump. The vulnerability is deterministic and requires no special privileges beyond the ability to provide input to the tool.","display_title":"Software component issue could allow unintended commands to run","display_summary":"The fanxfingerprint function in ssl/sslxprint.c of ssldump allocates a heap buffer for formatting FAN/1 X.509 certificate fingerprints.","display_reference":"CVE-2026-111458","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111458","source_title":"The fanx_fingerprint function in ssl/sslxprint.c of ssldump allocates a heap buffer for formatting FAN/1 X.509 certificate fingerprints. The allocation size is computed as strlen(b64) + strlen(hex) + 31, but the format string \"fan1:x509:server:passive:%s:sha256:%s\" contains 33 fixed characters in addition to the two variable-length fields and a null terminator, requiring strlen(b64) + strlen(hex) + 34 bytes. This miscalculation results in a 3-byte heap-based buffer overflow on every invocation of the function with valid inputs. The overflow occurs because sprintf writes the full formatted string into the undersized heap buffer without bounds checking. An attacker who can supply a crafted pcap file containing a TLS X.509 certificate to a user running ssldump with FAN/1 fingerprinting enabled (for example with the -j -N options) can trigger the overflow. The resulting heap corruption may lead to denial of service through a crash or, in a worst-case scenario, arbitrary code execution in the context of the user running ssldump. The vulnerability is deterministic and requires no special privileges beyond the ability to provide input to the tool.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T11:15:24.954Z","source_hash":"content-fingerprint:fnv1a-10c7e8cb","affected_system":{"organization":"The fanxfingerprint function in ssl/sslxprint.c of ssldump allocates a heap buffer for formatting FAN/1 X.509 certificate fingerprints. The allocation size is computed as strlen(b64) + strlen(hex) + 31, but the format string \"fan1 project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-111458-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The fanx_fingerprint function in ssl/sslxprint.c of ssldump allocates a heap buffer for formatting FAN/1 X.509 certificate fingerprints. The allocation size is computed as strlen(b64) + strlen(hex) + 31, but the format string \"fan1:x509:server:passive:%s:sha256:%s\" contains 33 fixed characters in addition to the two variable-length fields and a null terminator, requiring strlen(b64) + strlen(hex) + 34 bytes. This miscalculation results in a 3-byte heap-based buffer overflow on every invocation of the function with valid inputs. The overflow occurs because sprintf writes the full formatted string into the undersized heap buffer without bounds checking. An attacker who can supply a crafted pcap file containing a TLS X.509 certificate to a user running ssldump with FAN/1 fingerprinting enabled (for example with the -j -N options) can trigger the overflow. The resulting heap corruption may lead to denial of service through a crash or, in a worst-case scenario, arbitrary code execution in the context of the user running ssldump. The vulnerability is deterministic and requires no special privileges beyond the ability to provide input to the tool.","source_quote_or_pointer":"Security Advisory CVE-2026-111458","fact_id":"SEA-CVE-2026-111458-F1","document_citation":"Security Advisory CVE-2026-111458"},{"id":"SEA-CVE-2026-111458-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The fanxfingerprint function in ssl/sslxprint.c of ssldump allocates a heap buffer for formatting FAN/1 X.509 certificate fingerprints. The allocation size is computed as strlen(b64) + strlen(hex) + 31, but the format string \"fan1:x509:server:passive:%s:sha256:%s\" contains 33 fixed characters in addition to the two…","source_quote_or_pointer":"Advisory description (CVE-2026-111458)","fact_id":"SEA-CVE-2026-111458-F2","document_citation":"Advisory description (CVE-2026-111458)"}],"source_stated_contributors":["The fanxfingerprint function in ssl/sslxprint.c of ssldump allocates a heap buffer for formatting FAN/1 X.509 certificate fingerprints. The allocation size is computed as strlen(b64) + strlen(hex) + 31, but the format string \"fan1:x509:server:passive:%s:sha256:%s\" contains 33 fixed characters in addition to the two…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-111458","reporting_entity":"CVE-2026-111458","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-111458-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-111458-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-111458"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-110017","title":"The Quick PayPal Payments: Payment Button & Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'form' parameter in all versions up to, and including, 6.0.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Because wp_kses_post strips only HTML tags, a quote-breaking payload containing no angle brackets survives post save intact, and the injected script fires for every viewer of the post — including higher-privileged Editors and Administrators who routinely preview a Contributor's pending content.","display_title":"The Quick PayPal Payments issue could run attacker-controlled scripts in a browser","display_summary":"The Quick PayPal Payments: Payment Button & Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'form' parameter in all versions up to, and including, 6.0.4 due to insufficient input…","display_reference":"CVE-2026-110017","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110017","source_title":"The Quick PayPal Payments: Payment Button & Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'form' parameter in all versions up to, and including, 6.0.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Because wp_kses_post strips only HTML tags, a quote-breaking payload containing no angle brackets survives post save intact, and the injected script fires for every viewer of the post — including higher-privileged Editors and Administrators who routinely preview a Contributor's pending content.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T11:15:24.955Z","source_hash":"content-fingerprint:fnv1a-ac179d43","affected_system":{"organization":"The Quick PayPal Payments project","product":"The Quick PayPal Payments","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-110017-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Quick PayPal Payments: Payment Button & Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'form' parameter in all versions up to, and including, 6.0.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Because wp_kses_post strips only HTML tags, a quote-breaking payload containing no angle brackets survives post save intact, and the injected script fires for every viewer of the post — including higher-privileged Editors and Administrators who routinely preview a Contributor's pending content.","source_quote_or_pointer":"Security Advisory CVE-2026-110017","fact_id":"SEA-CVE-2026-110017-F1","document_citation":"Security Advisory CVE-2026-110017"},{"id":"SEA-CVE-2026-110017-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Quick PayPal Payments: Payment Button & Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'form' parameter in all versions up to, and including, 6.0.4 due to insufficient input sanitization and output escaping.","source_quote_or_pointer":"Advisory description (CVE-2026-110017)","fact_id":"SEA-CVE-2026-110017-F2","document_citation":"Advisory description (CVE-2026-110017)"}],"source_stated_contributors":["The Quick PayPal Payments: Payment Button & Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'form' parameter in all versions up to, and including, 6.0.4 due to insufficient input sanitization and output escaping."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.financial_action","auth.privileged_action","auth.write_action","data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-110017","reporting_entity":"CVE-2026-110017","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-110017-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-110017-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-110017"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109447","title":"The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.0.3 via the role parameter handled by the wppb_add_meta_to_user_on_activation() function. The vulnerability exists because the activation handler passes the attacker-supplied role value directly to WP_User::set_role() with no allow-list validation, and the 4.0.3 reserved-name check exempts pre-existing form fields from the block, allowing a legacy field with meta-name role to persist and bridge attacker-controlled request input into the serialized signup record stored in wp_signups. This makes it possible for unauthenticated attackers to gain a fully activated WordPress administrator account by submitting role=administrator through the public [wppb-register] shortcode form and subsequently clicking the confirmation activation link. Exploitation requires the site to have a legacy form field with meta-name role carried over from before the 4.0.3 upgrade, email confirmation enabled, and open user registration — all stable site-state conditions once established.","display_title":"Software component issue could grant elevated privileges","display_summary":"The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.0.3 via the role parameter…","display_reference":"CVE-2026-109447","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109447","source_title":"The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.0.3 via the role parameter handled by the wppb_add_meta_to_user_on_activation() function. The vulnerability exists because the activation handler passes the attacker-supplied role value directly to WP_User::set_role() with no allow-list validation, and the 4.0.3 reserved-name check exempts pre-existing form fields from the block, allowing a legacy field with meta-name role to persist and bridge attacker-controlled request input into the serialized signup record stored in wp_signups. This makes it possible for unauthenticated attackers to gain a fully activated WordPress administrator account by submitting role=administrator through the public [wppb-register] shortcode form and subsequently clicking the confirmation activation link. Exploitation requires the site to have a legacy form field with meta-name role carried over from before the 4.0.3 upgrade, email confirmation enabled, and open user registration — all stable site-state conditions once established.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T11:15:24.955Z","source_hash":"content-fingerprint:fnv1a-3cb99a0e","affected_system":{"organization":"The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.0.3 via the role parameter handled by the wppbaddmetatouseronactivation() function. The vulnerability exists because the activation handler passes the attacker-supplied role value directly to WPUser project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109447-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.0.3 via the role parameter handled by the wppb_add_meta_to_user_on_activation() function. The vulnerability exists because the activation handler passes the attacker-supplied role value directly to WP_User::set_role() with no allow-list validation, and the 4.0.3 reserved-name check exempts pre-existing form fields from the block, allowing a legacy field with meta-name role to persist and bridge attacker-controlled request input into the serialized signup record stored in wp_signups. This makes it possible for unauthenticated attackers to gain a fully activated WordPress administrator account by submitting role=administrator through the public [wppb-register] shortcode form and subsequently clicking the confirmation activation link. Exploitation requires the site to have a legacy form field with meta-name role carried over from before the 4.0.3 upgrade, email confirmation enabled, and open user registration — all stable site-state conditions once established.","source_quote_or_pointer":"Security Advisory CVE-2026-109447","fact_id":"SEA-CVE-2026-109447-F1","document_citation":"Security Advisory CVE-2026-109447"},{"id":"SEA-CVE-2026-109447-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.0.3 via the role parameter handled by the wppbaddmetatouseronactivation() function.","source_quote_or_pointer":"Advisory description (CVE-2026-109447)","fact_id":"SEA-CVE-2026-109447-F2","document_citation":"Advisory description (CVE-2026-109447)"}],"source_stated_contributors":["The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.0.3 via the role parameter handled by the wppbaddmetatouseronactivation() function."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.public_publication","data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Elevated privileges","Boundary bypass"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109447","reporting_entity":"CVE-2026-109447","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109447-SG1","label":"Enforce privilege boundaries in code","description":"Require explicit, server-verified authorization for privileged operations and isolate components with separate identities.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109447-SG1","label":"Enforce privilege boundaries in code","description":"Require explicit, server-verified authorization for privileged operations and isolate components with separate identities.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A low-privilege actor reached a high-privilege capability. Enforce approval and privilege boundaries in deterministic code, not by convention.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-109447"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109414","title":"The Vitepos – Point of Sale (POS) for WooCommerce plugin for WordPress is vulnerable to blind SQL Injection via the 'src_by[].val.start / src_by[].val.end (operator 'bt')' parameter in all versions up to, and including, 3.6.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with vendor-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. This is an incomplete fix for a previously patched SQL injection (version 3.6.0), which addressed only the gt/lt/le/ge operators while leaving the 'bt' (BETWEEN) operator branch unpatched.","display_title":"Software component issue could expose or alter stored data","display_summary":"The Vitepos – Point of Sale (POS) for WooCommerce plugin for WordPress is vulnerable to blind SQL Injection via the 'srcby[].val.start / srcby[].val.end (operator 'bt')' parameter in all versions up to, and including,…","display_reference":"CVE-2026-109414","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109414","source_title":"The Vitepos – Point of Sale (POS) for WooCommerce plugin for WordPress is vulnerable to blind SQL Injection via the 'src_by[].val.start / src_by[].val.end (operator 'bt')' parameter in all versions up to, and including, 3.6.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with vendor-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. This is an incomplete fix for a previously patched SQL injection (version 3.6.0), which addressed only the gt/lt/le/ge operators while leaving the 'bt' (BETWEEN) operator branch unpatched.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T11:15:24.956Z","source_hash":"content-fingerprint:fnv1a-1c499a50","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109414-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Vitepos – Point of Sale (POS) for WooCommerce plugin for WordPress is vulnerable to blind SQL Injection via the 'src_by[].val.start / src_by[].val.end (operator 'bt')' parameter in all versions up to, and including, 3.6.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with vendor-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. This is an incomplete fix for a previously patched SQL injection (version 3.6.0), which addressed only the gt/lt/le/ge operators while leaving the 'bt' (BETWEEN) operator branch unpatched.","source_quote_or_pointer":"Security Advisory CVE-2026-109414","fact_id":"SEA-CVE-2026-109414-F1","document_citation":"Security Advisory CVE-2026-109414"},{"id":"SEA-CVE-2026-109414-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Vitepos – Point of Sale (POS) for WooCommerce plugin for WordPress is vulnerable to blind SQL Injection via the 'srcby[].val.start / srcby[].val.end (operator 'bt')' parameter in all versions up to, and including, 3.6.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation…","source_quote_or_pointer":"Advisory description (CVE-2026-109414)","fact_id":"SEA-CVE-2026-109414-F2","document_citation":"Advisory description (CVE-2026-109414)"}],"source_stated_contributors":["The Vitepos – Point of Sale (POS) for WooCommerce plugin for WordPress is vulnerable to blind SQL Injection via the 'srcby[].val.start / srcby[].val.end (operator 'bt')' parameter in all versions up to, and including, 3.6.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109414","reporting_entity":"CVE-2026-109414","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109414-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109414-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-109414"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-104932","title":"The Search Regex plugin for WordPress is vulnerable to PHP Object Injection in version 3.5 via deserialization of untrusted input in the replace_all function. This allows authenticated attackers, with subscriber-level access and above, to inject a PHP Object. The additional presence of a POP chain allows attackers to execute code.","display_title":"Software component issue could make the application process unsafe input","display_summary":"The Search Regex plugin for WordPress is vulnerable to PHP Object Injection in version 3.5 via deserialization of untrusted input in the replaceall function.","display_reference":"CVE-2026-104932","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104932","source_title":"The Search Regex plugin for WordPress is vulnerable to PHP Object Injection in version 3.5 via deserialization of untrusted input in the replace_all function. This allows authenticated attackers, with subscriber-level access and above, to inject a PHP Object. The additional presence of a POP chain allows attackers to execute code.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T11:15:24.957Z","source_hash":"content-fingerprint:fnv1a-b36f3724","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-104932-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Search Regex plugin for WordPress is vulnerable to PHP Object Injection in version 3.5 via deserialization of untrusted input in the replace_all function. This allows authenticated attackers, with subscriber-level access and above, to inject a PHP Object. The additional presence of a POP chain allows attackers to execute code.","source_quote_or_pointer":"Security Advisory CVE-2026-104932","fact_id":"SEA-CVE-2026-104932-F1","document_citation":"Security Advisory CVE-2026-104932"},{"id":"SEA-CVE-2026-104932-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Search Regex plugin for WordPress is vulnerable to PHP Object Injection in version 3.5 via deserialization of untrusted input in the replaceall function. This allows authenticated attackers, with subscriber-level access and above, to inject a PHP Object.","source_quote_or_pointer":"Advisory description (CVE-2026-104932)","fact_id":"SEA-CVE-2026-104932-F2","document_citation":"Advisory description (CVE-2026-104932)"}],"source_stated_contributors":["The Search Regex plugin for WordPress is vulnerable to PHP Object Injection in version 3.5 via deserialization of untrusted input in the replaceall function. This allows authenticated attackers, with subscriber-level access and above, to inject a PHP Object."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.code_execution"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unsafe object construction","Possible code execution"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-104932","reporting_entity":"CVE-2026-104932","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-104932-SG1","label":"Use schema-validated data formats","description":"Parse untrusted input into plain data with an explicit schema; never deserialize into arbitrary types.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-104932-SG1","label":"Use schema-validated data formats","description":"Parse untrusted input into plain data with an explicit schema; never deserialize into arbitrary types.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"The application rebuilt objects from untrusted data. Use data-only formats with schema validation instead of native object deserialization.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-104932"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-104001","title":"The The Slim SEO – AI SEO Plugin, Lightweight, Fast & Automated plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 4.11.1 This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for authenticated attackers, with subscriber-level access and above, to execute arbitrary shortcodes. A Subscriber-level user need only save the shortcode payload to their own Biographical Info field via the REST API or wp-admin profile page; the shortcode then executes on any unauthenticated front-end request that resolves that author's description, such as requests using the ?author= query parameter when auto_redirection is disabled.","display_title":"Software component issue could allow unintended commands to run","display_summary":"The The Slim SEO – AI SEO Plugin, Lightweight, Fast & Automated plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 4.11.1 This is due to the software allowing users…","display_reference":"CVE-2026-104001","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104001","source_title":"The The Slim SEO – AI SEO Plugin, Lightweight, Fast & Automated plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 4.11.1 This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for authenticated attackers, with subscriber-level access and above, to execute arbitrary shortcodes. A Subscriber-level user need only save the shortcode payload to their own Biographical Info field via the REST API or wp-admin profile page; the shortcode then executes on any unauthenticated front-end request that resolves that author's description, such as requests using the ?author= query parameter when auto_redirection is disabled.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T11:15:24.958Z","source_hash":"content-fingerprint:fnv1a-fd351489","affected_system":{"organization":"Software component project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-104001-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The The Slim SEO – AI SEO Plugin, Lightweight, Fast & Automated plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 4.11.1 This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for authenticated attackers, with subscriber-level access and above, to execute arbitrary shortcodes. A Subscriber-level user need only save the shortcode payload to their own Biographical Info field via the REST API or wp-admin profile page; the shortcode then executes on any unauthenticated front-end request that resolves that author's description, such as requests using the ?author= query parameter when auto_redirection is disabled.","source_quote_or_pointer":"Security Advisory CVE-2026-104001","fact_id":"SEA-CVE-2026-104001-F1","document_citation":"Security Advisory CVE-2026-104001"},{"id":"SEA-CVE-2026-104001-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The The Slim SEO – AI SEO Plugin, Lightweight, Fast & Automated plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 4.11.1 This is due to the software allowing users to execute an action that does not properly validate a value before running doshortcode.","source_quote_or_pointer":"Advisory description (CVE-2026-104001)","fact_id":"SEA-CVE-2026-104001-F2","document_citation":"Advisory description (CVE-2026-104001)"}],"source_stated_contributors":["The The Slim SEO – AI SEO Plugin, Lightweight, Fast & Automated plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 4.11.1 This is due to the software allowing users to execute an action that does not properly validate a value before running doshortcode."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.write_action","data.pii"],"failure_mechanisms":["SEA-FM-004","SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-104001","reporting_entity":"CVE-2026-104001","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-104001-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-104001-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-104001"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-104000","title":"The Simply Schedule Appointments plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'status' parameter in all versions up to, and including, 1.6.12.35 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The malicious payload is stored unconditionally because debug logging is enabled by default, and the debug-log viewer is accessible to anyone holding the site-wide Support PIN (an HMAC-MD5 of AUTH_SALT displayed in wp-admin), meaning the injected script will execute against the administrator's session during ordinary support or troubleshooting workflows.","display_title":"Software component issue could run attacker-controlled scripts in a browser","display_summary":"The Simply Schedule Appointments plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'status' parameter in all versions up to, and including, 1.6.12.35 due to insufficient input sanitization and…","display_reference":"CVE-2026-104000","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104000","source_title":"The Simply Schedule Appointments plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'status' parameter in all versions up to, and including, 1.6.12.35 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The malicious payload is stored unconditionally because debug logging is enabled by default, and the debug-log viewer is accessible to anyone holding the site-wide Support PIN (an HMAC-MD5 of AUTH_SALT displayed in wp-admin), meaning the injected script will execute against the administrator's session during ordinary support or troubleshooting workflows.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T11:15:24.958Z","source_hash":"content-fingerprint:fnv1a-5bf6044e","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-104000-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Simply Schedule Appointments plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'status' parameter in all versions up to, and including, 1.6.12.35 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The malicious payload is stored unconditionally because debug logging is enabled by default, and the debug-log viewer is accessible to anyone holding the site-wide Support PIN (an HMAC-MD5 of AUTH_SALT displayed in wp-admin), meaning the injected script will execute against the administrator's session during ordinary support or troubleshooting workflows.","source_quote_or_pointer":"Security Advisory CVE-2026-104000","fact_id":"SEA-CVE-2026-104000-F1","document_citation":"Security Advisory CVE-2026-104000"},{"id":"SEA-CVE-2026-104000-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Simply Schedule Appointments plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'status' parameter in all versions up to, and including, 1.6.12.35 due to insufficient input sanitization and output escaping.","source_quote_or_pointer":"Advisory description (CVE-2026-104000)","fact_id":"SEA-CVE-2026-104000-F2","document_citation":"Advisory description (CVE-2026-104000)"}],"source_stated_contributors":["The Simply Schedule Appointments plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'status' parameter in all versions up to, and including, 1.6.12.35 due to insufficient input sanitization and output escaping."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-104000","reporting_entity":"CVE-2026-104000","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-104000-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-104000-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-104000"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-103896","title":"The 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin for WordPress is vulnerable to a limited file write via path traversal in versions up to, and including, 2.34.5 This is due to the OptimizerWebPageCache::get_cache_file_dir() function concatenating raw, unsanitized $_GET parameter names and values into the on-disk cache path, and the cache_content() sink calling mkdir() and file_put_contents() on the result with no realpath containment check — unlike the sibling delete_page_cache(), which does perform one. This makes it possible for unauthenticated attackers to create arbitrary directories (mode 0777, recursively) outside the cache root and write a cached page into them. The write is LIMITED: the filename is always 'source.html', so the extension is fixed, and the content is the rendered page buffer rather than attacker-supplied data. PHP files cannot be written and code execution is not possible; the demonstrated impact is cache poisoning and arbitrary directory creation.","display_title":"Software component issue could allow unintended commands to run","display_summary":"The 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin for WordPress is vulnerable to a limited file write via path traversal in versions up to, and including, 2.34.5 This is due to the…","display_reference":"CVE-2026-103896","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103896","source_title":"The 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin for WordPress is vulnerable to a limited file write via path traversal in versions up to, and including, 2.34.5 This is due to the OptimizerWebPageCache::get_cache_file_dir() function concatenating raw, unsanitized $_GET parameter names and values into the on-disk cache path, and the cache_content() sink calling mkdir() and file_put_contents() on the result with no realpath containment check — unlike the sibling delete_page_cache(), which does perform one. This makes it possible for unauthenticated attackers to create arbitrary directories (mode 0777, recursively) outside the cache root and write a cached page into them. The write is LIMITED: the filename is always 'source.html', so the extension is fixed, and the content is the rendered page buffer rather than attacker-supplied data. PHP files cannot be written and code execution is not possible; the demonstrated impact is cache poisoning and arbitrary directory creation.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T11:15:24.959Z","source_hash":"content-fingerprint:fnv1a-a4e29ef4","affected_system":{"organization":"The 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin for WordPress is vulnerable to a limited file write via path traversal in versions up to, and including, 2.34.5 This is due to the OptimizerWebPageCache project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-103896-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin for WordPress is vulnerable to a limited file write via path traversal in versions up to, and including, 2.34.5 This is due to the OptimizerWebPageCache::get_cache_file_dir() function concatenating raw, unsanitized $_GET parameter names and values into the on-disk cache path, and the cache_content() sink calling mkdir() and file_put_contents() on the result with no realpath containment check — unlike the sibling delete_page_cache(), which does perform one. This makes it possible for unauthenticated attackers to create arbitrary directories (mode 0777, recursively) outside the cache root and write a cached page into them. The write is LIMITED: the filename is always 'source.html', so the extension is fixed, and the content is the rendered page buffer rather than attacker-supplied data. PHP files cannot be written and code execution is not possible; the demonstrated impact is cache poisoning and arbitrary directory creation.","source_quote_or_pointer":"Security Advisory CVE-2026-103896","fact_id":"SEA-CVE-2026-103896-F1","document_citation":"Security Advisory CVE-2026-103896"},{"id":"SEA-CVE-2026-103896-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin for WordPress is vulnerable to a limited file write via path traversal in versions up to, and including, 2.34.5 This is due to the OptimizerWebPageCache::getcachefiledir() function concatenating raw, unsanitized $GET parameter names…","source_quote_or_pointer":"Advisory description (CVE-2026-103896)","fact_id":"SEA-CVE-2026-103896-F2","document_citation":"Advisory description (CVE-2026-103896)"}],"source_stated_contributors":["The 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin for WordPress is vulnerable to a limited file write via path traversal in versions up to, and including, 2.34.5 This is due to the OptimizerWebPageCache::getcachefiledir() function concatenating raw, unsanitized $GET parameter names…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.write_action","arch.caching"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-103896","reporting_entity":"CVE-2026-103896","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-103896-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-103896-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-103896"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-103768","title":"The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.3.7 via the initMailPart function. This is due to insufficient file type validation when saving IMAP email attachments. This makes it possible for unauthenticated attackers to upload files that may be executable, which makes remote code execution possible.","display_title":"Software component issue could allow unintended commands to run","display_summary":"The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.3.7 via the initMailPart function.","display_reference":"CVE-2026-103768","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103768","source_title":"The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.3.7 via the initMailPart function. This is due to insufficient file type validation when saving IMAP email attachments. This makes it possible for unauthenticated attackers to upload files that may be executable, which makes remote code execution possible.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T11:15:24.959Z","source_hash":"content-fingerprint:fnv1a-aca101ac","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-103768-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.3.7 via the initMailPart function. This is due to insufficient file type validation when saving IMAP email attachments. This makes it possible for unauthenticated attackers to upload files that may be executable, which makes remote code execution possible.","source_quote_or_pointer":"Security Advisory CVE-2026-103768","fact_id":"SEA-CVE-2026-103768-F1","document_citation":"Security Advisory CVE-2026-103768"},{"id":"SEA-CVE-2026-103768-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.3.7 via the initMailPart function. This is due to insufficient file type validation when saving IMAP email attachments.","source_quote_or_pointer":"Advisory description (CVE-2026-103768)","fact_id":"SEA-CVE-2026-103768-F2","document_citation":"Advisory description (CVE-2026-103768)"}],"source_stated_contributors":["The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.3.7 via the initMailPart function. This is due to insufficient file type validation when saving IMAP email attachments."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.pii","data.uploaded_files"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-103768","reporting_entity":"CVE-2026-103768","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-103768-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-103768-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-103768"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-100158","title":"The SQL Chart Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'X-axis column value ($value->$xarg_s from $wpdb->get_results())' parameter in all versions up to, and including, 3.0.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This requires an administrator to have published a chart whose SQL query returns a column controllable by a lower-privileged user, such as wp_users.display_name, which a Subscriber can populate with a payload via the standard WordPress profile page at /wp-admin/profile.php.","display_title":"Software component issue could run attacker-controlled scripts in a browser","display_summary":"The SQL Chart Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'X-axis column value ($value-$xargs from $wpdb-getresults())' parameter in all versions up to, and including, 3.0.6 due to…","display_reference":"CVE-2026-100158","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100158","source_title":"The SQL Chart Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'X-axis column value ($value->$xarg_s from $wpdb->get_results())' parameter in all versions up to, and including, 3.0.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This requires an administrator to have published a chart whose SQL query returns a column controllable by a lower-privileged user, such as wp_users.display_name, which a Subscriber can populate with a payload via the standard WordPress profile page at /wp-admin/profile.php.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T11:15:24.960Z","source_hash":"content-fingerprint:fnv1a-64ae46d6","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-100158-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The SQL Chart Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'X-axis column value ($value->$xarg_s from $wpdb->get_results())' parameter in all versions up to, and including, 3.0.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This requires an administrator to have published a chart whose SQL query returns a column controllable by a lower-privileged user, such as wp_users.display_name, which a Subscriber can populate with a payload via the standard WordPress profile page at /wp-admin/profile.php.","source_quote_or_pointer":"Security Advisory CVE-2026-100158","fact_id":"SEA-CVE-2026-100158-F1","document_citation":"Security Advisory CVE-2026-100158"},{"id":"SEA-CVE-2026-100158-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The SQL Chart Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'X-axis column value ($value-$xargs from $wpdb-getresults())' parameter in all versions up to, and including, 3.0.6 due to insufficient input sanitization and output escaping.","source_quote_or_pointer":"Advisory description (CVE-2026-100158)","fact_id":"SEA-CVE-2026-100158-F2","document_citation":"Advisory description (CVE-2026-100158)"}],"source_stated_contributors":["The SQL Chart Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'X-axis column value ($value-$xargs from $wpdb-getresults())' parameter in all versions up to, and including, 3.0.6 due to insufficient input sanitization and output escaping."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-100158","reporting_entity":"CVE-2026-100158","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-100158-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-100158-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-100158"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-111114","title":"The Nexter Extension – Security, Performance, Code Snippets & Site Toolkit plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.7.11 The vulnerability exists because the /?reset-view handler in role_switcher_to_view_admin_as() performs no nonce or capability check when the supplied username matches the authenticated caller, and because the plugin's only cleanup mechanism — the profile_update hook — does not fire when WordPress performs a bulk role change via wp-admin/users.php?action=promote, which calls WP_User::set_role() directly and leaves a stale administrator value in the nxtext_view_admin_original_role user meta. This makes it possible for authenticated attackers with Subscriber-level access or above to restore the stale stored Administrator role to their own account, effectively escalating their privileges to Administrator. Exploitation requires that the attacker's account previously held the Administrator role and used the View Admin Role Switcher feature before being demoted specifically through the bulk role-change control rather than the Edit User screen, as only the bulk path bypasses the profile_update hook that would otherwise have cleared the stored original role.","display_title":"Software component issue could grant elevated privileges","display_summary":"The Nexter Extension – Security, Performance, Code Snippets & Site Toolkit plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.7.11 The vulnerability exists because the…","display_reference":"CVE-2026-111114","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111114","source_title":"The Nexter Extension – Security, Performance, Code Snippets & Site Toolkit plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.7.11 The vulnerability exists because the /?reset-view handler in role_switcher_to_view_admin_as() performs no nonce or capability check when the supplied username matches the authenticated caller, and because the plugin's only cleanup mechanism — the profile_update hook — does not fire when WordPress performs a bulk role change via wp-admin/users.php?action=promote, which calls WP_User::set_role() directly and leaves a stale administrator value in the nxtext_view_admin_original_role user meta. This makes it possible for authenticated attackers with Subscriber-level access or above to restore the stale stored Administrator role to their own account, effectively escalating their privileges to Administrator. Exploitation requires that the attacker's account previously held the Administrator role and used the View Admin Role Switcher feature before being demoted specifically through the bulk role-change control rather than the Edit User screen, as only the bulk path bypasses the profile_update hook that would otherwise have cleared the stored original role.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T11:15:24.961Z","source_hash":"content-fingerprint:fnv1a-9b3bd2ba","affected_system":{"organization":"The Nexter Extension – Security, Performance, Code Snippets & Site Toolkit plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.7.11 The vulnerability exists because the /?reset-view handler in roleswitchertoviewadminas() performs no nonce or capability check when the supplied username matches the authenticated caller, and because the plugin's only cleanup mechanism — the profileupdate hook — does not fire when WordPress performs a bulk role change via wp-admin/users.php?action=promote, which calls WPUser project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-111114-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Nexter Extension – Security, Performance, Code Snippets & Site Toolkit plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.7.11 The vulnerability exists because the /?reset-view handler in role_switcher_to_view_admin_as() performs no nonce or capability check when the supplied username matches the authenticated caller, and because the plugin's only cleanup mechanism — the profile_update hook — does not fire when WordPress performs a bulk role change via wp-admin/users.php?action=promote, which calls WP_User::set_role() directly and leaves a stale administrator value in the nxtext_view_admin_original_role user meta. This makes it possible for authenticated attackers with Subscriber-level access or above to restore the stale stored Administrator role to their own account, effectively escalating their privileges to Administrator. Exploitation requires that the attacker's account previously held the Administrator role and used the View Admin Role Switcher feature before being demoted specifically through the bulk role-change control rather than the Edit User screen, as only the bulk path bypasses the profile_update hook that would otherwise have cleared the stored original role.","source_quote_or_pointer":"Security Advisory CVE-2026-111114","fact_id":"SEA-CVE-2026-111114-F1","document_citation":"Security Advisory CVE-2026-111114"},{"id":"SEA-CVE-2026-111114-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Nexter Extension – Security, Performance, Code Snippets & Site Toolkit plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.7.11 The vulnerability exists because the /?reset-view handler in roleswitchertoviewadminas() performs no nonce or capability check when the…","source_quote_or_pointer":"Advisory description (CVE-2026-111114)","fact_id":"SEA-CVE-2026-111114-F2","document_citation":"Advisory description (CVE-2026-111114)"}],"source_stated_contributors":["The Nexter Extension – Security, Performance, Code Snippets & Site Toolkit plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.7.11 The vulnerability exists because the /?reset-view handler in roleswitchertoviewadminas() performs no nonce or capability check when the…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.privileged_action","data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Elevated privileges","Boundary bypass"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-111114","reporting_entity":"CVE-2026-111114","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-111114-SG1","label":"Enforce privilege boundaries in code","description":"Require explicit, server-verified authorization for privileged operations and isolate components with separate identities.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-111114-SG1","label":"Enforce privilege boundaries in code","description":"Require explicit, server-verified authorization for privileged operations and isolate components with separate identities.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A low-privilege actor reached a high-privilege capability. Enforce approval and privilege boundaries in deterministic code, not by convention.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-111114"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-110019","title":"The Bulk Page Generator – LPagery plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.1.0 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with subscriber-level access and above, to create, modify, and delete LPagery-managed WordPress pages and bulk page-generation processes that are otherwise restricted to administrators. On default fresh installations where Freemius has not been opted into, the AES-256-CBC key used to validate Bearer tokens collapses to the publicly known SHA-256 hash of an empty string, making the token entirely forgeable by any authenticated user.","display_title":"Software component issue could allow unauthorized access","display_summary":"The Bulk Page Generator – LPagery plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.1.0 This is due to the plugin not properly verifying that a user is authorized to…","display_reference":"CVE-2026-110019","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110019","source_title":"The Bulk Page Generator – LPagery plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.1.0 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with subscriber-level access and above, to create, modify, and delete LPagery-managed WordPress pages and bulk page-generation processes that are otherwise restricted to administrators. On default fresh installations where Freemius has not been opted into, the AES-256-CBC key used to validate Bearer tokens collapses to the publicly known SHA-256 hash of an empty string, making the token entirely forgeable by any authenticated user.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T11:15:24.964Z","source_hash":"content-fingerprint:fnv1a-61f5e2c3","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-110019-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Bulk Page Generator – LPagery plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.1.0 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with subscriber-level access and above, to create, modify, and delete LPagery-managed WordPress pages and bulk page-generation processes that are otherwise restricted to administrators. On default fresh installations where Freemius has not been opted into, the AES-256-CBC key used to validate Bearer tokens collapses to the publicly known SHA-256 hash of an empty string, making the token entirely forgeable by any authenticated user.","source_quote_or_pointer":"Security Advisory CVE-2026-110019","fact_id":"SEA-CVE-2026-110019-F1","document_citation":"Security Advisory CVE-2026-110019"},{"id":"SEA-CVE-2026-110019-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Bulk Page Generator – LPagery plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.1.0 This is due to the plugin not properly verifying that a user is authorized to perform an action.","source_quote_or_pointer":"Advisory description (CVE-2026-110019)","fact_id":"SEA-CVE-2026-110019-F2","document_citation":"Advisory description (CVE-2026-110019)"}],"source_stated_contributors":["The Bulk Page Generator – LPagery plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.1.0 This is due to the plugin not properly verifying that a user is authorized to perform an action."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.write_action","data.pii"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-110019","reporting_entity":"CVE-2026-110019","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-110019-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-110019-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-110019"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109998","title":"The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'content' parameter in all versions up to, and including, 2.4.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This is exploitable because the wp_ajax_nopriv_mb_template endpoint is publicly accessible without authentication, nonce verification is not enforced for the content_reply mode, and admin-ajax.php responds with Content-Type: text/html, causing browsers to execute injected tags embedded in the JSON response body.","display_title":"Software component issue could run attacker-controlled scripts in a browser","display_summary":"The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'content' parameter in all versions up to, and including, 2.4.3 due to insufficient input sanitization and output escaping.","display_reference":"CVE-2026-109998","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109998","source_title":"The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'content' parameter in all versions up to, and including, 2.4.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This is exploitable because the wp_ajax_nopriv_mb_template endpoint is publicly accessible without authentication, nonce verification is not enforced for the content_reply mode, and admin-ajax.php responds with Content-Type: text/html, causing browsers to execute injected tags embedded in the JSON response body.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T11:15:24.964Z","source_hash":"content-fingerprint:fnv1a-4eb90abb","affected_system":{"organization":"The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'content' parameter in all versions up to, and including, 2.4.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This is exploitable because the wpajaxnoprivmbtemplate endpoint is publicly accessible without authentication, nonce verification is not enforced for the contentreply mode, and admin-ajax.php responds with Content-Type project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109998-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'content' parameter in all versions up to, and including, 2.4.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This is exploitable because the wp_ajax_nopriv_mb_template endpoint is publicly accessible without authentication, nonce verification is not enforced for the content_reply mode, and admin-ajax.php responds with Content-Type: text/html, causing browsers to execute injected tags embedded in the JSON response body.","source_quote_or_pointer":"Security Advisory CVE-2026-109998","fact_id":"SEA-CVE-2026-109998-F1","document_citation":"Security Advisory CVE-2026-109998"},{"id":"SEA-CVE-2026-109998-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'content' parameter in all versions up to, and including, 2.4.3 due to insufficient input sanitization and output escaping.","source_quote_or_pointer":"Advisory description (CVE-2026-109998)","fact_id":"SEA-CVE-2026-109998-F2","document_citation":"Advisory description (CVE-2026-109998)"}],"source_stated_contributors":["The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'content' parameter in all versions up to, and including, 2.4.3 due to insufficient input sanitization and output escaping."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109998","reporting_entity":"CVE-2026-109998","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109998-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109998-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-109998"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109515","title":"The MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc. plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.2.78.6 This is due to the subscribe_to_email_list endpoint accepting an attacker-supplied optin_data[form_custom_field_mappings] parameter without any allow-list validation on destination keys, allowing the attacker-controlled mapping to override the administrator's saved mapping and pass arbitrary wp_users column names — including ID and user_pass — directly into wp_insert_user() via the subscribe() function. This makes it possible for unauthenticated attackers to force wp_insert_user() into UPDATE mode on any existing account by supplying a target user's numeric ID, overwrite that account's password with a pre-hashed value of their choosing, and thereby take over any WordPress user account — including administrators — leading to full site compromise. Exploitation requires that a WordPress User Registration opt-in form is published somewhere on the site, though the form's UUID is visible in page source and no authentication, nonce, or capability check is required to reach the vulnerable endpoint.","display_title":"Software component issue could grant elevated privileges","display_summary":"The MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc. plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.2.78.6 This is due to the…","display_reference":"CVE-2026-109515","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109515","source_title":"The MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc. plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.2.78.6 This is due to the subscribe_to_email_list endpoint accepting an attacker-supplied optin_data[form_custom_field_mappings] parameter without any allow-list validation on destination keys, allowing the attacker-controlled mapping to override the administrator's saved mapping and pass arbitrary wp_users column names — including ID and user_pass — directly into wp_insert_user() via the subscribe() function. This makes it possible for unauthenticated attackers to force wp_insert_user() into UPDATE mode on any existing account by supplying a target user's numeric ID, overwrite that account's password with a pre-hashed value of their choosing, and thereby take over any WordPress user account — including administrators — leading to full site compromise. Exploitation requires that a WordPress User Registration opt-in form is published somewhere on the site, though the form's UUID is visible in page source and no authentication, nonce, or capability check is required to reach the vulnerable endpoint.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T11:15:24.965Z","source_hash":"content-fingerprint:fnv1a-5286eb72","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109515-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc. plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.2.78.6 This is due to the subscribe_to_email_list endpoint accepting an attacker-supplied optin_data[form_custom_field_mappings] parameter without any allow-list validation on destination keys, allowing the attacker-controlled mapping to override the administrator's saved mapping and pass arbitrary wp_users column names — including ID and user_pass — directly into wp_insert_user() via the subscribe() function. This makes it possible for unauthenticated attackers to force wp_insert_user() into UPDATE mode on any existing account by supplying a target user's numeric ID, overwrite that account's password with a pre-hashed value of their choosing, and thereby take over any WordPress user account — including administrators — leading to full site compromise. Exploitation requires that a WordPress User Registration opt-in form is published somewhere on the site, though the form's UUID is visible in page source and no authentication, nonce, or capability check is required to reach the vulnerable endpoint.","source_quote_or_pointer":"Security Advisory CVE-2026-109515","fact_id":"SEA-CVE-2026-109515-F1","document_citation":"Security Advisory CVE-2026-109515"},{"id":"SEA-CVE-2026-109515-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc. plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.2.78.6 This is due to the subscribetoemaillist endpoint accepting an attacker-supplied optindata[formcustomfieldmappings]…","source_quote_or_pointer":"Advisory description (CVE-2026-109515)","fact_id":"SEA-CVE-2026-109515-F2","document_citation":"Advisory description (CVE-2026-109515)"}],"source_stated_contributors":["The MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc. plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.2.78.6 This is due to the subscribetoemaillist endpoint accepting an attacker-supplied optindata[formcustomfieldmappings]…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.write_action","data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109515","reporting_entity":"CVE-2026-109515","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109515-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109515-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-109515"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109400","title":"The InstaWP Connect – 1-click WP Staging & Migration plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 0.1.4.1 This is due to the plugin registering its admin page via add_management_page() using a role name returned by InstaWP_Setting::get_allowed_role() as the required capability — which WordPress resolves as a real capability match for any user holding that role — combined with generate_section_field() rendering the master API key from the instawp_api_options option directly as the value attribute of a plain-text HTML input with no additional manage_options or equivalent capability check. This makes it possible for authenticated attackers with Subscriber-level access and above to read the plaintext master API key, use its SHA-256-derived secret as a bearer token accepted by the plugin's REST API validate_api_request(), and call POST /wp-json/instawp-connect/v2/auto-login to mint a 30-second single-use login URL that sets an administrator authentication cookie — fully escalating their privileges. Exploitation requires the site to be actively connected to InstaWP and an administrator to have added the attacker's role to the plugin's Sync Tab Access list (instawp_sync_tab_roles); notably, the settings tab suppression logic only hides the tab when administrator is absent from the list entirely, meaning a mixed configuration retaining administrator alongside a lower role still serves the full settings page — including the API key — to the lower-privileged user.","display_title":"Software component issue could expose accounts or credentials","display_summary":"The InstaWP Connect – 1-click WP Staging & Migration plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 0.1.4.1 This is due to the plugin registering its admin page via…","display_reference":"CVE-2026-109400","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109400","source_title":"The InstaWP Connect – 1-click WP Staging & Migration plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 0.1.4.1 This is due to the plugin registering its admin page via add_management_page() using a role name returned by InstaWP_Setting::get_allowed_role() as the required capability — which WordPress resolves as a real capability match for any user holding that role — combined with generate_section_field() rendering the master API key from the instawp_api_options option directly as the value attribute of a plain-text HTML input with no additional manage_options or equivalent capability check. This makes it possible for authenticated attackers with Subscriber-level access and above to read the plaintext master API key, use its SHA-256-derived secret as a bearer token accepted by the plugin's REST API validate_api_request(), and call POST /wp-json/instawp-connect/v2/auto-login to mint a 30-second single-use login URL that sets an administrator authentication cookie — fully escalating their privileges. Exploitation requires the site to be actively connected to InstaWP and an administrator to have added the attacker's role to the plugin's Sync Tab Access list (instawp_sync_tab_roles); notably, the settings tab suppression logic only hides the tab when administrator is absent from the list entirely, meaning a mixed configuration retaining administrator alongside a lower role still serves the full settings page — including the API key — to the lower-privileged user.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T11:15:24.966Z","source_hash":"content-fingerprint:fnv1a-81d279c7","affected_system":{"organization":"The InstaWP Connect – 1-click WP Staging & Migration plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 0.1.4.1 This is due to the plugin registering its admin page via addmanagementpage() using a role name returned by InstaWPSetting project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109400-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The InstaWP Connect – 1-click WP Staging & Migration plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 0.1.4.1 This is due to the plugin registering its admin page via add_management_page() using a role name returned by InstaWP_Setting::get_allowed_role() as the required capability — which WordPress resolves as a real capability match for any user holding that role — combined with generate_section_field() rendering the master API key from the instawp_api_options option directly as the value attribute of a plain-text HTML input with no additional manage_options or equivalent capability check. This makes it possible for authenticated attackers with Subscriber-level access and above to read the plaintext master API key, use its SHA-256-derived secret as a bearer token accepted by the plugin's REST API validate_api_request(), and call POST /wp-json/instawp-connect/v2/auto-login to mint a 30-second single-use login URL that sets an administrator authentication cookie — fully escalating their privileges. Exploitation requires the site to be actively connected to InstaWP and an administrator to have added the attacker's role to the plugin's Sync Tab Access list (instawp_sync_tab_roles); notably, the settings tab suppression logic only hides the tab when administrator is absent from the list entirely, meaning a mixed configuration retaining administrator alongside a lower role still serves the full settings page — including the API key — to the lower-privileged user.","source_quote_or_pointer":"Security Advisory CVE-2026-109400","fact_id":"SEA-CVE-2026-109400-F1","document_citation":"Security Advisory CVE-2026-109400"},{"id":"SEA-CVE-2026-109400-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The InstaWP Connect – 1-click WP Staging & Migration plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 0.1.4.1 This is due to the plugin registering its admin page via addmanagementpage() using a role name returned by InstaWPSetting::getallowedrole() as the required…","source_quote_or_pointer":"Advisory description (CVE-2026-109400)","fact_id":"SEA-CVE-2026-109400-F2","document_citation":"Advisory description (CVE-2026-109400)"}],"source_stated_contributors":["The InstaWP Connect – 1-click WP Staging & Migration plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 0.1.4.1 This is due to the plugin registering its admin page via addmanagementpage() using a role name returned by InstaWPSetting::getallowedrole() as the required…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109400","reporting_entity":"CVE-2026-109400","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109400-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109400-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-109400"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109221","title":"The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the copy_file function in all versions up to, and including, 4.9.3 This makes it possible for authenticated attackers, with Sales Representative-level access and above, to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php). This is exploitable by any user holding the plugin-defined import_contacts capability, which is granted by default to the plugin's custom Sales Representative role.","display_title":"Software component issue could allow unintended commands to run","display_summary":"The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the copyfile function in all versions up to, and…","display_reference":"CVE-2026-109221","display_source_type":"Security advisory","incident_date":"2026-10-16","disclosure_date":"2026-10-16","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109221","source_title":"The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the copy_file function in all versions up to, and including, 4.9.3 This makes it possible for authenticated attackers, with Sales Representative-level access and above, to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php). This is exploitable by any user holding the plugin-defined import_contacts capability, which is granted by default to the plugin's custom Sales Representative role.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T11:15:24.966Z","source_hash":"content-fingerprint:fnv1a-18c3ffea","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109221-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the copy_file function in all versions up to, and including, 4.9.3 This makes it possible for authenticated attackers, with Sales Representative-level access and above, to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php). This is exploitable by any user holding the plugin-defined import_contacts capability, which is granted by default to the plugin's custom Sales Representative role.","source_quote_or_pointer":"Security Advisory CVE-2026-109221","fact_id":"SEA-CVE-2026-109221-F1","document_citation":"Security Advisory CVE-2026-109221"},{"id":"SEA-CVE-2026-109221-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the copyfile function in all versions up to, and including, 4.9.3 This makes it possible for authenticated attackers, with Sales Representative-level…","source_quote_or_pointer":"Advisory description (CVE-2026-109221)","fact_id":"SEA-CVE-2026-109221-F2","document_citation":"Advisory description (CVE-2026-109221)"}],"source_stated_contributors":["The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the copyfile function in all versions up to, and including, 4.9.3 This makes it possible for authenticated attackers, with Sales Representative-level…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.write_action","data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109221","reporting_entity":"CVE-2026-109221","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109221-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109221-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-109221"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-hqm2-cfx2-2vgh","title":"Pipecat: Public exposure of Pipecat’s development runner can allow unauthenticated bot session creation","display_title":"Security issue reported in pipecat-ai","display_summary":"Pipecat’s built-in development runner exposes endpoints that create bot sessions and, for the Daily transport, paid Daily rooms. These development endpoints intentionally do not authenticate callers.","display_reference":"CVE-2026-102682","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-hqm2-cfx2-2vgh","source_title":"Pipecat: Public exposure of Pipecat’s development runner can allow unauthenticated bot session creation","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:44.195Z","source_hash":"content-fingerprint:fnv1a-2fe5fbd3","affected_system":{"organization":"pipecat-ai project","product":"pipecat-ai","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Python"},"documented_facts":[{"id":"SEA-GHSA-hqm2-cfx2-2vgh-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Pipecat: Public exposure of Pipecat’s development runner can allow unauthenticated bot session creation","source_quote_or_pointer":"Security Advisory GHSA-hqm2-cfx2-2vgh","fact_id":"SEA-GHSA-hqm2-cfx2-2vgh-F1","document_citation":"Security Advisory GHSA-hqm2-cfx2-2vgh"},{"id":"SEA-GHSA-hqm2-cfx2-2vgh-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Pipecat’s built-in development runner exposes endpoints that create bot sessions and, for the Daily transport, paid Daily rooms. These development endpoints intentionally do not authenticate callers.","source_quote_or_pointer":"Advisory description (GHSA-hqm2-cfx2-2vgh)","fact_id":"SEA-GHSA-hqm2-cfx2-2vgh-F2","document_citation":"Advisory description (GHSA-hqm2-cfx2-2vgh)"}],"source_stated_contributors":["Pipecat’s built-in development runner exposes endpoints that create bot sessions and, for the Daily transport, paid Daily rooms. These development endpoints intentionally do not authenticate callers."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.public_publication"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-hqm2-cfx2-2vgh","reporting_entity":"CVE-2026-102682","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-hqm2-cfx2-2vgh-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-hqm2-cfx2-2vgh-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-102682"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-2cvf-wqm6-wr9g","title":"Podman: The podman run command can be instructed to disable almost all sandboxing by image annotation","display_title":"Security issue reported in github.com/containers/podman","display_summary":"Podman v4.4.0 added a feature where container checkpoints (from the podman container checkpoint command) could be distributed via OCI registry, and pulled from that registry and run via the podman run command.","display_reference":"CVE-2026-94603","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-2cvf-wqm6-wr9g","source_title":"Podman: The podman run command can be instructed to disable almost all sandboxing by image annotation","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:44.198Z","source_hash":"content-fingerprint:fnv1a-f10423e2","affected_system":{"organization":"github.com/containers/podman project","product":"github.com/containers/podman","system_type":"Cloud & container infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Go"},"documented_facts":[{"id":"SEA-GHSA-2cvf-wqm6-wr9g-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Podman: The podman run command can be instructed to disable almost all sandboxing by image annotation","source_quote_or_pointer":"Security Advisory GHSA-2cvf-wqm6-wr9g","fact_id":"SEA-GHSA-2cvf-wqm6-wr9g-F1","document_citation":"Security Advisory GHSA-2cvf-wqm6-wr9g"},{"id":"SEA-GHSA-2cvf-wqm6-wr9g-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Podman v4.4.0 added a feature where container checkpoints (from the podman container checkpoint command) could be distributed via OCI registry, and pulled from that registry and run via the podman run command. This allowed easy transfer of checkpoints between systems.","source_quote_or_pointer":"Advisory description (GHSA-2cvf-wqm6-wr9g)","fact_id":"SEA-GHSA-2cvf-wqm6-wr9g-F2","document_citation":"Advisory description (GHSA-2cvf-wqm6-wr9g)"}],"source_stated_contributors":["Podman v4.4.0 added a feature where container checkpoints (from the podman container checkpoint command) could be distributed via OCI registry, and pulled from that registry and run via the podman run command. This allowed easy transfer of checkpoints between systems."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["arch.distributed_tx"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-2cvf-wqm6-wr9g","reporting_entity":"CVE-2026-94603","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-2cvf-wqm6-wr9g-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-2cvf-wqm6-wr9g-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-94603"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-jwrc-gm9j-263p","title":"JupyterLab: Command link trust prompt in JupyterLab can trust a document other than the one clicked","display_title":"Security issue reported in jupyterlab","display_summary":"A Markdown file or a notebook output can carry a button that runs a JupyterLab command. Since 4.5.7 the first click on such a button opens a prompt naming the command, with Cancel, Run Once and Trust.","display_reference":"CVE-2026-102832","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-jwrc-gm9j-263p","source_title":"JupyterLab: Command link trust prompt in JupyterLab can trust a document other than the one clicked","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:44.199Z","source_hash":"content-fingerprint:fnv1a-69de75d3","affected_system":{"organization":"jupyterlab project","product":"jupyterlab","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Python"},"documented_facts":[{"id":"SEA-GHSA-jwrc-gm9j-263p-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"JupyterLab: Command link trust prompt in JupyterLab can trust a document other than the one clicked","source_quote_or_pointer":"Security Advisory GHSA-jwrc-gm9j-263p","fact_id":"SEA-GHSA-jwrc-gm9j-263p-F1","document_citation":"Security Advisory GHSA-jwrc-gm9j-263p"},{"id":"SEA-GHSA-jwrc-gm9j-263p-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A Markdown file or a notebook output can carry a button that runs a JupyterLab command. Since 4.5.7 the first click on such a button opens a prompt naming the command, with Cancel, Run Once and Trust. Choosing Trust runs the command and marks the document trusted, so its later buttons run without a prompt.","source_quote_or_pointer":"Advisory description (GHSA-jwrc-gm9j-263p)","fact_id":"SEA-GHSA-jwrc-gm9j-263p-F2","document_citation":"Advisory description (GHSA-jwrc-gm9j-263p)"}],"source_stated_contributors":["A Markdown file or a notebook output can carry a button that runs a JupyterLab command. Since 4.5.7 the first click on such a button opens a prompt naming the command, with Cancel, Run Once and Trust. Choosing Trust runs the command and marks the document trusted, so its later buttons run without a prompt."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-jwrc-gm9j-263p","reporting_entity":"CVE-2026-102832","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-jwrc-gm9j-263p-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-jwrc-gm9j-263p-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-102832"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-rp3h-jf77-q9p4","title":"containerd: Unpack DoS via repeated opaque whiteouts","display_title":"github.com/containerd/containerd/v2 issue could make the service unavailable","display_summary":"A vulnerability exists in containerd's layer unpack handler where the processing of certain image layers causes superlinear time complexity.","display_reference":"CVE-2026-95838","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-rp3h-jf77-q9p4","source_title":"containerd: Unpack DoS via repeated opaque whiteouts","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:44.199Z","source_hash":"content-fingerprint:fnv1a-71b67506","affected_system":{"organization":"github.com/containerd/containerd/v2 project","product":"github.com/containerd/containerd/v2","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Go"},"documented_facts":[{"id":"SEA-GHSA-rp3h-jf77-q9p4-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"containerd: Unpack DoS via repeated opaque whiteouts","source_quote_or_pointer":"Security Advisory GHSA-rp3h-jf77-q9p4","fact_id":"SEA-GHSA-rp3h-jf77-q9p4-F1","document_citation":"Security Advisory GHSA-rp3h-jf77-q9p4"},{"id":"SEA-GHSA-rp3h-jf77-q9p4-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability exists in containerd's layer unpack handler where the processing of certain image layers causes superlinear time complexity. During the unpack operation, specific file configurations within the layer can trigger repeated directory traversals.","source_quote_or_pointer":"Advisory description (GHSA-rp3h-jf77-q9p4)","fact_id":"SEA-GHSA-rp3h-jf77-q9p4-F2","document_citation":"Advisory description (GHSA-rp3h-jf77-q9p4)"}],"source_stated_contributors":["A vulnerability exists in containerd's layer unpack handler where the processing of certain image layers causes superlinear time complexity. During the unpack operation, specific file configurations within the layer can trigger repeated directory traversals."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Restricted file exposure","File overwrite"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-rp3h-jf77-q9p4","reporting_entity":"CVE-2026-95838","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-rp3h-jf77-q9p4-SG1","label":"Confine file access to a fixed root","description":"Resolve paths to canonical form and reject anything outside the intended directory before opening files.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-rp3h-jf77-q9p4-SG1","label":"Confine file access to a fixed root","description":"Resolve paths to canonical form and reject anything outside the intended directory before opening files.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"File paths supplied by a caller escaped the intended directory. Canonicalise paths and confine file access to a fixed root.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-95838"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-685w-q87j-wqw3","title":"Distribution: Client manifests.Get() does not verify returned content against requested digest","display_title":"Security issue reported in github.com/docker/distribution","display_summary":"registry/client.(manifests).Get(ctx, dgst, …) fetches a manifest by digest but never hashes the returned body and compares it against the requested digest.","display_reference":"CVE-2026-85747","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-685w-q87j-wqw3","source_title":"Distribution: Client manifests.Get() does not verify returned content against requested digest","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:44.201Z","source_hash":"content-fingerprint:fnv1a-ffe8d363","affected_system":{"organization":"github.com/docker/distribution project","product":"github.com/docker/distribution","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Go"},"documented_facts":[{"id":"SEA-GHSA-685w-q87j-wqw3-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Distribution: Client manifests.Get() does not verify returned content against requested digest","source_quote_or_pointer":"Security Advisory GHSA-685w-q87j-wqw3","fact_id":"SEA-GHSA-685w-q87j-wqw3-F1","document_citation":"Security Advisory GHSA-685w-q87j-wqw3"},{"id":"SEA-GHSA-685w-q87j-wqw3-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"registry/client.(manifests).Get(ctx, dgst, …) fetches a manifest by digest but never hashes the returned body and compares it against the requested digest. A malicious or compromised registry, or any MITM on the registry connection, can serve arbitrary manifest bytes in response to a digest-pinned request and the…","source_quote_or_pointer":"Advisory description (GHSA-685w-q87j-wqw3)","fact_id":"SEA-GHSA-685w-q87j-wqw3-F2","document_citation":"Advisory description (GHSA-685w-q87j-wqw3)"}],"source_stated_contributors":["registry/client.(manifests).Get(ctx, dgst, …) fetches a manifest by digest but never hashes the returned body and compares it against the requested digest. A malicious or compromised registry, or any MITM on the registry connection, can serve arbitrary manifest bytes in response to a digest-pinned request and the…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-685w-q87j-wqw3","reporting_entity":"CVE-2026-85747","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-685w-q87j-wqw3-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-685w-q87j-wqw3-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-85747"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-p7v4-vr35-mj6f","title":"containerd CRI plugin: Checkpoint restore bypasses destination security context","display_title":"Security issue reported in github.com/containerd/containerd/v2","display_summary":"A vulnerability in containerd's CRI implementation allows a container restored from an untrusted checkpoint via the CreateContainer API to bypass the destination security context and execute with elevated privileges.","display_reference":"CVE-2026-95837","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-p7v4-vr35-mj6f","source_title":"containerd CRI plugin: Checkpoint restore bypasses destination security context","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:44.202Z","source_hash":"content-fingerprint:fnv1a-899b8e95","affected_system":{"organization":"github.com/containerd/containerd/v2 project","product":"github.com/containerd/containerd/v2","system_type":"Cloud & container infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Go"},"documented_facts":[{"id":"SEA-GHSA-p7v4-vr35-mj6f-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"containerd CRI plugin: Checkpoint restore bypasses destination security context","source_quote_or_pointer":"Security Advisory GHSA-p7v4-vr35-mj6f","fact_id":"SEA-GHSA-p7v4-vr35-mj6f-F1","document_citation":"Security Advisory GHSA-p7v4-vr35-mj6f"},{"id":"SEA-GHSA-p7v4-vr35-mj6f-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability in containerd's CRI implementation allows a container restored from an untrusted checkpoint via the CreateContainer API to bypass the destination security context and execute with elevated privileges.","source_quote_or_pointer":"Advisory description (GHSA-p7v4-vr35-mj6f)","fact_id":"SEA-GHSA-p7v4-vr35-mj6f-F2","document_citation":"Advisory description (GHSA-p7v4-vr35-mj6f)"}],"source_stated_contributors":["A vulnerability in containerd's CRI implementation allows a container restored from an untrusted checkpoint via the CreateContainer API to bypass the destination security context and execute with elevated privileges."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-p7v4-vr35-mj6f","reporting_entity":"CVE-2026-95837","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-p7v4-vr35-mj6f-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-p7v4-vr35-mj6f-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-95837"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-3xr5-8w6c-p5gw","title":"Backstage: Improper access control in backend action invocation","display_title":"@backstage/backend-defaults issue could allow unauthorized access","display_summary":"An authenticated user could invoke actions that an operator had excluded through action configuration. Existing action permissions and downstream authorization remain enforced.","display_reference":"CVE-2026-106495","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-3xr5-8w6c-p5gw","source_title":"Backstage: Improper access control in backend action invocation","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:44.202Z","source_hash":"content-fingerprint:fnv1a-a0ed88fa","affected_system":{"organization":"@backstage/backend-defaults project","product":"@backstage/backend-defaults","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"JavaScript / TypeScript"},"documented_facts":[{"id":"SEA-GHSA-3xr5-8w6c-p5gw-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Backstage: Improper access control in backend action invocation","source_quote_or_pointer":"Security Advisory GHSA-3xr5-8w6c-p5gw","fact_id":"SEA-GHSA-3xr5-8w6c-p5gw-F1","document_citation":"Security Advisory GHSA-3xr5-8w6c-p5gw"},{"id":"SEA-GHSA-3xr5-8w6c-p5gw-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"An authenticated user could invoke actions that an operator had excluded through action configuration. Existing action permissions and downstream authorization remain enforced.","source_quote_or_pointer":"Advisory description (GHSA-3xr5-8w6c-p5gw)","fact_id":"SEA-GHSA-3xr5-8w6c-p5gw-F2","document_citation":"Advisory description (GHSA-3xr5-8w6c-p5gw)"}],"source_stated_contributors":["An authenticated user could invoke actions that an operator had excluded through action configuration. Existing action permissions and downstream authorization remain enforced."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-3xr5-8w6c-p5gw","reporting_entity":"CVE-2026-106495","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-3xr5-8w6c-p5gw-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-3xr5-8w6c-p5gw-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-106495"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-vrcc-3ch7-hppw","title":"kin-openapi: Incomplete Fix for GHSA-p6wj-qrr4-pgh5: Three Unpatched nil-Items Panic Paths in openapi3filter","display_title":"Security issue reported in github.com/getkin/kin-openapi","display_summary":"The fix for GHSA-p6wj-qrr4-pgh5 addressed a nil-pointer dereference that occurs when an OpenAPI 3.1 array schema omits the items keyword (which is legal under JSON Schema 2020-12).","display_reference":"CVE-2026-100353","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-vrcc-3ch7-hppw","source_title":"kin-openapi: Incomplete Fix for GHSA-p6wj-qrr4-pgh5: Three Unpatched nil-Items Panic Paths in openapi3filter","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:44.203Z","source_hash":"content-fingerprint:fnv1a-ce000485","affected_system":{"organization":"github.com/getkin/kin-openapi project","product":"github.com/getkin/kin-openapi","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Go"},"documented_facts":[{"id":"SEA-GHSA-vrcc-3ch7-hppw-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"kin-openapi: Incomplete Fix for GHSA-p6wj-qrr4-pgh5: Three Unpatched nil-Items Panic Paths in openapi3filter","source_quote_or_pointer":"Security Advisory GHSA-vrcc-3ch7-hppw","fact_id":"SEA-GHSA-vrcc-3ch7-hppw-F1","document_citation":"Security Advisory GHSA-vrcc-3ch7-hppw"},{"id":"SEA-GHSA-vrcc-3ch7-hppw-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The fix for GHSA-p6wj-qrr4-pgh5 addressed a nil-pointer dereference that occurs when an OpenAPI 3.1 array schema omits the items keyword (which is legal under JSON Schema 2020-12).","source_quote_or_pointer":"Advisory description (GHSA-vrcc-3ch7-hppw)","fact_id":"SEA-GHSA-vrcc-3ch7-hppw-F2","document_citation":"Advisory description (GHSA-vrcc-3ch7-hppw)"}],"source_stated_contributors":["The fix for GHSA-p6wj-qrr4-pgh5 addressed a nil-pointer dereference that occurs when an OpenAPI 3.1 array schema omits the items keyword (which is legal under JSON Schema 2020-12)."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-vrcc-3ch7-hppw","reporting_entity":"CVE-2026-100353","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-vrcc-3ch7-hppw-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-vrcc-3ch7-hppw-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-100353"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-g8cf-rcjf-c8cf","title":"kin-openapi: Uncontrolled Recursion on Circular allOf/anyOf/oneOf Schemas Causes Fatal Process Crash","display_title":"Security issue reported in github.com/getkin/kin-openapi","display_summary":"kin-openapi's spec loader and spec-time validator both handle circular schema references safely: the loader resolves circular $refs on purpose (to support recursive data structures), and Schema.validate() uses…","display_reference":"CVE-2026-100354","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-g8cf-rcjf-c8cf","source_title":"kin-openapi: Uncontrolled Recursion on Circular allOf/anyOf/oneOf Schemas Causes Fatal Process Crash","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:44.203Z","source_hash":"content-fingerprint:fnv1a-64e557a4","affected_system":{"organization":"github.com/getkin/kin-openapi project","product":"github.com/getkin/kin-openapi","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Go"},"documented_facts":[{"id":"SEA-GHSA-g8cf-rcjf-c8cf-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"kin-openapi: Uncontrolled Recursion on Circular allOf/anyOf/oneOf Schemas Causes Fatal Process Crash","source_quote_or_pointer":"Security Advisory GHSA-g8cf-rcjf-c8cf","fact_id":"SEA-GHSA-g8cf-rcjf-c8cf-F1","document_citation":"Security Advisory GHSA-g8cf-rcjf-c8cf"},{"id":"SEA-GHSA-g8cf-rcjf-c8cf-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"kin-openapi's spec loader and spec-time validator both handle circular schema references safely: the loader resolves circular $refs on purpose (to support recursive data structures), and Schema.validate() uses stack-based cycle detection.","source_quote_or_pointer":"Advisory description (GHSA-g8cf-rcjf-c8cf)","fact_id":"SEA-GHSA-g8cf-rcjf-c8cf-F2","document_citation":"Advisory description (GHSA-g8cf-rcjf-c8cf)"}],"source_stated_contributors":["kin-openapi's spec loader and spec-time validator both handle circular schema references safely: the loader resolves circular $refs on purpose (to support recursive data structures), and Schema.validate() uses stack-based cycle detection."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-g8cf-rcjf-c8cf","reporting_entity":"CVE-2026-100354","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-g8cf-rcjf-c8cf-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-g8cf-rcjf-c8cf-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-100354"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-rj39-cv6w-8wv7","title":"kin-openapi: YAML NaN/Inf Values Bypass Built-in Guards and Panic via OAS 3.1 Validation Path","display_title":"Security issue reported in github.com/getkin/kin-openapi","display_summary":"kin-openapi guards against NaN and Inf values in its built-in schema visitor (visitJSON) by returning ErrSchemaInputNaN / ErrSchemaInputInf when a float64 input violates those constraints.","display_reference":"CVE-2026-100352","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-rj39-cv6w-8wv7","source_title":"kin-openapi: YAML NaN/Inf Values Bypass Built-in Guards and Panic via OAS 3.1 Validation Path","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:44.204Z","source_hash":"content-fingerprint:fnv1a-6c594569","affected_system":{"organization":"github.com/getkin/kin-openapi project","product":"github.com/getkin/kin-openapi","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Go"},"documented_facts":[{"id":"SEA-GHSA-rj39-cv6w-8wv7-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"kin-openapi: YAML NaN/Inf Values Bypass Built-in Guards and Panic via OAS 3.1 Validation Path","source_quote_or_pointer":"Security Advisory GHSA-rj39-cv6w-8wv7","fact_id":"SEA-GHSA-rj39-cv6w-8wv7-F1","document_citation":"Security Advisory GHSA-rj39-cv6w-8wv7"},{"id":"SEA-GHSA-rj39-cv6w-8wv7-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"kin-openapi guards against NaN and Inf values in its built-in schema visitor (visitJSON) by returning ErrSchemaInputNaN / ErrSchemaInputInf when a float64 input violates those constraints.","source_quote_or_pointer":"Advisory description (GHSA-rj39-cv6w-8wv7)","fact_id":"SEA-GHSA-rj39-cv6w-8wv7-F2","document_citation":"Advisory description (GHSA-rj39-cv6w-8wv7)"}],"source_stated_contributors":["kin-openapi guards against NaN and Inf values in its built-in schema visitor (visitJSON) by returning ErrSchemaInputNaN / ErrSchemaInputInf when a float64 input violates those constraints."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-rj39-cv6w-8wv7","reporting_entity":"CVE-2026-100352","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-rj39-cv6w-8wv7-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-rj39-cv6w-8wv7-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-100352"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-7cxh-94cf-mfp6","title":"Talos Linux: Support bundle does not redact registry credentials","display_title":"github.com/talos-systems/talos issue could expose accounts or credentials","display_summary":"When generating a support bundle with talosctl support the credentials entered for private registries are included in the bundle.","display_reference":"CVE-2026-77564","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-7cxh-94cf-mfp6","source_title":"Talos Linux: Support bundle does not redact registry credentials","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:44.204Z","source_hash":"content-fingerprint:fnv1a-90a3f9d8","affected_system":{"organization":"github.com/talos-systems/talos project","product":"github.com/talos-systems/talos","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Go"},"documented_facts":[{"id":"SEA-GHSA-7cxh-94cf-mfp6-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Talos Linux: Support bundle does not redact registry credentials","source_quote_or_pointer":"Security Advisory GHSA-7cxh-94cf-mfp6","fact_id":"SEA-GHSA-7cxh-94cf-mfp6-F1","document_citation":"Security Advisory GHSA-7cxh-94cf-mfp6"},{"id":"SEA-GHSA-7cxh-94cf-mfp6-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"When generating a support bundle with talosctl support the credentials entered for private registries are included in the bundle.","source_quote_or_pointer":"Advisory description (GHSA-7cxh-94cf-mfp6)","fact_id":"SEA-GHSA-7cxh-94cf-mfp6-F2","document_citation":"Advisory description (GHSA-7cxh-94cf-mfp6)"}],"source_stated_contributors":["When generating a support bundle with talosctl support the credentials entered for private registries are included in the bundle."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-7cxh-94cf-mfp6","reporting_entity":"CVE-2026-77564","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-7cxh-94cf-mfp6-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-7cxh-94cf-mfp6-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-77564"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-637c-6jxx-4rwm","title":"KEDA: Privilege escalation from namespace admin to cluster admin via KEDA TriggerAuthentication","display_title":"github.com/kedacore/keda issue could grant elevated privileges","display_summary":"A namespace admin who creates a TriggerAuthentication and a ScaledObject in their own namespace can make the KEDA operator send its own ServiceAccount token to a tenant-controlled URL.","display_reference":"CVE-2026-77524","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-637c-6jxx-4rwm","source_title":"KEDA: Privilege escalation from namespace admin to cluster admin via KEDA TriggerAuthentication","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:44.205Z","source_hash":"content-fingerprint:fnv1a-81bed940","affected_system":{"organization":"github.com/kedacore/keda project","product":"github.com/kedacore/keda","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Go"},"documented_facts":[{"id":"SEA-GHSA-637c-6jxx-4rwm-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"KEDA: Privilege escalation from namespace admin to cluster admin via KEDA TriggerAuthentication","source_quote_or_pointer":"Security Advisory GHSA-637c-6jxx-4rwm","fact_id":"SEA-GHSA-637c-6jxx-4rwm-F1","document_citation":"Security Advisory GHSA-637c-6jxx-4rwm"},{"id":"SEA-GHSA-637c-6jxx-4rwm-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A namespace admin who creates a TriggerAuthentication and a ScaledObject in their own namespace can make the KEDA operator send its own ServiceAccount token to a tenant-controlled URL.","source_quote_or_pointer":"Advisory description (GHSA-637c-6jxx-4rwm)","fact_id":"SEA-GHSA-637c-6jxx-4rwm-F2","document_citation":"Advisory description (GHSA-637c-6jxx-4rwm)"}],"source_stated_contributors":["A namespace admin who creates a TriggerAuthentication and a ScaledObject in their own namespace can make the KEDA operator send its own ServiceAccount token to a tenant-controlled URL."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Elevated privileges","Boundary bypass"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-637c-6jxx-4rwm","reporting_entity":"CVE-2026-77524","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-637c-6jxx-4rwm-SG1","label":"Enforce privilege boundaries in code","description":"Require explicit, server-verified authorization for privileged operations and isolate components with separate identities.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-637c-6jxx-4rwm-SG1","label":"Enforce privilege boundaries in code","description":"Require explicit, server-verified authorization for privileged operations and isolate components with separate identities.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A low-privilege actor reached a high-privilege capability. Enforce approval and privilege boundaries in deterministic code, not by convention.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-77524"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-fmxq-cgp8-87wp","title":"Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks","display_title":"Security issue reported in github.com/argoproj/argo-cd/v2","display_summary":"Argo CD checks an Application's AppProject before it creates resources during a sync. That check covers destination namespaces and servers, cluster-scoped resource allow and deny lists, and namespaced resource allow and…","display_reference":"CVE-2026-77459","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-fmxq-cgp8-87wp","source_title":"Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:44.205Z","source_hash":"content-fingerprint:fnv1a-c00072f5","affected_system":{"organization":"github.com/argoproj/argo-cd/v2 project","product":"github.com/argoproj/argo-cd/v2","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Go"},"documented_facts":[{"id":"SEA-GHSA-fmxq-cgp8-87wp-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks","source_quote_or_pointer":"Security Advisory GHSA-fmxq-cgp8-87wp","fact_id":"SEA-GHSA-fmxq-cgp8-87wp-F1","document_citation":"Security Advisory GHSA-fmxq-cgp8-87wp"},{"id":"SEA-GHSA-fmxq-cgp8-87wp-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Argo CD checks an Application's AppProject before it creates resources during a sync. That check covers destination namespaces and servers, cluster-scoped resource allow and deny lists, and namespaced resource allow and deny lists, including resource names. PreDelete and PostDelete hooks skip it.","source_quote_or_pointer":"Advisory description (GHSA-fmxq-cgp8-87wp)","fact_id":"SEA-GHSA-fmxq-cgp8-87wp-F2","document_citation":"Advisory description (GHSA-fmxq-cgp8-87wp)"}],"source_stated_contributors":["Argo CD checks an Application's AppProject before it creates resources during a sync. That check covers destination namespaces and servers, cluster-scoped resource allow and deny lists, and namespaced resource allow and deny lists, including resource names. PreDelete and PostDelete hooks skip it."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-fmxq-cgp8-87wp","reporting_entity":"CVE-2026-77459","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-fmxq-cgp8-87wp-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-fmxq-cgp8-87wp-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-77459"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-qfxx-c367-67f8","title":"Appium: Symlink based Zip Slip in @appium/support ZIP extraction","display_title":"Security issue reported in @appium/support","display_summary":"This finding is a different vector that the 7.0.6 fix does not cover. The archive entry names here are completely legitimate (for example pwn and pwn/owned.txt, no .. anywhere), so every name based defense accepts them.","display_reference":"CVE-2026-103975","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-qfxx-c367-67f8","source_title":"Appium: Symlink based Zip Slip in @appium/support ZIP extraction","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:44.205Z","source_hash":"content-fingerprint:fnv1a-50a6e29e","affected_system":{"organization":"@appium/support project","product":"@appium/support","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"JavaScript / TypeScript"},"documented_facts":[{"id":"SEA-GHSA-qfxx-c367-67f8-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Appium: Symlink based Zip Slip in @appium/support ZIP extraction","source_quote_or_pointer":"Security Advisory GHSA-qfxx-c367-67f8","fact_id":"SEA-GHSA-qfxx-c367-67f8-F1","document_citation":"Security Advisory GHSA-qfxx-c367-67f8"},{"id":"SEA-GHSA-qfxx-c367-67f8-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"This finding is a different vector that the 7.0.6 fix does not cover. The archive entry names here are completely legitimate (for example pwn and pwn/owned.txt, no .. anywhere), so every name based defense accepts them. The escape happens through a symbolic link.","source_quote_or_pointer":"Advisory description (GHSA-qfxx-c367-67f8)","fact_id":"SEA-GHSA-qfxx-c367-67f8-F2","document_citation":"Advisory description (GHSA-qfxx-c367-67f8)"}],"source_stated_contributors":["This finding is a different vector that the 7.0.6 fix does not cover. The archive entry names here are completely legitimate (for example pwn and pwn/owned.txt, no .. anywhere), so every name based defense accepts them. The escape happens through a symbolic link."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["arch.content_ingestion_rag"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Restricted file exposure","File overwrite"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-qfxx-c367-67f8","reporting_entity":"CVE-2026-103975","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-qfxx-c367-67f8-SG1","label":"Confine file access to a fixed root","description":"Resolve paths to canonical form and reject anything outside the intended directory before opening files.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-qfxx-c367-67f8-SG1","label":"Confine file access to a fixed root","description":"Resolve paths to canonical form and reject anything outside the intended directory before opening files.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"File paths supplied by a caller escaped the intended directory. Canonicalise paths and confine file access to a fixed root.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-103975"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-cr65-55v9-xhvv","title":"Dio: Cross-origin redirect leaks sensitive request headers in dio_http2_adapter","display_title":"Security issue reported in diohttp2adapter","display_summary":"diohttp2adapter follows HTTP Location redirects without stripping sensitive request headers when the redirect target is a different origin.","display_reference":"CVE-2026-103030","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-cr65-55v9-xhvv","source_title":"Dio: Cross-origin redirect leaks sensitive request headers in dio_http2_adapter","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:44.206Z","source_hash":"content-fingerprint:fnv1a-263f32be","affected_system":{"organization":"diohttp2adapter project","product":"diohttp2adapter","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Dart"},"documented_facts":[{"id":"SEA-GHSA-cr65-55v9-xhvv-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Dio: Cross-origin redirect leaks sensitive request headers in dio_http2_adapter","source_quote_or_pointer":"Security Advisory GHSA-cr65-55v9-xhvv","fact_id":"SEA-GHSA-cr65-55v9-xhvv-F1","document_citation":"Security Advisory GHSA-cr65-55v9-xhvv"},{"id":"SEA-GHSA-cr65-55v9-xhvv-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"diohttp2adapter follows HTTP Location redirects without stripping sensitive request headers when the redirect target is a different origin. An attacker who can cause any origin server to return a cross-origin 302 redirect receives the victim's Authorization, Cookie, and Proxy-Authorization headers verbatim.","source_quote_or_pointer":"Advisory description (GHSA-cr65-55v9-xhvv)","fact_id":"SEA-GHSA-cr65-55v9-xhvv-F2","document_citation":"Advisory description (GHSA-cr65-55v9-xhvv)"}],"source_stated_contributors":["diohttp2adapter follows HTTP Location redirects without stripping sensitive request headers when the redirect target is a different origin. An attacker who can cause any origin server to return a cross-origin 302 redirect receives the victim's Authorization, Cookie, and Proxy-Authorization headers verbatim."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-cr65-55v9-xhvv","reporting_entity":"CVE-2026-103030","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-cr65-55v9-xhvv-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-cr65-55v9-xhvv-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-103030"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-qj98-gp63-54xj","title":"Dgraph: Zero Unauthenticated HTTP Admin removeNode Denial of Service","display_title":"github.com/dgraph-io/dgraph/v25 issue could make the service unavailable","display_summary":"Dgraph v25.3.8 exposes a Zero HTTP administrative surface that is unauthenticated when port 6080 is reachable.","display_reference":"CVE-2026-102748","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-qj98-gp63-54xj","source_title":"Dgraph: Zero Unauthenticated HTTP Admin removeNode Denial of Service","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:44.206Z","source_hash":"content-fingerprint:fnv1a-53873664","affected_system":{"organization":"github.com/dgraph-io/dgraph/v25 project","product":"github.com/dgraph-io/dgraph/v25","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Go"},"documented_facts":[{"id":"SEA-GHSA-qj98-gp63-54xj-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Dgraph: Zero Unauthenticated HTTP Admin removeNode Denial of Service","source_quote_or_pointer":"Security Advisory GHSA-qj98-gp63-54xj","fact_id":"SEA-GHSA-qj98-gp63-54xj-F1","document_citation":"Security Advisory GHSA-qj98-gp63-54xj"},{"id":"SEA-GHSA-qj98-gp63-54xj-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Dgraph v25.3.8 exposes a Zero HTTP administrative surface that is unauthenticated when port 6080 is reachable.","source_quote_or_pointer":"Advisory description (GHSA-qj98-gp63-54xj)","fact_id":"SEA-GHSA-qj98-gp63-54xj-F2","document_citation":"Advisory description (GHSA-qj98-gp63-54xj)"}],"source_stated_contributors":["Dgraph v25.3.8 exposes a Zero HTTP administrative surface that is unauthenticated when port 6080 is reachable."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-qj98-gp63-54xj","reporting_entity":"CVE-2026-102748","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-qj98-gp63-54xj-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-qj98-gp63-54xj-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-102748"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-24cc-9352-h2pg","title":"tinytag: Infinite loop when parsing certain M4A files containing invalid atoms","display_title":"Security issue reported in tinytag","display_summary":"An M4A file containing a sub-atom with a size of zero in the ---- atom makes the parser enter an infinite loop, resulting in a denial-of-service for programs reading such files with tinytag.","display_reference":"CVE-2026-104266","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-24cc-9352-h2pg","source_title":"tinytag: Infinite loop when parsing certain M4A files containing invalid atoms","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:44.206Z","source_hash":"content-fingerprint:fnv1a-6ed1dd5f","affected_system":{"organization":"tinytag project","product":"tinytag","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Python"},"documented_facts":[{"id":"SEA-GHSA-24cc-9352-h2pg-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"tinytag: Infinite loop when parsing certain M4A files containing invalid atoms","source_quote_or_pointer":"Security Advisory GHSA-24cc-9352-h2pg","fact_id":"SEA-GHSA-24cc-9352-h2pg-F1","document_citation":"Security Advisory GHSA-24cc-9352-h2pg"},{"id":"SEA-GHSA-24cc-9352-h2pg-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"An M4A file containing a sub-atom with a size of zero in the ---- atom makes the parser enter an infinite loop, resulting in a denial-of-service for programs reading such files with tinytag.","source_quote_or_pointer":"Advisory description (GHSA-24cc-9352-h2pg)","fact_id":"SEA-GHSA-24cc-9352-h2pg-F2","document_citation":"Advisory description (GHSA-24cc-9352-h2pg)"}],"source_stated_contributors":["An M4A file containing a sub-atom with a size of zero in the ---- atom makes the parser enter an infinite loop, resulting in a denial-of-service for programs reading such files with tinytag."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-24cc-9352-h2pg","reporting_entity":"CVE-2026-104266","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-24cc-9352-h2pg-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-24cc-9352-h2pg-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-104266"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-phv8-wgjp-g4p9","title":"copyparty FTP: upload outside defined volumes (limited path traversal)","display_title":"copyparty issue could expose restricted files","display_summary":"The FTP and FTPS server -- if enabled -- would allow uploading to any folder that the copyparty process had permission to write to.","display_reference":"CVE-2026-104102","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-phv8-wgjp-g4p9","source_title":"copyparty FTP: upload outside defined volumes (limited path traversal)","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:44.207Z","source_hash":"content-fingerprint:fnv1a-85b8ef09","affected_system":{"organization":"copyparty project","product":"copyparty","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Python"},"documented_facts":[{"id":"SEA-GHSA-phv8-wgjp-g4p9-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"copyparty FTP: upload outside defined volumes (limited path traversal)","source_quote_or_pointer":"Security Advisory GHSA-phv8-wgjp-g4p9","fact_id":"SEA-GHSA-phv8-wgjp-g4p9-F1","document_citation":"Security Advisory GHSA-phv8-wgjp-g4p9"},{"id":"SEA-GHSA-phv8-wgjp-g4p9-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The FTP and FTPS server -- if enabled -- would allow uploading to any folder that the copyparty process had permission to write to.","source_quote_or_pointer":"Advisory description (GHSA-phv8-wgjp-g4p9)","fact_id":"SEA-GHSA-phv8-wgjp-g4p9-F2","document_citation":"Advisory description (GHSA-phv8-wgjp-g4p9)"}],"source_stated_contributors":["The FTP and FTPS server -- if enabled -- would allow uploading to any folder that the copyparty process had permission to write to."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.write_action","data.uploaded_files"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Restricted file exposure","File overwrite"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-phv8-wgjp-g4p9","reporting_entity":"CVE-2026-104102","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-phv8-wgjp-g4p9-SG1","label":"Confine file access to a fixed root","description":"Resolve paths to canonical form and reject anything outside the intended directory before opening files.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-phv8-wgjp-g4p9-SG1","label":"Confine file access to a fixed root","description":"Resolve paths to canonical form and reject anything outside the intended directory before opening files.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"File paths supplied by a caller escaped the intended directory. Canonicalise paths and confine file access to a fixed root.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-104102"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-v5mq-3xhg-98m9","title":"unstructured: Stored XSS via unescaped HTML generation","display_title":"unstructured issue could run attacker-controlled scripts in a browser","display_summary":"When unstructured parses an untrusted document and outputs the result as HTML, malicious markup contained in the document (e.g. ) is left in the output HTML without escaping.","display_reference":"CVE-2026-104250","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-v5mq-3xhg-98m9","source_title":"unstructured: Stored XSS via unescaped HTML generation","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:44.207Z","source_hash":"content-fingerprint:fnv1a-86fa628f","affected_system":{"organization":"unstructured project","product":"unstructured","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Python"},"documented_facts":[{"id":"SEA-GHSA-v5mq-3xhg-98m9-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"unstructured: Stored XSS via unescaped HTML generation","source_quote_or_pointer":"Security Advisory GHSA-v5mq-3xhg-98m9","fact_id":"SEA-GHSA-v5mq-3xhg-98m9-F1","document_citation":"Security Advisory GHSA-v5mq-3xhg-98m9"},{"id":"SEA-GHSA-v5mq-3xhg-98m9-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"When unstructured parses an untrusted document and outputs the result as HTML, malicious markup contained in the document (e.g. ) is left in the output HTML without escaping. When that output is displayed in a browser, the script embedded in the document executes in the viewer's browser.","source_quote_or_pointer":"Advisory description (GHSA-v5mq-3xhg-98m9)","fact_id":"SEA-GHSA-v5mq-3xhg-98m9-F2","document_citation":"Advisory description (GHSA-v5mq-3xhg-98m9)"}],"source_stated_contributors":["When unstructured parses an untrusted document and outputs the result as HTML, malicious markup contained in the document (e.g. ) is left in the output HTML without escaping. When that output is displayed in a browser, the script embedded in the document executes in the viewer's browser."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-v5mq-3xhg-98m9","reporting_entity":"CVE-2026-104250","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-v5mq-3xhg-98m9-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-v5mq-3xhg-98m9-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-104250"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-mh7x-f8wq-4jhx","title":"kin-openapi spec loader panics on a self-referential additionalProperties $ref (nil-pointer DoS)","display_title":"github.com/getkin/kin-openapi issue could make the service unavailable","display_summary":"Confirmed at HEAD (f0407d5, v0.144.0). openapi3/loader.go, inside resolveComponent's drill closure (around line 455), the case SchemaRef branch for pathPart == \"additionalProperties\" dereferences…","display_reference":"CVE-2026-100348","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-mh7x-f8wq-4jhx","source_title":"kin-openapi spec loader panics on a self-referential additionalProperties $ref (nil-pointer DoS)","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:44.208Z","source_hash":"content-fingerprint:fnv1a-56022c01","affected_system":{"organization":"github.com/getkin/kin-openapi project","product":"github.com/getkin/kin-openapi","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Go"},"documented_facts":[{"id":"SEA-GHSA-mh7x-f8wq-4jhx-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"kin-openapi spec loader panics on a self-referential additionalProperties $ref (nil-pointer DoS)","source_quote_or_pointer":"Security Advisory GHSA-mh7x-f8wq-4jhx","fact_id":"SEA-GHSA-mh7x-f8wq-4jhx-F1","document_citation":"Security Advisory GHSA-mh7x-f8wq-4jhx"},{"id":"SEA-GHSA-mh7x-f8wq-4jhx-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Confirmed at HEAD (f0407d5, v0.144.0). openapi3/loader.go, inside resolveComponent's drill closure (around line 455), the case SchemaRef branch for pathPart == \"additionalProperties\" dereferences c.Value.AdditionalProperties with no nil-check on c.Value:","source_quote_or_pointer":"Advisory description (GHSA-mh7x-f8wq-4jhx)","fact_id":"SEA-GHSA-mh7x-f8wq-4jhx-F2","document_citation":"Advisory description (GHSA-mh7x-f8wq-4jhx)"}],"source_stated_contributors":["Confirmed at HEAD (f0407d5, v0.144.0). openapi3/loader.go, inside resolveComponent's drill closure (around line 455), the case SchemaRef branch for pathPart == \"additionalProperties\" dereferences c.Value.AdditionalProperties with no nil-check on c.Value:"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-mh7x-f8wq-4jhx","reporting_entity":"CVE-2026-100348","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-mh7x-f8wq-4jhx-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-mh7x-f8wq-4jhx-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-100348"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-3hcj-9m7p-wwm9","title":"Gotify: Insufficiently Protected Password Change endpoint","display_title":"Security issue reported in github.com/gotify/server/v2","display_summary":"The password change endpoint (POST /current/user/password) in Gotify versions <= 2.9.1 does not require knowledge of the current password.","display_reference":"CVE-2026-102603","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-3hcj-9m7p-wwm9","source_title":"Gotify: Insufficiently Protected Password Change endpoint","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:44.208Z","source_hash":"content-fingerprint:fnv1a-b92dcfae","affected_system":{"organization":"github.com/gotify/server/v2 project","product":"github.com/gotify/server/v2","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Go"},"documented_facts":[{"id":"SEA-GHSA-3hcj-9m7p-wwm9-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Gotify: Insufficiently Protected Password Change endpoint","source_quote_or_pointer":"Security Advisory GHSA-3hcj-9m7p-wwm9","fact_id":"SEA-GHSA-3hcj-9m7p-wwm9-F1","document_citation":"Security Advisory GHSA-3hcj-9m7p-wwm9"},{"id":"SEA-GHSA-3hcj-9m7p-wwm9-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The password change endpoint (POST /current/user/password) in Gotify versions <= 2.9.1 does not require knowledge of the current password. An attacker in possession of a valid client token can set a new password for the affected user. Recovering the account requires administrator intervention or direct database access.","source_quote_or_pointer":"Advisory description (GHSA-3hcj-9m7p-wwm9)","fact_id":"SEA-GHSA-3hcj-9m7p-wwm9-F2","document_citation":"Advisory description (GHSA-3hcj-9m7p-wwm9)"}],"source_stated_contributors":["The password change endpoint (POST /current/user/password) in Gotify versions <= 2.9.1 does not require knowledge of the current password. An attacker in possession of a valid client token can set a new password for the affected user. Recovering the account requires administrator intervention or direct database access."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.write_action","data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-3hcj-9m7p-wwm9","reporting_entity":"CVE-2026-102603","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-3hcj-9m7p-wwm9-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-3hcj-9m7p-wwm9-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-102603"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-2x6f-rp82-ppmj","title":"Nuxt OG Image cache poisoning through derivable cache keys on unsigned dynamic image routes","display_title":"Security issue reported in nuxt-og-image","display_summary":"Description: Due to the specifics of caching and key generation in the Open Graph image cache created by the module, an unauthenticated attacker can modify the content of the image (for example, the title parameter) that…","display_reference":"CVE-2026-102527","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-2x6f-rp82-ppmj","source_title":"Nuxt OG Image cache poisoning through derivable cache keys on unsigned dynamic image routes","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:44.209Z","source_hash":"content-fingerprint:fnv1a-b494c0ac","affected_system":{"organization":"nuxt-og-image project","product":"nuxt-og-image","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"JavaScript / TypeScript"},"documented_facts":[{"id":"SEA-GHSA-2x6f-rp82-ppmj-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Nuxt OG Image cache poisoning through derivable cache keys on unsigned dynamic image routes","source_quote_or_pointer":"Security Advisory GHSA-2x6f-rp82-ppmj","fact_id":"SEA-GHSA-2x6f-rp82-ppmj-F1","document_citation":"Security Advisory GHSA-2x6f-rp82-ppmj"},{"id":"SEA-GHSA-2x6f-rp82-ppmj-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Description: Due to the specifics of caching and key generation in the Open Graph image cache created by the module, an unauthenticated attacker can modify the content of the image (for example, the title parameter) that is delivered to the user.","source_quote_or_pointer":"Advisory description (GHSA-2x6f-rp82-ppmj)","fact_id":"SEA-GHSA-2x6f-rp82-ppmj-F2","document_citation":"Advisory description (GHSA-2x6f-rp82-ppmj)"}],"source_stated_contributors":["Description: Due to the specifics of caching and key generation in the Open Graph image cache created by the module, an unauthenticated attacker can modify the content of the image (for example, the title parameter) that is delivered to the user."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.pii","arch.caching"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-2x6f-rp82-ppmj","reporting_entity":"CVE-2026-102527","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-2x6f-rp82-ppmj-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-2x6f-rp82-ppmj-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-102527"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-2vc4-c4r6-p6v6","title":"OpenNext Cloudflare: Cache interception can bypass middleware protection for encoded paths","display_title":"Security issue reported in @opennextjs/cloudflare","display_summary":"When cache interception is enabled, @opennextjs/cloudflare can interpret percent-encoded paths differently during middleware matching and cache lookup.","display_reference":"CVE-2026-100409","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-2vc4-c4r6-p6v6","source_title":"OpenNext Cloudflare: Cache interception can bypass middleware protection for encoded paths","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:44.210Z","source_hash":"content-fingerprint:fnv1a-71b6ee93","affected_system":{"organization":"@opennextjs/cloudflare project","product":"@opennextjs/cloudflare","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"JavaScript / TypeScript"},"documented_facts":[{"id":"SEA-GHSA-2vc4-c4r6-p6v6-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"OpenNext Cloudflare: Cache interception can bypass middleware protection for encoded paths","source_quote_or_pointer":"Security Advisory GHSA-2vc4-c4r6-p6v6","fact_id":"SEA-GHSA-2vc4-c4r6-p6v6-F1","document_citation":"Security Advisory GHSA-2vc4-c4r6-p6v6"},{"id":"SEA-GHSA-2vc4-c4r6-p6v6-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"When cache interception is enabled, @opennextjs/cloudflare can interpret percent-encoded paths differently during middleware matching and cache lookup.","source_quote_or_pointer":"Advisory description (GHSA-2vc4-c4r6-p6v6)","fact_id":"SEA-GHSA-2vc4-c4r6-p6v6-F2","document_citation":"Advisory description (GHSA-2vc4-c4r6-p6v6)"}],"source_stated_contributors":["When cache interception is enabled, @opennextjs/cloudflare can interpret percent-encoded paths differently during middleware matching and cache lookup."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.infrastructure_modification","arch.caching"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-2vc4-c4r6-p6v6","reporting_entity":"CVE-2026-100409","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-2vc4-c4r6-p6v6-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-2vc4-c4r6-p6v6-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-100409"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-qjpp-gffx-2wm9","title":"Nezha Monitoring: Whole-instance DoS in Nezha dashboard: a member can crash the process for every tenant","display_title":"github.com/nezhahq/nezha issue could make the service unavailable","display_summary":"A single low-privilege RoleMember can take the entire Nezha dashboard offline, and with it every tenant's web UI, REST API, and agent connections, by racing two ordinary operations on their own service.","display_reference":"CVE-2026-100394","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-qjpp-gffx-2wm9","source_title":"Nezha Monitoring: Whole-instance DoS in Nezha dashboard: a member can crash the process for every tenant","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:44.211Z","source_hash":"content-fingerprint:fnv1a-990550a2","affected_system":{"organization":"github.com/nezhahq/nezha project","product":"github.com/nezhahq/nezha","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Go"},"documented_facts":[{"id":"SEA-GHSA-qjpp-gffx-2wm9-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Nezha Monitoring: Whole-instance DoS in Nezha dashboard: a member can crash the process for every tenant","source_quote_or_pointer":"Security Advisory GHSA-qjpp-gffx-2wm9","fact_id":"SEA-GHSA-qjpp-gffx-2wm9-F1","document_citation":"Security Advisory GHSA-qjpp-gffx-2wm9"},{"id":"SEA-GHSA-qjpp-gffx-2wm9-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A single low-privilege RoleMember can take the entire Nezha dashboard offline, and with it every tenant's web UI, REST API, and agent connections, by racing two ordinary operations on their own service. The crash is a nil pointer dereference in the service-monitor worker at service/singleton/servicesentinel.go:601.","source_quote_or_pointer":"Advisory description (GHSA-qjpp-gffx-2wm9)","fact_id":"SEA-GHSA-qjpp-gffx-2wm9-F2","document_citation":"Advisory description (GHSA-qjpp-gffx-2wm9)"}],"source_stated_contributors":["A single low-privilege RoleMember can take the entire Nezha dashboard offline, and with it every tenant's web UI, REST API, and agent connections, by racing two ordinary operations on their own service. The crash is a nil pointer dereference in the service-monitor worker at service/singleton/servicesentinel.go:601."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["arch.async_job","arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-006","SEA-FM-010"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-qjpp-gffx-2wm9","reporting_entity":"CVE-2026-100394","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-qjpp-gffx-2wm9-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-qjpp-gffx-2wm9-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-100394"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-54mm-6729-r5wp","title":"Leantime: Any Authenticated User Can Self-Escalate to Admin via Unauthorized JSON-RPC Methods","display_title":"Security issue reported in leantime/leantime","display_summary":"Any authenticated Leantime user - including the lowest-privilege readonly role - can escalate to full administrative access by calling the JSON-RPC method leantime.rpc.api.api.createApiKeyWithProjects with an…","display_reference":"CVE-2026-85990","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-54mm-6729-r5wp","source_title":"Leantime: Any Authenticated User Can Self-Escalate to Admin via Unauthorized JSON-RPC Methods","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:44.211Z","source_hash":"content-fingerprint:fnv1a-32bfa6e0","affected_system":{"organization":"leantime/leantime project","product":"leantime/leantime","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"PHP"},"documented_facts":[{"id":"SEA-GHSA-54mm-6729-r5wp-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Leantime: Any Authenticated User Can Self-Escalate to Admin via Unauthorized JSON-RPC Methods","source_quote_or_pointer":"Security Advisory GHSA-54mm-6729-r5wp","fact_id":"SEA-GHSA-54mm-6729-r5wp-F1","document_citation":"Security Advisory GHSA-54mm-6729-r5wp"},{"id":"SEA-GHSA-54mm-6729-r5wp-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Any authenticated Leantime user - including the lowest-privilege readonly role - can escalate to full administrative access by calling the JSON-RPC method leantime.rpc.api.api.createApiKeyWithProjects with an attacker-chosen role value.","source_quote_or_pointer":"Advisory description (GHSA-54mm-6729-r5wp)","fact_id":"SEA-GHSA-54mm-6729-r5wp-F2","document_citation":"Advisory description (GHSA-54mm-6729-r5wp)"}],"source_stated_contributors":["Any authenticated Leantime user - including the lowest-privilege readonly role - can escalate to full administrative access by calling the JSON-RPC method leantime.rpc.api.api.createApiKeyWithProjects with an attacker-chosen role value."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-54mm-6729-r5wp","reporting_entity":"CVE-2026-85990","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-54mm-6729-r5wp-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-54mm-6729-r5wp-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-85990"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-v3ph-cgqh-r8p5","title":"FrankenPHP: Cross-request PHP session ID leak in worker mode when the session extension is a shared module","display_title":"Security issue reported in github.com/dunglas/frankenphp","display_summary":"In worker mode under concurrency, FrankenPHP can hand a PHP session id from one request to another when PHP's session extension is loaded as a shared module instead of being statically linked into the FrankenPHP binary.","display_reference":"CVE-2026-82416","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-v3ph-cgqh-r8p5","source_title":"FrankenPHP: Cross-request PHP session ID leak in worker mode when the session extension is a shared module","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:44.213Z","source_hash":"content-fingerprint:fnv1a-a59bde08","affected_system":{"organization":"github.com/dunglas/frankenphp project","product":"github.com/dunglas/frankenphp","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Go"},"documented_facts":[{"id":"SEA-GHSA-v3ph-cgqh-r8p5-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"FrankenPHP: Cross-request PHP session ID leak in worker mode when the session extension is a shared module","source_quote_or_pointer":"Security Advisory GHSA-v3ph-cgqh-r8p5","fact_id":"SEA-GHSA-v3ph-cgqh-r8p5-F1","document_citation":"Security Advisory GHSA-v3ph-cgqh-r8p5"},{"id":"SEA-GHSA-v3ph-cgqh-r8p5-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"In worker mode under concurrency, FrankenPHP can hand a PHP session id from one request to another when PHP's session extension is loaded as a shared module instead of being statically linked into the FrankenPHP binary.","source_quote_or_pointer":"Advisory description (GHSA-v3ph-cgqh-r8p5)","fact_id":"SEA-GHSA-v3ph-cgqh-r8p5-F2","document_citation":"Advisory description (GHSA-v3ph-cgqh-r8p5)"}],"source_stated_contributors":["In worker mode under concurrency, FrankenPHP can hand a PHP session id from one request to another when PHP's session extension is loaded as a shared module instead of being statically linked into the FrankenPHP binary."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["arch.async_job"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-v3ph-cgqh-r8p5","reporting_entity":"CVE-2026-82416","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-v3ph-cgqh-r8p5-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-v3ph-cgqh-r8p5-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-82416"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-q7pc-356p-hggc","title":"SFTPGo: Denial of service via malformed SSH channel request","display_title":"github.com/drakkan/sftpgo/v2 issue could make the service unavailable","display_summary":"A flaw in the SSH service allows an authenticated client to crash the server by sending a malformed protocol message while opening a channel.","display_reference":"CVE-2026-77375","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-q7pc-356p-hggc","source_title":"SFTPGo: Denial of service via malformed SSH channel request","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:44.213Z","source_hash":"content-fingerprint:fnv1a-bef62e75","affected_system":{"organization":"github.com/drakkan/sftpgo/v2 project","product":"github.com/drakkan/sftpgo/v2","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Go"},"documented_facts":[{"id":"SEA-GHSA-q7pc-356p-hggc-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"SFTPGo: Denial of service via malformed SSH channel request","source_quote_or_pointer":"Security Advisory GHSA-q7pc-356p-hggc","fact_id":"SEA-GHSA-q7pc-356p-hggc-F1","document_citation":"Security Advisory GHSA-q7pc-356p-hggc"},{"id":"SEA-GHSA-q7pc-356p-hggc-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A flaw in the SSH service allows an authenticated client to crash the server by sending a malformed protocol message while opening a channel.","source_quote_or_pointer":"Advisory description (GHSA-q7pc-356p-hggc)","fact_id":"SEA-GHSA-q7pc-356p-hggc-F2","document_citation":"Advisory description (GHSA-q7pc-356p-hggc)"}],"source_stated_contributors":["A flaw in the SSH service allows an authenticated client to crash the server by sending a malformed protocol message while opening a channel."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-q7pc-356p-hggc","reporting_entity":"CVE-2026-77375","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-q7pc-356p-hggc-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-q7pc-356p-hggc-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-77375"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-wq4w-vwvq-q3x9","title":"Nginx UI: Standalone short tokens survive administrative revocation in cache and authenticate again after account re-enable","display_title":"Security issue reported in github.com/0xJacky/Nginx-UI","display_summary":"Standalone short tokens issued for WebSocket and explicit-token authentication can survive administrative revocation in cache.","display_reference":"CVE-2026-84321","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-wq4w-vwvq-q3x9","source_title":"Nginx UI: Standalone short tokens survive administrative revocation in cache and authenticate again after account re-enable","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:44.214Z","source_hash":"content-fingerprint:fnv1a-d37e28ab","affected_system":{"organization":"github.com/0xJacky/Nginx-UI project","product":"github.com/0xJacky/Nginx-UI","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Go"},"documented_facts":[{"id":"SEA-GHSA-wq4w-vwvq-q3x9-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Nginx UI: Standalone short tokens survive administrative revocation in cache and authenticate again after account re-enable","source_quote_or_pointer":"Security Advisory GHSA-wq4w-vwvq-q3x9","fact_id":"SEA-GHSA-wq4w-vwvq-q3x9-F1","document_citation":"Security Advisory GHSA-wq4w-vwvq-q3x9"},{"id":"SEA-GHSA-wq4w-vwvq-q3x9-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Standalone short tokens issued for WebSocket and explicit-token authentication can survive administrative revocation in cache. If the same account is later re-enabled before the cache entry expires, the deleted short token becomes valid again.","source_quote_or_pointer":"Advisory description (GHSA-wq4w-vwvq-q3x9)","fact_id":"SEA-GHSA-wq4w-vwvq-q3x9-F2","document_citation":"Advisory description (GHSA-wq4w-vwvq-q3x9)"}],"source_stated_contributors":["Standalone short tokens issued for WebSocket and explicit-token authentication can survive administrative revocation in cache. If the same account is later re-enabled before the cache entry expires, the deleted short token becomes valid again."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","arch.caching","arch.event_driven"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-wq4w-vwvq-q3x9","reporting_entity":"CVE-2026-84321","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-wq4w-vwvq-q3x9-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-wq4w-vwvq-q3x9-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-84321"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-cf23-7qxj-xmhr","title":"Nginx UI: nginx config directive denylist (ValidateConfigFile) is bypassable via same-line \";\" separation → authenticated directive injection (RCE on the official image)","display_title":"github.com/0xJacky/Nginx-UI issue could allow unintended commands to run","display_summary":"config.ValidateConfigFile is the security control that blocks dangerous nginx directives","display_reference":"CVE-2026-84316","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-cf23-7qxj-xmhr","source_title":"Nginx UI: nginx config directive denylist (ValidateConfigFile) is bypassable via same-line \";\" separation → authenticated directive injection (RCE on the official image)","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:44.214Z","source_hash":"content-fingerprint:fnv1a-8846ec1e","affected_system":{"organization":"github.com/0xJacky/Nginx-UI project","product":"github.com/0xJacky/Nginx-UI","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Go"},"documented_facts":[{"id":"SEA-GHSA-cf23-7qxj-xmhr-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Nginx UI: nginx config directive denylist (ValidateConfigFile) is bypassable via same-line \";\" separation → authenticated directive injection (RCE on the official image)","source_quote_or_pointer":"Security Advisory GHSA-cf23-7qxj-xmhr","fact_id":"SEA-GHSA-cf23-7qxj-xmhr-F1","document_citation":"Security Advisory GHSA-cf23-7qxj-xmhr"},{"id":"SEA-GHSA-cf23-7qxj-xmhr-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"config.ValidateConfigFile is the security control that blocks dangerous nginx directives","source_quote_or_pointer":"Advisory description (GHSA-cf23-7qxj-xmhr)","fact_id":"SEA-GHSA-cf23-7qxj-xmhr-F2","document_citation":"Advisory description (GHSA-cf23-7qxj-xmhr)"}],"source_stated_contributors":["config.ValidateConfigFile is the security control that blocks dangerous nginx directives"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-cf23-7qxj-xmhr","reporting_entity":"CVE-2026-84316","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-cf23-7qxj-xmhr-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-cf23-7qxj-xmhr-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-84316"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-84m7-p3x7-pcfv","title":"MCP Python SDK: Unbounded Session Accumulation in StreamableHTTP Transport Enables Resource Exhaustion","display_title":"mcp issue could make the service unavailable","display_summary":"In affected versions, a Streamable HTTP server in stateful mode (the default) never reclaimed session state:","display_reference":"CVE-2026-59951","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-84m7-p3x7-pcfv","source_title":"MCP Python SDK: Unbounded Session Accumulation in StreamableHTTP Transport Enables Resource Exhaustion","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-17T23:59:51.863Z","source_hash":"content-fingerprint:fnv1a-e42c4ec","affected_system":{"organization":"mcp project","product":"mcp","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Python"},"documented_facts":[{"id":"SEA-GHSA-84m7-p3x7-pcfv-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"MCP Python SDK: Unbounded Session Accumulation in StreamableHTTP Transport Enables Resource Exhaustion","source_quote_or_pointer":"Security Advisory GHSA-84m7-p3x7-pcfv","fact_id":"SEA-GHSA-84m7-p3x7-pcfv-F1","document_citation":"Security Advisory GHSA-84m7-p3x7-pcfv"},{"id":"SEA-GHSA-84m7-p3x7-pcfv-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"In affected versions, a Streamable HTTP server in stateful mode (the default) never reclaimed session state:","source_quote_or_pointer":"Advisory description (GHSA-84m7-p3x7-pcfv)","fact_id":"SEA-GHSA-84m7-p3x7-pcfv-F2","document_citation":"Advisory description (GHSA-84m7-p3x7-pcfv)"}],"source_stated_contributors":["In affected versions, a Streamable HTTP server in stateful mode (the default) never reclaimed session state:"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-006","SEA-FM-010"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-84m7-p3x7-pcfv","reporting_entity":"CVE-2026-59951","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-84m7-p3x7-pcfv-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-84m7-p3x7-pcfv-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-59951"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-f8ff-652m-j5rx","title":"YOURLS: Unauthenticated File Inclusion","display_title":"Security issue reported in yourls/yourls","display_summary":"YOURLS versions ≤1.10.4 contain an unauthenticated path traversal vulnerability that allows attackers to include and execute arbitrary PHP files on the server without any credentials.","display_reference":"CVE-2026-62858","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-f8ff-652m-j5rx","source_title":"YOURLS: Unauthenticated File Inclusion","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:44.215Z","source_hash":"content-fingerprint:fnv1a-f81444b6","affected_system":{"organization":"yourls/yourls project","product":"yourls/yourls","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"PHP"},"documented_facts":[{"id":"SEA-GHSA-f8ff-652m-j5rx-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"YOURLS: Unauthenticated File Inclusion","source_quote_or_pointer":"Security Advisory GHSA-f8ff-652m-j5rx","fact_id":"SEA-GHSA-f8ff-652m-j5rx-F1","document_citation":"Security Advisory GHSA-f8ff-652m-j5rx"},{"id":"SEA-GHSA-f8ff-652m-j5rx-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"YOURLS versions ≤1.10.4 contain an unauthenticated path traversal vulnerability that allows attackers to include and execute arbitrary PHP files on the server without any credentials.","source_quote_or_pointer":"Advisory description (GHSA-f8ff-652m-j5rx)","fact_id":"SEA-GHSA-f8ff-652m-j5rx-F2","document_citation":"Advisory description (GHSA-f8ff-652m-j5rx)"}],"source_stated_contributors":["YOURLS versions ≤1.10.4 contain an unauthenticated path traversal vulnerability that allows attackers to include and execute arbitrary PHP files on the server without any credentials."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.credentials_secrets"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Restricted file exposure","File overwrite"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-f8ff-652m-j5rx","reporting_entity":"CVE-2026-62858","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-f8ff-652m-j5rx-SG1","label":"Confine file access to a fixed root","description":"Resolve paths to canonical form and reject anything outside the intended directory before opening files.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-f8ff-652m-j5rx-SG1","label":"Confine file access to a fixed root","description":"Resolve paths to canonical form and reject anything outside the intended directory before opening files.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"File paths supplied by a caller escaped the intended directory. Canonicalise paths and confine file access to a fixed root.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-62858"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-44xr-mrhh-qm78","title":"Nginx UI: Casdoor SSO callback uses a constant state parameter (login CSRF)","display_title":"Security issue reported in Nginx-UI","display_summary":"In the Casdoor SSO flow, the OAuth state parameter is hard-coded to settings.CasdoorSettings.Application — a value identical for every user and every login.","display_reference":"CVE-2026-84312","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-44xr-mrhh-qm78","source_title":"Nginx UI: Casdoor SSO callback uses a constant state parameter (login CSRF)","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:44.215Z","source_hash":"content-fingerprint:fnv1a-c25799a1","affected_system":{"organization":"Nginx-UI project","product":"Nginx-UI","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Go"},"documented_facts":[{"id":"SEA-GHSA-44xr-mrhh-qm78-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Nginx UI: Casdoor SSO callback uses a constant state parameter (login CSRF)","source_quote_or_pointer":"Security Advisory GHSA-44xr-mrhh-qm78","fact_id":"SEA-GHSA-44xr-mrhh-qm78-F1","document_citation":"Security Advisory GHSA-44xr-mrhh-qm78"},{"id":"SEA-GHSA-44xr-mrhh-qm78-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"In the Casdoor SSO flow, the OAuth state parameter is hard-coded to settings.CasdoorSettings.Application — a value identical for every user and every login. The callback handler accepts whatever state the client sends without comparing it to anything stored in the user agent, enabling a login-CSRF: an attacker can…","source_quote_or_pointer":"Advisory description (GHSA-44xr-mrhh-qm78)","fact_id":"SEA-GHSA-44xr-mrhh-qm78-F2","document_citation":"Advisory description (GHSA-44xr-mrhh-qm78)"}],"source_stated_contributors":["In the Casdoor SSO flow, the OAuth state parameter is hard-coded to settings.CasdoorSettings.Application — a value identical for every user and every login. The callback handler accepts whatever state the client sends without comparing it to anything stored in the user agent, enabling a login-CSRF: an attacker can…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii","data.credentials_secrets","arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-010"],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-44xr-mrhh-qm78","reporting_entity":"CVE-2026-84312","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-44xr-mrhh-qm78-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-44xr-mrhh-qm78-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-84312"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-9jww-cxg5-rj9m","title":"Nginx UI: MCP nginx_config_add Bypasses Directive Validation — Authenticated RCE","display_title":"github.com/0xJacky/Nginx-UI issue could allow unintended commands to run","display_summary":"The MCP tool nginxconfigadd writes nginx configuration files to disk and triggers an nginx reload without calling config.ValidateConfigFile.","display_reference":"CVE-2026-84318","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-9jww-cxg5-rj9m","source_title":"Nginx UI: MCP nginx_config_add Bypasses Directive Validation — Authenticated RCE","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:44.215Z","source_hash":"content-fingerprint:fnv1a-90ca1919","affected_system":{"organization":"github.com/0xJacky/Nginx-UI project","product":"github.com/0xJacky/Nginx-UI","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Go"},"documented_facts":[{"id":"SEA-GHSA-9jww-cxg5-rj9m-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Nginx UI: MCP nginx_config_add Bypasses Directive Validation — Authenticated RCE","source_quote_or_pointer":"Security Advisory GHSA-9jww-cxg5-rj9m","fact_id":"SEA-GHSA-9jww-cxg5-rj9m-F1","document_citation":"Security Advisory GHSA-9jww-cxg5-rj9m"},{"id":"SEA-GHSA-9jww-cxg5-rj9m-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The MCP tool nginxconfigadd writes nginx configuration files to disk and triggers an nginx reload without calling config.ValidateConfigFile. The identical flow in the REST API (POST /api/configs) does call that function and correctly rejects dangerous directives.","source_quote_or_pointer":"Advisory description (GHSA-9jww-cxg5-rj9m)","fact_id":"SEA-GHSA-9jww-cxg5-rj9m-F2","document_citation":"Advisory description (GHSA-9jww-cxg5-rj9m)"}],"source_stated_contributors":["The MCP tool nginxconfigadd writes nginx configuration files to disk and triggers an nginx reload without calling config.ValidateConfigFile. The identical flow in the REST API (POST /api/configs) does call that function and correctly rejects dangerous directives."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-004","SEA-FM-002","SEA-FM-010"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-9jww-cxg5-rj9m","reporting_entity":"CVE-2026-84318","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-9jww-cxg5-rj9m-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-9jww-cxg5-rj9m-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-84318"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-76pm-mq2q-9gcr","title":"Nginx UI: MCP nginx_config_add skips config directive validation → authenticated nginx directive injection (RCE on the official image)","display_title":"github.com/0xJacky/Nginx-UI issue could allow unintended commands to run","display_summary":"internal/config/validation.go (ValidateConfigFile) is a security control that blocks dangerous","display_reference":"CVE-2026-84317","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-76pm-mq2q-9gcr","source_title":"Nginx UI: MCP nginx_config_add skips config directive validation → authenticated nginx directive injection (RCE on the official image)","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:44.216Z","source_hash":"content-fingerprint:fnv1a-7dc746d7","affected_system":{"organization":"github.com/0xJacky/Nginx-UI project","product":"github.com/0xJacky/Nginx-UI","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Go"},"documented_facts":[{"id":"SEA-GHSA-76pm-mq2q-9gcr-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Nginx UI: MCP nginx_config_add skips config directive validation → authenticated nginx directive injection (RCE on the official image)","source_quote_or_pointer":"Security Advisory GHSA-76pm-mq2q-9gcr","fact_id":"SEA-GHSA-76pm-mq2q-9gcr-F1","document_citation":"Security Advisory GHSA-76pm-mq2q-9gcr"},{"id":"SEA-GHSA-76pm-mq2q-9gcr-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"internal/config/validation.go (ValidateConfigFile) is a security control that blocks dangerous","source_quote_or_pointer":"Advisory description (GHSA-76pm-mq2q-9gcr)","fact_id":"SEA-GHSA-76pm-mq2q-9gcr-F2","document_citation":"Advisory description (GHSA-76pm-mq2q-9gcr)"}],"source_stated_contributors":["internal/config/validation.go (ValidateConfigFile) is a security control that blocks dangerous"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-004","SEA-FM-002","SEA-FM-010"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-76pm-mq2q-9gcr","reporting_entity":"CVE-2026-84317","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-76pm-mq2q-9gcr-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-76pm-mq2q-9gcr-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-84317"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-jrq7-xrjx-pcfw","title":"Nginx UI: Auto backup name allows path traversal outside validated storage path","display_title":"github.com/0xJacky/Nginx-UI issue could expose restricted files","display_summary":"Nginx UI validates backuppath and storagepath against the administrator-defined backup.GrantedAccessPath boundary, but the final auto-backup output filename is built from the user-controlled auto-backup name without…","display_reference":"CVE-2026-84320","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-jrq7-xrjx-pcfw","source_title":"Nginx UI: Auto backup name allows path traversal outside validated storage path","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:44.216Z","source_hash":"content-fingerprint:fnv1a-205fa1c5","affected_system":{"organization":"github.com/0xJacky/Nginx-UI project","product":"github.com/0xJacky/Nginx-UI","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Go"},"documented_facts":[{"id":"SEA-GHSA-jrq7-xrjx-pcfw-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Nginx UI: Auto backup name allows path traversal outside validated storage path","source_quote_or_pointer":"Security Advisory GHSA-jrq7-xrjx-pcfw","fact_id":"SEA-GHSA-jrq7-xrjx-pcfw-F1","document_citation":"Security Advisory GHSA-jrq7-xrjx-pcfw"},{"id":"SEA-GHSA-jrq7-xrjx-pcfw-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Nginx UI validates backuppath and storagepath against the administrator-defined backup.GrantedAccessPath boundary, but the final auto-backup output filename is built from the user-controlled auto-backup name without stripping path separators or .. components.","source_quote_or_pointer":"Advisory description (GHSA-jrq7-xrjx-pcfw)","fact_id":"SEA-GHSA-jrq7-xrjx-pcfw-F2","document_citation":"Advisory description (GHSA-jrq7-xrjx-pcfw)"}],"source_stated_contributors":["Nginx UI validates backuppath and storagepath against the administrator-defined backup.GrantedAccessPath boundary, but the final auto-backup output filename is built from the user-controlled auto-backup name without stripping path separators or .. components."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Restricted file exposure","File overwrite"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-jrq7-xrjx-pcfw","reporting_entity":"CVE-2026-84320","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-jrq7-xrjx-pcfw-SG1","label":"Confine file access to a fixed root","description":"Resolve paths to canonical form and reject anything outside the intended directory before opening files.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-jrq7-xrjx-pcfw-SG1","label":"Confine file access to a fixed root","description":"Resolve paths to canonical form and reject anything outside the intended directory before opening files.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"File paths supplied by a caller escaped the intended directory. Canonicalise paths and confine file access to a fixed root.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-84320"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-5r62-gj48-897x","title":"Nginx UI: MCP configuration tools bypass restricted directive validation and allow secondary authenticated users to execute NJS in Nginx worker context","display_title":"Security issue reported in github.com/0xJacky/Nginx-UI","display_summary":"The regular HTTP configuration API rejects restricted Nginx directives such as loadmodule, jsimport, and jscontent.","display_reference":"CVE-2026-84319","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-5r62-gj48-897x","source_title":"Nginx UI: MCP configuration tools bypass restricted directive validation and allow secondary authenticated users to execute NJS in Nginx worker context","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:44.216Z","source_hash":"content-fingerprint:fnv1a-c96efbeb","affected_system":{"organization":"github.com/0xJacky/Nginx-UI project","product":"github.com/0xJacky/Nginx-UI","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Go"},"documented_facts":[{"id":"SEA-GHSA-5r62-gj48-897x-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Nginx UI: MCP configuration tools bypass restricted directive validation and allow secondary authenticated users to execute NJS in Nginx worker context","source_quote_or_pointer":"Security Advisory GHSA-5r62-gj48-897x","fact_id":"SEA-GHSA-5r62-gj48-897x-F1","document_citation":"Security Advisory GHSA-5r62-gj48-897x"},{"id":"SEA-GHSA-5r62-gj48-897x-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The regular HTTP configuration API rejects restricted Nginx directives such as loadmodule, jsimport, and jscontent.","source_quote_or_pointer":"Advisory description (GHSA-5r62-gj48-897x)","fact_id":"SEA-GHSA-5r62-gj48-897x-F2","document_citation":"Advisory description (GHSA-5r62-gj48-897x)"}],"source_stated_contributors":["The regular HTTP configuration API rejects restricted Nginx directives such as loadmodule, jsimport, and jscontent."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","arch.async_job","arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-010"],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-5r62-gj48-897x","reporting_entity":"CVE-2026-84319","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-5r62-gj48-897x-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-5r62-gj48-897x-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-84319"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-g4f2-2pf3-2pwj","title":"react/http: Unbounded HTTP Client Response Header Buffering Leads to Memory Exhaustion DoS","display_title":"react/http issue could make the service unavailable","display_summary":"React\\Http\\Browser and its lower-level HTTP stack impose no limit on the size of a response's header section while it is being received.","display_reference":"CVE-2026-104827","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-g4f2-2pf3-2pwj","source_title":"react/http: Unbounded HTTP Client Response Header Buffering Leads to Memory Exhaustion DoS","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:44.217Z","source_hash":"content-fingerprint:fnv1a-e23f04c","affected_system":{"organization":"react/http project","product":"react/http","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"PHP"},"documented_facts":[{"id":"SEA-GHSA-g4f2-2pf3-2pwj-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"react/http: Unbounded HTTP Client Response Header Buffering Leads to Memory Exhaustion DoS","source_quote_or_pointer":"Security Advisory GHSA-g4f2-2pf3-2pwj","fact_id":"SEA-GHSA-g4f2-2pf3-2pwj-F1","document_citation":"Security Advisory GHSA-g4f2-2pf3-2pwj"},{"id":"SEA-GHSA-g4f2-2pf3-2pwj-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"React\\Http\\Browser and its lower-level HTTP stack impose no limit on the size of a response's header section while it is being received. ClientRequestStream::handleData() appends every incoming byte to an internal buffer and only scans that buffer for the \\r\\n\\r\\n (or \\n\\n) terminator, without ever checking its…","source_quote_or_pointer":"Advisory description (GHSA-g4f2-2pf3-2pwj)","fact_id":"SEA-GHSA-g4f2-2pf3-2pwj-F2","document_citation":"Advisory description (GHSA-g4f2-2pf3-2pwj)"}],"source_stated_contributors":["React\\Http\\Browser and its lower-level HTTP stack impose no limit on the size of a response's header section while it is being received. ClientRequestStream::handleData() appends every incoming byte to an internal buffer and only scans that buffer for the \\r\\n\\r\\n (or \\n\\n) terminator, without ever checking its…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","data.untrusted_external_text","arch.external_api"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-g4f2-2pf3-2pwj","reporting_entity":"CVE-2026-104827","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-g4f2-2pf3-2pwj-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-g4f2-2pf3-2pwj-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-104827"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-h9h9-2rmf-rvhp","title":"Junrar: RarVM VM_JMP maxOpCount bypass causes infinite CPU loop during RAR4 extraction","display_title":"Security issue reported in com.github.junrar:junrar","display_summary":"Junrar's RAR virtual machine can be forced into a deterministic infinite loop while extracting a crafted RAR4 archive. The RarVM.ExecuteCode loop is intended to be bounded by maxOpCount, but jump instructions can bypass…","display_reference":"CVE-2026-97370","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-h9h9-2rmf-rvhp","source_title":"Junrar: RarVM VM_JMP maxOpCount bypass causes infinite CPU loop during RAR4 extraction","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:44.217Z","source_hash":"content-fingerprint:fnv1a-60ea58a2","affected_system":{"organization":"com.github.junrar:junrar project","product":"com.github.junrar:junrar","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Java"},"documented_facts":[{"id":"SEA-GHSA-h9h9-2rmf-rvhp-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Junrar: RarVM VM_JMP maxOpCount bypass causes infinite CPU loop during RAR4 extraction","source_quote_or_pointer":"Security Advisory GHSA-h9h9-2rmf-rvhp","fact_id":"SEA-GHSA-h9h9-2rmf-rvhp-F1","document_citation":"Security Advisory GHSA-h9h9-2rmf-rvhp"},{"id":"SEA-GHSA-h9h9-2rmf-rvhp-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Junrar's RAR virtual machine can be forced into a deterministic infinite loop while extracting a crafted RAR4 archive. The RarVM.ExecuteCode loop is intended to be bounded by maxOpCount, but jump instructions can bypass this limit when setIP() is called with a target instruction pointer greater than or equal to…","source_quote_or_pointer":"Advisory description (GHSA-h9h9-2rmf-rvhp)","fact_id":"SEA-GHSA-h9h9-2rmf-rvhp-F2","document_citation":"Advisory description (GHSA-h9h9-2rmf-rvhp)"}],"source_stated_contributors":["Junrar's RAR virtual machine can be forced into a deterministic infinite loop while extracting a crafted RAR4 archive. The RarVM.ExecuteCode loop is intended to be bounded by maxOpCount, but jump instructions can bypass this limit when setIP() is called with a target instruction pointer greater than or equal to…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-h9h9-2rmf-rvhp","reporting_entity":"CVE-2026-97370","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-h9h9-2rmf-rvhp-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-h9h9-2rmf-rvhp-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-97370"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-663m-7x7m-g4fw","title":"Sliver: Unauthenticated Memory Exhaustion Denial of Service in Sliver HTTP(S) Listener PNG Decoder","display_title":"github.com/BishopFox/sliver issue could make the service unavailable","display_summary":"Sliver is vulnerable to a Denial of Service (DOS) attack because there is no cap in the size of a PNG file that can be sent to an open http listener and there is a small amount of possible nonces.","display_reference":"CVE-2026-77622","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-663m-7x7m-g4fw","source_title":"Sliver: Unauthenticated Memory Exhaustion Denial of Service in Sliver HTTP(S) Listener PNG Decoder","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:44.218Z","source_hash":"content-fingerprint:fnv1a-d59c4322","affected_system":{"organization":"github.com/BishopFox/sliver project","product":"github.com/BishopFox/sliver","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Go"},"documented_facts":[{"id":"SEA-GHSA-663m-7x7m-g4fw-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Sliver: Unauthenticated Memory Exhaustion Denial of Service in Sliver HTTP(S) Listener PNG Decoder","source_quote_or_pointer":"Security Advisory GHSA-663m-7x7m-g4fw","fact_id":"SEA-GHSA-663m-7x7m-g4fw-F1","document_citation":"Security Advisory GHSA-663m-7x7m-g4fw"},{"id":"SEA-GHSA-663m-7x7m-g4fw-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Sliver is vulnerable to a Denial of Service (DOS) attack because there is no cap in the size of a PNG file that can be sent to an open http listener and there is a small amount of possible nonces.","source_quote_or_pointer":"Advisory description (GHSA-663m-7x7m-g4fw)","fact_id":"SEA-GHSA-663m-7x7m-g4fw-F2","document_citation":"Advisory description (GHSA-663m-7x7m-g4fw)"}],"source_stated_contributors":["Sliver is vulnerable to a Denial of Service (DOS) attack because there is no cap in the size of a PNG file that can be sent to an open http listener and there is a small amount of possible nonces."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-663m-7x7m-g4fw","reporting_entity":"CVE-2026-77622","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-663m-7x7m-g4fw-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-663m-7x7m-g4fw-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-77622"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-526j-582w-7fm9","title":"Python Social Auth: Login CSRF in LINE backend (LineOAuth2) — missing OAuth state validation (incomplete fix of 5.0.0 campaign)","display_title":"Security issue reported in social-auth-core","display_summary":"Applications using the LINE Login backend are vulnerable to login CSRF / forced authentication. An attacker can start a LINE authorization flow for an account they control and trick a victim into visiting the callback…","display_reference":"CVE-2026-62322","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-526j-582w-7fm9","source_title":"Python Social Auth: Login CSRF in LINE backend (LineOAuth2) — missing OAuth state validation (incomplete fix of 5.0.0 campaign)","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:44.218Z","source_hash":"content-fingerprint:fnv1a-af7b8701","affected_system":{"organization":"social-auth-core project","product":"social-auth-core","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Python"},"documented_facts":[{"id":"SEA-GHSA-526j-582w-7fm9-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Python Social Auth: Login CSRF in LINE backend (LineOAuth2) — missing OAuth state validation (incomplete fix of 5.0.0 campaign)","source_quote_or_pointer":"Security Advisory GHSA-526j-582w-7fm9","fact_id":"SEA-GHSA-526j-582w-7fm9-F1","document_citation":"Security Advisory GHSA-526j-582w-7fm9"},{"id":"SEA-GHSA-526j-582w-7fm9-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Applications using the LINE Login backend are vulnerable to login CSRF / forced authentication. An attacker can start a LINE authorization flow for an account they control and trick a victim into visiting the callback URL with the attacker’s authorization code.","source_quote_or_pointer":"Advisory description (GHSA-526j-582w-7fm9)","fact_id":"SEA-GHSA-526j-582w-7fm9-F2","document_citation":"Advisory description (GHSA-526j-582w-7fm9)"}],"source_stated_contributors":["Applications using the LINE Login backend are vulnerable to login CSRF / forced authentication. An attacker can start a LINE authorization flow for an account they control and trick a victim into visiting the callback URL with the attacker’s authorization code."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.credentials_secrets"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-526j-582w-7fm9","reporting_entity":"CVE-2026-62322","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-526j-582w-7fm9-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-526j-582w-7fm9-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-62322"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-qhrr-8q5h-9q3h","title":"MessagePack: Nested arrays can blow past buffer length limits","display_title":"Security issue reported in MessagePack","display_summary":"MessagePack-CSharp is vulnerable to denial of service through excessive memory allocation when deserializing attacker-controlled data into System.Object.","display_reference":"CVE-2026-92707","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-qhrr-8q5h-9q3h","source_title":"MessagePack: Nested arrays can blow past buffer length limits","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:44.218Z","source_hash":"content-fingerprint:fnv1a-cad84187","affected_system":{"organization":"MessagePack project","product":"MessagePack","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"C# / .NET"},"documented_facts":[{"id":"SEA-GHSA-qhrr-8q5h-9q3h-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"MessagePack: Nested arrays can blow past buffer length limits","source_quote_or_pointer":"Security Advisory GHSA-qhrr-8q5h-9q3h","fact_id":"SEA-GHSA-qhrr-8q5h-9q3h-F1","document_citation":"Security Advisory GHSA-qhrr-8q5h-9q3h"},{"id":"SEA-GHSA-qhrr-8q5h-9q3h-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"MessagePack-CSharp is vulnerable to denial of service through excessive memory allocation when deserializing attacker-controlled data into System.Object.","source_quote_or_pointer":"Advisory description (GHSA-qhrr-8q5h-9q3h)","fact_id":"SEA-GHSA-qhrr-8q5h-9q3h-F2","document_citation":"Advisory description (GHSA-qhrr-8q5h-9q3h)"}],"source_stated_contributors":["MessagePack-CSharp is vulnerable to denial of service through excessive memory allocation when deserializing attacker-controlled data into System.Object."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-qhrr-8q5h-9q3h","reporting_entity":"CVE-2026-92707","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-qhrr-8q5h-9q3h-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-qhrr-8q5h-9q3h-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-92707"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-4fjg-2h4q-fwg3","title":"GitHub CLI allows path traversal through unescaped request URL components","display_title":"github.com/cli/cli/v2 issue could expose restricted files","display_summary":"A path traversal vulnerability has been identified in the GitHub CLI where some HTTP request URLs, REST API calls in particular, were built without properly escaping their variable path components.","display_reference":"CVE-2026-64653","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-4fjg-2h4q-fwg3","source_title":"GitHub CLI allows path traversal through unescaped request URL components","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T18:14:25.696Z","source_hash":"content-fingerprint:fnv1a-93cad14a","affected_system":{"organization":"github.com/cli/cli/v2 project","product":"github.com/cli/cli/v2","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Go"},"documented_facts":[{"id":"SEA-GHSA-4fjg-2h4q-fwg3-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"GitHub CLI allows path traversal through unescaped request URL components","source_quote_or_pointer":"Security Advisory GHSA-4fjg-2h4q-fwg3","fact_id":"SEA-GHSA-4fjg-2h4q-fwg3-F1","document_citation":"Security Advisory GHSA-4fjg-2h4q-fwg3"},{"id":"SEA-GHSA-4fjg-2h4q-fwg3-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A path traversal vulnerability has been identified in the GitHub CLI where some HTTP request URLs, REST API calls in particular, were built without properly escaping their variable path components.","source_quote_or_pointer":"Advisory description (GHSA-4fjg-2h4q-fwg3)","fact_id":"SEA-GHSA-4fjg-2h4q-fwg3-F2","document_citation":"Advisory description (GHSA-4fjg-2h4q-fwg3)"}],"source_stated_contributors":["A path traversal vulnerability has been identified in the GitHub CLI where some HTTP request URLs, REST API calls in particular, were built without properly escaping their variable path components."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Restricted file exposure","File overwrite"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-4fjg-2h4q-fwg3","reporting_entity":"CVE-2026-64653","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-4fjg-2h4q-fwg3-SG1","label":"Confine file access to a fixed root","description":"Resolve paths to canonical form and reject anything outside the intended directory before opening files.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-4fjg-2h4q-fwg3-SG1","label":"Confine file access to a fixed root","description":"Resolve paths to canonical form and reject anything outside the intended directory before opening files.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"File paths supplied by a caller escaped the intended directory. Canonicalise paths and confine file access to a fixed root.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-64653"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-cg6r-mpgc-h9mm","title":"GitHub CLI partially discloses authentication tokens in gh auth status output","display_title":"Security issue reported in github.com/cli/cli/v2","display_summary":"A security vulnerability has been identified in GitHub CLI where gh auth status could potentially print a portion of the authentication token in plaintext, depending on the lexical structure of the token.","display_reference":"CVE-2026-64652","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-cg6r-mpgc-h9mm","source_title":"GitHub CLI partially discloses authentication tokens in gh auth status output","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T18:14:25.700Z","source_hash":"content-fingerprint:fnv1a-a8118e49","affected_system":{"organization":"github.com/cli/cli/v2 project","product":"github.com/cli/cli/v2","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Go"},"documented_facts":[{"id":"SEA-GHSA-cg6r-mpgc-h9mm-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"GitHub CLI partially discloses authentication tokens in gh auth status output","source_quote_or_pointer":"Security Advisory GHSA-cg6r-mpgc-h9mm","fact_id":"SEA-GHSA-cg6r-mpgc-h9mm-F1","document_citation":"Security Advisory GHSA-cg6r-mpgc-h9mm"},{"id":"SEA-GHSA-cg6r-mpgc-h9mm-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A security vulnerability has been identified in GitHub CLI where gh auth status could potentially print a portion of the authentication token in plaintext, depending on the lexical structure of the token.","source_quote_or_pointer":"Advisory description (GHSA-cg6r-mpgc-h9mm)","fact_id":"SEA-GHSA-cg6r-mpgc-h9mm-F2","document_citation":"Advisory description (GHSA-cg6r-mpgc-h9mm)"}],"source_stated_contributors":["A security vulnerability has been identified in GitHub CLI where gh auth status could potentially print a portion of the authentication token in plaintext, depending on the lexical structure of the token."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-cg6r-mpgc-h9mm","reporting_entity":"CVE-2026-64652","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-cg6r-mpgc-h9mm-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-cg6r-mpgc-h9mm-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-64652"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109869","title":"undici is an HTTP client library for Node.js. In versions 6.23.0 through 6.29.0, 7.18.0 through 7.30.0, and 8.0.0 through 8.12.1, its fetch() implementation crashes the Node.js process when a malicious server returns a response with more than five content codings and closes the connection before sending the body. undici rejects such responses because of a content-encoding limit, but it created the internal response stream before that check and returned without attaching an error listener or aborting the request, so the early close surfaces a content-length mismatch on the orphaned stream, which Node.js treats as an unhandled error and terminates the process. A remote, unauthenticated server can trigger this with a single response, even when the application correctly catches the fetch() rejection, resulting in a denial of service. The issue is fixed in undici 6.29.1, 7.30.1, and 8.12.2, and users should upgrade to one of those versions or later. There is no workaround.","display_title":"Software component issue could make the service unavailable","display_summary":"undici is an HTTP client library for Node.js. In versions 6.23.0 through 6.29.0, 7.18.0 through 7.30.0, and 8.0.0 through 8.12.1, its fetch() implementation crashes the Node.js process when a malicious server returns a…","display_reference":"CVE-2026-109869","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109869","source_title":"undici is an HTTP client library for Node.js. In versions 6.23.0 through 6.29.0, 7.18.0 through 7.30.0, and 8.0.0 through 8.12.1, its fetch() implementation crashes the Node.js process when a malicious server returns a response with more than five content codings and closes the connection before sending the body. undici rejects such responses because of a content-encoding limit, but it created the internal response stream before that check and returned without attaching an error listener or aborting the request, so the early close surfaces a content-length mismatch on the orphaned stream, which Node.js treats as an unhandled error and terminates the process. A remote, unauthenticated server can trigger this with a single response, even when the application correctly catches the fetch() rejection, resulting in a denial of service. The issue is fixed in undici 6.29.1, 7.30.1, and 8.12.2, and users should upgrade to one of those versions or later. There is no workaround.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-17T00:24:19.369Z","source_hash":"content-fingerprint:fnv1a-73ab362a","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109869-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"undici is an HTTP client library for Node.js. In versions 6.23.0 through 6.29.0, 7.18.0 through 7.30.0, and 8.0.0 through 8.12.1, its fetch() implementation crashes the Node.js process when a malicious server returns a response with more than five content codings and closes the connection before sending the body. undici rejects such responses because of a content-encoding limit, but it created the internal response stream before that check and returned without attaching an error listener or aborting the request, so the early close surfaces a content-length mismatch on the orphaned stream, which Node.js treats as an unhandled error and terminates the process. A remote, unauthenticated server can trigger this with a single response, even when the application correctly catches the fetch() rejection, resulting in a denial of service. The issue is fixed in undici 6.29.1, 7.30.1, and 8.12.2, and users should upgrade to one of those versions or later. There is no workaround.","source_quote_or_pointer":"Security Advisory CVE-2026-109869","fact_id":"SEA-CVE-2026-109869-F1","document_citation":"Security Advisory CVE-2026-109869"},{"id":"SEA-CVE-2026-109869-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"undici is an HTTP client library for Node.js. In versions 6.23.0 through 6.29.0, 7.18.0 through 7.30.0, and 8.0.0 through 8.12.1, its fetch() implementation crashes the Node.js process when a malicious server returns a response with more than five content codings and closes the connection before sending the body.","source_quote_or_pointer":"Advisory description (CVE-2026-109869)","fact_id":"SEA-CVE-2026-109869-F2","document_citation":"Advisory description (CVE-2026-109869)"}],"source_stated_contributors":["undici is an HTTP client library for Node.js. In versions 6.23.0 through 6.29.0, 7.18.0 through 7.30.0, and 8.0.0 through 8.12.1, its fetch() implementation crashes the Node.js process when a malicious server returns a response with more than five content codings and closes the connection before sending the body."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","data.pii","arch.external_api","arch.async_job","arch.event_driven"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109869","reporting_entity":"CVE-2026-109869","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109869-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109869-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-109869"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109841","title":"undici is an HTTP client library for Node.js. In versions 7.15.0 through 7.30.0 and 8.0.0 through 8.12.1, its fetch() implementation verifies Subresource Integrity metadata by matching the algorithm token against a lowercase-only set, even though the SRI specification defines the token by its ASCII-lowercase form, so a valid but non-lowercase token such as an uppercase or mixed-case SHA256 is treated as unknown and skipped. When no recognized algorithm remains, undici treats the integrity list as empty and accepts the response, so a server returning a body that does not match the pinned digest passes the check. An attacker who controls only the response body can therefore deliver attacker-controlled bytes to an application that pinned a valid uppercase or mixed-case SRI token, with no integrity error, affecting response integrity only. The issue is fixed in undici 7.30.1 and 8.12.2, which normalize the algorithm token to ASCII lowercase before validation, and users should upgrade to one of those versions or later. As a workaround, use lowercase algorithm tokens such as sha256, sha384, or sha512 in integrity metadata.","display_title":"Security issue reported in Software component","display_summary":"undici is an HTTP client library for Node.js. In versions 7.15.0 through 7.30.0 and 8.0.0 through 8.12.1, its fetch() implementation verifies Subresource Integrity metadata by matching the algorithm token against a…","display_reference":"CVE-2026-109841","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109841","source_title":"undici is an HTTP client library for Node.js. In versions 7.15.0 through 7.30.0 and 8.0.0 through 8.12.1, its fetch() implementation verifies Subresource Integrity metadata by matching the algorithm token against a lowercase-only set, even though the SRI specification defines the token by its ASCII-lowercase form, so a valid but non-lowercase token such as an uppercase or mixed-case SHA256 is treated as unknown and skipped. When no recognized algorithm remains, undici treats the integrity list as empty and accepts the response, so a server returning a body that does not match the pinned digest passes the check. An attacker who controls only the response body can therefore deliver attacker-controlled bytes to an application that pinned a valid uppercase or mixed-case SRI token, with no integrity error, affecting response integrity only. The issue is fixed in undici 7.30.1 and 8.12.2, which normalize the algorithm token to ASCII lowercase before validation, and users should upgrade to one of those versions or later. As a workaround, use lowercase algorithm tokens such as sha256, sha384, or sha512 in integrity metadata.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-17T00:24:19.370Z","source_hash":"content-fingerprint:fnv1a-85f1f0a6","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109841-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"undici is an HTTP client library for Node.js. In versions 7.15.0 through 7.30.0 and 8.0.0 through 8.12.1, its fetch() implementation verifies Subresource Integrity metadata by matching the algorithm token against a lowercase-only set, even though the SRI specification defines the token by its ASCII-lowercase form, so a valid but non-lowercase token such as an uppercase or mixed-case SHA256 is treated as unknown and skipped. When no recognized algorithm remains, undici treats the integrity list as empty and accepts the response, so a server returning a body that does not match the pinned digest passes the check. An attacker who controls only the response body can therefore deliver attacker-controlled bytes to an application that pinned a valid uppercase or mixed-case SRI token, with no integrity error, affecting response integrity only. The issue is fixed in undici 7.30.1 and 8.12.2, which normalize the algorithm token to ASCII lowercase before validation, and users should upgrade to one of those versions or later. As a workaround, use lowercase algorithm tokens such as sha256, sha384, or sha512 in integrity metadata.","source_quote_or_pointer":"Security Advisory CVE-2026-109841","fact_id":"SEA-CVE-2026-109841-F1","document_citation":"Security Advisory CVE-2026-109841"},{"id":"SEA-CVE-2026-109841-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"undici is an HTTP client library for Node.js. In versions 7.15.0 through 7.30.0 and 8.0.0 through 8.12.1, its fetch() implementation verifies Subresource Integrity metadata by matching the algorithm token against a lowercase-only set, even though the SRI specification defines the token by its ASCII-lowercase form, so…","source_quote_or_pointer":"Advisory description (CVE-2026-109841)","fact_id":"SEA-CVE-2026-109841-F2","document_citation":"Advisory description (CVE-2026-109841)"}],"source_stated_contributors":["undici is an HTTP client library for Node.js. In versions 7.15.0 through 7.30.0 and 8.0.0 through 8.12.1, its fetch() implementation verifies Subresource Integrity metadata by matching the algorithm token against a lowercase-only set, even though the SRI specification defines the token by its ASCII-lowercase form, so…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","arch.external_api"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109841","reporting_entity":"CVE-2026-109841","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109841-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109841-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-109841"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109829","title":"undici is an HTTP client library for Node.js. In versions 7.0.0 through 7.30.0 and 8.0.0 through 8.12.1, when an originless Agent composes the redirect and cache interceptors in that order with a shared cache store, the cache builds its key from the original request URL before the redirect handler changes the origin, so a response produced after a cross-origin redirect is stored under the original key. An attacker who controls the target of a redirect from a trusted URL can have their response cached under that trusted URL and served to later callers, allowing persistent cache poisoning, and the same key confusion lets a private, non-stored redirect response to a user-specific resource be stored under the original URL and served to a later unauthenticated caller, disclosing private data. Applications are affected only when an originless Agent, a shared cache store, and the redirect-then-cache composition are all used. The issue is fixed in undici 7.30.1 and 8.12.2, which verify the producing origin still matches the cache key and preserve each redirect hop's cache-control policy before storing, and users should upgrade to one of those versions or later. As a workaround, compose the cache interceptor before the redirect interceptor, use per-origin dispatchers and cache stores, or disable shared caching on redirect-capable requests.","display_title":"Security issue reported in Software component","display_summary":"undici is an HTTP client library for Node.js. In versions 7.0.0 through 7.30.0 and 8.0.0 through 8.12.1, when an originless Agent composes the redirect and cache interceptors in that order with a shared cache store, the…","display_reference":"CVE-2026-109829","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109829","source_title":"undici is an HTTP client library for Node.js. In versions 7.0.0 through 7.30.0 and 8.0.0 through 8.12.1, when an originless Agent composes the redirect and cache interceptors in that order with a shared cache store, the cache builds its key from the original request URL before the redirect handler changes the origin, so a response produced after a cross-origin redirect is stored under the original key. An attacker who controls the target of a redirect from a trusted URL can have their response cached under that trusted URL and served to later callers, allowing persistent cache poisoning, and the same key confusion lets a private, non-stored redirect response to a user-specific resource be stored under the original URL and served to a later unauthenticated caller, disclosing private data. Applications are affected only when an originless Agent, a shared cache store, and the redirect-then-cache composition are all used. The issue is fixed in undici 7.30.1 and 8.12.2, which verify the producing origin still matches the cache key and preserve each redirect hop's cache-control policy before storing, and users should upgrade to one of those versions or later. As a workaround, compose the cache interceptor before the redirect interceptor, use per-origin dispatchers and cache stores, or disable shared caching on redirect-capable requests.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-17T00:24:19.371Z","source_hash":"content-fingerprint:fnv1a-93da5ce0","affected_system":{"organization":"Software component project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109829-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"undici is an HTTP client library for Node.js. In versions 7.0.0 through 7.30.0 and 8.0.0 through 8.12.1, when an originless Agent composes the redirect and cache interceptors in that order with a shared cache store, the cache builds its key from the original request URL before the redirect handler changes the origin, so a response produced after a cross-origin redirect is stored under the original key. An attacker who controls the target of a redirect from a trusted URL can have their response cached under that trusted URL and served to later callers, allowing persistent cache poisoning, and the same key confusion lets a private, non-stored redirect response to a user-specific resource be stored under the original URL and served to a later unauthenticated caller, disclosing private data. Applications are affected only when an originless Agent, a shared cache store, and the redirect-then-cache composition are all used. The issue is fixed in undici 7.30.1 and 8.12.2, which verify the producing origin still matches the cache key and preserve each redirect hop's cache-control policy before storing, and users should upgrade to one of those versions or later. As a workaround, compose the cache interceptor before the redirect interceptor, use per-origin dispatchers and cache stores, or disable shared caching on redirect-capable requests.","source_quote_or_pointer":"Security Advisory CVE-2026-109829","fact_id":"SEA-CVE-2026-109829-F1","document_citation":"Security Advisory CVE-2026-109829"},{"id":"SEA-CVE-2026-109829-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"undici is an HTTP client library for Node.js. In versions 7.0.0 through 7.30.0 and 8.0.0 through 8.12.1, when an originless Agent composes the redirect and cache interceptors in that order with a shared cache store, the cache builds its key from the original request URL before the redirect handler changes the origin,…","source_quote_or_pointer":"Advisory description (CVE-2026-109829)","fact_id":"SEA-CVE-2026-109829-F2","document_citation":"Advisory description (CVE-2026-109829)"}],"source_stated_contributors":["undici is an HTTP client library for Node.js. In versions 7.0.0 through 7.30.0 and 8.0.0 through 8.12.1, when an originless Agent composes the redirect and cache interceptors in that order with a shared cache store, the cache builds its key from the original request URL before the redirect handler changes the origin,…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.pii","arch.caching","arch.external_api","arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-010"],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109829","reporting_entity":"CVE-2026-109829","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109829-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109829-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-109829"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109383","title":"undici is an HTTP client library for Node.js. In versions 4.0.0 through 6.29.0, 7.0.0 through 7.30.0, and 8.0.0 through 8.12.1, its Agent dispatcher passes its constructor options through a JSON-based deep clone before forwarding them to each per-origin pool, and because JSON cannot represent functions, a caller-supplied tls option containing a checkServerIdentity callback is silently dropped before it reaches the TLS layer. As a result, a TLS peer whose certificate a custom checkServerIdentity was written to reject, but which passes Node's default hostname and chain checks, is silently accepted. Because Agent is the default dispatcher behind request, fetch, and setGlobalDispatcher, this affects the path most applications use, and EnvHttpProxyAgent is affected on its direct and no-proxy routes as well, while only applications that pass a function-valued tls option such as a custom checkServerIdentity for certificate or public-key pinning are at risk. The issue is fixed in undici 6.29.1, 7.30.1, and 8.12.2, which preserve the tls option outside the JSON clone so custom verification callbacks are forwarded unchanged, and users should upgrade to one of those versions or later. As a workaround, pass the TLS options through connect instead of tls, or for proxied destinations use requestTls and proxyTls.","display_title":"Security issue reported in Software component","display_summary":"undici is an HTTP client library for Node.js. In versions 4.0.0 through 6.29.0, 7.0.0 through 7.30.0, and 8.0.0 through 8.12.1, its Agent dispatcher passes its constructor options through a JSON-based deep clone before…","display_reference":"CVE-2026-109383","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109383","source_title":"undici is an HTTP client library for Node.js. In versions 4.0.0 through 6.29.0, 7.0.0 through 7.30.0, and 8.0.0 through 8.12.1, its Agent dispatcher passes its constructor options through a JSON-based deep clone before forwarding them to each per-origin pool, and because JSON cannot represent functions, a caller-supplied tls option containing a checkServerIdentity callback is silently dropped before it reaches the TLS layer. As a result, a TLS peer whose certificate a custom checkServerIdentity was written to reject, but which passes Node's default hostname and chain checks, is silently accepted. Because Agent is the default dispatcher behind request, fetch, and setGlobalDispatcher, this affects the path most applications use, and EnvHttpProxyAgent is affected on its direct and no-proxy routes as well, while only applications that pass a function-valued tls option such as a custom checkServerIdentity for certificate or public-key pinning are at risk. The issue is fixed in undici 6.29.1, 7.30.1, and 8.12.2, which preserve the tls option outside the JSON clone so custom verification callbacks are forwarded unchanged, and users should upgrade to one of those versions or later. As a workaround, pass the TLS options through connect instead of tls, or for proxied destinations use requestTls and proxyTls.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-17T00:24:19.371Z","source_hash":"content-fingerprint:fnv1a-fd2ca58b","affected_system":{"organization":"Software component project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109383-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"undici is an HTTP client library for Node.js. In versions 4.0.0 through 6.29.0, 7.0.0 through 7.30.0, and 8.0.0 through 8.12.1, its Agent dispatcher passes its constructor options through a JSON-based deep clone before forwarding them to each per-origin pool, and because JSON cannot represent functions, a caller-supplied tls option containing a checkServerIdentity callback is silently dropped before it reaches the TLS layer. As a result, a TLS peer whose certificate a custom checkServerIdentity was written to reject, but which passes Node's default hostname and chain checks, is silently accepted. Because Agent is the default dispatcher behind request, fetch, and setGlobalDispatcher, this affects the path most applications use, and EnvHttpProxyAgent is affected on its direct and no-proxy routes as well, while only applications that pass a function-valued tls option such as a custom checkServerIdentity for certificate or public-key pinning are at risk. The issue is fixed in undici 6.29.1, 7.30.1, and 8.12.2, which preserve the tls option outside the JSON clone so custom verification callbacks are forwarded unchanged, and users should upgrade to one of those versions or later. As a workaround, pass the TLS options through connect instead of tls, or for proxied destinations use requestTls and proxyTls.","source_quote_or_pointer":"Security Advisory CVE-2026-109383","fact_id":"SEA-CVE-2026-109383-F1","document_citation":"Security Advisory CVE-2026-109383"},{"id":"SEA-CVE-2026-109383-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"undici is an HTTP client library for Node.js. In versions 4.0.0 through 6.29.0, 7.0.0 through 7.30.0, and 8.0.0 through 8.12.1, its Agent dispatcher passes its constructor options through a JSON-based deep clone before forwarding them to each per-origin pool, and because JSON cannot represent functions, a…","source_quote_or_pointer":"Advisory description (CVE-2026-109383)","fact_id":"SEA-CVE-2026-109383-F2","document_citation":"Advisory description (CVE-2026-109383)"}],"source_stated_contributors":["undici is an HTTP client library for Node.js. In versions 4.0.0 through 6.29.0, 7.0.0 through 7.30.0, and 8.0.0 through 8.12.1, its Agent dispatcher passes its constructor options through a JSON-based deep clone before forwarding them to each per-origin pool, and because JSON cannot represent functions, a…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.public_publication","data.pii","arch.external_api","arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-010"],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109383","reporting_entity":"CVE-2026-109383","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109383-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109383-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-109383"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-102631","title":"In authd before 0.7.1, the user identity matching in UpdateUser (internal/users/manager.go) resolves an incoming login by the broker-scoped provider ID, but falls back to matching the username when the provider ID does not belong to any known user, and does not reject a conflicting non-empty provider ID. If an identity provider reassigns an email address, which authd uses as the username, to a new account, the new account inherits the previous user's local UID and home directory on its next login. This allows the new user to access and modify files belonging to the previous user, including credentials such as SSH keys and cloud API tokens, and silently rebinds the local account record to the new identity. As a mitigation, administrators should lock or delete the previous user's local authd account when the corresponding IdP account is removed.","display_title":"Software component issue could expose accounts or credentials","display_summary":"In authd before 0.7.1, the user identity matching in UpdateUser (internal/users/manager.go) resolves an incoming login by the broker-scoped provider ID, but falls back to matching the username when the provider ID does…","display_reference":"CVE-2026-102631","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-102631","source_title":"In authd before 0.7.1, the user identity matching in UpdateUser (internal/users/manager.go) resolves an incoming login by the broker-scoped provider ID, but falls back to matching the username when the provider ID does not belong to any known user, and does not reject a conflicting non-empty provider ID. If an identity provider reassigns an email address, which authd uses as the username, to a new account, the new account inherits the previous user's local UID and home directory on its next login. This allows the new user to access and modify files belonging to the previous user, including credentials such as SSH keys and cloud API tokens, and silently rebinds the local account record to the new identity. As a mitigation, administrators should lock or delete the previous user's local authd account when the corresponding IdP account is removed.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-17T00:24:19.374Z","source_hash":"content-fingerprint:fnv1a-640d562a","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Cloud & container infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-102631-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"In authd before 0.7.1, the user identity matching in UpdateUser (internal/users/manager.go) resolves an incoming login by the broker-scoped provider ID, but falls back to matching the username when the provider ID does not belong to any known user, and does not reject a conflicting non-empty provider ID. If an identity provider reassigns an email address, which authd uses as the username, to a new account, the new account inherits the previous user's local UID and home directory on its next login. This allows the new user to access and modify files belonging to the previous user, including credentials such as SSH keys and cloud API tokens, and silently rebinds the local account record to the new identity. As a mitigation, administrators should lock or delete the previous user's local authd account when the corresponding IdP account is removed.","source_quote_or_pointer":"Security Advisory CVE-2026-102631","fact_id":"SEA-CVE-2026-102631-F1","document_citation":"Security Advisory CVE-2026-102631"},{"id":"SEA-CVE-2026-102631-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"In authd before 0.7.1, the user identity matching in UpdateUser (internal/users/manager.go) resolves an incoming login by the broker-scoped provider ID, but falls back to matching the username when the provider ID does not belong to any known user, and does not reject a conflicting non-empty provider ID.","source_quote_or_pointer":"Advisory description (CVE-2026-102631)","fact_id":"SEA-CVE-2026-102631-F2","document_citation":"Advisory description (CVE-2026-102631)"}],"source_stated_contributors":["In authd before 0.7.1, the user identity matching in UpdateUser (internal/users/manager.go) resolves an incoming login by the broker-scoped provider ID, but falls back to matching the username when the provider ID does not belong to any known user, and does not reject a conflicting non-empty provider ID."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.write_action","data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-102631","reporting_entity":"CVE-2026-102631","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-102631-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-102631-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-102631"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-111322","title":"Archon 0.2.13 through 0.11.1 contains a missing authentication vulnerability that allows unauthenticated attackers to access the /api/ control API, which binds to 0.0.0.0 by default. Attackers with network access can send messages to the AI coding agent, which runs with bypassPermissions, to execute commands on the host as the Archon user.","display_title":"Security issue reported in Software component","display_summary":"Archon 0.2.13 through 0.11.1 contains a missing authentication vulnerability that allows unauthenticated attackers to access the /api/ control API, which binds to 0.0.0.0 by default.","display_reference":"CVE-2026-111322","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111322","source_title":"Archon 0.2.13 through 0.11.1 contains a missing authentication vulnerability that allows unauthenticated attackers to access the /api/ control API, which binds to 0.0.0.0 by default. Attackers with network access can send messages to the AI coding agent, which runs with bypassPermissions, to execute commands on the host as the Archon user.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-17T00:24:19.381Z","source_hash":"content-fingerprint:fnv1a-2b4a9485","affected_system":{"organization":"Software component project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-111322-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Archon 0.2.13 through 0.11.1 contains a missing authentication vulnerability that allows unauthenticated attackers to access the /api/ control API, which binds to 0.0.0.0 by default. Attackers with network access can send messages to the AI coding agent, which runs with bypassPermissions, to execute commands on the host as the Archon user.","source_quote_or_pointer":"Security Advisory CVE-2026-111322","fact_id":"SEA-CVE-2026-111322-F1","document_citation":"Security Advisory CVE-2026-111322"},{"id":"SEA-CVE-2026-111322-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Archon 0.2.13 through 0.11.1 contains a missing authentication vulnerability that allows unauthenticated attackers to access the /api/ control API, which binds to 0.0.0.0 by default.","source_quote_or_pointer":"Advisory description (CVE-2026-111322)","fact_id":"SEA-CVE-2026-111322-F2","document_citation":"Advisory description (CVE-2026-111322)"}],"source_stated_contributors":["Archon 0.2.13 through 0.11.1 contains a missing authentication vulnerability that allows unauthenticated attackers to access the /api/ control API, which binds to 0.0.0.0 by default."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.code_execution","auth.external_communication","data.pii","arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-010"],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-111322","reporting_entity":"CVE-2026-111322","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-111322-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-111322-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-111322"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-111284","title":"Aureus ERP through 1.6.0 contains a stored cross-site scripting vulnerability in HolidayAction.php that allows authenticated users to inject scripts via unescaped holiday names rendered as HtmlString. Attackers permitted to create Public Holidays or Mandatory Days can store JavaScript payloads that execute when HR managers or administrators open the Holiday modal, hijacking their sessions.","display_title":"Software component issue could run attacker-controlled scripts in a browser","display_summary":"Aureus ERP through 1.6.0 contains a stored cross-site scripting vulnerability in HolidayAction.php that allows authenticated users to inject scripts via unescaped holiday names rendered as HtmlString.","display_reference":"CVE-2026-111284","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111284","source_title":"Aureus ERP through 1.6.0 contains a stored cross-site scripting vulnerability in HolidayAction.php that allows authenticated users to inject scripts via unescaped holiday names rendered as HtmlString. Attackers permitted to create Public Holidays or Mandatory Days can store JavaScript payloads that execute when HR managers or administrators open the Holiday modal, hijacking their sessions.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-17T00:24:19.381Z","source_hash":"content-fingerprint:fnv1a-36e11772","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-111284-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Aureus ERP through 1.6.0 contains a stored cross-site scripting vulnerability in HolidayAction.php that allows authenticated users to inject scripts via unescaped holiday names rendered as HtmlString. Attackers permitted to create Public Holidays or Mandatory Days can store JavaScript payloads that execute when HR managers or administrators open the Holiday modal, hijacking their sessions.","source_quote_or_pointer":"Security Advisory CVE-2026-111284","fact_id":"SEA-CVE-2026-111284-F1","document_citation":"Security Advisory CVE-2026-111284"},{"id":"SEA-CVE-2026-111284-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Aureus ERP through 1.6.0 contains a stored cross-site scripting vulnerability in HolidayAction.php that allows authenticated users to inject scripts via unescaped holiday names rendered as HtmlString.","source_quote_or_pointer":"Advisory description (CVE-2026-111284)","fact_id":"SEA-CVE-2026-111284-F2","document_citation":"Advisory description (CVE-2026-111284)"}],"source_stated_contributors":["Aureus ERP through 1.6.0 contains a stored cross-site scripting vulnerability in HolidayAction.php that allows authenticated users to inject scripts via unescaped holiday names rendered as HtmlString."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","auth.public_publication","data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-111284","reporting_entity":"CVE-2026-111284","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-111284-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-111284-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-111284"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-111252","title":"A denial of service vulnerability exists in the XML parsing of multiple versions of OpenNMS Meridian and Horizon. OpenNMS parsed XML without an effective limit on entity expansion. A document with a DOCTYPE that declares internal entities can expand to a very large value and exhaust the server memory. An authenticated user with provisioning access can supply such a document through a requisition or foreign-source import, which includes a remote requisition URL that the server fetches and parses. Both deeply nested entities and a single large entity referenced many times cause the memory exhaustion. The fix caps the number of entity expansions for all XML parsing and rejects any DOCTYPE in requisition and foreign-source XML. The solution is to upgrade to Meridian 2024.3.14, 2025.0.11, 2026.0.1 and Horizon 36.0.5 or newer. Meridian and Horizon installation instructions state that they are intended for installation within an organization's private networks and should not be directly accessible from the Internet.","display_title":"Software component issue could make the service unavailable","display_summary":"A denial of service vulnerability exists in the XML parsing of multiple versions of OpenNMS Meridian and Horizon. OpenNMS parsed XML without an effective limit on entity expansion.","display_reference":"CVE-2026-111252","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111252","source_title":"A denial of service vulnerability exists in the XML parsing of multiple versions of OpenNMS Meridian and Horizon. OpenNMS parsed XML without an effective limit on entity expansion. A document with a DOCTYPE that declares internal entities can expand to a very large value and exhaust the server memory. An authenticated user with provisioning access can supply such a document through a requisition or foreign-source import, which includes a remote requisition URL that the server fetches and parses. Both deeply nested entities and a single large entity referenced many times cause the memory exhaustion. The fix caps the number of entity expansions for all XML parsing and rejects any DOCTYPE in requisition and foreign-source XML. The solution is to upgrade to Meridian 2024.3.14, 2025.0.11, 2026.0.1 and Horizon 36.0.5 or newer. Meridian and Horizon installation instructions state that they are intended for installation within an organization's private networks and should not be directly accessible from the Internet.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-17T00:24:19.382Z","source_hash":"content-fingerprint:fnv1a-eb80a0e5","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-111252-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A denial of service vulnerability exists in the XML parsing of multiple versions of OpenNMS Meridian and Horizon. OpenNMS parsed XML without an effective limit on entity expansion. A document with a DOCTYPE that declares internal entities can expand to a very large value and exhaust the server memory. An authenticated user with provisioning access can supply such a document through a requisition or foreign-source import, which includes a remote requisition URL that the server fetches and parses. Both deeply nested entities and a single large entity referenced many times cause the memory exhaustion. The fix caps the number of entity expansions for all XML parsing and rejects any DOCTYPE in requisition and foreign-source XML. The solution is to upgrade to Meridian 2024.3.14, 2025.0.11, 2026.0.1 and Horizon 36.0.5 or newer. Meridian and Horizon installation instructions state that they are intended for installation within an organization's private networks and should not be directly accessible from the Internet.","source_quote_or_pointer":"Security Advisory CVE-2026-111252","fact_id":"SEA-CVE-2026-111252-F1","document_citation":"Security Advisory CVE-2026-111252"},{"id":"SEA-CVE-2026-111252-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A denial of service vulnerability exists in the XML parsing of multiple versions of OpenNMS Meridian and Horizon. OpenNMS parsed XML without an effective limit on entity expansion. A document with a DOCTYPE that declares internal entities can expand to a very large value and exhaust the server memory.","source_quote_or_pointer":"Advisory description (CVE-2026-111252)","fact_id":"SEA-CVE-2026-111252-F2","document_citation":"Advisory description (CVE-2026-111252)"}],"source_stated_contributors":["A denial of service vulnerability exists in the XML parsing of multiple versions of OpenNMS Meridian and Horizon. OpenNMS parsed XML without an effective limit on entity expansion. A document with a DOCTYPE that declares internal entities can expand to a very large value and exhaust the server memory."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-111252","reporting_entity":"CVE-2026-111252","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-111252-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-111252-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-111252"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-111235","title":"An authorization bypass vulnerability exists in the REST API of multiple versions of OpenNMS Meridian and Horizon. The /rest/ Spring Security filter chains authorize requests with intercept-url rules that name the HTTP method as an uppercase token, compare the method case-sensitively, and have no terminal deny rule. A request that uses a non-canonical (for example lowercase) method token matches no rule and is processed without authentication. A remote, unauthenticated attacker can read the monitored inventory and can create, modify, or delete resources through the REST API, which includes injecting events to fabricate or suppress alarms. The /rest/alarms chain has the same missing deny rule and discloses whether an alarm exists through a difference in the response. The fix adds a terminal deny rule to each REST filter chain. The solution is to upgrade to Meridian 2024.3.14, 2025.0.11, 2026.0.1 and Horizon 36.0.5 or newer. Meridian and Horizon installation instructions state that they are intended for installation within an organization's private networks and should not be directly accessible from the Internet.","display_title":"Software component issue could allow unauthorized access","display_summary":"An authorization bypass vulnerability exists in the REST API of multiple versions of OpenNMS Meridian and Horizon. The /rest/ Spring Security filter chains authorize requests with intercept-url rules that name the HTTP…","display_reference":"CVE-2026-111235","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111235","source_title":"An authorization bypass vulnerability exists in the REST API of multiple versions of OpenNMS Meridian and Horizon. The /rest/ Spring Security filter chains authorize requests with intercept-url rules that name the HTTP method as an uppercase token, compare the method case-sensitively, and have no terminal deny rule. A request that uses a non-canonical (for example lowercase) method token matches no rule and is processed without authentication. A remote, unauthenticated attacker can read the monitored inventory and can create, modify, or delete resources through the REST API, which includes injecting events to fabricate or suppress alarms. The /rest/alarms chain has the same missing deny rule and discloses whether an alarm exists through a difference in the response. The fix adds a terminal deny rule to each REST filter chain. The solution is to upgrade to Meridian 2024.3.14, 2025.0.11, 2026.0.1 and Horizon 36.0.5 or newer. Meridian and Horizon installation instructions state that they are intended for installation within an organization's private networks and should not be directly accessible from the Internet.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-17T00:24:19.382Z","source_hash":"content-fingerprint:fnv1a-198ebc40","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-111235-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"An authorization bypass vulnerability exists in the REST API of multiple versions of OpenNMS Meridian and Horizon. The /rest/ Spring Security filter chains authorize requests with intercept-url rules that name the HTTP method as an uppercase token, compare the method case-sensitively, and have no terminal deny rule. A request that uses a non-canonical (for example lowercase) method token matches no rule and is processed without authentication. A remote, unauthenticated attacker can read the monitored inventory and can create, modify, or delete resources through the REST API, which includes injecting events to fabricate or suppress alarms. The /rest/alarms chain has the same missing deny rule and discloses whether an alarm exists through a difference in the response. The fix adds a terminal deny rule to each REST filter chain. The solution is to upgrade to Meridian 2024.3.14, 2025.0.11, 2026.0.1 and Horizon 36.0.5 or newer. Meridian and Horizon installation instructions state that they are intended for installation within an organization's private networks and should not be directly accessible from the Internet.","source_quote_or_pointer":"Security Advisory CVE-2026-111235","fact_id":"SEA-CVE-2026-111235-F1","document_citation":"Security Advisory CVE-2026-111235"},{"id":"SEA-CVE-2026-111235-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"An authorization bypass vulnerability exists in the REST API of multiple versions of OpenNMS Meridian and Horizon. The /rest/ Spring Security filter chains authorize requests with intercept-url rules that name the HTTP method as an uppercase token, compare the method case-sensitively, and have no terminal deny rule.","source_quote_or_pointer":"Advisory description (CVE-2026-111235)","fact_id":"SEA-CVE-2026-111235-F2","document_citation":"Advisory description (CVE-2026-111235)"}],"source_stated_contributors":["An authorization bypass vulnerability exists in the REST API of multiple versions of OpenNMS Meridian and Horizon. The /rest/ Spring Security filter chains authorize requests with intercept-url rules that name the HTTP method as an uppercase token, compare the method case-sensitively, and have no terminal deny rule."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.code_execution","auth.destructive_action","auth.write_action","arch.event_driven"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-111235","reporting_entity":"CVE-2026-111235","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-111235-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-111235-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-111235"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-105039","title":"EnergizeLab station-middleware (NestJS) Docker images 1.6.5 through 1.8.2 do not check user roles on administrative APIs. Any authenticated low-privilege user can retrieve AI provider keys and change configuration and object-store contents.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-105039","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105039","source_title":"EnergizeLab station-middleware (NestJS) Docker images 1.6.5 through 1.8.2 do not check user roles on administrative APIs. Any authenticated low-privilege user can retrieve AI provider keys and change configuration and object-store contents.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-17T00:24:19.382Z","source_hash":"content-fingerprint:fnv1a-55362815","affected_system":{"organization":"Software component project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-105039-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"EnergizeLab station-middleware (NestJS) Docker images 1.6.5 through 1.8.2 do not check user roles on administrative APIs. Any authenticated low-privilege user can retrieve AI provider keys and change configuration and object-store contents.","source_quote_or_pointer":"Security Advisory CVE-2026-105039","fact_id":"SEA-CVE-2026-105039-F1","document_citation":"Security Advisory CVE-2026-105039"},{"id":"SEA-CVE-2026-105039-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"EnergizeLab station-middleware (NestJS) Docker images 1.6.5 through 1.8.2 do not check user roles on administrative APIs. Any authenticated low-privilege user can retrieve AI provider keys and change configuration and object-store contents.","source_quote_or_pointer":"Advisory description (CVE-2026-105039)","fact_id":"SEA-CVE-2026-105039-F2","document_citation":"Advisory description (CVE-2026-105039)"}],"source_stated_contributors":["EnergizeLab station-middleware (NestJS) Docker images 1.6.5 through 1.8.2 do not check user roles on administrative APIs. Any authenticated low-privilege user can retrieve AI provider keys and change configuration and object-store contents."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.code_execution","auth.write_action","data.pii","data.uploaded_files"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-105039","reporting_entity":"CVE-2026-105039","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-105039-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-105039-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-105039"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-105037","title":"EnergizeLab station-middleware (NestJS) Docker images 1.6.5 through 1.8.2 allow any registered, low-privilege account to read arbitrary files from the server by supplying an attacker-controlled file path. This exposes middleware files and server secrets.","display_title":"Software component issue could expose accounts or credentials","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-105037","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105037","source_title":"EnergizeLab station-middleware (NestJS) Docker images 1.6.5 through 1.8.2 allow any registered, low-privilege account to read arbitrary files from the server by supplying an attacker-controlled file path. This exposes middleware files and server secrets.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-17T00:24:19.383Z","source_hash":"content-fingerprint:fnv1a-695797bb","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Cloud & container infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-105037-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"EnergizeLab station-middleware (NestJS) Docker images 1.6.5 through 1.8.2 allow any registered, low-privilege account to read arbitrary files from the server by supplying an attacker-controlled file path. This exposes middleware files and server secrets.","source_quote_or_pointer":"Security Advisory CVE-2026-105037","fact_id":"SEA-CVE-2026-105037-F1","document_citation":"Security Advisory CVE-2026-105037"},{"id":"SEA-CVE-2026-105037-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"EnergizeLab station-middleware (NestJS) Docker images 1.6.5 through 1.8.2 allow any registered, low-privilege account to read arbitrary files from the server by supplying an attacker-controlled file path. This exposes middleware files and server secrets.","source_quote_or_pointer":"Advisory description (CVE-2026-105037)","fact_id":"SEA-CVE-2026-105037-F2","document_citation":"Advisory description (CVE-2026-105037)"}],"source_stated_contributors":["EnergizeLab station-middleware (NestJS) Docker images 1.6.5 through 1.8.2 allow any registered, low-privilege account to read arbitrary files from the server by supplying an attacker-controlled file path. This exposes middleware files and server secrets."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.code_execution","data.uploaded_files"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-105037","reporting_entity":"CVE-2026-105037","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-105037-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-105037-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-105037"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-105034","title":"The EnergizeLab Eilik NestJS auth service issues device tokens for arbitrary robot serial numbers without authentication. An unauthenticated remote attacker can obtain a valid device token for any serial number and act as that device against the cloud services.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-105034","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105034","source_title":"The EnergizeLab Eilik NestJS auth service issues device tokens for arbitrary robot serial numbers without authentication. An unauthenticated remote attacker can obtain a valid device token for any serial number and act as that device against the cloud services.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-17T00:24:19.383Z","source_hash":"content-fingerprint:fnv1a-8252df54","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Cloud & container infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-105034-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The EnergizeLab Eilik NestJS auth service issues device tokens for arbitrary robot serial numbers without authentication. An unauthenticated remote attacker can obtain a valid device token for any serial number and act as that device against the cloud services.","source_quote_or_pointer":"Security Advisory CVE-2026-105034","fact_id":"SEA-CVE-2026-105034-F1","document_citation":"Security Advisory CVE-2026-105034"},{"id":"SEA-CVE-2026-105034-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The EnergizeLab Eilik NestJS auth service issues device tokens for arbitrary robot serial numbers without authentication. An unauthenticated remote attacker can obtain a valid device token for any serial number and act as that device against the cloud services.","source_quote_or_pointer":"Advisory description (CVE-2026-105034)","fact_id":"SEA-CVE-2026-105034-F2","document_citation":"Advisory description (CVE-2026-105034)"}],"source_stated_contributors":["The EnergizeLab Eilik NestJS auth service issues device tokens for arbitrary robot serial numbers without authentication. An unauthenticated remote attacker can obtain a valid device token for any serial number and act as that device against the cloud services."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-105034","reporting_entity":"CVE-2026-105034","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-105034-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-105034-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-105034"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-110904","title":"ApostropheCMS before 4.33.0 allows authentication bypass for REST API page reading, as demonstrated by a /api/v1/@apostrophecms/page?all=1 call.","display_title":"Software component issue could allow unauthorized access","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-110904","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110904","source_title":"ApostropheCMS before 4.33.0 allows authentication bypass for REST API page reading, as demonstrated by a /api/v1/@apostrophecms/page?all=1 call.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T21:01:43.273Z","source_hash":"content-fingerprint:fnv1a-bcb17010","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-110904-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"ApostropheCMS before 4.33.0 allows authentication bypass for REST API page reading, as demonstrated by a /api/v1/@apostrophecms/page?all=1 call.","source_quote_or_pointer":"Security Advisory CVE-2026-110904","fact_id":"SEA-CVE-2026-110904-F1","document_citation":"Security Advisory CVE-2026-110904"},{"id":"SEA-CVE-2026-110904-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"ApostropheCMS before 4.33.0 allows authentication bypass for REST API page reading, as demonstrated by a /api/v1/@apostrophecms/page?all=1 call.","source_quote_or_pointer":"Advisory description (CVE-2026-110904)","fact_id":"SEA-CVE-2026-110904-F2","document_citation":"Advisory description (CVE-2026-110904)"}],"source_stated_contributors":["ApostropheCMS before 4.33.0 allows authentication bypass for REST API page reading, as demonstrated by a /api/v1/@apostrophecms/page?all=1 call."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-110904","reporting_entity":"CVE-2026-110904","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-110904-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-110904-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-110904"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-110911","title":"Wheels 1.1.8 through 4.1.1 allows SQL injection when caller-supplied quoted values are parsed again as SQL by dynamic finders (such as findOneByEmail), the query builder's where(property, value) and where(property, operator, value), string/UUID-key lookup paths (findByKey, updateByKey, deleteByKey and findOrCreateBy...), and validatesUniquenessOf. The parser incorrectly treats a doubled single quote as the end of a literal. Applications passing request data to these APIs can expose authentication, password-reset or token lookups, and data to unauthorized access; numeric-column values are not affected. There is a similar concern for query-builder whereBetween() in 4.0.0 through 4.1.1: string/date bounds can alter SQL on MySQL/MariaDB with backslash escaping enabled. This is fixed in 4.1.2.","display_title":"Software component issue could allow unauthorized access","display_summary":"Wheels 1.1.8 through 4.1.1 allows SQL injection when caller-supplied quoted values are parsed again as SQL by dynamic finders (such as findOneByEmail), the query builder's where(property, value) and where(property,…","display_reference":"CVE-2026-110911","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110911","source_title":"Wheels 1.1.8 through 4.1.1 allows SQL injection when caller-supplied quoted values are parsed again as SQL by dynamic finders (such as findOneByEmail), the query builder's where(property, value) and where(property, operator, value), string/UUID-key lookup paths (findByKey, updateByKey, deleteByKey and findOrCreateBy...), and validatesUniquenessOf. The parser incorrectly treats a doubled single quote as the end of a literal. Applications passing request data to these APIs can expose authentication, password-reset or token lookups, and data to unauthorized access; numeric-column values are not affected. There is a similar concern for query-builder whereBetween() in 4.0.0 through 4.1.1: string/date bounds can alter SQL on MySQL/MariaDB with backslash escaping enabled. This is fixed in 4.1.2.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T21:01:43.274Z","source_hash":"content-fingerprint:fnv1a-9a739f0c","affected_system":{"organization":"Wheels 1.1.8 through 4.1.1 allows SQL injection when caller-supplied quoted values are parsed again as SQL by dynamic finders (such as findOneByEmail), the query builder's where(property, value) and where(property, operator, value), string/UUID-key lookup paths (findByKey, updateByKey, deleteByKey and findOrCreateBy...), and validatesUniquenessOf. The parser incorrectly treats a doubled single quote as the end of a literal. Applications passing request data to these APIs can expose authentication, password-reset or token lookups, and data to unauthorized access; numeric-column values are not affected. There is a similar concern for query-builder whereBetween() in 4.0.0 through 4.1.1 project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-110911-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Wheels 1.1.8 through 4.1.1 allows SQL injection when caller-supplied quoted values are parsed again as SQL by dynamic finders (such as findOneByEmail), the query builder's where(property, value) and where(property, operator, value), string/UUID-key lookup paths (findByKey, updateByKey, deleteByKey and findOrCreateBy...), and validatesUniquenessOf. The parser incorrectly treats a doubled single quote as the end of a literal. Applications passing request data to these APIs can expose authentication, password-reset or token lookups, and data to unauthorized access; numeric-column values are not affected. There is a similar concern for query-builder whereBetween() in 4.0.0 through 4.1.1: string/date bounds can alter SQL on MySQL/MariaDB with backslash escaping enabled. This is fixed in 4.1.2.","source_quote_or_pointer":"Security Advisory CVE-2026-110911","fact_id":"SEA-CVE-2026-110911-F1","document_citation":"Security Advisory CVE-2026-110911"},{"id":"SEA-CVE-2026-110911-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Wheels 1.1.8 through 4.1.1 allows SQL injection when caller-supplied quoted values are parsed again as SQL by dynamic finders (such as findOneByEmail), the query builder's where(property, value) and where(property, operator, value), string/UUID-key lookup paths (findByKey, updateByKey, deleteByKey and…","source_quote_or_pointer":"Advisory description (CVE-2026-110911)","fact_id":"SEA-CVE-2026-110911-F2","document_citation":"Advisory description (CVE-2026-110911)"}],"source_stated_contributors":["Wheels 1.1.8 through 4.1.1 allows SQL injection when caller-supplied quoted values are parsed again as SQL by dynamic finders (such as findOneByEmail), the query builder's where(property, value) and where(property, operator, value), string/UUID-key lookup paths (findByKey, updateByKey, deleteByKey and…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-110911","reporting_entity":"CVE-2026-110911","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-110911-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-110911-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-110911"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-101290","title":"A remote attacker may send a specially crafted network packet that causes the affected application to perform an out-of-bounds memory read due to insufficient validation of packet length. This may result in an application crash and a denial-of-service condition.","display_title":"Security issue reported in Software component","display_summary":"A remote attacker may send a specially crafted network packet that causes the","display_reference":"CVE-2026-101290","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-101290","source_title":"A remote attacker may send a specially crafted network packet that causes the affected application to perform an out-of-bounds memory read due to insufficient validation of packet length. This may result in an application crash and a denial-of-service condition.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T21:01:43.274Z","source_hash":"content-fingerprint:fnv1a-ca71d974","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-101290-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A remote attacker may send a specially crafted network packet that causes the affected application to perform an out-of-bounds memory read due to insufficient validation of packet length. This may result in an application crash and a denial-of-service condition.","source_quote_or_pointer":"Security Advisory CVE-2026-101290","fact_id":"SEA-CVE-2026-101290-F1","document_citation":"Security Advisory CVE-2026-101290"},{"id":"SEA-CVE-2026-101290-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A remote attacker may send a specially crafted network packet that causes the","source_quote_or_pointer":"Advisory description (CVE-2026-101290)","fact_id":"SEA-CVE-2026-101290-F2","document_citation":"Advisory description (CVE-2026-101290)"}],"source_stated_contributors":["A remote attacker may send a specially crafted network packet that causes the"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-101290","reporting_entity":"CVE-2026-101290","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-101290-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-101290-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-101290"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-104024","title":"Incomplete List of Disallowed Inputs (CWE-184) in the dangerous-extension confirmation of the archive object viewer (peach.pas, grid_obj_open) in PeaZip 10.5.0 through 11.2.0 on Windows allows an attacker who convinces a victim to open an entry of a crafted archive to execute a program, or an arbitrary command, with no confirmation dialog. The prompt (Do you want to run this file?) is gated by SECEXTCONST, a hard-coded list of seven extensions (exe cmd msi bat ps1 vbs reg); the check is an exact string comparison of the entry extension against that list, so it answers only whether the extension is one of the seven and never whether the shell will execute the file. Shell-executable and scripting-host types that Windows runs through ShellExecuteW are absent from the list, among them .url and .lnk. An archived Windows Internet Shortcut (.url) whose URL line is attacker-controlled is launched with no prompt, while the byte-identical content in an entry named .bat does raise the warning in the same session. A .lnk entry raises the ceiling from launching a program to running a command line, because a Windows shortcut carries arguments: a proof-of-concept shortcut targeting cmd.exe with an attacker-chosen command line executed with no prompt. The shortcut target is not confined to the local disk; the shell also resolved an attacker-named UNC path (fetching a remote payload was only attempted, not demonstrated). No privilege escalation; everything runs as the user who opened the archive.","display_title":"Software component issue could grant elevated privileges","display_summary":"Incomplete List of Disallowed Inputs (CWE-184) in the dangerous-extension confirmation of the archive object viewer (peach.pas, gridobjopen) in PeaZip 10.5.0 through 11.2.0 on Windows allows an attacker who convinces a…","display_reference":"CVE-2026-104024","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104024","source_title":"Incomplete List of Disallowed Inputs (CWE-184) in the dangerous-extension confirmation of the archive object viewer (peach.pas, grid_obj_open) in PeaZip 10.5.0 through 11.2.0 on Windows allows an attacker who convinces a victim to open an entry of a crafted archive to execute a program, or an arbitrary command, with no confirmation dialog. The prompt (Do you want to run this file?) is gated by SECEXTCONST, a hard-coded list of seven extensions (exe cmd msi bat ps1 vbs reg); the check is an exact string comparison of the entry extension against that list, so it answers only whether the extension is one of the seven and never whether the shell will execute the file. Shell-executable and scripting-host types that Windows runs through ShellExecuteW are absent from the list, among them .url and .lnk. An archived Windows Internet Shortcut (.url) whose URL line is attacker-controlled is launched with no prompt, while the byte-identical content in an entry named .bat does raise the warning in the same session. A .lnk entry raises the ceiling from launching a program to running a command line, because a Windows shortcut carries arguments: a proof-of-concept shortcut targeting cmd.exe with an attacker-chosen command line executed with no prompt. The shortcut target is not confined to the local disk; the shell also resolved an attacker-named UNC path (fetching a remote payload was only attempted, not demonstrated). No privilege escalation; everything runs as the user who opened the archive.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T21:01:43.275Z","source_hash":"content-fingerprint:fnv1a-99bf4d0c","affected_system":{"organization":"Incomplete List of Disallowed Inputs (CWE-184) in the dangerous-extension confirmation of the archive object viewer (peach.pas, gridobjopen) in PeaZip 10.5.0 through 11.2.0 on Windows allows an attacker who convinces a victim to open an entry of a crafted archive to execute a program, or an arbitrary command, with no confirmation dialog. The prompt (Do you want to run this file?) is gated by SECEXTCONST, a hard-coded list of seven extensions (exe cmd msi bat ps1 vbs reg); the check is an exact string comparison of the entry extension against that list, so it answers only whether the extension is one of the seven and never whether the shell will execute the file. Shell-executable and scripting-host types that Windows runs through ShellExecuteW are absent from the list, among them .url and .lnk. An archived Windows Internet Shortcut (.url) whose URL line is attacker-controlled is launched with no prompt, while the byte-identical content in an entry named .bat does raise the warning in the same session. A .lnk entry raises the ceiling from launching a program to running a command line, because a Windows shortcut carries arguments project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-104024-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Incomplete List of Disallowed Inputs (CWE-184) in the dangerous-extension confirmation of the archive object viewer (peach.pas, grid_obj_open) in PeaZip 10.5.0 through 11.2.0 on Windows allows an attacker who convinces a victim to open an entry of a crafted archive to execute a program, or an arbitrary command, with no confirmation dialog. The prompt (Do you want to run this file?) is gated by SECEXTCONST, a hard-coded list of seven extensions (exe cmd msi bat ps1 vbs reg); the check is an exact string comparison of the entry extension against that list, so it answers only whether the extension is one of the seven and never whether the shell will execute the file. Shell-executable and scripting-host types that Windows runs through ShellExecuteW are absent from the list, among them .url and .lnk. An archived Windows Internet Shortcut (.url) whose URL line is attacker-controlled is launched with no prompt, while the byte-identical content in an entry named .bat does raise the warning in the same session. A .lnk entry raises the ceiling from launching a program to running a command line, because a Windows shortcut carries arguments: a proof-of-concept shortcut targeting cmd.exe with an attacker-chosen command line executed with no prompt. The shortcut target is not confined to the local disk; the shell also resolved an attacker-named UNC path (fetching a remote payload was only attempted, not demonstrated). No privilege escalation; everything runs as the user who opened the archive.","source_quote_or_pointer":"Security Advisory CVE-2026-104024","fact_id":"SEA-CVE-2026-104024-F1","document_citation":"Security Advisory CVE-2026-104024"},{"id":"SEA-CVE-2026-104024-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Incomplete List of Disallowed Inputs (CWE-184) in the dangerous-extension confirmation of the archive object viewer (peach.pas, gridobjopen) in PeaZip 10.5.0 through 11.2.0 on Windows allows an attacker who convinces a victim to open an entry of a crafted archive to execute a program, or an arbitrary command, with no…","source_quote_or_pointer":"Advisory description (CVE-2026-104024)","fact_id":"SEA-CVE-2026-104024-F2","document_citation":"Advisory description (CVE-2026-104024)"}],"source_stated_contributors":["Incomplete List of Disallowed Inputs (CWE-184) in the dangerous-extension confirmation of the archive object viewer (peach.pas, gridobjopen) in PeaZip 10.5.0 through 11.2.0 on Windows allows an attacker who convinces a victim to open an entry of a crafted archive to execute a program, or an arbitrary command, with no…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-104024","reporting_entity":"CVE-2026-104024","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-104024-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-104024-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-104024"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-104586","title":"AUTOM8N (WHM/cPanel plugin) through commit 82821f7 contains an OS Command Injection in borg_restore.cgi.","display_title":"Software component issue could allow unintended commands to run","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-104586","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104586","source_title":"AUTOM8N (WHM/cPanel plugin) through commit 82821f7 contains an OS Command Injection in borg_restore.cgi.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T21:01:43.275Z","source_hash":"content-fingerprint:fnv1a-6994f511","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-104586-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"AUTOM8N (WHM/cPanel plugin) through commit 82821f7 contains an OS Command Injection in borg_restore.cgi.","source_quote_or_pointer":"Security Advisory CVE-2026-104586","fact_id":"SEA-CVE-2026-104586-F1","document_citation":"Security Advisory CVE-2026-104586"},{"id":"SEA-CVE-2026-104586-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"AUTOM8N (WHM/cPanel plugin) through commit 82821f7 contains an OS Command Injection in borgrestore.cgi.","source_quote_or_pointer":"Advisory description (CVE-2026-104586)","fact_id":"SEA-CVE-2026-104586-F2","document_citation":"Advisory description (CVE-2026-104586)"}],"source_stated_contributors":["AUTOM8N (WHM/cPanel plugin) through commit 82821f7 contains an OS Command Injection in borgrestore.cgi."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-104586","reporting_entity":"CVE-2026-104586","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-104586-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-104586-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-104586"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-95179","title":"An issue in lottie-android 6.7.1 and earlier (and master) allows a remote attacker to cause a denial of service via a crafted Lottie animation JSON containing a cyclic precomposition reference graph that triggers uncontrolled recursion in BaseLayer.forModel and CompositionLayer.","display_title":"Software component issue could make the service unavailable","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-95179","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95179","source_title":"An issue in lottie-android 6.7.1 and earlier (and master) allows a remote attacker to cause a denial of service via a crafted Lottie animation JSON containing a cyclic precomposition reference graph that triggers uncontrolled recursion in BaseLayer.forModel and CompositionLayer.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T21:01:43.276Z","source_hash":"content-fingerprint:fnv1a-1b79da0c","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-95179-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"An issue in lottie-android 6.7.1 and earlier (and master) allows a remote attacker to cause a denial of service via a crafted Lottie animation JSON containing a cyclic precomposition reference graph that triggers uncontrolled recursion in BaseLayer.forModel and CompositionLayer.","source_quote_or_pointer":"Security Advisory CVE-2026-95179","fact_id":"SEA-CVE-2026-95179-F1","document_citation":"Security Advisory CVE-2026-95179"},{"id":"SEA-CVE-2026-95179-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"An issue in lottie-android 6.7.1 and earlier (and master) allows a remote attacker to cause a denial of service via a crafted Lottie animation JSON containing a cyclic precomposition reference graph that triggers uncontrolled recursion in BaseLayer.forModel and CompositionLayer.","source_quote_or_pointer":"Advisory description (CVE-2026-95179)","fact_id":"SEA-CVE-2026-95179-F2","document_citation":"Advisory description (CVE-2026-95179)"}],"source_stated_contributors":["An issue in lottie-android 6.7.1 and earlier (and master) allows a remote attacker to cause a denial of service via a crafted Lottie animation JSON containing a cyclic precomposition reference graph that triggers uncontrolled recursion in BaseLayer.forModel and CompositionLayer."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-95179","reporting_entity":"CVE-2026-95179","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-95179-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-95179-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-95179"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-52167","title":"A stack overflow in the gensub_ParsePsb() function of AOC LC32D1320 v2.05 allows attackers to cause a Denial of Service (DoS) via supplying a crafted .PSB subtitle file.","display_title":"Software component issue could make the service unavailable","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-52167","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-52167","source_title":"A stack overflow in the gensub_ParsePsb() function of AOC LC32D1320 v2.05 allows attackers to cause a Denial of Service (DoS) via supplying a crafted .PSB subtitle file.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T21:01:43.276Z","source_hash":"content-fingerprint:fnv1a-81729a2a","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-52167-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A stack overflow in the gensub_ParsePsb() function of AOC LC32D1320 v2.05 allows attackers to cause a Denial of Service (DoS) via supplying a crafted .PSB subtitle file.","source_quote_or_pointer":"Security Advisory CVE-2026-52167","fact_id":"SEA-CVE-2026-52167-F1","document_citation":"Security Advisory CVE-2026-52167"},{"id":"SEA-CVE-2026-52167-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A stack overflow in the gensubParsePsb() function of AOC LC32D1320 v2.05 allows attackers to cause a Denial of Service (DoS) via supplying a crafted .PSB subtitle file.","source_quote_or_pointer":"Advisory description (CVE-2026-52167)","fact_id":"SEA-CVE-2026-52167-F2","document_citation":"Advisory description (CVE-2026-52167)"}],"source_stated_contributors":["A stack overflow in the gensubParsePsb() function of AOC LC32D1320 v2.05 allows attackers to cause a Denial of Service (DoS) via supplying a crafted .PSB subtitle file."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-52167","reporting_entity":"CVE-2026-52167","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-52167-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-52167-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-52167"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-88753","title":"A Regular-Expression Denial of Service (ReDoS) in the Markdown2. extract_metadata() function (lib/markdown2.py) of trentm markdown2 through v2.5.5 allows attackers to cause a Denial of Service (DoS) via a crafted Markdown document.","display_title":"Software component issue could make the service unavailable","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-88753","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-88753","source_title":"A Regular-Expression Denial of Service (ReDoS) in the Markdown2. extract_metadata() function (lib/markdown2.py) of trentm markdown2 through v2.5.5 allows attackers to cause a Denial of Service (DoS) via a crafted Markdown document.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T21:01:43.277Z","source_hash":"content-fingerprint:fnv1a-d9b028c2","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-88753-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A Regular-Expression Denial of Service (ReDoS) in the Markdown2. extract_metadata() function (lib/markdown2.py) of trentm markdown2 through v2.5.5 allows attackers to cause a Denial of Service (DoS) via a crafted Markdown document.","source_quote_or_pointer":"Security Advisory CVE-2026-88753","fact_id":"SEA-CVE-2026-88753-F1","document_citation":"Security Advisory CVE-2026-88753"},{"id":"SEA-CVE-2026-88753-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A Regular-Expression Denial of Service (ReDoS) in the Markdown2. extractmetadata() function (lib/markdown2.py) of trentm markdown2 through v2.5.5 allows attackers to cause a Denial of Service (DoS) via a crafted Markdown document.","source_quote_or_pointer":"Advisory description (CVE-2026-88753)","fact_id":"SEA-CVE-2026-88753-F2","document_citation":"Advisory description (CVE-2026-88753)"}],"source_stated_contributors":["A Regular-Expression Denial of Service (ReDoS) in the Markdown2. extractmetadata() function (lib/markdown2.py) of trentm markdown2 through v2.5.5 allows attackers to cause a Denial of Service (DoS) via a crafted Markdown document."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-88753","reporting_entity":"CVE-2026-88753","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-88753-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-88753-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-88753"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-95155","title":"FasterXML Jackson 1.x, confirmed in jackson-mapper-asl versions 1.8.3, 1.9.2, 1.9.11, 1.9.12, and 1.9.13, allows attackers to cause a denial of service by supplying deeply nested JSON input to an application that deserializes untrusted JSON using ObjectMapper.readValue.","display_title":"Software component issue could make the service unavailable","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-95155","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95155","source_title":"FasterXML Jackson 1.x, confirmed in jackson-mapper-asl versions 1.8.3, 1.9.2, 1.9.11, 1.9.12, and 1.9.13, allows attackers to cause a denial of service by supplying deeply nested JSON input to an application that deserializes untrusted JSON using ObjectMapper.readValue.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T21:01:43.277Z","source_hash":"content-fingerprint:fnv1a-4bca8afc","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-95155-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"FasterXML Jackson 1.x, confirmed in jackson-mapper-asl versions 1.8.3, 1.9.2, 1.9.11, 1.9.12, and 1.9.13, allows attackers to cause a denial of service by supplying deeply nested JSON input to an application that deserializes untrusted JSON using ObjectMapper.readValue.","source_quote_or_pointer":"Security Advisory CVE-2026-95155","fact_id":"SEA-CVE-2026-95155-F1","document_citation":"Security Advisory CVE-2026-95155"},{"id":"SEA-CVE-2026-95155-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"FasterXML Jackson 1.x, confirmed in jackson-mapper-asl versions 1.8.3, 1.9.2, 1.9.11, 1.9.12, and 1.9.13, allows attackers to cause a denial of service by supplying deeply nested JSON input to an application that deserializes untrusted JSON using ObjectMapper.readValue.","source_quote_or_pointer":"Advisory description (CVE-2026-95155)","fact_id":"SEA-CVE-2026-95155-F2","document_citation":"Advisory description (CVE-2026-95155)"}],"source_stated_contributors":["FasterXML Jackson 1.x, confirmed in jackson-mapper-asl versions 1.8.3, 1.9.2, 1.9.11, 1.9.12, and 1.9.13, allows attackers to cause a denial of service by supplying deeply nested JSON input to an application that deserializes untrusted JSON using ObjectMapper.readValue."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-95155","reporting_entity":"CVE-2026-95155","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-95155-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-95155-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-95155"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-78851","title":"Directory Traversal vulnerability in Grav CMS 2.0.3 through 2.0.6 allows a remote attacker to obtain sensitive information via the GravExtension.php and the mediaDirFunc method.","display_title":"Software component issue could expose restricted files","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-78851","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-78851","source_title":"Directory Traversal vulnerability in Grav CMS 2.0.3 through 2.0.6 allows a remote attacker to obtain sensitive information via the GravExtension.php and the mediaDirFunc method.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T21:01:43.277Z","source_hash":"content-fingerprint:fnv1a-57a40aca","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-78851-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Directory Traversal vulnerability in Grav CMS 2.0.3 through 2.0.6 allows a remote attacker to obtain sensitive information via the GravExtension.php and the mediaDirFunc method.","source_quote_or_pointer":"Security Advisory CVE-2026-78851","fact_id":"SEA-CVE-2026-78851-F1","document_citation":"Security Advisory CVE-2026-78851"},{"id":"SEA-CVE-2026-78851-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Directory Traversal vulnerability in Grav CMS 2.0.3 through 2.0.6 allows a remote attacker to obtain sensitive information via the GravExtension.php and the mediaDirFunc method.","source_quote_or_pointer":"Advisory description (CVE-2026-78851)","fact_id":"SEA-CVE-2026-78851-F2","document_citation":"Advisory description (CVE-2026-78851)"}],"source_stated_contributors":["Directory Traversal vulnerability in Grav CMS 2.0.3 through 2.0.6 allows a remote attacker to obtain sensitive information via the GravExtension.php and the mediaDirFunc method."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Restricted file exposure","File overwrite"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-78851","reporting_entity":"CVE-2026-78851","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-78851-SG1","label":"Confine file access to a fixed root","description":"Resolve paths to canonical form and reject anything outside the intended directory before opening files.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-78851-SG1","label":"Confine file access to a fixed root","description":"Resolve paths to canonical form and reject anything outside the intended directory before opening files.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"File paths supplied by a caller escaped the intended directory. Canonicalise paths and confine file access to a fixed root.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-78851"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-106700","title":"ELADMIN v2.7 and earlier contains an improper access control vulnerability in the user-management endpoint PUT /api/users/resetPwd of me.zhengjie.modules.system.rest.UserController. The method lacks the method-level authorization check applied to all other user-management endpoints and performs no role-level or ownership validation in UserServiceImpl.resetPwd. Any authenticated user of any role can reset the password of arbitrary users, including the built-in administrator.","display_title":"Software component issue could allow unauthorized access","display_summary":"ELADMIN v2.7 and earlier contains an improper access control vulnerability in the user-management endpoint PUT /api/users/resetPwd of me.zhengjie.modules.system.rest.UserController.","display_reference":"CVE-2026-106700","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-106700","source_title":"ELADMIN v2.7 and earlier contains an improper access control vulnerability in the user-management endpoint PUT /api/users/resetPwd of me.zhengjie.modules.system.rest.UserController. The method lacks the method-level authorization check applied to all other user-management endpoints and performs no role-level or ownership validation in UserServiceImpl.resetPwd. Any authenticated user of any role can reset the password of arbitrary users, including the built-in administrator.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T21:01:43.278Z","source_hash":"content-fingerprint:fnv1a-54575175","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-106700-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"ELADMIN v2.7 and earlier contains an improper access control vulnerability in the user-management endpoint PUT /api/users/resetPwd of me.zhengjie.modules.system.rest.UserController. The method lacks the method-level authorization check applied to all other user-management endpoints and performs no role-level or ownership validation in UserServiceImpl.resetPwd. Any authenticated user of any role can reset the password of arbitrary users, including the built-in administrator.","source_quote_or_pointer":"Security Advisory CVE-2026-106700","fact_id":"SEA-CVE-2026-106700-F1","document_citation":"Security Advisory CVE-2026-106700"},{"id":"SEA-CVE-2026-106700-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"ELADMIN v2.7 and earlier contains an improper access control vulnerability in the user-management endpoint PUT /api/users/resetPwd of me.zhengjie.modules.system.rest.UserController.","source_quote_or_pointer":"Advisory description (CVE-2026-106700)","fact_id":"SEA-CVE-2026-106700-F2","document_citation":"Advisory description (CVE-2026-106700)"}],"source_stated_contributors":["ELADMIN v2.7 and earlier contains an improper access control vulnerability in the user-management endpoint PUT /api/users/resetPwd of me.zhengjie.modules.system.rest.UserController."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-106700","reporting_entity":"CVE-2026-106700","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-106700-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-106700-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-106700"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-110908","title":"Netgate pfSense FRR package (pfSense-pkg-frr) 2.0.2_1 and source revision 2.1.2_1 contain an OS command injection vulnerability in the FRR status filter. An authenticated WebGUI user with only the page-status-frr privilege can supply a filter value that breaks out of a single-quoted sed expression into which escapeshellarg() output is concatenated. Shell command substitution is then evaluated by a popen() pipeline, allowing attacker-selected commands to execute as root. There are updated FRR packages for pfSense Plus 26.07/26.03.1 and CE 2.9.0/2.8.1.","display_title":"Software component issue could allow unintended commands to run","display_summary":"Netgate pfSense FRR package (pfSense-pkg-frr) 2.0.21 and source revision 2.1.21 contain an OS command injection vulnerability in the FRR status filter.","display_reference":"CVE-2026-110908","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110908","source_title":"Netgate pfSense FRR package (pfSense-pkg-frr) 2.0.2_1 and source revision 2.1.2_1 contain an OS command injection vulnerability in the FRR status filter. An authenticated WebGUI user with only the page-status-frr privilege can supply a filter value that breaks out of a single-quoted sed expression into which escapeshellarg() output is concatenated. Shell command substitution is then evaluated by a popen() pipeline, allowing attacker-selected commands to execute as root. There are updated FRR packages for pfSense Plus 26.07/26.03.1 and CE 2.9.0/2.8.1.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T21:01:43.289Z","source_hash":"content-fingerprint:fnv1a-3da6856c","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-110908-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Netgate pfSense FRR package (pfSense-pkg-frr) 2.0.2_1 and source revision 2.1.2_1 contain an OS command injection vulnerability in the FRR status filter. An authenticated WebGUI user with only the page-status-frr privilege can supply a filter value that breaks out of a single-quoted sed expression into which escapeshellarg() output is concatenated. Shell command substitution is then evaluated by a popen() pipeline, allowing attacker-selected commands to execute as root. There are updated FRR packages for pfSense Plus 26.07/26.03.1 and CE 2.9.0/2.8.1.","source_quote_or_pointer":"Security Advisory CVE-2026-110908","fact_id":"SEA-CVE-2026-110908-F1","document_citation":"Security Advisory CVE-2026-110908"},{"id":"SEA-CVE-2026-110908-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Netgate pfSense FRR package (pfSense-pkg-frr) 2.0.21 and source revision 2.1.21 contain an OS command injection vulnerability in the FRR status filter. An authenticated WebGUI user with only the page-status-frr privilege can supply a filter value that breaks out of a single-quoted sed expression into which…","source_quote_or_pointer":"Advisory description (CVE-2026-110908)","fact_id":"SEA-CVE-2026-110908-F2","document_citation":"Advisory description (CVE-2026-110908)"}],"source_stated_contributors":["Netgate pfSense FRR package (pfSense-pkg-frr) 2.0.21 and source revision 2.1.21 contain an OS command injection vulnerability in the FRR status filter. An authenticated WebGUI user with only the page-status-frr privilege can supply a filter value that breaks out of a single-quoted sed expression into which…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.code_execution","auth.privileged_action","data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-110908","reporting_entity":"CVE-2026-110908","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-110908-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-110908-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-110908"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2024-22031","title":"A vulnerability has been identified within Rancher where a user with the ability to create a project, on a certain cluster, can create a project with the same name as an existing project in a different cluster. This results in the user gaining access to the other project in the different cluster, resulting in a privilege escalation. This happens because the namespace used on the local cluster to store related resources (PRTBs and secrets) is the name of the project.","display_title":"Software component issue could expose accounts or credentials","display_summary":"A vulnerability has been identified within Rancher where a user with the ability to create a project, on a certain cluster, can create a project with the same name as an existing project in a different cluster.","display_reference":"CVE-2024-22031","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2024-22031","source_title":"A vulnerability has been identified within Rancher where a user with the ability to create a project, on a certain cluster, can create a project with the same name as an existing project in a different cluster. This results in the user gaining access to the other project in the different cluster, resulting in a privilege escalation. This happens because the namespace used on the local cluster to store related resources (PRTBs and secrets) is the name of the project.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T21:01:43.290Z","source_hash":"content-fingerprint:fnv1a-a47f7f05","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2024-22031-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability has been identified within Rancher where a user with the ability to create a project, on a certain cluster, can create a project with the same name as an existing project in a different cluster. This results in the user gaining access to the other project in the different cluster, resulting in a privilege escalation. This happens because the namespace used on the local cluster to store related resources (PRTBs and secrets) is the name of the project.","source_quote_or_pointer":"Security Advisory CVE-2024-22031","fact_id":"SEA-CVE-2024-22031-F1","document_citation":"Security Advisory CVE-2024-22031"},{"id":"SEA-CVE-2024-22031-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability has been identified within Rancher where a user with the ability to create a project, on a certain cluster, can create a project with the same name as an existing project in a different cluster.","source_quote_or_pointer":"Advisory description (CVE-2024-22031)","fact_id":"SEA-CVE-2024-22031-F2","document_citation":"Advisory description (CVE-2024-22031)"}],"source_stated_contributors":["A vulnerability has been identified within Rancher where a user with the ability to create a project, on a certain cluster, can create a project with the same name as an existing project in a different cluster."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.pii"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2024-22031","reporting_entity":"CVE-2024-22031","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2024-22031-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2024-22031-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2024-22031"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-103508","title":"P4 Search (formerly Helix Search) allows an authenticated user holding administrative privileges on the connected P4 Server to supply a crafted logging configuration that causes files to be written or deleted outside the intended logging directory. This could lead to code execution as the P4 Search service account. This issue affects P4 Search 2026.4.2 and earlier. Perforce resolved it in 2026.4.3.","display_title":"Software component issue could allow unintended commands to run","display_summary":"P4 Search (formerly Helix Search) allows an authenticated user holding administrative privileges on the connected P4 Server to supply a crafted logging configuration that causes files to be written or deleted outside the…","display_reference":"CVE-2026-103508","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103508","source_title":"P4 Search (formerly Helix Search) allows an authenticated user holding administrative privileges on the connected P4 Server to supply a crafted logging configuration that causes files to be written or deleted outside the intended logging directory. This could lead to code execution as the P4 Search service account. This issue affects P4 Search 2026.4.2 and earlier. Perforce resolved it in 2026.4.3.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T21:01:43.290Z","source_hash":"content-fingerprint:fnv1a-35cc1020","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-103508-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"P4 Search (formerly Helix Search) allows an authenticated user holding administrative privileges on the connected P4 Server to supply a crafted logging configuration that causes files to be written or deleted outside the intended logging directory. This could lead to code execution as the P4 Search service account. This issue affects P4 Search 2026.4.2 and earlier. Perforce resolved it in 2026.4.3.","source_quote_or_pointer":"Security Advisory CVE-2026-103508","fact_id":"SEA-CVE-2026-103508-F1","document_citation":"Security Advisory CVE-2026-103508"},{"id":"SEA-CVE-2026-103508-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"P4 Search (formerly Helix Search) allows an authenticated user holding administrative privileges on the connected P4 Server to supply a crafted logging configuration that causes files to be written or deleted outside the intended logging directory. This could lead to code execution as the P4 Search service account.","source_quote_or_pointer":"Advisory description (CVE-2026-103508)","fact_id":"SEA-CVE-2026-103508-F2","document_citation":"Advisory description (CVE-2026-103508)"}],"source_stated_contributors":["P4 Search (formerly Helix Search) allows an authenticated user holding administrative privileges on the connected P4 Server to supply a crafted logging configuration that causes files to be written or deleted outside the intended logging directory. This could lead to code execution as the P4 Search service account."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-103508","reporting_entity":"CVE-2026-103508","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-103508-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-103508-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-103508"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-103509","title":"P4 Search (formerly Helix Search) returns stored credentials in cleartext through its configuration API to users with administrative privileges on the connected P4 Server, allowing privilege escalation. This affects 2026.4.2 and earlier and is fixed in 2026.4.3.","display_title":"Software component issue could expose accounts or credentials","display_summary":"P4 Search (formerly Helix Search) returns stored credentials in cleartext through its configuration API to users with administrative privileges on the connected P4 Server, allowing privilege escalation.","display_reference":"CVE-2026-103509","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103509","source_title":"P4 Search (formerly Helix Search) returns stored credentials in cleartext through its configuration API to users with administrative privileges on the connected P4 Server, allowing privilege escalation. This affects 2026.4.2 and earlier and is fixed in 2026.4.3.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T21:01:43.290Z","source_hash":"content-fingerprint:fnv1a-5d54d5a7","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-103509-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"P4 Search (formerly Helix Search) returns stored credentials in cleartext through its configuration API to users with administrative privileges on the connected P4 Server, allowing privilege escalation. This affects 2026.4.2 and earlier and is fixed in 2026.4.3.","source_quote_or_pointer":"Security Advisory CVE-2026-103509","fact_id":"SEA-CVE-2026-103509-F1","document_citation":"Security Advisory CVE-2026-103509"},{"id":"SEA-CVE-2026-103509-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"P4 Search (formerly Helix Search) returns stored credentials in cleartext through its configuration API to users with administrative privileges on the connected P4 Server, allowing privilege escalation.","source_quote_or_pointer":"Advisory description (CVE-2026-103509)","fact_id":"SEA-CVE-2026-103509-F2","document_citation":"Advisory description (CVE-2026-103509)"}],"source_stated_contributors":["P4 Search (formerly Helix Search) returns stored credentials in cleartext through its configuration API to users with administrative privileges on the connected P4 Server, allowing privilege escalation."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-103509","reporting_entity":"CVE-2026-103509","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-103509-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-103509-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-103509"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-97665","title":"A missing authorization check in Nexus Repository 3's NuGet Components API upload path allows an account holding only repository read and browse privileges to upload and persist NuGet symbol packages (.snupkg) to a hosted repository, bypassing the write-permission check enforced for ordinary package uploads. Exploitation requires a hosted NuGet repository with Symbol Server enabled. If anonymous access is enabled, the built-in anonymous user holds read and browse privileges across all repositories by default, so this precondition can also be met without an authenticated account.","display_title":"Security issue reported in Software component","display_summary":"A missing authorization check in Nexus Repository 3's NuGet Components API upload path allows an account holding only repository read and browse privileges to upload and persist NuGet symbol packages (.snupkg) to a…","display_reference":"CVE-2026-97665","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97665","source_title":"A missing authorization check in Nexus Repository 3's NuGet Components API upload path allows an account holding only repository read and browse privileges to upload and persist NuGet symbol packages (.snupkg) to a hosted repository, bypassing the write-permission check enforced for ordinary package uploads. Exploitation requires a hosted NuGet repository with Symbol Server enabled. If anonymous access is enabled, the built-in anonymous user holds read and browse privileges across all repositories by default, so this precondition can also be met without an authenticated account.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T21:01:43.291Z","source_hash":"content-fingerprint:fnv1a-a8bca8be","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-97665-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A missing authorization check in Nexus Repository 3's NuGet Components API upload path allows an account holding only repository read and browse privileges to upload and persist NuGet symbol packages (.snupkg) to a hosted repository, bypassing the write-permission check enforced for ordinary package uploads. Exploitation requires a hosted NuGet repository with Symbol Server enabled. If anonymous access is enabled, the built-in anonymous user holds read and browse privileges across all repositories by default, so this precondition can also be met without an authenticated account.","source_quote_or_pointer":"Security Advisory CVE-2026-97665","fact_id":"SEA-CVE-2026-97665-F1","document_citation":"Security Advisory CVE-2026-97665"},{"id":"SEA-CVE-2026-97665-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A missing authorization check in Nexus Repository 3's NuGet Components API upload path allows an account holding only repository read and browse privileges to upload and persist NuGet symbol packages (.snupkg) to a hosted repository, bypassing the write-permission check enforced for ordinary package uploads.","source_quote_or_pointer":"Advisory description (CVE-2026-97665)","fact_id":"SEA-CVE-2026-97665-F2","document_citation":"Advisory description (CVE-2026-97665)"}],"source_stated_contributors":["A missing authorization check in Nexus Repository 3's NuGet Components API upload path allows an account holding only repository read and browse privileges to upload and persist NuGet symbol packages (.snupkg) to a hosted repository, bypassing the write-permission check enforced for ordinary package uploads."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.write_action","data.pii","data.uploaded_files"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-97665","reporting_entity":"CVE-2026-97665","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-97665-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-97665-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-97665"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-97666","title":"Sonatype Nexus Repository 3 allows an unauthenticated remote attacker to supply attacker-controlled input to a Java class loading call through an ExtDirect endpoint. This allows the attacker to learn whether specific classes are present in the application. The issue does not by itself allow code execution.","display_title":"Software component issue could allow unintended commands to run","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-97666","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97666","source_title":"Sonatype Nexus Repository 3 allows an unauthenticated remote attacker to supply attacker-controlled input to a Java class loading call through an ExtDirect endpoint. This allows the attacker to learn whether specific classes are present in the application. The issue does not by itself allow code execution.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T21:01:43.291Z","source_hash":"content-fingerprint:fnv1a-793d7589","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-97666-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Sonatype Nexus Repository 3 allows an unauthenticated remote attacker to supply attacker-controlled input to a Java class loading call through an ExtDirect endpoint. This allows the attacker to learn whether specific classes are present in the application. The issue does not by itself allow code execution.","source_quote_or_pointer":"Security Advisory CVE-2026-97666","fact_id":"SEA-CVE-2026-97666-F1","document_citation":"Security Advisory CVE-2026-97666"},{"id":"SEA-CVE-2026-97666-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Sonatype Nexus Repository 3 allows an unauthenticated remote attacker to supply attacker-controlled input to a Java class loading call through an ExtDirect endpoint. This allows the attacker to learn whether specific classes are present in the application. The issue does not by itself allow code execution.","source_quote_or_pointer":"Advisory description (CVE-2026-97666)","fact_id":"SEA-CVE-2026-97666-F2","document_citation":"Advisory description (CVE-2026-97666)"}],"source_stated_contributors":["Sonatype Nexus Repository 3 allows an unauthenticated remote attacker to supply attacker-controlled input to a Java class loading call through an ExtDirect endpoint. This allows the attacker to learn whether specific classes are present in the application. The issue does not by itself allow code execution."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-97666","reporting_entity":"CVE-2026-97666","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-97666-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-97666-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-97666"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-97667","title":"Sonatype Nexus Repository 3 allows a user account that holds the edit permission on a hosted R repository to store script content in the metadata of an uploaded R package. The script runs in the browser of a user who opens the details of that package in the Browse user interface, with the permissions of the viewing user. In this description, a user account means an account that has supplied valid credentials. The anonymous user, if enabled, is also a user account and can hold this permission if an administrator grants it.","display_title":"Software component issue could expose accounts or credentials","display_summary":"Sonatype Nexus Repository 3 allows a user account that holds the edit permission on a hosted R repository to store script content in the metadata of an uploaded R package.","display_reference":"CVE-2026-97667","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97667","source_title":"Sonatype Nexus Repository 3 allows a user account that holds the edit permission on a hosted R repository to store script content in the metadata of an uploaded R package. The script runs in the browser of a user who opens the details of that package in the Browse user interface, with the permissions of the viewing user. In this description, a user account means an account that has supplied valid credentials. The anonymous user, if enabled, is also a user account and can hold this permission if an administrator grants it.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T21:01:43.291Z","source_hash":"content-fingerprint:fnv1a-17ce1cb8","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-97667-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Sonatype Nexus Repository 3 allows a user account that holds the edit permission on a hosted R repository to store script content in the metadata of an uploaded R package. The script runs in the browser of a user who opens the details of that package in the Browse user interface, with the permissions of the viewing user. In this description, a user account means an account that has supplied valid credentials. The anonymous user, if enabled, is also a user account and can hold this permission if an administrator grants it.","source_quote_or_pointer":"Security Advisory CVE-2026-97667","fact_id":"SEA-CVE-2026-97667-F1","document_citation":"Security Advisory CVE-2026-97667"},{"id":"SEA-CVE-2026-97667-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Sonatype Nexus Repository 3 allows a user account that holds the edit permission on a hosted R repository to store script content in the metadata of an uploaded R package.","source_quote_or_pointer":"Advisory description (CVE-2026-97667)","fact_id":"SEA-CVE-2026-97667-F2","document_citation":"Advisory description (CVE-2026-97667)"}],"source_stated_contributors":["Sonatype Nexus Repository 3 allows a user account that holds the edit permission on a hosted R repository to store script content in the metadata of an uploaded R package."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.write_action","data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-97667","reporting_entity":"CVE-2026-97667","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-97667-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-97667-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-97667"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-84731","title":"An unauthenticated remote attacker can bypass authentication and gain full access to administrative API endpoints in Nutanix Prism Element by including a crafted internal management HTTP header. The vulnerability is caused by a misconfiguration in the application's authentication filters. Consequently, the server responds with a Set-Cookie header containing a valid JSESSIONID. This session cookie decodes to a JSON Web Token (JWT) granting maximum cluster administrative privileges. Successful exploitation allows the attacker to execute root-level commands on all Controller VMs (CVMs) in the cluster, leading to complete cluster destruction and unauthorized access to VM memory and virtual disks.","display_title":"Software component issue could allow unauthorized access","display_summary":"An unauthenticated remote attacker can bypass authentication and gain full access to administrative API endpoints in Nutanix Prism Element by including a crafted internal management HTTP header.","display_reference":"CVE-2026-84731","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84731","source_title":"An unauthenticated remote attacker can bypass authentication and gain full access to administrative API endpoints in Nutanix Prism Element by including a crafted internal management HTTP header. The vulnerability is caused by a misconfiguration in the application's authentication filters. Consequently, the server responds with a Set-Cookie header containing a valid JSESSIONID. This session cookie decodes to a JSON Web Token (JWT) granting maximum cluster administrative privileges. Successful exploitation allows the attacker to execute root-level commands on all Controller VMs (CVMs) in the cluster, leading to complete cluster destruction and unauthorized access to VM memory and virtual disks.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T21:01:43.292Z","source_hash":"content-fingerprint:fnv1a-5b3d9a40","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-84731-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"An unauthenticated remote attacker can bypass authentication and gain full access to administrative API endpoints in Nutanix Prism Element by including a crafted internal management HTTP header. The vulnerability is caused by a misconfiguration in the application's authentication filters. Consequently, the server responds with a Set-Cookie header containing a valid JSESSIONID. This session cookie decodes to a JSON Web Token (JWT) granting maximum cluster administrative privileges. Successful exploitation allows the attacker to execute root-level commands on all Controller VMs (CVMs) in the cluster, leading to complete cluster destruction and unauthorized access to VM memory and virtual disks.","source_quote_or_pointer":"Security Advisory CVE-2026-84731","fact_id":"SEA-CVE-2026-84731-F1","document_citation":"Security Advisory CVE-2026-84731"},{"id":"SEA-CVE-2026-84731-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"An unauthenticated remote attacker can bypass authentication and gain full access to administrative API endpoints in Nutanix Prism Element by including a crafted internal management HTTP header. The vulnerability is caused by a misconfiguration in the application's authentication filters.","source_quote_or_pointer":"Advisory description (CVE-2026-84731)","fact_id":"SEA-CVE-2026-84731-F2","document_citation":"Advisory description (CVE-2026-84731)"}],"source_stated_contributors":["An unauthenticated remote attacker can bypass authentication and gain full access to administrative API endpoints in Nutanix Prism Element by including a crafted internal management HTTP header. The vulnerability is caused by a misconfiguration in the application's authentication filters."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.infrastructure_modification","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-84731","reporting_entity":"CVE-2026-84731","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-84731-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-84731-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-84731"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-110812","title":"Deserialization of untrusted data in the Gremlin graph data import component in Amazon Neptune engine might allow an authenticated remote actor with standard database permissions to execute arbitrary code and access internal service credentials. To remediate this issue, users not enrolled in auto-update should upgrade to Amazon Neptune engine version 1.5.0.0.(Backports to 1.4.8.1 and 1.4.7.1)","display_title":"Software component issue could allow unintended commands to run","display_summary":"Deserialization of untrusted data in the Gremlin graph data import component in Amazon Neptune engine might allow an authenticated remote actor with standard database permissions to execute arbitrary code and access…","display_reference":"CVE-2026-110812","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110812","source_title":"Deserialization of untrusted data in the Gremlin graph data import component in Amazon Neptune engine might allow an authenticated remote actor with standard database permissions to execute arbitrary code and access internal service credentials. To remediate this issue, users not enrolled in auto-update should upgrade to Amazon Neptune engine version 1.5.0.0.(Backports to 1.4.8.1 and 1.4.7.1)","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T16:33:35.961Z","source_hash":"content-fingerprint:fnv1a-f959b636","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-110812-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Deserialization of untrusted data in the Gremlin graph data import component in Amazon Neptune engine might allow an authenticated remote actor with standard database permissions to execute arbitrary code and access internal service credentials. To remediate this issue, users not enrolled in auto-update should upgrade to Amazon Neptune engine version 1.5.0.0.(Backports to 1.4.8.1 and 1.4.7.1)","source_quote_or_pointer":"Security Advisory CVE-2026-110812","fact_id":"SEA-CVE-2026-110812-F1","document_citation":"Security Advisory CVE-2026-110812"},{"id":"SEA-CVE-2026-110812-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Deserialization of untrusted data in the Gremlin graph data import component in Amazon Neptune engine might allow an authenticated remote actor with standard database permissions to execute arbitrary code and access internal service credentials.","source_quote_or_pointer":"Advisory description (CVE-2026-110812)","fact_id":"SEA-CVE-2026-110812-F2","document_citation":"Advisory description (CVE-2026-110812)"}],"source_stated_contributors":["Deserialization of untrusted data in the Gremlin graph data import component in Amazon Neptune engine might allow an authenticated remote actor with standard database permissions to execute arbitrary code and access internal service credentials."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-110812","reporting_entity":"CVE-2026-110812","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-110812-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-110812-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-110812"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-94134","title":"The Apache Airflow SSH provider hook disables SSH host-key verification by default: unless host_key is configured or no_host_key_check is explicitly set to false, it accepts any server key. This affects SSH and SFTP connections that rely on the default. An attacker in a machine-in-the-middle position between the worker and the SSH or SFTP server can impersonate the server and capture the credentials or data a task sends. Users of apache-airflow-providers-ssh and apache-airflow-providers-sftp are recommended to upgrade to apache-airflow-providers-ssh 7.0.0 and apache-airflow-providers-sftp 7.0.0 or later. The deferrable SFTP code paths had the same default and are covered separately by CVE-2026-94135; apache-airflow-providers-sftp 7.0.0 fixes both.","display_title":"Software component issue could expose accounts or credentials","display_summary":"The Apache Airflow SSH provider hook disables SSH host-key verification by default: unless hostkey is configured or nohostkeycheck is explicitly set to false, it accepts any server key.","display_reference":"CVE-2026-94134","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-94134","source_title":"The Apache Airflow SSH provider hook disables SSH host-key verification by default: unless host_key is configured or no_host_key_check is explicitly set to false, it accepts any server key. This affects SSH and SFTP connections that rely on the default. An attacker in a machine-in-the-middle position between the worker and the SSH or SFTP server can impersonate the server and capture the credentials or data a task sends. Users of apache-airflow-providers-ssh and apache-airflow-providers-sftp are recommended to upgrade to apache-airflow-providers-ssh 7.0.0 and apache-airflow-providers-sftp 7.0.0 or later. The deferrable SFTP code paths had the same default and are covered separately by CVE-2026-94135; apache-airflow-providers-sftp 7.0.0 fixes both.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T16:33:35.962Z","source_hash":"content-fingerprint:fnv1a-3bd6439a","affected_system":{"organization":"The Apache Airflow SSH provider hook disables SSH host-key verification by default project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-94134-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Apache Airflow SSH provider hook disables SSH host-key verification by default: unless host_key is configured or no_host_key_check is explicitly set to false, it accepts any server key. This affects SSH and SFTP connections that rely on the default. An attacker in a machine-in-the-middle position between the worker and the SSH or SFTP server can impersonate the server and capture the credentials or data a task sends. Users of apache-airflow-providers-ssh and apache-airflow-providers-sftp are recommended to upgrade to apache-airflow-providers-ssh 7.0.0 and apache-airflow-providers-sftp 7.0.0 or later. The deferrable SFTP code paths had the same default and are covered separately by CVE-2026-94135; apache-airflow-providers-sftp 7.0.0 fixes both.","source_quote_or_pointer":"Security Advisory CVE-2026-94134","fact_id":"SEA-CVE-2026-94134-F1","document_citation":"Security Advisory CVE-2026-94134"},{"id":"SEA-CVE-2026-94134-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Apache Airflow SSH provider hook disables SSH host-key verification by default: unless hostkey is configured or nohostkeycheck is explicitly set to false, it accepts any server key. This affects SSH and SFTP connections that rely on the default.","source_quote_or_pointer":"Advisory description (CVE-2026-94134)","fact_id":"SEA-CVE-2026-94134-F2","document_citation":"Advisory description (CVE-2026-94134)"}],"source_stated_contributors":["The Apache Airflow SSH provider hook disables SSH host-key verification by default: unless hostkey is configured or nohostkeycheck is explicitly set to false, it accepts any server key. This affects SSH and SFTP connections that rely on the default."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","data.credentials_secrets","arch.async_job"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-94134","reporting_entity":"CVE-2026-94134","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-94134-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-94134-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-94134"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-94135","title":"The Apache Airflow SFTP provider's deferrable code paths (SFTPTrigger, SFTPHookAsync, SFTPClientPool) disable SSH host-key verification by default unless the connection explicitly sets no_host_key_check to false. Deployments that run SFTP sensors or operators in deferrable mode are affected. An attacker in a machine-in-the-middle position between the triggerer and the SFTP server can impersonate the server and capture the credentials or data exchanged. Users of apache-airflow-providers-sftp are recommended to upgrade to apache-airflow-providers-sftp 7.0.0 or later. This is a separate defect from CVE-2026-94134 (the synchronous SSH hook default, which also affects the SFTP hook); users who applied the fix for one also need this release for the other - apache-airflow-providers-sftp 7.0.0 fixes both.","display_title":"Software component issue could expose accounts or credentials","display_summary":"The Apache Airflow SFTP provider's deferrable code paths (SFTPTrigger, SFTPHookAsync, SFTPClientPool) disable SSH host-key verification by default unless the connection explicitly sets nohostkeycheck to false.","display_reference":"CVE-2026-94135","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-94135","source_title":"The Apache Airflow SFTP provider's deferrable code paths (SFTPTrigger, SFTPHookAsync, SFTPClientPool) disable SSH host-key verification by default unless the connection explicitly sets no_host_key_check to false. Deployments that run SFTP sensors or operators in deferrable mode are affected. An attacker in a machine-in-the-middle position between the triggerer and the SFTP server can impersonate the server and capture the credentials or data exchanged. Users of apache-airflow-providers-sftp are recommended to upgrade to apache-airflow-providers-sftp 7.0.0 or later. This is a separate defect from CVE-2026-94134 (the synchronous SSH hook default, which also affects the SFTP hook); users who applied the fix for one also need this release for the other - apache-airflow-providers-sftp 7.0.0 fixes both.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T16:33:35.962Z","source_hash":"content-fingerprint:fnv1a-fba3b8ed","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-94135-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Apache Airflow SFTP provider's deferrable code paths (SFTPTrigger, SFTPHookAsync, SFTPClientPool) disable SSH host-key verification by default unless the connection explicitly sets no_host_key_check to false. Deployments that run SFTP sensors or operators in deferrable mode are affected. An attacker in a machine-in-the-middle position between the triggerer and the SFTP server can impersonate the server and capture the credentials or data exchanged. Users of apache-airflow-providers-sftp are recommended to upgrade to apache-airflow-providers-sftp 7.0.0 or later. This is a separate defect from CVE-2026-94134 (the synchronous SSH hook default, which also affects the SFTP hook); users who applied the fix for one also need this release for the other - apache-airflow-providers-sftp 7.0.0 fixes both.","source_quote_or_pointer":"Security Advisory CVE-2026-94135","fact_id":"SEA-CVE-2026-94135-F1","document_citation":"Security Advisory CVE-2026-94135"},{"id":"SEA-CVE-2026-94135-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Apache Airflow SFTP provider's deferrable code paths (SFTPTrigger, SFTPHookAsync, SFTPClientPool) disable SSH host-key verification by default unless the connection explicitly sets nohostkeycheck to false. Deployments that run SFTP sensors or operators in deferrable mode are affected.","source_quote_or_pointer":"Advisory description (CVE-2026-94135)","fact_id":"SEA-CVE-2026-94135-F2","document_citation":"Advisory description (CVE-2026-94135)"}],"source_stated_contributors":["The Apache Airflow SFTP provider's deferrable code paths (SFTPTrigger, SFTPHookAsync, SFTPClientPool) disable SSH host-key verification by default unless the connection explicitly sets nohostkeycheck to false. Deployments that run SFTP sensors or operators in deferrable mode are affected."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-94135","reporting_entity":"CVE-2026-94135","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-94135-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-94135-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-94135"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-96806","title":"The Apache Airflow Keycloak auth manager did not end the session on logout: the logout route revoked the presented token, but KeycloakJWTMiddleware then issued a new, unrevoked token on the same response, so the user stayed logged in. Deployments using the Keycloak auth manager are affected: after a user logs out, anyone with later access to the same browser (for example on a shared workstation) can continue to act as that user. Users of apache-airflow-providers-keycloak are recommended to upgrade to apache-airflow-providers-keycloak 0.11.1 or later.","display_title":"Security issue reported in Software component","display_summary":"The Apache Airflow Keycloak auth manager did not end the session on logout: the logout route revoked the presented token, but KeycloakJWTMiddleware then issued a new, unrevoked token on the same response, so the user…","display_reference":"CVE-2026-96806","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-96806","source_title":"The Apache Airflow Keycloak auth manager did not end the session on logout: the logout route revoked the presented token, but KeycloakJWTMiddleware then issued a new, unrevoked token on the same response, so the user stayed logged in. Deployments using the Keycloak auth manager are affected: after a user logs out, anyone with later access to the same browser (for example on a shared workstation) can continue to act as that user. Users of apache-airflow-providers-keycloak are recommended to upgrade to apache-airflow-providers-keycloak 0.11.1 or later.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T16:33:35.963Z","source_hash":"content-fingerprint:fnv1a-2c36ce0c","affected_system":{"organization":"The Apache Airflow Keycloak auth manager did not end the session on logout project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-96806-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Apache Airflow Keycloak auth manager did not end the session on logout: the logout route revoked the presented token, but KeycloakJWTMiddleware then issued a new, unrevoked token on the same response, so the user stayed logged in. Deployments using the Keycloak auth manager are affected: after a user logs out, anyone with later access to the same browser (for example on a shared workstation) can continue to act as that user. Users of apache-airflow-providers-keycloak are recommended to upgrade to apache-airflow-providers-keycloak 0.11.1 or later.","source_quote_or_pointer":"Security Advisory CVE-2026-96806","fact_id":"SEA-CVE-2026-96806-F1","document_citation":"Security Advisory CVE-2026-96806"},{"id":"SEA-CVE-2026-96806-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Apache Airflow Keycloak auth manager did not end the session on logout: the logout route revoked the presented token, but KeycloakJWTMiddleware then issued a new, unrevoked token on the same response, so the user stayed logged in.","source_quote_or_pointer":"Advisory description (CVE-2026-96806)","fact_id":"SEA-CVE-2026-96806-F2","document_citation":"Advisory description (CVE-2026-96806)"}],"source_stated_contributors":["The Apache Airflow Keycloak auth manager did not end the session on logout: the logout route revoked the presented token, but KeycloakJWTMiddleware then issued a new, unrevoked token on the same response, so the user stayed logged in."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-96806","reporting_entity":"CVE-2026-96806","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-96806-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-96806-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-96806"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-92982","title":"A flaw was found in Ansible Operator Plugins. A low-privileged Kubernetes user can exploit a Jinja2 template injection vulnerability by crafting malicious custom resource (CR) specification values. These values are processed by Ansible without proper sanitization, allowing embedded Jinja2 expressions to be executed within the operator pod. This can lead to arbitrary code execution and privilege escalation, granting the attacker control over the operator's service account with cluster-wide permissions.","display_title":"Software component issue could allow unintended commands to run","display_summary":"A flaw was found in Ansible Operator Plugins. A low-privileged Kubernetes user can exploit a Jinja2 template injection vulnerability by crafting malicious custom resource (CR) specification values.","display_reference":"CVE-2026-92982","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92982","source_title":"A flaw was found in Ansible Operator Plugins. A low-privileged Kubernetes user can exploit a Jinja2 template injection vulnerability by crafting malicious custom resource (CR) specification values. These values are processed by Ansible without proper sanitization, allowing embedded Jinja2 expressions to be executed within the operator pod. This can lead to arbitrary code execution and privilege escalation, granting the attacker control over the operator's service account with cluster-wide permissions.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T16:33:35.973Z","source_hash":"content-fingerprint:fnv1a-47b2c43d","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Cloud & container infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-92982-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A flaw was found in Ansible Operator Plugins. A low-privileged Kubernetes user can exploit a Jinja2 template injection vulnerability by crafting malicious custom resource (CR) specification values. These values are processed by Ansible without proper sanitization, allowing embedded Jinja2 expressions to be executed within the operator pod. This can lead to arbitrary code execution and privilege escalation, granting the attacker control over the operator's service account with cluster-wide permissions.","source_quote_or_pointer":"Security Advisory CVE-2026-92982","fact_id":"SEA-CVE-2026-92982-F1","document_citation":"Security Advisory CVE-2026-92982"},{"id":"SEA-CVE-2026-92982-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A flaw was found in Ansible Operator Plugins. A low-privileged Kubernetes user can exploit a Jinja2 template injection vulnerability by crafting malicious custom resource (CR) specification values.","source_quote_or_pointer":"Advisory description (CVE-2026-92982)","fact_id":"SEA-CVE-2026-92982-F2","document_citation":"Advisory description (CVE-2026-92982)"}],"source_stated_contributors":["A flaw was found in Ansible Operator Plugins. A low-privileged Kubernetes user can exploit a Jinja2 template injection vulnerability by crafting malicious custom resource (CR) specification values."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.code_execution","auth.privileged_action","auth.infrastructure_modification","data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-92982","reporting_entity":"CVE-2026-92982","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-92982-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-92982-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-92982"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-111363","title":"BISHENG through 3.0.0-beta4 contains an insecure direct object reference vulnerability that allows authenticated low-privileged users to read other users' parsed documents by supplying arbitrary file_id values. Attackers can enumerate sequential file ids against GET /api/v1/knowledge/file_bbox to retrieve extracted page text from other users' and tenants' knowledge bases.","display_title":"Security issue reported in Software component","display_summary":"BISHENG through 3.0.0-beta4 contains an insecure direct object reference vulnerability that allows authenticated low-privileged users to read other users' parsed documents by supplying arbitrary fileid values.","display_reference":"CVE-2026-111363","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111363","source_title":"BISHENG through 3.0.0-beta4 contains an insecure direct object reference vulnerability that allows authenticated low-privileged users to read other users' parsed documents by supplying arbitrary file_id values. Attackers can enumerate sequential file ids against GET /api/v1/knowledge/file_bbox to retrieve extracted page text from other users' and tenants' knowledge bases.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T16:33:35.981Z","source_hash":"content-fingerprint:fnv1a-fd56efa0","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-111363-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"BISHENG through 3.0.0-beta4 contains an insecure direct object reference vulnerability that allows authenticated low-privileged users to read other users' parsed documents by supplying arbitrary file_id values. Attackers can enumerate sequential file ids against GET /api/v1/knowledge/file_bbox to retrieve extracted page text from other users' and tenants' knowledge bases.","source_quote_or_pointer":"Security Advisory CVE-2026-111363","fact_id":"SEA-CVE-2026-111363-F1","document_citation":"Security Advisory CVE-2026-111363"},{"id":"SEA-CVE-2026-111363-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"BISHENG through 3.0.0-beta4 contains an insecure direct object reference vulnerability that allows authenticated low-privileged users to read other users' parsed documents by supplying arbitrary fileid values.","source_quote_or_pointer":"Advisory description (CVE-2026-111363)","fact_id":"SEA-CVE-2026-111363-F2","document_citation":"Advisory description (CVE-2026-111363)"}],"source_stated_contributors":["BISHENG through 3.0.0-beta4 contains an insecure direct object reference vulnerability that allows authenticated low-privileged users to read other users' parsed documents by supplying arbitrary fileid values."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii","data.uploaded_files"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-111363","reporting_entity":"CVE-2026-111363","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-111363-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-111363-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-111363"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-111354","title":"crmeb_java through 3.1 contains an authorization bypass vulnerability that allows authenticated members to read other members' orders by supplying their order numbers. Attackers can request /api/front/order/express/{orderId} or /api/front/order/apply/refund/{orderId} to view victims' tracking numbers, logistics traces, payment amounts and product lines.","display_title":"Software component issue could allow unauthorized access","display_summary":"crmebjava through 3.1 contains an authorization bypass vulnerability that allows authenticated members to read other members' orders by supplying their order numbers.","display_reference":"CVE-2026-111354","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111354","source_title":"crmeb_java through 3.1 contains an authorization bypass vulnerability that allows authenticated members to read other members' orders by supplying their order numbers. Attackers can request /api/front/order/express/{orderId} or /api/front/order/apply/refund/{orderId} to view victims' tracking numbers, logistics traces, payment amounts and product lines.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T16:33:35.982Z","source_hash":"content-fingerprint:fnv1a-d30885b6","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-111354-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"crmeb_java through 3.1 contains an authorization bypass vulnerability that allows authenticated members to read other members' orders by supplying their order numbers. Attackers can request /api/front/order/express/{orderId} or /api/front/order/apply/refund/{orderId} to view victims' tracking numbers, logistics traces, payment amounts and product lines.","source_quote_or_pointer":"Security Advisory CVE-2026-111354","fact_id":"SEA-CVE-2026-111354-F1","document_citation":"Security Advisory CVE-2026-111354"},{"id":"SEA-CVE-2026-111354-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"crmebjava through 3.1 contains an authorization bypass vulnerability that allows authenticated members to read other members' orders by supplying their order numbers.","source_quote_or_pointer":"Advisory description (CVE-2026-111354)","fact_id":"SEA-CVE-2026-111354-F2","document_citation":"Advisory description (CVE-2026-111354)"}],"source_stated_contributors":["crmebjava through 3.1 contains an authorization bypass vulnerability that allows authenticated members to read other members' orders by supplying their order numbers."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.financial_action"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-111354","reporting_entity":"CVE-2026-111354","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-111354-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-111354-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-111354"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-111349","title":"Craftplan through 0.7.5 contains a missing authorization vulnerability in the CRM Customer resource that allows unauthenticated attackers to create customer records via JSON:API and GraphQL. Attackers can send anonymous requests to POST /api/json/customers or the create_customer mutation to insert attacker-chosen names, contact details and addresses into the operator's CRM.","display_title":"Security issue reported in Software component","display_summary":"Craftplan through 0.7.5 contains a missing authorization vulnerability in the CRM Customer resource that allows unauthenticated attackers to create customer records via JSON:API and GraphQL.","display_reference":"CVE-2026-111349","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111349","source_title":"Craftplan through 0.7.5 contains a missing authorization vulnerability in the CRM Customer resource that allows unauthenticated attackers to create customer records via JSON:API and GraphQL. Attackers can send anonymous requests to POST /api/json/customers or the create_customer mutation to insert attacker-chosen names, contact details and addresses into the operator's CRM.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T16:33:35.982Z","source_hash":"content-fingerprint:fnv1a-a71647c","affected_system":{"organization":"Craftplan through 0.7.5 contains a missing authorization vulnerability in the CRM Customer resource that allows unauthenticated attackers to create customer records via JSON project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-111349-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Craftplan through 0.7.5 contains a missing authorization vulnerability in the CRM Customer resource that allows unauthenticated attackers to create customer records via JSON:API and GraphQL. Attackers can send anonymous requests to POST /api/json/customers or the create_customer mutation to insert attacker-chosen names, contact details and addresses into the operator's CRM.","source_quote_or_pointer":"Security Advisory CVE-2026-111349","fact_id":"SEA-CVE-2026-111349-F1","document_citation":"Security Advisory CVE-2026-111349"},{"id":"SEA-CVE-2026-111349-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Craftplan through 0.7.5 contains a missing authorization vulnerability in the CRM Customer resource that allows unauthenticated attackers to create customer records via JSON:API and GraphQL.","source_quote_or_pointer":"Advisory description (CVE-2026-111349)","fact_id":"SEA-CVE-2026-111349-F2","document_citation":"Advisory description (CVE-2026-111349)"}],"source_stated_contributors":["Craftplan through 0.7.5 contains a missing authorization vulnerability in the CRM Customer resource that allows unauthenticated attackers to create customer records via JSON:API and GraphQL."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.pii"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-111349","reporting_entity":"CVE-2026-111349","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-111349-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-111349-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-111349"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-111344","title":"APITable through 1.14.0-beta contains an authorization bypass vulnerability that allows authenticated users to read node descriptions from other spaces by supplying a user-controlled nodeId. Attackers can request GET /node/{nodeId}/description, which skips space membership and node permission checks, to disclose cross-tenant datasheet, folder, and form descriptions.","display_title":"Software component issue could allow unauthorized access","display_summary":"APITable through 1.14.0-beta contains an authorization bypass vulnerability that allows authenticated users to read node descriptions from other spaces by supplying a user-controlled nodeId.","display_reference":"CVE-2026-111344","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111344","source_title":"APITable through 1.14.0-beta contains an authorization bypass vulnerability that allows authenticated users to read node descriptions from other spaces by supplying a user-controlled nodeId. Attackers can request GET /node/{nodeId}/description, which skips space membership and node permission checks, to disclose cross-tenant datasheet, folder, and form descriptions.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T16:33:35.982Z","source_hash":"content-fingerprint:fnv1a-3df6dcf7","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-111344-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"APITable through 1.14.0-beta contains an authorization bypass vulnerability that allows authenticated users to read node descriptions from other spaces by supplying a user-controlled nodeId. Attackers can request GET /node/{nodeId}/description, which skips space membership and node permission checks, to disclose cross-tenant datasheet, folder, and form descriptions.","source_quote_or_pointer":"Security Advisory CVE-2026-111344","fact_id":"SEA-CVE-2026-111344-F1","document_citation":"Security Advisory CVE-2026-111344"},{"id":"SEA-CVE-2026-111344-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"APITable through 1.14.0-beta contains an authorization bypass vulnerability that allows authenticated users to read node descriptions from other spaces by supplying a user-controlled nodeId.","source_quote_or_pointer":"Advisory description (CVE-2026-111344)","fact_id":"SEA-CVE-2026-111344-F2","document_citation":"Advisory description (CVE-2026-111344)"}],"source_stated_contributors":["APITable through 1.14.0-beta contains an authorization bypass vulnerability that allows authenticated users to read node descriptions from other spaces by supplying a user-controlled nodeId."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-111344","reporting_entity":"CVE-2026-111344","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-111344-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-111344-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-111344"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-111329","title":"JuggleIM im-server through 1.8.16 ships default administrator credentials admin/123456 that allow unauthenticated remote attackers to access the admin console on port 8090. Attackers can log in as administrator, even after account deletion since CheckLogin recreates it, to control tenant applications and app secrets.","display_title":"Software component issue could expose accounts or credentials","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-111329","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111329","source_title":"JuggleIM im-server through 1.8.16 ships default administrator credentials admin/123456 that allow unauthenticated remote attackers to access the admin console on port 8090. Attackers can log in as administrator, even after account deletion since CheckLogin recreates it, to control tenant applications and app secrets.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T16:33:35.982Z","source_hash":"content-fingerprint:fnv1a-f7eac432","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-111329-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"JuggleIM im-server through 1.8.16 ships default administrator credentials admin/123456 that allow unauthenticated remote attackers to access the admin console on port 8090. Attackers can log in as administrator, even after account deletion since CheckLogin recreates it, to control tenant applications and app secrets.","source_quote_or_pointer":"Security Advisory CVE-2026-111329","fact_id":"SEA-CVE-2026-111329-F1","document_citation":"Security Advisory CVE-2026-111329"},{"id":"SEA-CVE-2026-111329-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"JuggleIM im-server through 1.8.16 ships default administrator credentials admin/123456 that allow unauthenticated remote attackers to access the admin console on port 8090. Attackers can log in as administrator, even after account deletion since CheckLogin recreates it, to control tenant applications and app secrets.","source_quote_or_pointer":"Advisory description (CVE-2026-111329)","fact_id":"SEA-CVE-2026-111329-F2","document_citation":"Advisory description (CVE-2026-111329)"}],"source_stated_contributors":["JuggleIM im-server through 1.8.16 ships default administrator credentials admin/123456 that allow unauthenticated remote attackers to access the admin console on port 8090. Attackers can log in as administrator, even after account deletion since CheckLogin recreates it, to control tenant applications and app secrets."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.privileged_action","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-111329","reporting_entity":"CVE-2026-111329","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-111329-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-111329-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-111329"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-111320","title":"ValueCell through 0.1.20 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to direct backend requests by setting an unvalidated provider base_url. Attackers can set base_url via the provider config endpoint and trigger POST /api/v1/models/check to reach internal or metadata addresses, read error responses, and capture stored provider API keys.","display_title":"Software component issue could reach internal services","display_summary":"ValueCell through 0.1.20 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to direct backend requests by setting an unvalidated provider baseurl.","display_reference":"CVE-2026-111320","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111320","source_title":"ValueCell through 0.1.20 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to direct backend requests by setting an unvalidated provider base_url. Attackers can set base_url via the provider config endpoint and trigger POST /api/v1/models/check to reach internal or metadata addresses, read error responses, and capture stored provider API keys.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T16:33:35.983Z","source_hash":"content-fingerprint:fnv1a-d6b12e3b","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-111320-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"ValueCell through 0.1.20 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to direct backend requests by setting an unvalidated provider base_url. Attackers can set base_url via the provider config endpoint and trigger POST /api/v1/models/check to reach internal or metadata addresses, read error responses, and capture stored provider API keys.","source_quote_or_pointer":"Security Advisory CVE-2026-111320","fact_id":"SEA-CVE-2026-111320-F1","document_citation":"Security Advisory CVE-2026-111320"},{"id":"SEA-CVE-2026-111320-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"ValueCell through 0.1.20 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to direct backend requests by setting an unvalidated provider baseurl.","source_quote_or_pointer":"Advisory description (CVE-2026-111320)","fact_id":"SEA-CVE-2026-111320-F2","document_citation":"Advisory description (CVE-2026-111320)"}],"source_stated_contributors":["ValueCell through 0.1.20 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to direct backend requests by setting an unvalidated provider baseurl."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Internal network access","Cloud metadata or credential exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-111320","reporting_entity":"CVE-2026-111320","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-111320-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-111320-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"The service fetched a URL chosen by the caller and could be steered at internal systems. Restrict outbound destinations and block internal address ranges.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-111320"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-110362","title":"Missing Authorization vulnerability in Planet studio PlanetStudio Payment Gateway planetstudio-payment-gateway allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PlanetStudio Payment Gateway: from n/a through 1.3.3.","display_title":"Software component issue could allow unauthorized access","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-110362","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110362","source_title":"Missing Authorization vulnerability in Planet studio PlanetStudio Payment Gateway planetstudio-payment-gateway allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PlanetStudio Payment Gateway: from n/a through 1.3.3.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T16:33:35.985Z","source_hash":"content-fingerprint:fnv1a-5c015318","affected_system":{"organization":"Missing Authorization vulnerability in Planet studio PlanetStudio Payment Gateway planetstudio-payment-gateway allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PlanetStudio Payment Gateway project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-110362-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Missing Authorization vulnerability in Planet studio PlanetStudio Payment Gateway planetstudio-payment-gateway allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PlanetStudio Payment Gateway: from n/a through 1.3.3.","source_quote_or_pointer":"Security Advisory CVE-2026-110362","fact_id":"SEA-CVE-2026-110362-F1","document_citation":"Security Advisory CVE-2026-110362"},{"id":"SEA-CVE-2026-110362-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Missing Authorization vulnerability in Planet studio PlanetStudio Payment Gateway planetstudio-payment-gateway allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PlanetStudio Payment Gateway: from n/a through 1.3.3.","source_quote_or_pointer":"Advisory description (CVE-2026-110362)","fact_id":"SEA-CVE-2026-110362-F2","document_citation":"Advisory description (CVE-2026-110362)"}],"source_stated_contributors":["Missing Authorization vulnerability in Planet studio PlanetStudio Payment Gateway planetstudio-payment-gateway allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PlanetStudio Payment Gateway: from n/a through 1.3.3."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.financial_action","auth.privileged_action","arch.external_api"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-110362","reporting_entity":"CVE-2026-110362","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-110362-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-110362-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-110362"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-16438","title":"Incorrect Privilege Assignment vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, ICONICS Suite versions 10.97.3 and prior, Hyper Historian versions 10.97.3 and prior, AnalytiX versions 10.97.3 and prior, MobileHMI 10.97.3 and prior, MC Works64 all versions, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97.3 and prior, ICONICS Suite versions 10.97.3 and prior, Hyper Historian versions 10.97.3 and prior, AnalytiX versions 10.97.3 and prior, and MobileHMI 10.97.3 and prior allows an attacker who can log in using the same administrator account for the affected products to launch and operate DCOM objects locally or remotely. During installation, the installers of the affected products unnecessarily grant default DCOM permissions to the administrator account of the affected products. Users with that administrator accounts can locally or remotely launch and operate DCOM objects that should require UAC elevation. As a result, the attacker may disclose, tamper with, destroy, or delete internal information, or cause the affected system to enter a denial-of-service (DoS) condition.","display_title":"Software component issue could make the service unavailable","display_summary":"Incorrect Privilege Assignment vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, ICONICS Suite versions 10.97.3 and prior, Hyper Historian versions 10.97.3 and prior, AnalytiX versions 10.97.3…","display_reference":"CVE-2026-16438","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-16438","source_title":"Incorrect Privilege Assignment vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, ICONICS Suite versions 10.97.3 and prior, Hyper Historian versions 10.97.3 and prior, AnalytiX versions 10.97.3 and prior, MobileHMI 10.97.3 and prior, MC Works64 all versions, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97.3 and prior, ICONICS Suite versions 10.97.3 and prior, Hyper Historian versions 10.97.3 and prior, AnalytiX versions 10.97.3 and prior, and MobileHMI 10.97.3 and prior allows an attacker who can log in using the same administrator account for the affected products to launch and operate DCOM objects locally or remotely. During installation, the installers of the affected products unnecessarily grant default DCOM permissions to the administrator account of the affected products. Users with that administrator accounts can locally or remotely launch and operate DCOM objects that should require UAC elevation. As a result, the attacker may disclose, tamper with, destroy, or delete internal information, or cause the affected system to enter a denial-of-service (DoS) condition.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T11:15:24.950Z","source_hash":"content-fingerprint:fnv1a-fdbe434b","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-16438-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Incorrect Privilege Assignment vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, ICONICS Suite versions 10.97.3 and prior, Hyper Historian versions 10.97.3 and prior, AnalytiX versions 10.97.3 and prior, MobileHMI 10.97.3 and prior, MC Works64 all versions, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97.3 and prior, ICONICS Suite versions 10.97.3 and prior, Hyper Historian versions 10.97.3 and prior, AnalytiX versions 10.97.3 and prior, and MobileHMI 10.97.3 and prior allows an attacker who can log in using the same administrator account for the affected products to launch and operate DCOM objects locally or remotely. During installation, the installers of the affected products unnecessarily grant default DCOM permissions to the administrator account of the affected products. Users with that administrator accounts can locally or remotely launch and operate DCOM objects that should require UAC elevation. As a result, the attacker may disclose, tamper with, destroy, or delete internal information, or cause the affected system to enter a denial-of-service (DoS) condition.","source_quote_or_pointer":"Security Advisory CVE-2026-16438","fact_id":"SEA-CVE-2026-16438-F1","document_citation":"Security Advisory CVE-2026-16438"},{"id":"SEA-CVE-2026-16438-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Incorrect Privilege Assignment vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, ICONICS Suite versions 10.97.3 and prior, Hyper Historian versions 10.97.3 and prior, AnalytiX versions 10.97.3 and prior, MobileHMI 10.97.3 and prior, MC Works64 all versions, Mitsubishi Electric Iconics Digital…","source_quote_or_pointer":"Advisory description (CVE-2026-16438)","fact_id":"SEA-CVE-2026-16438-F2","document_citation":"Advisory description (CVE-2026-16438)"}],"source_stated_contributors":["Incorrect Privilege Assignment vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, ICONICS Suite versions 10.97.3 and prior, Hyper Historian versions 10.97.3 and prior, AnalytiX versions 10.97.3 and prior, MobileHMI 10.97.3 and prior, MC Works64 all versions, Mitsubishi Electric Iconics Digital…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.privileged_action","auth.write_action","data.pii"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-16438","reporting_entity":"CVE-2026-16438","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-16438-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-16438-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-16438"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-16437","title":"Weak Password Recovery Mechanism for Forgotten Password vulnerability in Mitsubishi Electric GENESIS versions 11.03 and prior, GENESIS64 versions 10.97.3 and prior, ICONICS Suite versions 10.97.3 and prior, Hyper Historian versions 10.97.3 and prior, AnalytiX versions 10.97.3 and prior, MobileHMI 10.97.3 and prior, IoTWorX 10.97.3 and prior, MC Works64 all versions, GENESIS32 all versions, BizViz all versions, Mitsubishi Electric Iconics Digital Solutions GENESIS versions 11.03 and prior, GENESIS64 versions 10.97.3 and prior, ICONICS Suite versions 10.97.3 and prior, Hyper Historian versions 10.97.3 and prior, AnalytiX versions 10.97.3 and prior, MobileHMI 10.97.3 and prior, IoTWorX 10.97.3 and prior, GENESIS32 all versions, and BizViz all versions allows an authenticated local user with administrative privileges to unlock the system by tampering with the management file that stores the challenge response. Administrators are able to read and write the management file. But the management file is protected by Windows. As a result, the attacker may disclose, tamper with, destroy, or delete internal information, or cause the affected system to enter a denial-of-service (DoS) condition.","display_title":"Software component issue could make the service unavailable","display_summary":"Weak Password Recovery Mechanism for Forgotten Password vulnerability in Mitsubishi Electric GENESIS versions 11.03 and prior, GENESIS64 versions 10.97.3 and prior, ICONICS Suite versions 10.97.3 and prior, Hyper…","display_reference":"CVE-2026-16437","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-16437","source_title":"Weak Password Recovery Mechanism for Forgotten Password vulnerability in Mitsubishi Electric GENESIS versions 11.03 and prior, GENESIS64 versions 10.97.3 and prior, ICONICS Suite versions 10.97.3 and prior, Hyper Historian versions 10.97.3 and prior, AnalytiX versions 10.97.3 and prior, MobileHMI 10.97.3 and prior, IoTWorX 10.97.3 and prior, MC Works64 all versions, GENESIS32 all versions, BizViz all versions, Mitsubishi Electric Iconics Digital Solutions GENESIS versions 11.03 and prior, GENESIS64 versions 10.97.3 and prior, ICONICS Suite versions 10.97.3 and prior, Hyper Historian versions 10.97.3 and prior, AnalytiX versions 10.97.3 and prior, MobileHMI 10.97.3 and prior, IoTWorX 10.97.3 and prior, GENESIS32 all versions, and BizViz all versions allows an authenticated local user with administrative privileges to unlock the system by tampering with the management file that stores the challenge response. Administrators are able to read and write the management file. But the management file is protected by Windows. As a result, the attacker may disclose, tamper with, destroy, or delete internal information, or cause the affected system to enter a denial-of-service (DoS) condition.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T11:15:24.951Z","source_hash":"content-fingerprint:fnv1a-a3b323ea","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-16437-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Weak Password Recovery Mechanism for Forgotten Password vulnerability in Mitsubishi Electric GENESIS versions 11.03 and prior, GENESIS64 versions 10.97.3 and prior, ICONICS Suite versions 10.97.3 and prior, Hyper Historian versions 10.97.3 and prior, AnalytiX versions 10.97.3 and prior, MobileHMI 10.97.3 and prior, IoTWorX 10.97.3 and prior, MC Works64 all versions, GENESIS32 all versions, BizViz all versions, Mitsubishi Electric Iconics Digital Solutions GENESIS versions 11.03 and prior, GENESIS64 versions 10.97.3 and prior, ICONICS Suite versions 10.97.3 and prior, Hyper Historian versions 10.97.3 and prior, AnalytiX versions 10.97.3 and prior, MobileHMI 10.97.3 and prior, IoTWorX 10.97.3 and prior, GENESIS32 all versions, and BizViz all versions allows an authenticated local user with administrative privileges to unlock the system by tampering with the management file that stores the challenge response. Administrators are able to read and write the management file. But the management file is protected by Windows. As a result, the attacker may disclose, tamper with, destroy, or delete internal information, or cause the affected system to enter a denial-of-service (DoS) condition.","source_quote_or_pointer":"Security Advisory CVE-2026-16437","fact_id":"SEA-CVE-2026-16437-F1","document_citation":"Security Advisory CVE-2026-16437"},{"id":"SEA-CVE-2026-16437-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Weak Password Recovery Mechanism for Forgotten Password vulnerability in Mitsubishi Electric GENESIS versions 11.03 and prior, GENESIS64 versions 10.97.3 and prior, ICONICS Suite versions 10.97.3 and prior, Hyper Historian versions 10.97.3 and prior, AnalytiX versions 10.97.3 and prior, MobileHMI 10.97.3 and prior,…","source_quote_or_pointer":"Advisory description (CVE-2026-16437)","fact_id":"SEA-CVE-2026-16437-F2","document_citation":"Advisory description (CVE-2026-16437)"}],"source_stated_contributors":["Weak Password Recovery Mechanism for Forgotten Password vulnerability in Mitsubishi Electric GENESIS versions 11.03 and prior, GENESIS64 versions 10.97.3 and prior, ICONICS Suite versions 10.97.3 and prior, Hyper Historian versions 10.97.3 and prior, AnalytiX versions 10.97.3 and prior, MobileHMI 10.97.3 and prior,…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.write_action","data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-16437","reporting_entity":"CVE-2026-16437","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-16437-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-16437-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-16437"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-16436","title":"Weak Password Recovery Mechanism for Forgotten Password vulnerability in Mitsubishi Electric GENESIS versions 11.03 and prior, GENESIS64 versions 10.97.3 and prior, ICONICS Suite versions 10.97.3 and prior, Hyper Historian versions 10.97.3 and prior, AnalytiX versions 10.97.3 and prior, MobileHMI 10.97.3 and prior, IoTWorX 10.97.3 and prior, MC Works64 all versions, GENESIS32 all versions, BizViz all versions, Mitsubishi Electric Iconics Digital Solutions GENESIS versions 11.03 and prior, GENESIS64 versions 10.97.3 and prior, ICONICS Suite versions 10.97.3 and prior, Hyper Historian versions 10.97.3 and prior, AnalytiX versions 10.97.3 and prior, MobileHMI 10.97.3 and prior, IoTWorX 10.97.3 and prior, GENESIS32 all versions, and BizViz all versions allows a remote attacker to unlock the system by obtaining the challenge response by some means. The challenge response used to unlock the system is common to all users and fixed. As a result, the attacker may disclose, tamper with, destroy, or delete internal information, or cause the affected system to enter a denial-of-service (DoS) condition.","display_title":"Software component issue could make the service unavailable","display_summary":"Weak Password Recovery Mechanism for Forgotten Password vulnerability in Mitsubishi Electric GENESIS versions 11.03 and prior, GENESIS64 versions 10.97.3 and prior, ICONICS Suite versions 10.97.3 and prior, Hyper…","display_reference":"CVE-2026-16436","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-16436","source_title":"Weak Password Recovery Mechanism for Forgotten Password vulnerability in Mitsubishi Electric GENESIS versions 11.03 and prior, GENESIS64 versions 10.97.3 and prior, ICONICS Suite versions 10.97.3 and prior, Hyper Historian versions 10.97.3 and prior, AnalytiX versions 10.97.3 and prior, MobileHMI 10.97.3 and prior, IoTWorX 10.97.3 and prior, MC Works64 all versions, GENESIS32 all versions, BizViz all versions, Mitsubishi Electric Iconics Digital Solutions GENESIS versions 11.03 and prior, GENESIS64 versions 10.97.3 and prior, ICONICS Suite versions 10.97.3 and prior, Hyper Historian versions 10.97.3 and prior, AnalytiX versions 10.97.3 and prior, MobileHMI 10.97.3 and prior, IoTWorX 10.97.3 and prior, GENESIS32 all versions, and BizViz all versions allows a remote attacker to unlock the system by obtaining the challenge response by some means. The challenge response used to unlock the system is common to all users and fixed. As a result, the attacker may disclose, tamper with, destroy, or delete internal information, or cause the affected system to enter a denial-of-service (DoS) condition.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T11:15:24.953Z","source_hash":"content-fingerprint:fnv1a-4f1b6153","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-16436-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Weak Password Recovery Mechanism for Forgotten Password vulnerability in Mitsubishi Electric GENESIS versions 11.03 and prior, GENESIS64 versions 10.97.3 and prior, ICONICS Suite versions 10.97.3 and prior, Hyper Historian versions 10.97.3 and prior, AnalytiX versions 10.97.3 and prior, MobileHMI 10.97.3 and prior, IoTWorX 10.97.3 and prior, MC Works64 all versions, GENESIS32 all versions, BizViz all versions, Mitsubishi Electric Iconics Digital Solutions GENESIS versions 11.03 and prior, GENESIS64 versions 10.97.3 and prior, ICONICS Suite versions 10.97.3 and prior, Hyper Historian versions 10.97.3 and prior, AnalytiX versions 10.97.3 and prior, MobileHMI 10.97.3 and prior, IoTWorX 10.97.3 and prior, GENESIS32 all versions, and BizViz all versions allows a remote attacker to unlock the system by obtaining the challenge response by some means. The challenge response used to unlock the system is common to all users and fixed. As a result, the attacker may disclose, tamper with, destroy, or delete internal information, or cause the affected system to enter a denial-of-service (DoS) condition.","source_quote_or_pointer":"Security Advisory CVE-2026-16436","fact_id":"SEA-CVE-2026-16436-F1","document_citation":"Security Advisory CVE-2026-16436"},{"id":"SEA-CVE-2026-16436-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Weak Password Recovery Mechanism for Forgotten Password vulnerability in Mitsubishi Electric GENESIS versions 11.03 and prior, GENESIS64 versions 10.97.3 and prior, ICONICS Suite versions 10.97.3 and prior, Hyper Historian versions 10.97.3 and prior, AnalytiX versions 10.97.3 and prior, MobileHMI 10.97.3 and prior,…","source_quote_or_pointer":"Advisory description (CVE-2026-16436)","fact_id":"SEA-CVE-2026-16436-F2","document_citation":"Advisory description (CVE-2026-16436)"}],"source_stated_contributors":["Weak Password Recovery Mechanism for Forgotten Password vulnerability in Mitsubishi Electric GENESIS versions 11.03 and prior, GENESIS64 versions 10.97.3 and prior, ICONICS Suite versions 10.97.3 and prior, Hyper Historian versions 10.97.3 and prior, AnalytiX versions 10.97.3 and prior, MobileHMI 10.97.3 and prior,…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.write_action","data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-16436","reporting_entity":"CVE-2026-16436","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-16436-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-16436-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-16436"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-111367","title":"BillionMail through 4.9 contains a hard-coded cryptographic key vulnerability that allows unauthenticated attackers to forge unsubscribe and subscribe-confirm JWTs by computing the key from shipped configuration constants. Attackers can submit forged tokens to /api/unsubscribe, /api/unsubscribe_new, or /api/subscribe/confirm to deactivate any contact or force confirmed subscriptions.","display_title":"Security issue reported in Software component","display_summary":"BillionMail through 4.9 contains a hard-coded cryptographic key vulnerability that allows unauthenticated attackers to forge unsubscribe and subscribe-confirm JWTs by computing the key from shipped configuration…","display_reference":"CVE-2026-111367","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111367","source_title":"BillionMail through 4.9 contains a hard-coded cryptographic key vulnerability that allows unauthenticated attackers to forge unsubscribe and subscribe-confirm JWTs by computing the key from shipped configuration constants. Attackers can submit forged tokens to /api/unsubscribe, /api/unsubscribe_new, or /api/subscribe/confirm to deactivate any contact or force confirmed subscriptions.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T04:24:19.065Z","source_hash":"content-fingerprint:fnv1a-6becb482","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-111367-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"BillionMail through 4.9 contains a hard-coded cryptographic key vulnerability that allows unauthenticated attackers to forge unsubscribe and subscribe-confirm JWTs by computing the key from shipped configuration constants. Attackers can submit forged tokens to /api/unsubscribe, /api/unsubscribe_new, or /api/subscribe/confirm to deactivate any contact or force confirmed subscriptions.","source_quote_or_pointer":"Security Advisory CVE-2026-111367","fact_id":"SEA-CVE-2026-111367-F1","document_citation":"Security Advisory CVE-2026-111367"},{"id":"SEA-CVE-2026-111367-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"BillionMail through 4.9 contains a hard-coded cryptographic key vulnerability that allows unauthenticated attackers to forge unsubscribe and subscribe-confirm JWTs by computing the key from shipped configuration constants.","source_quote_or_pointer":"Advisory description (CVE-2026-111367)","fact_id":"SEA-CVE-2026-111367-F2","document_citation":"Advisory description (CVE-2026-111367)"}],"source_stated_contributors":["BillionMail through 4.9 contains a hard-coded cryptographic key vulnerability that allows unauthenticated attackers to forge unsubscribe and subscribe-confirm JWTs by computing the key from shipped configuration constants."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-111367","reporting_entity":"CVE-2026-111367","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-111367-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-111367-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-111367"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-111353","title":"Peppermint through 0.5.5 contains a missing authorization vulnerability that allows any authenticated user to create time entries and attachments as other users by supplying a user id in the request body. Attackers can send POST requests to /api/v1/time/new or /api/v1/storage/ticket/:id/upload/single to attach files and time records to any ticket under another user's identity.","display_title":"Security issue reported in Software component","display_summary":"Peppermint through 0.5.5 contains a missing authorization vulnerability that allows any authenticated user to create time entries and attachments as other users by supplying a user id in the request body.","display_reference":"CVE-2026-111353","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111353","source_title":"Peppermint through 0.5.5 contains a missing authorization vulnerability that allows any authenticated user to create time entries and attachments as other users by supplying a user id in the request body. Attackers can send POST requests to /api/v1/time/new or /api/v1/storage/ticket/:id/upload/single to attach files and time records to any ticket under another user's identity.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T04:24:19.068Z","source_hash":"content-fingerprint:fnv1a-bd133b7","affected_system":{"organization":"Peppermint through 0.5.5 contains a missing authorization vulnerability that allows any authenticated user to create time entries and attachments as other users by supplying a user id in the request body. Attackers can send POST requests to /api/v1/time/new or /api/v1/storage/ticket/ project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-111353-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Peppermint through 0.5.5 contains a missing authorization vulnerability that allows any authenticated user to create time entries and attachments as other users by supplying a user id in the request body. Attackers can send POST requests to /api/v1/time/new or /api/v1/storage/ticket/:id/upload/single to attach files and time records to any ticket under another user's identity.","source_quote_or_pointer":"Security Advisory CVE-2026-111353","fact_id":"SEA-CVE-2026-111353-F1","document_citation":"Security Advisory CVE-2026-111353"},{"id":"SEA-CVE-2026-111353-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Peppermint through 0.5.5 contains a missing authorization vulnerability that allows any authenticated user to create time entries and attachments as other users by supplying a user id in the request body.","source_quote_or_pointer":"Advisory description (CVE-2026-111353)","fact_id":"SEA-CVE-2026-111353-F2","document_citation":"Advisory description (CVE-2026-111353)"}],"source_stated_contributors":["Peppermint through 0.5.5 contains a missing authorization vulnerability that allows any authenticated user to create time entries and attachments as other users by supplying a user id in the request body."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","data.uploaded_files"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-111353","reporting_entity":"CVE-2026-111353","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-111353-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-111353-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-111353"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-111352","title":"ThinkCMF through 8.0.1 contains an incorrect authorization vulnerability in RestAdminBaseController that allows restricted backend administrators to call every admin REST API endpoint because Auth::check() fails open when no admin_api rule exists. Attackers with a valid admin-type API token can list member emails and mobile numbers, disable members, and call PUT admin/roles/{id}/authorize to grant themselves full administrator rights.","display_title":"Security issue reported in Software component","display_summary":"ThinkCMF through 8.0.1 contains an incorrect authorization vulnerability in RestAdminBaseController that allows restricted backend administrators to call every admin REST API endpoint because Auth::check() fails open…","display_reference":"CVE-2026-111352","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111352","source_title":"ThinkCMF through 8.0.1 contains an incorrect authorization vulnerability in RestAdminBaseController that allows restricted backend administrators to call every admin REST API endpoint because Auth::check() fails open when no admin_api rule exists. Attackers with a valid admin-type API token can list member emails and mobile numbers, disable members, and call PUT admin/roles/{id}/authorize to grant themselves full administrator rights.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T04:24:19.068Z","source_hash":"content-fingerprint:fnv1a-ff81c00e","affected_system":{"organization":"ThinkCMF through 8.0.1 contains an incorrect authorization vulnerability in RestAdminBaseController that allows restricted backend administrators to call every admin REST API endpoint because Auth project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-111352-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"ThinkCMF through 8.0.1 contains an incorrect authorization vulnerability in RestAdminBaseController that allows restricted backend administrators to call every admin REST API endpoint because Auth::check() fails open when no admin_api rule exists. Attackers with a valid admin-type API token can list member emails and mobile numbers, disable members, and call PUT admin/roles/{id}/authorize to grant themselves full administrator rights.","source_quote_or_pointer":"Security Advisory CVE-2026-111352","fact_id":"SEA-CVE-2026-111352-F1","document_citation":"Security Advisory CVE-2026-111352"},{"id":"SEA-CVE-2026-111352-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"ThinkCMF through 8.0.1 contains an incorrect authorization vulnerability in RestAdminBaseController that allows restricted backend administrators to call every admin REST API endpoint because Auth::check() fails open when no adminapi rule exists.","source_quote_or_pointer":"Advisory description (CVE-2026-111352)","fact_id":"SEA-CVE-2026-111352-F2","document_citation":"Advisory description (CVE-2026-111352)"}],"source_stated_contributors":["ThinkCMF through 8.0.1 contains an incorrect authorization vulnerability in RestAdminBaseController that allows restricted backend administrators to call every admin REST API endpoint because Auth::check() fails open when no adminapi rule exists."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.credentials_secrets"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-111352","reporting_entity":"CVE-2026-111352","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-111352-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-111352-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-111352"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-111350","title":"Papermark through 0.22.0 contains a missing authorization vulnerability in the data room viewer group API that allows authenticated users to delete other teams' viewer groups and share links. Attackers who know a victim team's data room and group identifiers can send DELETE requests, read group links, or rewrite group document permissions across teams.","display_title":"Security issue reported in Software component","display_summary":"Papermark through 0.22.0 contains a missing authorization vulnerability in the data room viewer group API that allows authenticated users to delete other teams' viewer groups and share links.","display_reference":"CVE-2026-111350","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111350","source_title":"Papermark through 0.22.0 contains a missing authorization vulnerability in the data room viewer group API that allows authenticated users to delete other teams' viewer groups and share links. Attackers who know a victim team's data room and group identifiers can send DELETE requests, read group links, or rewrite group document permissions across teams.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T04:24:19.068Z","source_hash":"content-fingerprint:fnv1a-f25f9434","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-111350-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Papermark through 0.22.0 contains a missing authorization vulnerability in the data room viewer group API that allows authenticated users to delete other teams' viewer groups and share links. Attackers who know a victim team's data room and group identifiers can send DELETE requests, read group links, or rewrite group document permissions across teams.","source_quote_or_pointer":"Security Advisory CVE-2026-111350","fact_id":"SEA-CVE-2026-111350-F1","document_citation":"Security Advisory CVE-2026-111350"},{"id":"SEA-CVE-2026-111350-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Papermark through 0.22.0 contains a missing authorization vulnerability in the data room viewer group API that allows authenticated users to delete other teams' viewer groups and share links.","source_quote_or_pointer":"Advisory description (CVE-2026-111350)","fact_id":"SEA-CVE-2026-111350-F2","document_citation":"Advisory description (CVE-2026-111350)"}],"source_stated_contributors":["Papermark through 0.22.0 contains a missing authorization vulnerability in the data room viewer group API that allows authenticated users to delete other teams' viewer groups and share links."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.write_action","data.pii"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-111350","reporting_entity":"CVE-2026-111350","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-111350-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-111350-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-111350"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-111345","title":"Trudesk through 1.2.11 contains an authorization bypass vulnerability that allows any authenticated user to read private conversations by supplying another conversation's id. Attackers can request GET /api/v1/messages/conversation/:id, which lacks participant checks, to obtain full message history plus participants' usernames, full names and email addresses.","display_title":"Software component issue could allow unauthorized access","display_summary":"Trudesk through 1.2.11 contains an authorization bypass vulnerability that allows any authenticated user to read private conversations by supplying another conversation's id.","display_reference":"CVE-2026-111345","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111345","source_title":"Trudesk through 1.2.11 contains an authorization bypass vulnerability that allows any authenticated user to read private conversations by supplying another conversation's id. Attackers can request GET /api/v1/messages/conversation/:id, which lacks participant checks, to obtain full message history plus participants' usernames, full names and email addresses.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T04:24:19.069Z","source_hash":"content-fingerprint:fnv1a-4cead038","affected_system":{"organization":"Trudesk through 1.2.11 contains an authorization bypass vulnerability that allows any authenticated user to read private conversations by supplying another conversation's id. Attackers can request GET /api/v1/messages/conversation/ project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-111345-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Trudesk through 1.2.11 contains an authorization bypass vulnerability that allows any authenticated user to read private conversations by supplying another conversation's id. Attackers can request GET /api/v1/messages/conversation/:id, which lacks participant checks, to obtain full message history plus participants' usernames, full names and email addresses.","source_quote_or_pointer":"Security Advisory CVE-2026-111345","fact_id":"SEA-CVE-2026-111345-F1","document_citation":"Security Advisory CVE-2026-111345"},{"id":"SEA-CVE-2026-111345-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Trudesk through 1.2.11 contains an authorization bypass vulnerability that allows any authenticated user to read private conversations by supplying another conversation's id.","source_quote_or_pointer":"Advisory description (CVE-2026-111345)","fact_id":"SEA-CVE-2026-111345-F2","document_citation":"Advisory description (CVE-2026-111345)"}],"source_stated_contributors":["Trudesk through 1.2.11 contains an authorization bypass vulnerability that allows any authenticated user to read private conversations by supplying another conversation's id."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-111345","reporting_entity":"CVE-2026-111345","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-111345-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-111345-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-111345"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-111332","title":"OxiCloud 0.9.1 through 0.9.3 contains an incorrect authorization vulnerability that allows anonymous visitors to keep share access after password protection is added. Attackers holding an existing oxi_shares share-ring cookie can request content via GET /api/files/{id} to read shared files or folder contents despite the new password.","display_title":"Security issue reported in Software component","display_summary":"OxiCloud 0.9.1 through 0.9.3 contains an incorrect authorization vulnerability that allows anonymous visitors to keep share access after password protection is added.","display_reference":"CVE-2026-111332","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111332","source_title":"OxiCloud 0.9.1 through 0.9.3 contains an incorrect authorization vulnerability that allows anonymous visitors to keep share access after password protection is added. Attackers holding an existing oxi_shares share-ring cookie can request content via GET /api/files/{id} to read shared files or folder contents despite the new password.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T04:24:19.069Z","source_hash":"content-fingerprint:fnv1a-668e811a","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-111332-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"OxiCloud 0.9.1 through 0.9.3 contains an incorrect authorization vulnerability that allows anonymous visitors to keep share access after password protection is added. Attackers holding an existing oxi_shares share-ring cookie can request content via GET /api/files/{id} to read shared files or folder contents despite the new password.","source_quote_or_pointer":"Security Advisory CVE-2026-111332","fact_id":"SEA-CVE-2026-111332-F1","document_citation":"Security Advisory CVE-2026-111332"},{"id":"SEA-CVE-2026-111332-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"OxiCloud 0.9.1 through 0.9.3 contains an incorrect authorization vulnerability that allows anonymous visitors to keep share access after password protection is added.","source_quote_or_pointer":"Advisory description (CVE-2026-111332)","fact_id":"SEA-CVE-2026-111332-F2","document_citation":"Advisory description (CVE-2026-111332)"}],"source_stated_contributors":["OxiCloud 0.9.1 through 0.9.3 contains an incorrect authorization vulnerability that allows anonymous visitors to keep share access after password protection is added."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-111332","reporting_entity":"CVE-2026-111332","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-111332-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-111332-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-111332"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-111324","title":"rustdesk-api through 2.7 contains an authorization bypass vulnerability that allows unauthenticated attackers to overwrite existing peer records by supplying only a target device ID to POST /api/sysinfo. Attackers can overwrite hostname, username, OS and uuid without uuid verification, then log in presenting that uuid to rebind the peer to their account.","display_title":"Software component issue could allow unauthorized access","display_summary":"rustdesk-api through 2.7 contains an authorization bypass vulnerability that allows unauthenticated attackers to overwrite existing peer records by supplying only a target device ID to POST /api/sysinfo.","display_reference":"CVE-2026-111324","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111324","source_title":"rustdesk-api through 2.7 contains an authorization bypass vulnerability that allows unauthenticated attackers to overwrite existing peer records by supplying only a target device ID to POST /api/sysinfo. Attackers can overwrite hostname, username, OS and uuid without uuid verification, then log in presenting that uuid to rebind the peer to their account.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T04:24:19.070Z","source_hash":"content-fingerprint:fnv1a-e5405a41","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-111324-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"rustdesk-api through 2.7 contains an authorization bypass vulnerability that allows unauthenticated attackers to overwrite existing peer records by supplying only a target device ID to POST /api/sysinfo. Attackers can overwrite hostname, username, OS and uuid without uuid verification, then log in presenting that uuid to rebind the peer to their account.","source_quote_or_pointer":"Security Advisory CVE-2026-111324","fact_id":"SEA-CVE-2026-111324-F1","document_citation":"Security Advisory CVE-2026-111324"},{"id":"SEA-CVE-2026-111324-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"rustdesk-api through 2.7 contains an authorization bypass vulnerability that allows unauthenticated attackers to overwrite existing peer records by supplying only a target device ID to POST /api/sysinfo.","source_quote_or_pointer":"Advisory description (CVE-2026-111324)","fact_id":"SEA-CVE-2026-111324-F2","document_citation":"Advisory description (CVE-2026-111324)"}],"source_stated_contributors":["rustdesk-api through 2.7 contains an authorization bypass vulnerability that allows unauthenticated attackers to overwrite existing peer records by supplying only a target device ID to POST /api/sysinfo."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-111324","reporting_entity":"CVE-2026-111324","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-111324-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-111324-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-111324"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-111323","title":"RedAmon through 7.0.1 contains an unauthenticated server-side request forgery vulnerability in the agent POST /tradecraft/verify endpoint because validate_url checks only the initial hostname. Attackers can submit a public URL that redirects or DNS-rebinds to internal addresses like cloud metadata services, receiving fetched content through the model-generated summary.","display_title":"Software component issue could reach internal services","display_summary":"RedAmon through 7.0.1 contains an unauthenticated server-side request forgery vulnerability in the agent POST /tradecraft/verify endpoint because validateurl checks only the initial hostname.","display_reference":"CVE-2026-111323","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111323","source_title":"RedAmon through 7.0.1 contains an unauthenticated server-side request forgery vulnerability in the agent POST /tradecraft/verify endpoint because validate_url checks only the initial hostname. Attackers can submit a public URL that redirects or DNS-rebinds to internal addresses like cloud metadata services, receiving fetched content through the model-generated summary.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T04:24:19.071Z","source_hash":"content-fingerprint:fnv1a-54ee12da","affected_system":{"organization":"Software component project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-111323-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"RedAmon through 7.0.1 contains an unauthenticated server-side request forgery vulnerability in the agent POST /tradecraft/verify endpoint because validate_url checks only the initial hostname. Attackers can submit a public URL that redirects or DNS-rebinds to internal addresses like cloud metadata services, receiving fetched content through the model-generated summary.","source_quote_or_pointer":"Security Advisory CVE-2026-111323","fact_id":"SEA-CVE-2026-111323-F1","document_citation":"Security Advisory CVE-2026-111323"},{"id":"SEA-CVE-2026-111323-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"RedAmon through 7.0.1 contains an unauthenticated server-side request forgery vulnerability in the agent POST /tradecraft/verify endpoint because validateurl checks only the initial hostname.","source_quote_or_pointer":"Advisory description (CVE-2026-111323)","fact_id":"SEA-CVE-2026-111323-F2","document_citation":"Advisory description (CVE-2026-111323)"}],"source_stated_contributors":["RedAmon through 7.0.1 contains an unauthenticated server-side request forgery vulnerability in the agent POST /tradecraft/verify endpoint because validateurl checks only the initial hostname."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.public_publication","arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-002","SEA-FM-010"],"consequences":["Internal network access","Cloud metadata or credential exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-111323","reporting_entity":"CVE-2026-111323","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-111323-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-111323-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"The service fetched a URL chosen by the caller and could be steered at internal systems. Restrict outbound destinations and block internal address ranges.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-111323"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-111321","title":"TaskingAI through 0.3.0 contains a server-side request forgery vulnerability that allows authenticated attackers to make the backend send arbitrary HTTP requests by supplying an unvalidated OpenAPI servers[0].url in a user-defined action. Attackers holding a project API key or console admin login can create an action pointing to loopback, internal or cloud metadata addresses and run it via POST /actions/{action_id}/run to read back up to 64 KiB of responses.","display_title":"Software component issue could reach internal services","display_summary":"TaskingAI through 0.3.0 contains a server-side request forgery vulnerability that allows authenticated attackers to make the backend send arbitrary HTTP requests by supplying an unvalidated OpenAPI servers[0].url in a…","display_reference":"CVE-2026-111321","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111321","source_title":"TaskingAI through 0.3.0 contains a server-side request forgery vulnerability that allows authenticated attackers to make the backend send arbitrary HTTP requests by supplying an unvalidated OpenAPI servers[0].url in a user-defined action. Attackers holding a project API key or console admin login can create an action pointing to loopback, internal or cloud metadata addresses and run it via POST /actions/{action_id}/run to read back up to 64 KiB of responses.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T04:24:19.072Z","source_hash":"content-fingerprint:fnv1a-7e9bd41e","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Cloud & container infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-111321-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"TaskingAI through 0.3.0 contains a server-side request forgery vulnerability that allows authenticated attackers to make the backend send arbitrary HTTP requests by supplying an unvalidated OpenAPI servers[0].url in a user-defined action. Attackers holding a project API key or console admin login can create an action pointing to loopback, internal or cloud metadata addresses and run it via POST /actions/{action_id}/run to read back up to 64 KiB of responses.","source_quote_or_pointer":"Security Advisory CVE-2026-111321","fact_id":"SEA-CVE-2026-111321-F1","document_citation":"Security Advisory CVE-2026-111321"},{"id":"SEA-CVE-2026-111321-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"TaskingAI through 0.3.0 contains a server-side request forgery vulnerability that allows authenticated attackers to make the backend send arbitrary HTTP requests by supplying an unvalidated OpenAPI servers[0].url in a user-defined action.","source_quote_or_pointer":"Advisory description (CVE-2026-111321)","fact_id":"SEA-CVE-2026-111321-F2","document_citation":"Advisory description (CVE-2026-111321)"}],"source_stated_contributors":["TaskingAI through 0.3.0 contains a server-side request forgery vulnerability that allows authenticated attackers to make the backend send arbitrary HTTP requests by supplying an unvalidated OpenAPI servers[0].url in a user-defined action."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Internal network access","Cloud metadata or credential exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-111321","reporting_entity":"CVE-2026-111321","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-111321-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-111321-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"The service fetched a URL chosen by the caller and could be steered at internal systems. Restrict outbound destinations and block internal address ranges.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-111321"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-111313","title":"JobOps through 0.13.1 contains a server-side request forgery vulnerability in the POST /api/manual-jobs/fetch handler that allows authenticated users, or unauthenticated clients in demo mode, to make the server fetch internal destinations. Attackers can supply loopback, private, or cloud metadata addresses in the url field to read returned page content, disclosing instance metadata and internal service data.","display_title":"Software component issue could reach internal services","display_summary":"JobOps through 0.13.1 contains a server-side request forgery vulnerability in the POST /api/manual-jobs/fetch handler that allows authenticated users, or unauthenticated clients in demo mode, to make the server fetch…","display_reference":"CVE-2026-111313","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111313","source_title":"JobOps through 0.13.1 contains a server-side request forgery vulnerability in the POST /api/manual-jobs/fetch handler that allows authenticated users, or unauthenticated clients in demo mode, to make the server fetch internal destinations. Attackers can supply loopback, private, or cloud metadata addresses in the url field to read returned page content, disclosing instance metadata and internal service data.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T04:24:19.073Z","source_hash":"content-fingerprint:fnv1a-dbb0f875","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Cloud & container infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-111313-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"JobOps through 0.13.1 contains a server-side request forgery vulnerability in the POST /api/manual-jobs/fetch handler that allows authenticated users, or unauthenticated clients in demo mode, to make the server fetch internal destinations. Attackers can supply loopback, private, or cloud metadata addresses in the url field to read returned page content, disclosing instance metadata and internal service data.","source_quote_or_pointer":"Security Advisory CVE-2026-111313","fact_id":"SEA-CVE-2026-111313-F1","document_citation":"Security Advisory CVE-2026-111313"},{"id":"SEA-CVE-2026-111313-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"JobOps through 0.13.1 contains a server-side request forgery vulnerability in the POST /api/manual-jobs/fetch handler that allows authenticated users, or unauthenticated clients in demo mode, to make the server fetch internal destinations.","source_quote_or_pointer":"Advisory description (CVE-2026-111313)","fact_id":"SEA-CVE-2026-111313-F2","document_citation":"Advisory description (CVE-2026-111313)"}],"source_stated_contributors":["JobOps through 0.13.1 contains a server-side request forgery vulnerability in the POST /api/manual-jobs/fetch handler that allows authenticated users, or unauthenticated clients in demo mode, to make the server fetch internal destinations."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Internal network access","Cloud metadata or credential exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-111313","reporting_entity":"CVE-2026-111313","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-111313-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-111313-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"The service fetched a URL chosen by the caller and could be steered at internal systems. Restrict outbound destinations and block internal address ranges.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-111313"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-111312","title":"OpenHealth through 0.2.0 contains a missing authentication and authorization vulnerability in the /api/health-data/[id] GET, PATCH and DELETE handlers that query records by id without session or authorId checks. Unauthenticated attackers who know a HealthData record id can read another user's medical record data and file metadata, overwrite it with arbitrary JSON, or delete it.","display_title":"Security issue reported in Software component","display_summary":"OpenHealth through 0.2.0 contains a missing authentication and authorization vulnerability in the /api/health-data/[id] GET, PATCH and DELETE handlers that query records by id without session or authorId checks.","display_reference":"CVE-2026-111312","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111312","source_title":"OpenHealth through 0.2.0 contains a missing authentication and authorization vulnerability in the /api/health-data/[id] GET, PATCH and DELETE handlers that query records by id without session or authorId checks. Unauthenticated attackers who know a HealthData record id can read another user's medical record data and file metadata, overwrite it with arbitrary JSON, or delete it.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T04:24:19.073Z","source_hash":"content-fingerprint:fnv1a-886c626c","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-111312-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"OpenHealth through 0.2.0 contains a missing authentication and authorization vulnerability in the /api/health-data/[id] GET, PATCH and DELETE handlers that query records by id without session or authorId checks. Unauthenticated attackers who know a HealthData record id can read another user's medical record data and file metadata, overwrite it with arbitrary JSON, or delete it.","source_quote_or_pointer":"Security Advisory CVE-2026-111312","fact_id":"SEA-CVE-2026-111312-F1","document_citation":"Security Advisory CVE-2026-111312"},{"id":"SEA-CVE-2026-111312-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"OpenHealth through 0.2.0 contains a missing authentication and authorization vulnerability in the /api/health-data/[id] GET, PATCH and DELETE handlers that query records by id without session or authorId checks.","source_quote_or_pointer":"Advisory description (CVE-2026-111312)","fact_id":"SEA-CVE-2026-111312-F2","document_citation":"Advisory description (CVE-2026-111312)"}],"source_stated_contributors":["OpenHealth through 0.2.0 contains a missing authentication and authorization vulnerability in the /api/health-data/[id] GET, PATCH and DELETE handlers that query records by id without session or authorId checks."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.write_action","data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-111312","reporting_entity":"CVE-2026-111312","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-111312-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-111312-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-111312"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-111283","title":"BMC Helix Network Management on-prem before 26.3.01 contains an authentication bypass vulnerability that allows unauthenticated attackers to log in as the local administrator with any password when SAML single sign-on is configured. Attackers can submit the administrator username with an arbitrary password on the web login page to obtain a SuperAdmin session, modify device credentials, run device commands, and alter audit records.","display_title":"Software component issue could allow unauthorized access","display_summary":"BMC Helix Network Management on-prem before 26.3.01 contains an authentication bypass vulnerability that allows unauthenticated attackers to log in as the local administrator with any password when SAML single sign-on is…","display_reference":"CVE-2026-111283","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111283","source_title":"BMC Helix Network Management on-prem before 26.3.01 contains an authentication bypass vulnerability that allows unauthenticated attackers to log in as the local administrator with any password when SAML single sign-on is configured. Attackers can submit the administrator username with an arbitrary password on the web login page to obtain a SuperAdmin session, modify device credentials, run device commands, and alter audit records.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T04:24:19.074Z","source_hash":"content-fingerprint:fnv1a-65b252e5","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-111283-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"BMC Helix Network Management on-prem before 26.3.01 contains an authentication bypass vulnerability that allows unauthenticated attackers to log in as the local administrator with any password when SAML single sign-on is configured. Attackers can submit the administrator username with an arbitrary password on the web login page to obtain a SuperAdmin session, modify device credentials, run device commands, and alter audit records.","source_quote_or_pointer":"Security Advisory CVE-2026-111283","fact_id":"SEA-CVE-2026-111283-F1","document_citation":"Security Advisory CVE-2026-111283"},{"id":"SEA-CVE-2026-111283-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"BMC Helix Network Management on-prem before 26.3.01 contains an authentication bypass vulnerability that allows unauthenticated attackers to log in as the local administrator with any password when SAML single sign-on is configured.","source_quote_or_pointer":"Advisory description (CVE-2026-111283)","fact_id":"SEA-CVE-2026-111283-F2","document_citation":"Advisory description (CVE-2026-111283)"}],"source_stated_contributors":["BMC Helix Network Management on-prem before 26.3.01 contains an authentication bypass vulnerability that allows unauthenticated attackers to log in as the local administrator with any password when SAML single sign-on is configured."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.write_action","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-111283","reporting_entity":"CVE-2026-111283","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-111283-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-111283-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-111283"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-55840","title":"Scoold is a Q&A and a knowledge sharing platform for teams. Prior to 1.69.1, the getBackToUrl() method in src/main/java/com/erudika/scoold/utils/HttpUtils.java validates the backto and returnto parameters with Strings.CI.startsWith against the configured server URL. An attacker can supply an absolute URL whose hostname begins with the legitimate hostname, causing URI.resolve() to retain the attacker URL and the prefix check to accept it. A victim who follows the crafted sign-in link can be redirected to an attacker-controlled domain after authentication, enabling phishing and possible credential or token theft. This issue is fixed in version 1.69.1.","display_title":"Software component issue could expose accounts or credentials","display_summary":"Scoold is a Q&A and a knowledge sharing platform for teams. Prior to 1.69.1, the getBackToUrl() method in src/main/java/com/erudika/scoold/utils/HttpUtils.java validates the backto and returnto parameters with…","display_reference":"CVE-2026-55840","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-55840","source_title":"Scoold is a Q&A and a knowledge sharing platform for teams. Prior to 1.69.1, the getBackToUrl() method in src/main/java/com/erudika/scoold/utils/HttpUtils.java validates the backto and returnto parameters with Strings.CI.startsWith against the configured server URL. An attacker can supply an absolute URL whose hostname begins with the legitimate hostname, causing URI.resolve() to retain the attacker URL and the prefix check to accept it. A victim who follows the crafted sign-in link can be redirected to an attacker-controlled domain after authentication, enabling phishing and possible credential or token theft. This issue is fixed in version 1.69.1.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:45.566Z","source_hash":"content-fingerprint:fnv1a-f5730fa9","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-55840-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Scoold is a Q&A and a knowledge sharing platform for teams. Prior to 1.69.1, the getBackToUrl() method in src/main/java/com/erudika/scoold/utils/HttpUtils.java validates the backto and returnto parameters with Strings.CI.startsWith against the configured server URL. An attacker can supply an absolute URL whose hostname begins with the legitimate hostname, causing URI.resolve() to retain the attacker URL and the prefix check to accept it. A victim who follows the crafted sign-in link can be redirected to an attacker-controlled domain after authentication, enabling phishing and possible credential or token theft. This issue is fixed in version 1.69.1.","source_quote_or_pointer":"Security Advisory CVE-2026-55840","fact_id":"SEA-CVE-2026-55840-F1","document_citation":"Security Advisory CVE-2026-55840"},{"id":"SEA-CVE-2026-55840-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Scoold is a Q&A and a knowledge sharing platform for teams. Prior to 1.69.1, the getBackToUrl() method in src/main/java/com/erudika/scoold/utils/HttpUtils.java validates the backto and returnto parameters with Strings.CI.startsWith against the configured server URL.","source_quote_or_pointer":"Advisory description (CVE-2026-55840)","fact_id":"SEA-CVE-2026-55840-F2","document_citation":"Advisory description (CVE-2026-55840)"}],"source_stated_contributors":["Scoold is a Q&A and a knowledge sharing platform for teams. Prior to 1.69.1, the getBackToUrl() method in src/main/java/com/erudika/scoold/utils/HttpUtils.java validates the backto and returnto parameters with Strings.CI.startsWith against the configured server URL."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-55840","reporting_entity":"CVE-2026-55840","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-55840-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-55840-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-55840"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-45165","title":"An authorization flaw in Idira Conjur version 13.9.0 allows an authenticated user with limited privileges to perform unauthorized actions on a policy branch. Under specific circumstances, an attacker could potentially leverage this to retrieve unauthorized secrets, alter administrative access controls on the branch or cause a denial of service (DoS). Idira Security Bulletin CA26-38.","display_title":"Software component issue could allow unauthorized access","display_summary":"An authorization flaw in Idira Conjur version 13.9.0 allows an authenticated user with limited privileges to perform unauthorized actions on a policy branch.","display_reference":"CVE-2026-45165","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-45165","source_title":"An authorization flaw in Idira Conjur version 13.9.0 allows an authenticated user with limited privileges to perform unauthorized actions on a policy branch. Under specific circumstances, an attacker could potentially leverage this to retrieve unauthorized secrets, alter administrative access controls on the branch or cause a denial of service (DoS). Idira Security Bulletin CA26-38.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:45.567Z","source_hash":"content-fingerprint:fnv1a-66af9048","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-45165-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"An authorization flaw in Idira Conjur version 13.9.0 allows an authenticated user with limited privileges to perform unauthorized actions on a policy branch. Under specific circumstances, an attacker could potentially leverage this to retrieve unauthorized secrets, alter administrative access controls on the branch or cause a denial of service (DoS). Idira Security Bulletin CA26-38.","source_quote_or_pointer":"Security Advisory CVE-2026-45165","fact_id":"SEA-CVE-2026-45165-F1","document_citation":"Security Advisory CVE-2026-45165"},{"id":"SEA-CVE-2026-45165-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"An authorization flaw in Idira Conjur version 13.9.0 allows an authenticated user with limited privileges to perform unauthorized actions on a policy branch. Under specific circumstances, an attacker could potentially leverage this to retrieve unauthorized secrets, alter administrative access controls on the branch or…","source_quote_or_pointer":"Advisory description (CVE-2026-45165)","fact_id":"SEA-CVE-2026-45165-F2","document_citation":"Advisory description (CVE-2026-45165)"}],"source_stated_contributors":["An authorization flaw in Idira Conjur version 13.9.0 allows an authenticated user with limited privileges to perform unauthorized actions on a policy branch. Under specific circumstances, an attacker could potentially leverage this to retrieve unauthorized secrets, alter administrative access controls on the branch or…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-45165","reporting_entity":"CVE-2026-45165","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-45165-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-45165-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-45165"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-104198","title":"ZoneMinder is a free, open source closed-circuit television software application. In versions 1.34.0 through 1.36.38, the web interface mishandles failed token authentication in web/includes/auth.php. validateToken() returns false when a token is malformed or has an invalid signature, but the caller assigns that value to the global $user variable; because web/index.php tests isset($user), boolean false is treated as a present user and the normal login redirect is skipped. This can dispatch views that rely on the outer authentication gate, including the zones view, which accepts an attacker-selected monitor ID and discloses monitor and zone metadata without an independent permission check. Permission helpers receive the false user value and deny privileged operations, so unauthorized state changes have not been established. This vulnerability is fixed in version 1.36.63, where conversion to ZM\\User objects causes invalid token state to fail before view dispatch. Later defense-in-depth changes explicitly leave $user unset after failed token validation and reject non-ZM\\User values at the web authentication gate.","display_title":"Security issue reported in Software component","display_summary":"ZoneMinder is a free, open source closed-circuit television software application. In versions 1.34.0 through 1.36.38, the web interface mishandles failed token authentication in web/includes/auth.php.","display_reference":"CVE-2026-104198","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104198","source_title":"ZoneMinder is a free, open source closed-circuit television software application. In versions 1.34.0 through 1.36.38, the web interface mishandles failed token authentication in web/includes/auth.php. validateToken() returns false when a token is malformed or has an invalid signature, but the caller assigns that value to the global $user variable; because web/index.php tests isset($user), boolean false is treated as a present user and the normal login redirect is skipped. This can dispatch views that rely on the outer authentication gate, including the zones view, which accepts an attacker-selected monitor ID and discloses monitor and zone metadata without an independent permission check. Permission helpers receive the false user value and deny privileged operations, so unauthorized state changes have not been established. This vulnerability is fixed in version 1.36.63, where conversion to ZM\\User objects causes invalid token state to fail before view dispatch. Later defense-in-depth changes explicitly leave $user unset after failed token validation and reject non-ZM\\User values at the web authentication gate.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:45.568Z","source_hash":"content-fingerprint:fnv1a-50c2a0a","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-104198-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"ZoneMinder is a free, open source closed-circuit television software application. In versions 1.34.0 through 1.36.38, the web interface mishandles failed token authentication in web/includes/auth.php. validateToken() returns false when a token is malformed or has an invalid signature, but the caller assigns that value to the global $user variable; because web/index.php tests isset($user), boolean false is treated as a present user and the normal login redirect is skipped. This can dispatch views that rely on the outer authentication gate, including the zones view, which accepts an attacker-selected monitor ID and discloses monitor and zone metadata without an independent permission check. Permission helpers receive the false user value and deny privileged operations, so unauthorized state changes have not been established. This vulnerability is fixed in version 1.36.63, where conversion to ZM\\User objects causes invalid token state to fail before view dispatch. Later defense-in-depth changes explicitly leave $user unset after failed token validation and reject non-ZM\\User values at the web authentication gate.","source_quote_or_pointer":"Security Advisory CVE-2026-104198","fact_id":"SEA-CVE-2026-104198-F1","document_citation":"Security Advisory CVE-2026-104198"},{"id":"SEA-CVE-2026-104198-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"ZoneMinder is a free, open source closed-circuit television software application. In versions 1.34.0 through 1.36.38, the web interface mishandles failed token authentication in web/includes/auth.php.","source_quote_or_pointer":"Advisory description (CVE-2026-104198)","fact_id":"SEA-CVE-2026-104198-F2","document_citation":"Advisory description (CVE-2026-104198)"}],"source_stated_contributors":["ZoneMinder is a free, open source closed-circuit television software application. In versions 1.34.0 through 1.36.38, the web interface mishandles failed token authentication in web/includes/auth.php."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-104198","reporting_entity":"CVE-2026-104198","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-104198-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-104198-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-104198"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-93483","title":"In Znuny through 7.3.6, an attacker can bypass specific standard login procedures and gain unauthorized access to sensitive system functions by manipulating a specific HTTP request header. Because the application incorrectly trusts this header, an attacker can impersonate any user, including administrators, without requiring a password. This grants full access to confidential data and system controls. More specifically, the HTTPBasicAuth modules for the agent (Kernel::System::Auth::HTTPBasicAuth) and customer (Kernel::System::CustomerAuth::HTTPBasicAuth) interfaces read the username to log in not only from $ENV{REMOTE_USER} (set by the web server after successful authentication), but also, as a fallback, from $ENV{HTTP_REMOTE_USER}, which is populated directly from an attacker-controllable \"Remote-User\" request header. On systems where HTTPBasicAuth was configured as the authentication backend, this allowed an attacker to log in as any existing user by sending a request with a forged Remote-User header, without providing any credentials.","display_title":"Software component issue could allow unauthorized access","display_summary":"In Znuny through 7.3.6, an attacker can bypass specific standard login procedures and gain unauthorized access to sensitive system functions by manipulating a specific HTTP request header.","display_reference":"CVE-2026-93483","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93483","source_title":"In Znuny through 7.3.6, an attacker can bypass specific standard login procedures and gain unauthorized access to sensitive system functions by manipulating a specific HTTP request header. Because the application incorrectly trusts this header, an attacker can impersonate any user, including administrators, without requiring a password. This grants full access to confidential data and system controls. More specifically, the HTTPBasicAuth modules for the agent (Kernel::System::Auth::HTTPBasicAuth) and customer (Kernel::System::CustomerAuth::HTTPBasicAuth) interfaces read the username to log in not only from $ENV{REMOTE_USER} (set by the web server after successful authentication), but also, as a fallback, from $ENV{HTTP_REMOTE_USER}, which is populated directly from an attacker-controllable \"Remote-User\" request header. On systems where HTTPBasicAuth was configured as the authentication backend, this allowed an attacker to log in as any existing user by sending a request with a forged Remote-User header, without providing any credentials.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:45.570Z","source_hash":"content-fingerprint:fnv1a-e8e0088a","affected_system":{"organization":"In Znuny through 7.3.6, an attacker can bypass specific standard login procedures and gain unauthorized access to sensitive system functions by manipulating a specific HTTP request header. Because the application incorrectly trusts this header, an attacker can impersonate any user, including administrators, without requiring a password. This grants full access to confidential data and system controls. More specifically, the HTTPBasicAuth modules for the agent (Kernel project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-93483-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"In Znuny through 7.3.6, an attacker can bypass specific standard login procedures and gain unauthorized access to sensitive system functions by manipulating a specific HTTP request header. Because the application incorrectly trusts this header, an attacker can impersonate any user, including administrators, without requiring a password. This grants full access to confidential data and system controls. More specifically, the HTTPBasicAuth modules for the agent (Kernel::System::Auth::HTTPBasicAuth) and customer (Kernel::System::CustomerAuth::HTTPBasicAuth) interfaces read the username to log in not only from $ENV{REMOTE_USER} (set by the web server after successful authentication), but also, as a fallback, from $ENV{HTTP_REMOTE_USER}, which is populated directly from an attacker-controllable \"Remote-User\" request header. On systems where HTTPBasicAuth was configured as the authentication backend, this allowed an attacker to log in as any existing user by sending a request with a forged Remote-User header, without providing any credentials.","source_quote_or_pointer":"Security Advisory CVE-2026-93483","fact_id":"SEA-CVE-2026-93483-F1","document_citation":"Security Advisory CVE-2026-93483"},{"id":"SEA-CVE-2026-93483-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"In Znuny through 7.3.6, an attacker can bypass specific standard login procedures and gain unauthorized access to sensitive system functions by manipulating a specific HTTP request header.","source_quote_or_pointer":"Advisory description (CVE-2026-93483)","fact_id":"SEA-CVE-2026-93483-F2","document_citation":"Advisory description (CVE-2026-93483)"}],"source_stated_contributors":["In Znuny through 7.3.6, an attacker can bypass specific standard login procedures and gain unauthorized access to sensitive system functions by manipulating a specific HTTP request header."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","data.credentials_secrets","arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-003","SEA-FM-010"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-93483","reporting_entity":"CVE-2026-93483","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-93483-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-93483-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-93483"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-93484","title":"Znuny through 7.3.6 constructs a ticket-search database query by directly concatenating user-supplied input into the SQL statement. This lack of proper sanitization or the use of parameterized queries allows an attacker to inject arbitrary SQL commands, leading to data theft, modification, or denial of service. Specifically this is in Kernel::System::Ticket::TicketSearch and Kernel::System::Ticket::ArticleSearchIndex::DB via the ContentSearch parameter. The parameter is expected to be either \"AND\" or \"OR\", but its value was concatenated directly into the generated SQL query without validation.","display_title":"Software component issue could make the service unavailable","display_summary":"Znuny through 7.3.6 constructs a ticket-search database query by directly concatenating user-supplied input into the SQL statement.","display_reference":"CVE-2026-93484","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93484","source_title":"Znuny through 7.3.6 constructs a ticket-search database query by directly concatenating user-supplied input into the SQL statement. This lack of proper sanitization or the use of parameterized queries allows an attacker to inject arbitrary SQL commands, leading to data theft, modification, or denial of service. Specifically this is in Kernel::System::Ticket::TicketSearch and Kernel::System::Ticket::ArticleSearchIndex::DB via the ContentSearch parameter. The parameter is expected to be either \"AND\" or \"OR\", but its value was concatenated directly into the generated SQL query without validation.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:45.570Z","source_hash":"content-fingerprint:fnv1a-9658999d","affected_system":{"organization":"Znuny through 7.3.6 constructs a ticket-search database query by directly concatenating user-supplied input into the SQL statement. This lack of proper sanitization or the use of parameterized queries allows an attacker to inject arbitrary SQL commands, leading to data theft, modification, or denial of service. Specifically this is in Kernel project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-93484-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Znuny through 7.3.6 constructs a ticket-search database query by directly concatenating user-supplied input into the SQL statement. This lack of proper sanitization or the use of parameterized queries allows an attacker to inject arbitrary SQL commands, leading to data theft, modification, or denial of service. Specifically this is in Kernel::System::Ticket::TicketSearch and Kernel::System::Ticket::ArticleSearchIndex::DB via the ContentSearch parameter. The parameter is expected to be either \"AND\" or \"OR\", but its value was concatenated directly into the generated SQL query without validation.","source_quote_or_pointer":"Security Advisory CVE-2026-93484","fact_id":"SEA-CVE-2026-93484-F1","document_citation":"Security Advisory CVE-2026-93484"},{"id":"SEA-CVE-2026-93484-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Znuny through 7.3.6 constructs a ticket-search database query by directly concatenating user-supplied input into the SQL statement. This lack of proper sanitization or the use of parameterized queries allows an attacker to inject arbitrary SQL commands, leading to data theft, modification, or denial of service.","source_quote_or_pointer":"Advisory description (CVE-2026-93484)","fact_id":"SEA-CVE-2026-93484-F2","document_citation":"Advisory description (CVE-2026-93484)"}],"source_stated_contributors":["Znuny through 7.3.6 constructs a ticket-search database query by directly concatenating user-supplied input into the SQL statement. This lack of proper sanitization or the use of parameterized queries allows an attacker to inject arbitrary SQL commands, leading to data theft, modification, or denial of service."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.pii"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-93484","reporting_entity":"CVE-2026-93484","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-93484-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-93484-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-93484"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-57568","title":"Lychee is a free, open-source photo-management tool. Prior to 7.6.0, Lychee permits an authenticated user with album-edit permissions to store a javascript URI in an album or photo Markdown description because config/markdown.php enables allow_unsafe_links. app/Http/Resources/Models/Utils/PreformattedPhotoData.php and app/Http/Resources/Models/Utils/PreFormattedAlbumData.php convert the description to HTML, and the gallery components PhotoDetails.vue, Overlay.vue, PhotoThumb.vue, AlbumHero.vue, and AlbumCard.vue render that HTML with v-html. A visitor, including an unauthenticated visitor to a public album, who clicks the rendered link executes attacker-controlled JavaScript in the Lychee origin, which can expose session data or enable authenticated requests in the victim's context. This gallery-view flaw is distinct from CVE-2026-33738, which addressed feed rendering. This issue is fixed in version 7.6.0.","display_title":"Security issue reported in Software component","display_summary":"Lychee is a free, open-source photo-management tool. Prior to 7.6.0, Lychee permits an authenticated user with album-edit permissions to store a javascript URI in an album or photo Markdown description because…","display_reference":"CVE-2026-57568","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-57568","source_title":"Lychee is a free, open-source photo-management tool. Prior to 7.6.0, Lychee permits an authenticated user with album-edit permissions to store a javascript URI in an album or photo Markdown description because config/markdown.php enables allow_unsafe_links. app/Http/Resources/Models/Utils/PreformattedPhotoData.php and app/Http/Resources/Models/Utils/PreFormattedAlbumData.php convert the description to HTML, and the gallery components PhotoDetails.vue, Overlay.vue, PhotoThumb.vue, AlbumHero.vue, and AlbumCard.vue render that HTML with v-html. A visitor, including an unauthenticated visitor to a public album, who clicks the rendered link executes attacker-controlled JavaScript in the Lychee origin, which can expose session data or enable authenticated requests in the victim's context. This gallery-view flaw is distinct from CVE-2026-33738, which addressed feed rendering. This issue is fixed in version 7.6.0.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:45.571Z","source_hash":"content-fingerprint:fnv1a-7fdd987c","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-57568-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Lychee is a free, open-source photo-management tool. Prior to 7.6.0, Lychee permits an authenticated user with album-edit permissions to store a javascript URI in an album or photo Markdown description because config/markdown.php enables allow_unsafe_links. app/Http/Resources/Models/Utils/PreformattedPhotoData.php and app/Http/Resources/Models/Utils/PreFormattedAlbumData.php convert the description to HTML, and the gallery components PhotoDetails.vue, Overlay.vue, PhotoThumb.vue, AlbumHero.vue, and AlbumCard.vue render that HTML with v-html. A visitor, including an unauthenticated visitor to a public album, who clicks the rendered link executes attacker-controlled JavaScript in the Lychee origin, which can expose session data or enable authenticated requests in the victim's context. This gallery-view flaw is distinct from CVE-2026-33738, which addressed feed rendering. This issue is fixed in version 7.6.0.","source_quote_or_pointer":"Security Advisory CVE-2026-57568","fact_id":"SEA-CVE-2026-57568-F1","document_citation":"Security Advisory CVE-2026-57568"},{"id":"SEA-CVE-2026-57568-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Lychee is a free, open-source photo-management tool. Prior to 7.6.0, Lychee permits an authenticated user with album-edit permissions to store a javascript URI in an album or photo Markdown description because config/markdown.php enables allowunsafelinks.","source_quote_or_pointer":"Advisory description (CVE-2026-57568)","fact_id":"SEA-CVE-2026-57568-F2","document_citation":"Advisory description (CVE-2026-57568)"}],"source_stated_contributors":["Lychee is a free, open-source photo-management tool. Prior to 7.6.0, Lychee permits an authenticated user with album-edit permissions to store a javascript URI in an album or photo Markdown description because config/markdown.php enables allowunsafelinks."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","auth.public_publication","data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-57568","reporting_entity":"CVE-2026-57568","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-57568-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-57568-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-57568"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-57569","title":"Lychee is a free, open-source photo-management tool. Prior to 7.6.0, the POST /api/v2/Photo::fromUrl flow validates a hostname and its resolved addresses in app/Rules/PhotoUrlRule.php but later passes the original hostname through app/Actions/Import/FromUrl.php to app/Image/Files/DownloadedFile.php for a separate fopen connection. An authenticated attacker who controls DNS responses can cause validation to observe a public address and the subsequent fetch to resolve the same hostname to a private or otherwise forbidden address. This DNS rebinding time-of-check to time-of-use mismatch bypasses the intended server-side request forgery protections and can reach services available from the Lychee server, subject to deployment and TLS behavior. This issue is fixed in version 7.6.0.","display_title":"Software component issue could reach internal services","display_summary":"Lychee is a free, open-source photo-management tool. Prior to 7.6.0, the POST /api/v2/Photo::fromUrl flow validates a hostname and its resolved addresses in app/Rules/PhotoUrlRule.php but later passes the original…","display_reference":"CVE-2026-57569","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-57569","source_title":"Lychee is a free, open-source photo-management tool. Prior to 7.6.0, the POST /api/v2/Photo::fromUrl flow validates a hostname and its resolved addresses in app/Rules/PhotoUrlRule.php but later passes the original hostname through app/Actions/Import/FromUrl.php to app/Image/Files/DownloadedFile.php for a separate fopen connection. An authenticated attacker who controls DNS responses can cause validation to observe a public address and the subsequent fetch to resolve the same hostname to a private or otherwise forbidden address. This DNS rebinding time-of-check to time-of-use mismatch bypasses the intended server-side request forgery protections and can reach services available from the Lychee server, subject to deployment and TLS behavior. This issue is fixed in version 7.6.0.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:45.571Z","source_hash":"content-fingerprint:fnv1a-f06f7d41","affected_system":{"organization":"Lychee is a free, open-source photo-management tool. Prior to 7.6.0, the POST /api/v2/Photo project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-57569-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Lychee is a free, open-source photo-management tool. Prior to 7.6.0, the POST /api/v2/Photo::fromUrl flow validates a hostname and its resolved addresses in app/Rules/PhotoUrlRule.php but later passes the original hostname through app/Actions/Import/FromUrl.php to app/Image/Files/DownloadedFile.php for a separate fopen connection. An authenticated attacker who controls DNS responses can cause validation to observe a public address and the subsequent fetch to resolve the same hostname to a private or otherwise forbidden address. This DNS rebinding time-of-check to time-of-use mismatch bypasses the intended server-side request forgery protections and can reach services available from the Lychee server, subject to deployment and TLS behavior. This issue is fixed in version 7.6.0.","source_quote_or_pointer":"Security Advisory CVE-2026-57569","fact_id":"SEA-CVE-2026-57569-F1","document_citation":"Security Advisory CVE-2026-57569"},{"id":"SEA-CVE-2026-57569-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Lychee is a free, open-source photo-management tool. Prior to 7.6.0, the POST /api/v2/Photo::fromUrl flow validates a hostname and its resolved addresses in app/Rules/PhotoUrlRule.php but later passes the original hostname through app/Actions/Import/FromUrl.php to app/Image/Files/DownloadedFile.php for a separate…","source_quote_or_pointer":"Advisory description (CVE-2026-57569)","fact_id":"SEA-CVE-2026-57569-F2","document_citation":"Advisory description (CVE-2026-57569)"}],"source_stated_contributors":["Lychee is a free, open-source photo-management tool. Prior to 7.6.0, the POST /api/v2/Photo::fromUrl flow validates a hostname and its resolved addresses in app/Rules/PhotoUrlRule.php but later passes the original hostname through app/Actions/Import/FromUrl.php to app/Image/Files/DownloadedFile.php for a separate…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.public_publication"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Internal network access","Cloud metadata or credential exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-57569","reporting_entity":"CVE-2026-57569","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-57569-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-57569-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"The service fetched a URL chosen by the caller and could be steered at internal systems. Restrict outbound destinations and block internal address ranges.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-57569"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-61610","title":"Lychee is a free, open-source photo-management tool. Prior to 7.6.1, when photos_star_visibility is set to anonymous, POST /api/v2/Photo::highlight can fetch and modify a photo without confirming that the caller can see it. BaseApiRequest::validateResolved() invokes SetPhotosHighlightedRequest::processValidatedValues() before authorization, and PhotoPolicy::canHighlight() returns true for anonymous callers without a canSee check. An unauthenticated attacker who can guess photo identifiers can distinguish existing private photos through differing success and not-found responses and can change their is_highlighted state, including for photos in private or password-protected albums. The issue is limited to installations using the non-default anonymous star-visibility setting. This issue is fixed in version 7.6.1.","display_title":"Security issue reported in Software component","display_summary":"Lychee is a free, open-source photo-management tool. Prior to 7.6.1, when photosstarvisibility is set to anonymous, POST /api/v2/Photo::highlight can fetch and modify a photo without confirming that the caller can see…","display_reference":"CVE-2026-61610","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-61610","source_title":"Lychee is a free, open-source photo-management tool. Prior to 7.6.1, when photos_star_visibility is set to anonymous, POST /api/v2/Photo::highlight can fetch and modify a photo without confirming that the caller can see it. BaseApiRequest::validateResolved() invokes SetPhotosHighlightedRequest::processValidatedValues() before authorization, and PhotoPolicy::canHighlight() returns true for anonymous callers without a canSee check. An unauthenticated attacker who can guess photo identifiers can distinguish existing private photos through differing success and not-found responses and can change their is_highlighted state, including for photos in private or password-protected albums. The issue is limited to installations using the non-default anonymous star-visibility setting. This issue is fixed in version 7.6.1.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:45.571Z","source_hash":"content-fingerprint:fnv1a-b57260cf","affected_system":{"organization":"Lychee is a free, open-source photo-management tool. Prior to 7.6.1, when photosstarvisibility is set to anonymous, POST /api/v2/Photo project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-61610-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Lychee is a free, open-source photo-management tool. Prior to 7.6.1, when photos_star_visibility is set to anonymous, POST /api/v2/Photo::highlight can fetch and modify a photo without confirming that the caller can see it. BaseApiRequest::validateResolved() invokes SetPhotosHighlightedRequest::processValidatedValues() before authorization, and PhotoPolicy::canHighlight() returns true for anonymous callers without a canSee check. An unauthenticated attacker who can guess photo identifiers can distinguish existing private photos through differing success and not-found responses and can change their is_highlighted state, including for photos in private or password-protected albums. The issue is limited to installations using the non-default anonymous star-visibility setting. This issue is fixed in version 7.6.1.","source_quote_or_pointer":"Security Advisory CVE-2026-61610","fact_id":"SEA-CVE-2026-61610-F1","document_citation":"Security Advisory CVE-2026-61610"},{"id":"SEA-CVE-2026-61610-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Lychee is a free, open-source photo-management tool. Prior to 7.6.1, when photosstarvisibility is set to anonymous, POST /api/v2/Photo::highlight can fetch and modify a photo without confirming that the caller can see it.","source_quote_or_pointer":"Advisory description (CVE-2026-61610)","fact_id":"SEA-CVE-2026-61610-F2","document_citation":"Advisory description (CVE-2026-61610)"}],"source_stated_contributors":["Lychee is a free, open-source photo-management tool. Prior to 7.6.1, when photosstarvisibility is set to anonymous, POST /api/v2/Photo::highlight can fetch and modify a photo without confirming that the caller can see it."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-61610","reporting_entity":"CVE-2026-61610","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-61610-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-61610-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-61610"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-62679","title":"Lychee is a free, open-source photo-management tool. Prior to 7.6.4, SecurePathController, which serves GET /image/{path}, concatenates the attacker-controlled path with the local storage root and performs a string-prefix check before canonicalizing dot segments. Under the supported non-default configuration with temporary_image_link_enabled enabled, temporary_image_link_when_logged_in disabled, and secure_image_link_enabled disabled, any authenticated user can submit encoded traversal segments that pass the prefix check and are later resolved by filesystem operations. This permits reading files available to the web process, including application configuration and other users' private images, and disclosed APP_KEY or database credentials can enable further compromise. This issue is fixed in version 7.6.4.","display_title":"Software component issue could expose accounts or credentials","display_summary":"Lychee is a free, open-source photo-management tool. Prior to 7.6.4, SecurePathController, which serves GET /image/{path}, concatenates the attacker-controlled path with the local storage root and performs a…","display_reference":"CVE-2026-62679","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-62679","source_title":"Lychee is a free, open-source photo-management tool. Prior to 7.6.4, SecurePathController, which serves GET /image/{path}, concatenates the attacker-controlled path with the local storage root and performs a string-prefix check before canonicalizing dot segments. Under the supported non-default configuration with temporary_image_link_enabled enabled, temporary_image_link_when_logged_in disabled, and secure_image_link_enabled disabled, any authenticated user can submit encoded traversal segments that pass the prefix check and are later resolved by filesystem operations. This permits reading files available to the web process, including application configuration and other users' private images, and disclosed APP_KEY or database credentials can enable further compromise. This issue is fixed in version 7.6.4.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:45.571Z","source_hash":"content-fingerprint:fnv1a-2517484f","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-62679-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Lychee is a free, open-source photo-management tool. Prior to 7.6.4, SecurePathController, which serves GET /image/{path}, concatenates the attacker-controlled path with the local storage root and performs a string-prefix check before canonicalizing dot segments. Under the supported non-default configuration with temporary_image_link_enabled enabled, temporary_image_link_when_logged_in disabled, and secure_image_link_enabled disabled, any authenticated user can submit encoded traversal segments that pass the prefix check and are later resolved by filesystem operations. This permits reading files available to the web process, including application configuration and other users' private images, and disclosed APP_KEY or database credentials can enable further compromise. This issue is fixed in version 7.6.4.","source_quote_or_pointer":"Security Advisory CVE-2026-62679","fact_id":"SEA-CVE-2026-62679-F1","document_citation":"Security Advisory CVE-2026-62679"},{"id":"SEA-CVE-2026-62679-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Lychee is a free, open-source photo-management tool. Prior to 7.6.4, SecurePathController, which serves GET /image/{path}, concatenates the attacker-controlled path with the local storage root and performs a string-prefix check before canonicalizing dot segments.","source_quote_or_pointer":"Advisory description (CVE-2026-62679)","fact_id":"SEA-CVE-2026-62679-F2","document_citation":"Advisory description (CVE-2026-62679)"}],"source_stated_contributors":["Lychee is a free, open-source photo-management tool. Prior to 7.6.4, SecurePathController, which serves GET /image/{path}, concatenates the attacker-controlled path with the local storage root and performs a string-prefix check before canonicalizing dot segments."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.write_action","data.pii","data.credentials_secrets","data.uploaded_files"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-62679","reporting_entity":"CVE-2026-62679","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-62679-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-62679-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-62679"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-77466","title":"Lychee is a free, open-source photo-management tool. Prior to 7.7.0, Lychee hides the Omnipay Dummy test provider from the checkout options in production through OmnipayFactory::get_supported_providers(), but CreateSessionRequest validates only that the submitted provider is an OmnipayProviderType and does not enforce OmnipayProviderType::isAllowed(). A buyer, including a guest when webshop_allow_guest_checkout is enabled, can submit Dummy directly and complete the test gateway flow without a real payment. When webshop_auto_fulfill_enabled is enabled, OrderCompletedListener::fullfillOrder() can then release the purchasable item. The issue requires access to the Supporter or Pro webshop and an enabled purchasable item. Testing bypassed the closed-source license middleware, so whether the real license layer performs additional payment-provider validation remains unverified. The payment finalize status check itself is not the root cause. This issue is fixed in version 7.7.0.","display_title":"Security issue reported in Software component","display_summary":"Lychee is a free, open-source photo-management tool. Prior to 7.7.0, Lychee hides the Omnipay Dummy test provider from the checkout options in production through OmnipayFactory::getsupportedproviders(), but…","display_reference":"CVE-2026-77466","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-77466","source_title":"Lychee is a free, open-source photo-management tool. Prior to 7.7.0, Lychee hides the Omnipay Dummy test provider from the checkout options in production through OmnipayFactory::get_supported_providers(), but CreateSessionRequest validates only that the submitted provider is an OmnipayProviderType and does not enforce OmnipayProviderType::isAllowed(). A buyer, including a guest when webshop_allow_guest_checkout is enabled, can submit Dummy directly and complete the test gateway flow without a real payment. When webshop_auto_fulfill_enabled is enabled, OrderCompletedListener::fullfillOrder() can then release the purchasable item. The issue requires access to the Supporter or Pro webshop and an enabled purchasable item. Testing bypassed the closed-source license middleware, so whether the real license layer performs additional payment-provider validation remains unverified. The payment finalize status check itself is not the root cause. This issue is fixed in version 7.7.0.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:45.572Z","source_hash":"content-fingerprint:fnv1a-80247d4f","affected_system":{"organization":"Lychee is a free, open-source photo-management tool. Prior to 7.7.0, Lychee hides the Omnipay Dummy test provider from the checkout options in production through OmnipayFactory project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-77466-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Lychee is a free, open-source photo-management tool. Prior to 7.7.0, Lychee hides the Omnipay Dummy test provider from the checkout options in production through OmnipayFactory::get_supported_providers(), but CreateSessionRequest validates only that the submitted provider is an OmnipayProviderType and does not enforce OmnipayProviderType::isAllowed(). A buyer, including a guest when webshop_allow_guest_checkout is enabled, can submit Dummy directly and complete the test gateway flow without a real payment. When webshop_auto_fulfill_enabled is enabled, OrderCompletedListener::fullfillOrder() can then release the purchasable item. The issue requires access to the Supporter or Pro webshop and an enabled purchasable item. Testing bypassed the closed-source license middleware, so whether the real license layer performs additional payment-provider validation remains unverified. The payment finalize status check itself is not the root cause. This issue is fixed in version 7.7.0.","source_quote_or_pointer":"Security Advisory CVE-2026-77466","fact_id":"SEA-CVE-2026-77466-F1","document_citation":"Security Advisory CVE-2026-77466"},{"id":"SEA-CVE-2026-77466-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Lychee is a free, open-source photo-management tool. Prior to 7.7.0, Lychee hides the Omnipay Dummy test provider from the checkout options in production through OmnipayFactory::getsupportedproviders(), but CreateSessionRequest validates only that the submitted provider is an OmnipayProviderType and does not enforce…","source_quote_or_pointer":"Advisory description (CVE-2026-77466)","fact_id":"SEA-CVE-2026-77466-F2","document_citation":"Advisory description (CVE-2026-77466)"}],"source_stated_contributors":["Lychee is a free, open-source photo-management tool. Prior to 7.7.0, Lychee hides the Omnipay Dummy test provider from the checkout options in production through OmnipayFactory::getsupportedproviders(), but CreateSessionRequest validates only that the submitted provider is an OmnipayProviderType and does not enforce…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.financial_action","auth.privileged_action"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-77466","reporting_entity":"CVE-2026-77466","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-77466-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-77466-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-77466"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-77467","title":"Lychee is a free, open-source photo-management tool. Prior to 7.7.0, Lychee enables ImageMagick PDF support with Ghostscript but does not apply an effective pre-render limit to PDF page dimensions in ImagickHandler::loadPdf(). An authenticated user who can upload a small PDF with an oversized /MediaBox can cause Imagick::readImage() to consume substantial CPU before failing to produce an image. When QUEUE_CONNECTION selects synchronous processing the request can occupy a web worker, while the official asynchronous Docker configuration can clog the shared image-processing queue and delay other work. The advisory did not identify a Ghostscript sandbox escape. This issue is fixed in version 7.7.0.","display_title":"Security issue reported in Software component","display_summary":"Lychee is a free, open-source photo-management tool. Prior to 7.7.0, Lychee enables ImageMagick PDF support with Ghostscript but does not apply an effective pre-render limit to PDF page dimensions in…","display_reference":"CVE-2026-77467","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-77467","source_title":"Lychee is a free, open-source photo-management tool. Prior to 7.7.0, Lychee enables ImageMagick PDF support with Ghostscript but does not apply an effective pre-render limit to PDF page dimensions in ImagickHandler::loadPdf(). An authenticated user who can upload a small PDF with an oversized /MediaBox can cause Imagick::readImage() to consume substantial CPU before failing to produce an image. When QUEUE_CONNECTION selects synchronous processing the request can occupy a web worker, while the official asynchronous Docker configuration can clog the shared image-processing queue and delay other work. The advisory did not identify a Ghostscript sandbox escape. This issue is fixed in version 7.7.0.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:45.572Z","source_hash":"content-fingerprint:fnv1a-96d84dc2","affected_system":{"organization":"Lychee is a free, open-source photo-management tool. Prior to 7.7.0, Lychee enables ImageMagick PDF support with Ghostscript but does not apply an effective pre-render limit to PDF page dimensions in ImagickHandler project","product":"Software component","system_type":"Cloud & container infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-77467-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Lychee is a free, open-source photo-management tool. Prior to 7.7.0, Lychee enables ImageMagick PDF support with Ghostscript but does not apply an effective pre-render limit to PDF page dimensions in ImagickHandler::loadPdf(). An authenticated user who can upload a small PDF with an oversized /MediaBox can cause Imagick::readImage() to consume substantial CPU before failing to produce an image. When QUEUE_CONNECTION selects synchronous processing the request can occupy a web worker, while the official asynchronous Docker configuration can clog the shared image-processing queue and delay other work. The advisory did not identify a Ghostscript sandbox escape. This issue is fixed in version 7.7.0.","source_quote_or_pointer":"Security Advisory CVE-2026-77467","fact_id":"SEA-CVE-2026-77467-F1","document_citation":"Security Advisory CVE-2026-77467"},{"id":"SEA-CVE-2026-77467-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Lychee is a free, open-source photo-management tool. Prior to 7.7.0, Lychee enables ImageMagick PDF support with Ghostscript but does not apply an effective pre-render limit to PDF page dimensions in ImagickHandler::loadPdf().","source_quote_or_pointer":"Advisory description (CVE-2026-77467)","fact_id":"SEA-CVE-2026-77467-F2","document_citation":"Advisory description (CVE-2026-77467)"}],"source_stated_contributors":["Lychee is a free, open-source photo-management tool. Prior to 7.7.0, Lychee enables ImageMagick PDF support with Ghostscript but does not apply an effective pre-render limit to PDF page dimensions in ImagickHandler::loadPdf()."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.code_execution","data.pii","data.uploaded_files","arch.async_job"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Elevated privileges","Boundary bypass"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-77467","reporting_entity":"CVE-2026-77467","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-77467-SG1","label":"Enforce privilege boundaries in code","description":"Require explicit, server-verified authorization for privileged operations and isolate components with separate identities.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-77467-SG1","label":"Enforce privilege boundaries in code","description":"Require explicit, server-verified authorization for privileged operations and isolate components with separate identities.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A low-privilege actor reached a high-privilege capability. Enforce approval and privilege boundaries in deterministic code, not by convention.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-77467"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-111215","title":"Netgate pfSense CE through 2.9.0 contains an OS command injection vulnerability that allows authenticated users to execute commands as root by supplying a crafted wireless parent interface name. Attackers with limited Wireless Edit or Interface Assignments privileges can submit values like ath0;<cmd> via interfaces_wireless_edit.php or interfaces_assign.php, which interface_wireless_clone() interpolates unescaped into an ifconfig shell command.","display_title":"Software component issue could allow unintended commands to run","display_summary":"Netgate pfSense CE through 2.9.0 contains an OS command injection vulnerability that allows authenticated users to execute commands as root by supplying a crafted wireless parent interface name.","display_reference":"CVE-2026-111215","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111215","source_title":"Netgate pfSense CE through 2.9.0 contains an OS command injection vulnerability that allows authenticated users to execute commands as root by supplying a crafted wireless parent interface name. Attackers with limited Wireless Edit or Interface Assignments privileges can submit values like ath0;<cmd> via interfaces_wireless_edit.php or interfaces_assign.php, which interface_wireless_clone() interpolates unescaped into an ifconfig shell command.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:45.573Z","source_hash":"content-fingerprint:fnv1a-729bf9d8","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-111215-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Netgate pfSense CE through 2.9.0 contains an OS command injection vulnerability that allows authenticated users to execute commands as root by supplying a crafted wireless parent interface name. Attackers with limited Wireless Edit or Interface Assignments privileges can submit values like ath0;<cmd> via interfaces_wireless_edit.php or interfaces_assign.php, which interface_wireless_clone() interpolates unescaped into an ifconfig shell command.","source_quote_or_pointer":"Security Advisory CVE-2026-111215","fact_id":"SEA-CVE-2026-111215-F1","document_citation":"Security Advisory CVE-2026-111215"},{"id":"SEA-CVE-2026-111215-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Netgate pfSense CE through 2.9.0 contains an OS command injection vulnerability that allows authenticated users to execute commands as root by supplying a crafted wireless parent interface name.","source_quote_or_pointer":"Advisory description (CVE-2026-111215)","fact_id":"SEA-CVE-2026-111215-F2","document_citation":"Advisory description (CVE-2026-111215)"}],"source_stated_contributors":["Netgate pfSense CE through 2.9.0 contains an OS command injection vulnerability that allows authenticated users to execute commands as root by supplying a crafted wireless parent interface name."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.code_execution","auth.privileged_action","data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-111215","reporting_entity":"CVE-2026-111215","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-111215-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-111215-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-111215"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-111219","title":"Netgate pfSense CE through 2.9.0 contains a newline injection vulnerability in services_pppoe_edit.php that allows privileged users to inject mpd.secret entries via unvalidated username POST fields. Attackers with the PPPoE Server Edit privilege can add a line whose secret begins with '!', making mpd5 run commands as root when a PPPoE client authenticates.","display_title":"Software component issue could expose accounts or credentials","display_summary":"Netgate pfSense CE through 2.9.0 contains a newline injection vulnerability in servicespppoeedit.php that allows privileged users to inject mpd.secret entries via unvalidated username POST fields.","display_reference":"CVE-2026-111219","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111219","source_title":"Netgate pfSense CE through 2.9.0 contains a newline injection vulnerability in services_pppoe_edit.php that allows privileged users to inject mpd.secret entries via unvalidated username POST fields. Attackers with the PPPoE Server Edit privilege can add a line whose secret begins with '!', making mpd5 run commands as root when a PPPoE client authenticates.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:45.573Z","source_hash":"content-fingerprint:fnv1a-cda62b3e","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-111219-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Netgate pfSense CE through 2.9.0 contains a newline injection vulnerability in services_pppoe_edit.php that allows privileged users to inject mpd.secret entries via unvalidated username POST fields. Attackers with the PPPoE Server Edit privilege can add a line whose secret begins with '!', making mpd5 run commands as root when a PPPoE client authenticates.","source_quote_or_pointer":"Security Advisory CVE-2026-111219","fact_id":"SEA-CVE-2026-111219-F1","document_citation":"Security Advisory CVE-2026-111219"},{"id":"SEA-CVE-2026-111219-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Netgate pfSense CE through 2.9.0 contains a newline injection vulnerability in servicespppoeedit.php that allows privileged users to inject mpd.secret entries via unvalidated username POST fields.","source_quote_or_pointer":"Advisory description (CVE-2026-111219)","fact_id":"SEA-CVE-2026-111219-F2","document_citation":"Advisory description (CVE-2026-111219)"}],"source_stated_contributors":["Netgate pfSense CE through 2.9.0 contains a newline injection vulnerability in servicespppoeedit.php that allows privileged users to inject mpd.secret entries via unvalidated username POST fields."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-111219","reporting_entity":"CVE-2026-111219","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-111219-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-111219-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-111219"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-111220","title":"pfSense CE through 2.9.0 contains a crontab injection vulnerability in interfaces_ppps_edit.php that allows authenticated users to execute commands as root by injecting newlines into the ptpid or reset hour/minute fields. Attackers holding the 'WebCfg - Interfaces: PPPs: Edit' privilege can submit crafted POST values that configure_cron() writes unescaped into /etc/crontab, running arbitrary root commands on schedule.","display_title":"Security issue reported in Software component","display_summary":"pfSense CE through 2.9.0 contains a crontab injection vulnerability in interfacespppsedit.php that allows authenticated users to execute commands as root by injecting newlines into the ptpid or reset hour/minute fields.","display_reference":"CVE-2026-111220","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111220","source_title":"pfSense CE through 2.9.0 contains a crontab injection vulnerability in interfaces_ppps_edit.php that allows authenticated users to execute commands as root by injecting newlines into the ptpid or reset hour/minute fields. Attackers holding the 'WebCfg - Interfaces: PPPs: Edit' privilege can submit crafted POST values that configure_cron() writes unescaped into /etc/crontab, running arbitrary root commands on schedule.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:45.573Z","source_hash":"content-fingerprint:fnv1a-9c5096ec","affected_system":{"organization":"pfSense CE through 2.9.0 contains a crontab injection vulnerability in interfacespppsedit.php that allows authenticated users to execute commands as root by injecting newlines into the ptpid or reset hour/minute fields. Attackers holding the 'WebCfg - Interfaces project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-111220-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"pfSense CE through 2.9.0 contains a crontab injection vulnerability in interfaces_ppps_edit.php that allows authenticated users to execute commands as root by injecting newlines into the ptpid or reset hour/minute fields. Attackers holding the 'WebCfg - Interfaces: PPPs: Edit' privilege can submit crafted POST values that configure_cron() writes unescaped into /etc/crontab, running arbitrary root commands on schedule.","source_quote_or_pointer":"Security Advisory CVE-2026-111220","fact_id":"SEA-CVE-2026-111220-F1","document_citation":"Security Advisory CVE-2026-111220"},{"id":"SEA-CVE-2026-111220-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"pfSense CE through 2.9.0 contains a crontab injection vulnerability in interfacespppsedit.php that allows authenticated users to execute commands as root by injecting newlines into the ptpid or reset hour/minute fields.","source_quote_or_pointer":"Advisory description (CVE-2026-111220)","fact_id":"SEA-CVE-2026-111220-F2","document_citation":"Advisory description (CVE-2026-111220)"}],"source_stated_contributors":["pfSense CE through 2.9.0 contains a crontab injection vulnerability in interfacespppsedit.php that allows authenticated users to execute commands as root by injecting newlines into the ptpid or reset hour/minute fields."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.write_action","data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-111220","reporting_entity":"CVE-2026-111220","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-111220-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-111220-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-111220"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-111221","title":"Netgate pfSense CE through 2.9.0 contains a configuration injection vulnerability that allows authenticated WebGUI users to inject mpd5 commands by submitting an unescaped RADIUS shared secret. Attackers with L2TP or PPPoE Server edit privileges can POST a secret containing a quote and newline to vpn_l2tp.php or services_pppoe_edit.php, appending an up-script that executes as root when a session starts.","display_title":"Software component issue could expose accounts or credentials","display_summary":"Netgate pfSense CE through 2.9.0 contains a configuration injection vulnerability that allows authenticated WebGUI users to inject mpd5 commands by submitting an unescaped RADIUS shared secret.","display_reference":"CVE-2026-111221","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111221","source_title":"Netgate pfSense CE through 2.9.0 contains a configuration injection vulnerability that allows authenticated WebGUI users to inject mpd5 commands by submitting an unescaped RADIUS shared secret. Attackers with L2TP or PPPoE Server edit privileges can POST a secret containing a quote and newline to vpn_l2tp.php or services_pppoe_edit.php, appending an up-script that executes as root when a session starts.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:45.574Z","source_hash":"content-fingerprint:fnv1a-367163ef","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-111221-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Netgate pfSense CE through 2.9.0 contains a configuration injection vulnerability that allows authenticated WebGUI users to inject mpd5 commands by submitting an unescaped RADIUS shared secret. Attackers with L2TP or PPPoE Server edit privileges can POST a secret containing a quote and newline to vpn_l2tp.php or services_pppoe_edit.php, appending an up-script that executes as root when a session starts.","source_quote_or_pointer":"Security Advisory CVE-2026-111221","fact_id":"SEA-CVE-2026-111221-F1","document_citation":"Security Advisory CVE-2026-111221"},{"id":"SEA-CVE-2026-111221-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Netgate pfSense CE through 2.9.0 contains a configuration injection vulnerability that allows authenticated WebGUI users to inject mpd5 commands by submitting an unescaped RADIUS shared secret.","source_quote_or_pointer":"Advisory description (CVE-2026-111221)","fact_id":"SEA-CVE-2026-111221-F2","document_citation":"Advisory description (CVE-2026-111221)"}],"source_stated_contributors":["Netgate pfSense CE through 2.9.0 contains a configuration injection vulnerability that allows authenticated WebGUI users to inject mpd5 commands by submitting an unescaped RADIUS shared secret."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-111221","reporting_entity":"CVE-2026-111221","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-111221-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-111221-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-111221"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-111222","title":"Netgate pfSense CE through 2.9.0 contains a php.ini injection vulnerability that allows authenticated users with General Setup privileges to inject directives by submitting an unvalidated timezone value. Attackers can embed a quote and newline to add auto_prepend_file pointing at /var/db/zoneinfo, executing PHP as root after php.ini is regenerated at boot or php-fpm restart.","display_title":"Security issue reported in Software component","display_summary":"Netgate pfSense CE through 2.9.0 contains a php.ini injection vulnerability that allows authenticated users with General Setup privileges to inject directives by submitting an unvalidated timezone value.","display_reference":"CVE-2026-111222","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111222","source_title":"Netgate pfSense CE through 2.9.0 contains a php.ini injection vulnerability that allows authenticated users with General Setup privileges to inject directives by submitting an unvalidated timezone value. Attackers can embed a quote and newline to add auto_prepend_file pointing at /var/db/zoneinfo, executing PHP as root after php.ini is regenerated at boot or php-fpm restart.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:45.574Z","source_hash":"content-fingerprint:fnv1a-627d7e2a","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-111222-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Netgate pfSense CE through 2.9.0 contains a php.ini injection vulnerability that allows authenticated users with General Setup privileges to inject directives by submitting an unvalidated timezone value. Attackers can embed a quote and newline to add auto_prepend_file pointing at /var/db/zoneinfo, executing PHP as root after php.ini is regenerated at boot or php-fpm restart.","source_quote_or_pointer":"Security Advisory CVE-2026-111222","fact_id":"SEA-CVE-2026-111222-F1","document_citation":"Security Advisory CVE-2026-111222"},{"id":"SEA-CVE-2026-111222-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Netgate pfSense CE through 2.9.0 contains a php.ini injection vulnerability that allows authenticated users with General Setup privileges to inject directives by submitting an unvalidated timezone value.","source_quote_or_pointer":"Advisory description (CVE-2026-111222)","fact_id":"SEA-CVE-2026-111222-F2","document_citation":"Advisory description (CVE-2026-111222)"}],"source_stated_contributors":["Netgate pfSense CE through 2.9.0 contains a php.ini injection vulnerability that allows authenticated users with General Setup privileges to inject directives by submitting an unvalidated timezone value."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-111222","reporting_entity":"CVE-2026-111222","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-111222-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-111222-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-111222"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-111227","title":"Netgate pfSense CE through 2.9.0 contains a CRLF injection vulnerability in services_unbound_acls.php that allows authenticated users with the DNS Resolver: Access Lists privilege to inject Unbound configuration directives. Attackers can embed CR/LF characters in the aclname or aclaction fields written to access_lists.conf to add local-data, local-zone, or forward-zone directives and control DNS answers served to LAN clients.","display_title":"Security issue reported in Software component","display_summary":"Netgate pfSense CE through 2.9.0 contains a CRLF injection vulnerability in servicesunboundacls.php that allows authenticated users with the DNS Resolver: Access Lists privilege to inject Unbound configuration…","display_reference":"CVE-2026-111227","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111227","source_title":"Netgate pfSense CE through 2.9.0 contains a CRLF injection vulnerability in services_unbound_acls.php that allows authenticated users with the DNS Resolver: Access Lists privilege to inject Unbound configuration directives. Attackers can embed CR/LF characters in the aclname or aclaction fields written to access_lists.conf to add local-data, local-zone, or forward-zone directives and control DNS answers served to LAN clients.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:45.574Z","source_hash":"content-fingerprint:fnv1a-a9955555","affected_system":{"organization":"Netgate pfSense CE through 2.9.0 contains a CRLF injection vulnerability in servicesunboundacls.php that allows authenticated users with the DNS Resolver project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-111227-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Netgate pfSense CE through 2.9.0 contains a CRLF injection vulnerability in services_unbound_acls.php that allows authenticated users with the DNS Resolver: Access Lists privilege to inject Unbound configuration directives. Attackers can embed CR/LF characters in the aclname or aclaction fields written to access_lists.conf to add local-data, local-zone, or forward-zone directives and control DNS answers served to LAN clients.","source_quote_or_pointer":"Security Advisory CVE-2026-111227","fact_id":"SEA-CVE-2026-111227-F1","document_citation":"Security Advisory CVE-2026-111227"},{"id":"SEA-CVE-2026-111227-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Netgate pfSense CE through 2.9.0 contains a CRLF injection vulnerability in servicesunboundacls.php that allows authenticated users with the DNS Resolver: Access Lists privilege to inject Unbound configuration directives.","source_quote_or_pointer":"Advisory description (CVE-2026-111227)","fact_id":"SEA-CVE-2026-111227-F2","document_citation":"Advisory description (CVE-2026-111227)"}],"source_stated_contributors":["Netgate pfSense CE through 2.9.0 contains a CRLF injection vulnerability in servicesunboundacls.php that allows authenticated users with the DNS Resolver: Access Lists privilege to inject Unbound configuration directives."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-111227","reporting_entity":"CVE-2026-111227","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-111227-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-111227-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-111227"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-111228","title":"Netgate pfSense CE from 2.7.1 through 2.9.0 contains a CRLF injection vulnerability in services_unbound_advanced.php that allows authenticated users with DNS Resolver: Advanced privilege to inject Unbound directives. Attackers can embed CR/LF characters in the unvalidated sock_queue_timeout parameter, which is written raw into unbound.conf, to override local records and forwarding for all clients.","display_title":"Security issue reported in Software component","display_summary":"Netgate pfSense CE from 2.7.1 through 2.9.0 contains a CRLF injection vulnerability in servicesunboundadvanced.php that allows authenticated users with DNS Resolver: Advanced privilege to inject Unbound directives.","display_reference":"CVE-2026-111228","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111228","source_title":"Netgate pfSense CE from 2.7.1 through 2.9.0 contains a CRLF injection vulnerability in services_unbound_advanced.php that allows authenticated users with DNS Resolver: Advanced privilege to inject Unbound directives. Attackers can embed CR/LF characters in the unvalidated sock_queue_timeout parameter, which is written raw into unbound.conf, to override local records and forwarding for all clients.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:45.574Z","source_hash":"content-fingerprint:fnv1a-10e5b0da","affected_system":{"organization":"Netgate pfSense CE from 2.7.1 through 2.9.0 contains a CRLF injection vulnerability in servicesunboundadvanced.php that allows authenticated users with DNS Resolver project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-111228-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Netgate pfSense CE from 2.7.1 through 2.9.0 contains a CRLF injection vulnerability in services_unbound_advanced.php that allows authenticated users with DNS Resolver: Advanced privilege to inject Unbound directives. Attackers can embed CR/LF characters in the unvalidated sock_queue_timeout parameter, which is written raw into unbound.conf, to override local records and forwarding for all clients.","source_quote_or_pointer":"Security Advisory CVE-2026-111228","fact_id":"SEA-CVE-2026-111228-F1","document_citation":"Security Advisory CVE-2026-111228"},{"id":"SEA-CVE-2026-111228-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Netgate pfSense CE from 2.7.1 through 2.9.0 contains a CRLF injection vulnerability in servicesunboundadvanced.php that allows authenticated users with DNS Resolver: Advanced privilege to inject Unbound directives.","source_quote_or_pointer":"Advisory description (CVE-2026-111228)","fact_id":"SEA-CVE-2026-111228-F2","document_citation":"Advisory description (CVE-2026-111228)"}],"source_stated_contributors":["Netgate pfSense CE from 2.7.1 through 2.9.0 contains a CRLF injection vulnerability in servicesunboundadvanced.php that allows authenticated users with DNS Resolver: Advanced privilege to inject Unbound directives."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-111228","reporting_entity":"CVE-2026-111228","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-111228-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-111228-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-111228"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-111229","title":"pfSense CE 2.7.0 through 2.9.0 contains a command injection vulnerability in services_captiveportal_hasync.php that allows users with only the Captive Portal HA privilege to execute commands as root. Attackers can set backwardsyncip to a malicious XMLRPC server returning connected_users with shell metacharacters in ip or mac fields, which captiveportal_load_pfctl passes unescaped to a pfctl shell command.","display_title":"Software component issue could allow unintended commands to run","display_summary":"pfSense CE 2.7.0 through 2.9.0 contains a command injection vulnerability in servicescaptiveportalhasync.php that allows users with only the Captive Portal HA privilege to execute commands as root.","display_reference":"CVE-2026-111229","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111229","source_title":"pfSense CE 2.7.0 through 2.9.0 contains a command injection vulnerability in services_captiveportal_hasync.php that allows users with only the Captive Portal HA privilege to execute commands as root. Attackers can set backwardsyncip to a malicious XMLRPC server returning connected_users with shell metacharacters in ip or mac fields, which captiveportal_load_pfctl passes unescaped to a pfctl shell command.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:45.574Z","source_hash":"content-fingerprint:fnv1a-b4135431","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-111229-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"pfSense CE 2.7.0 through 2.9.0 contains a command injection vulnerability in services_captiveportal_hasync.php that allows users with only the Captive Portal HA privilege to execute commands as root. Attackers can set backwardsyncip to a malicious XMLRPC server returning connected_users with shell metacharacters in ip or mac fields, which captiveportal_load_pfctl passes unescaped to a pfctl shell command.","source_quote_or_pointer":"Security Advisory CVE-2026-111229","fact_id":"SEA-CVE-2026-111229-F1","document_citation":"Security Advisory CVE-2026-111229"},{"id":"SEA-CVE-2026-111229-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"pfSense CE 2.7.0 through 2.9.0 contains a command injection vulnerability in servicescaptiveportalhasync.php that allows users with only the Captive Portal HA privilege to execute commands as root.","source_quote_or_pointer":"Advisory description (CVE-2026-111229)","fact_id":"SEA-CVE-2026-111229-F2","document_citation":"Advisory description (CVE-2026-111229)"}],"source_stated_contributors":["pfSense CE 2.7.0 through 2.9.0 contains a command injection vulnerability in servicescaptiveportalhasync.php that allows users with only the Captive Portal HA privilege to execute commands as root."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.code_execution","auth.privileged_action","data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-111229","reporting_entity":"CVE-2026-111229","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-111229-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-111229-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-111229"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-111230","title":"Netgate pfSense CE through 2.9.0 contains a local file read vulnerability that allows users with the Dynamic DNS client privilege to read files as root by setting a file:// custom Update URL in services_dyndns_edit.php. Attackers can set a non-matching Result Match string so _checkStatus() logs file contents such as /conf/config.xml or /etc/master.passwd to the system log.","display_title":"Security issue reported in Software component","display_summary":"Netgate pfSense CE through 2.9.0 contains a local file read vulnerability that allows users with the Dynamic DNS client privilege to read files as root by setting a file:// custom Update URL in servicesdyndnsedit.php.","display_reference":"CVE-2026-111230","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111230","source_title":"Netgate pfSense CE through 2.9.0 contains a local file read vulnerability that allows users with the Dynamic DNS client privilege to read files as root by setting a file:// custom Update URL in services_dyndns_edit.php. Attackers can set a non-matching Result Match string so _checkStatus() logs file contents such as /conf/config.xml or /etc/master.passwd to the system log.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:45.575Z","source_hash":"content-fingerprint:fnv1a-ceb904a5","affected_system":{"organization":"Netgate pfSense CE through 2.9.0 contains a local file read vulnerability that allows users with the Dynamic DNS client privilege to read files as root by setting a file project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-111230-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Netgate pfSense CE through 2.9.0 contains a local file read vulnerability that allows users with the Dynamic DNS client privilege to read files as root by setting a file:// custom Update URL in services_dyndns_edit.php. Attackers can set a non-matching Result Match string so _checkStatus() logs file contents such as /conf/config.xml or /etc/master.passwd to the system log.","source_quote_or_pointer":"Security Advisory CVE-2026-111230","fact_id":"SEA-CVE-2026-111230-F1","document_citation":"Security Advisory CVE-2026-111230"},{"id":"SEA-CVE-2026-111230-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Netgate pfSense CE through 2.9.0 contains a local file read vulnerability that allows users with the Dynamic DNS client privilege to read files as root by setting a file:// custom Update URL in servicesdyndnsedit.php.","source_quote_or_pointer":"Advisory description (CVE-2026-111230)","fact_id":"SEA-CVE-2026-111230-F2","document_citation":"Advisory description (CVE-2026-111230)"}],"source_stated_contributors":["Netgate pfSense CE through 2.9.0 contains a local file read vulnerability that allows users with the Dynamic DNS client privilege to read files as root by setting a file:// custom Update URL in servicesdyndnsedit.php."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.write_action","data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-111230","reporting_entity":"CVE-2026-111230","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-111230-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-111230-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-111230"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-111231","title":"Netgate pfSense CE through 2.9.0 contains an authorization bypass vulnerability that allows read-only WebGUI users to replace config.xml because config_restore() and config_install() ignore the 'User - Config: Deny Config Write' privilege. Attackers holding page privileges for services_acb.php, uploadconfig.php, diag_confbak.php, or diag_backup.php can install a chosen config.xml to gain root-level code execution after reload or reboot.","display_title":"Software component issue could allow unintended commands to run","display_summary":"Netgate pfSense CE through 2.9.0 contains an authorization bypass vulnerability that allows read-only WebGUI users to replace config.xml because configrestore() and configinstall() ignore the 'User - Config: Deny Config…","display_reference":"CVE-2026-111231","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111231","source_title":"Netgate pfSense CE through 2.9.0 contains an authorization bypass vulnerability that allows read-only WebGUI users to replace config.xml because config_restore() and config_install() ignore the 'User - Config: Deny Config Write' privilege. Attackers holding page privileges for services_acb.php, uploadconfig.php, diag_confbak.php, or diag_backup.php can install a chosen config.xml to gain root-level code execution after reload or reboot.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:45.575Z","source_hash":"content-fingerprint:fnv1a-4f31ecf0","affected_system":{"organization":"Netgate pfSense CE through 2.9.0 contains an authorization bypass vulnerability that allows read-only WebGUI users to replace config.xml because configrestore() and configinstall() ignore the 'User - Config project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-111231-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Netgate pfSense CE through 2.9.0 contains an authorization bypass vulnerability that allows read-only WebGUI users to replace config.xml because config_restore() and config_install() ignore the 'User - Config: Deny Config Write' privilege. Attackers holding page privileges for services_acb.php, uploadconfig.php, diag_confbak.php, or diag_backup.php can install a chosen config.xml to gain root-level code execution after reload or reboot.","source_quote_or_pointer":"Security Advisory CVE-2026-111231","fact_id":"SEA-CVE-2026-111231-F1","document_citation":"Security Advisory CVE-2026-111231"},{"id":"SEA-CVE-2026-111231-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Netgate pfSense CE through 2.9.0 contains an authorization bypass vulnerability that allows read-only WebGUI users to replace config.xml because configrestore() and configinstall() ignore the 'User - Config: Deny Config Write' privilege.","source_quote_or_pointer":"Advisory description (CVE-2026-111231)","fact_id":"SEA-CVE-2026-111231-F2","document_citation":"Advisory description (CVE-2026-111231)"}],"source_stated_contributors":["Netgate pfSense CE through 2.9.0 contains an authorization bypass vulnerability that allows read-only WebGUI users to replace config.xml because configrestore() and configinstall() ignore the 'User - Config: Deny Config Write' privilege."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.write_action","data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-111231","reporting_entity":"CVE-2026-111231","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-111231-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-111231-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-111231"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-75559","title":"The smartphone application \"Vehicle Inspection Certificate Viewer\" contains a vulnerability in which sensitive information may be included in data transmitted by the application, potentially leading to the exposure of API integration credentials such as an access ID and access key.","display_title":"Software component issue could expose accounts or credentials","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-75559","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-75559","source_title":"The smartphone application \"Vehicle Inspection Certificate Viewer\" contains a vulnerability in which sensitive information may be included in data transmitted by the application, potentially leading to the exposure of API integration credentials such as an access ID and access key.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:45.575Z","source_hash":"content-fingerprint:fnv1a-d0a24cca","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-75559-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The smartphone application \"Vehicle Inspection Certificate Viewer\" contains a vulnerability in which sensitive information may be included in data transmitted by the application, potentially leading to the exposure of API integration credentials such as an access ID and access key.","source_quote_or_pointer":"Security Advisory CVE-2026-75559","fact_id":"SEA-CVE-2026-75559-F1","document_citation":"Security Advisory CVE-2026-75559"},{"id":"SEA-CVE-2026-75559-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The smartphone application \"Vehicle Inspection Certificate Viewer\" contains a vulnerability in which sensitive information may be included in data transmitted by the application, potentially leading to the exposure of API integration credentials such as an access ID and access key.","source_quote_or_pointer":"Advisory description (CVE-2026-75559)","fact_id":"SEA-CVE-2026-75559-F2","document_citation":"Advisory description (CVE-2026-75559)"}],"source_stated_contributors":["The smartphone application \"Vehicle Inspection Certificate Viewer\" contains a vulnerability in which sensitive information may be included in data transmitted by the application, potentially leading to the exposure of API integration credentials such as an access ID and access key."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-75559","reporting_entity":"CVE-2026-75559","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-75559-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-75559-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-75559"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-96614","title":"\"ゲオアプリ\" provided by GEO CORPORATION is vulnerable to improper authorization in handler for a custom URL scheme. An attacker may be able to cause the application's in-app browser to access an arbitrary website, potentially leading to phishing attacks or disclosure of a service's session ID.","display_title":"Software component issue could allow unauthorized access","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-96614","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-96614","source_title":"\"ゲオアプリ\" provided by GEO CORPORATION is vulnerable to improper authorization in handler for a custom URL scheme. An attacker may be able to cause the application's in-app browser to access an arbitrary website, potentially leading to phishing attacks or disclosure of a service's session ID.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:45.575Z","source_hash":"content-fingerprint:fnv1a-756cd8fb","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-96614-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"\"ゲオアプリ\" provided by GEO CORPORATION is vulnerable to improper authorization in handler for a custom URL scheme. An attacker may be able to cause the application's in-app browser to access an arbitrary website, potentially leading to phishing attacks or disclosure of a service's session ID.","source_quote_or_pointer":"Security Advisory CVE-2026-96614","fact_id":"SEA-CVE-2026-96614-F1","document_citation":"Security Advisory CVE-2026-96614"},{"id":"SEA-CVE-2026-96614-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"\"ゲオアプリ\" provided by GEO CORPORATION is vulnerable to improper authorization in handler for a custom URL scheme. An attacker may be able to cause the application's in-app browser to access an arbitrary website, potentially leading to phishing attacks or disclosure of a service's session ID.","source_quote_or_pointer":"Advisory description (CVE-2026-96614)","fact_id":"SEA-CVE-2026-96614-F2","document_citation":"Advisory description (CVE-2026-96614)"}],"source_stated_contributors":["\"ゲオアプリ\" provided by GEO CORPORATION is vulnerable to improper authorization in handler for a custom URL scheme. An attacker may be able to cause the application's in-app browser to access an arbitrary website, potentially leading to phishing attacks or disclosure of a service's session ID."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-96614","reporting_entity":"CVE-2026-96614","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-96614-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-96614-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-96614"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-86803","title":"The The Ocean Extra plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.6.0 This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes.","display_title":"Software component issue could allow unintended commands to run","display_summary":"The The Ocean Extra plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.6.0 This is due to the software allowing users to execute an action that does not properly…","display_reference":"CVE-2026-86803","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-86803","source_title":"The The Ocean Extra plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.6.0 This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T18:14:27.092Z","source_hash":"content-fingerprint:fnv1a-8ccb27da","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-86803-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The The Ocean Extra plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.6.0 This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes.","source_quote_or_pointer":"Security Advisory CVE-2026-86803","fact_id":"SEA-CVE-2026-86803-F1","document_citation":"Security Advisory CVE-2026-86803"},{"id":"SEA-CVE-2026-86803-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The The Ocean Extra plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.6.0 This is due to the software allowing users to execute an action that does not properly validate a value before running doshortcode.","source_quote_or_pointer":"Advisory description (CVE-2026-86803)","fact_id":"SEA-CVE-2026-86803-F2","document_citation":"Advisory description (CVE-2026-86803)"}],"source_stated_contributors":["The The Ocean Extra plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.6.0 This is due to the software allowing users to execute an action that does not properly validate a value before running doshortcode."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-86803","reporting_entity":"CVE-2026-86803","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-86803-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-86803-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-86803"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-85634","title":"A flaw was found in the ContentRepositoryImpl.copyExplodedContent function of the wildfly-core library, which is used by WildFly and JBoss EAP to manage server deployments. The issue occurs when the library processes an unsanitized deployment name. Due to a missing containment check, an attacker with the Deployer RBAC role can use path traversal sequences to access files outside the restricted deployment directory. This can allow the attacker to delete arbitrary directories or create files with arbitrary content, leading to a full privilege escalation to the management SuperUser role.","display_title":"Software component issue could expose restricted files","display_summary":"A flaw was found in the ContentRepositoryImpl.copyExplodedContent function of the wildfly-core library, which is used by WildFly and JBoss EAP to manage server deployments.","display_reference":"CVE-2026-85634","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85634","source_title":"A flaw was found in the ContentRepositoryImpl.copyExplodedContent function of the wildfly-core library, which is used by WildFly and JBoss EAP to manage server deployments. The issue occurs when the library processes an unsanitized deployment name. Due to a missing containment check, an attacker with the Deployer RBAC role can use path traversal sequences to access files outside the restricted deployment directory. This can allow the attacker to delete arbitrary directories or create files with arbitrary content, leading to a full privilege escalation to the management SuperUser role.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T18:14:27.092Z","source_hash":"content-fingerprint:fnv1a-85b530c9","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-85634-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A flaw was found in the ContentRepositoryImpl.copyExplodedContent function of the wildfly-core library, which is used by WildFly and JBoss EAP to manage server deployments. The issue occurs when the library processes an unsanitized deployment name. Due to a missing containment check, an attacker with the Deployer RBAC role can use path traversal sequences to access files outside the restricted deployment directory. This can allow the attacker to delete arbitrary directories or create files with arbitrary content, leading to a full privilege escalation to the management SuperUser role.","source_quote_or_pointer":"Security Advisory CVE-2026-85634","fact_id":"SEA-CVE-2026-85634-F1","document_citation":"Security Advisory CVE-2026-85634"},{"id":"SEA-CVE-2026-85634-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A flaw was found in the ContentRepositoryImpl.copyExplodedContent function of the wildfly-core library, which is used by WildFly and JBoss EAP to manage server deployments. The issue occurs when the library processes an unsanitized deployment name.","source_quote_or_pointer":"Advisory description (CVE-2026-85634)","fact_id":"SEA-CVE-2026-85634-F2","document_citation":"Advisory description (CVE-2026-85634)"}],"source_stated_contributors":["A flaw was found in the ContentRepositoryImpl.copyExplodedContent function of the wildfly-core library, which is used by WildFly and JBoss EAP to manage server deployments. The issue occurs when the library processes an unsanitized deployment name."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.write_action"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Restricted file exposure","File overwrite"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-85634","reporting_entity":"CVE-2026-85634","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-85634-SG1","label":"Confine file access to a fixed root","description":"Resolve paths to canonical form and reject anything outside the intended directory before opening files.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-85634-SG1","label":"Confine file access to a fixed root","description":"Resolve paths to canonical form and reject anything outside the intended directory before opening files.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"File paths supplied by a caller escaped the intended directory. Canonicalise paths and confine file access to a fixed root.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-85634"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-81534","title":"The Email Customizer for WooCommerce (Pro) plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 3.9.5. This is due to insufficient authorization and input sanitization in the send_test_mail() function, which allows user-controlled PHP code to be written to executable files in the uploads directory. This makes it possible for authenticated attackers, with subscriber-level access and above, to execute arbitrary PHP code on the server, leading to full site compromise.","display_title":"Software component issue could allow unintended commands to run","display_summary":"The Email Customizer for WooCommerce (Pro) plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 3.9.5.","display_reference":"CVE-2026-81534","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-81534","source_title":"The Email Customizer for WooCommerce (Pro) plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 3.9.5. This is due to insufficient authorization and input sanitization in the send_test_mail() function, which allows user-controlled PHP code to be written to executable files in the uploads directory. This makes it possible for authenticated attackers, with subscriber-level access and above, to execute arbitrary PHP code on the server, leading to full site compromise.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T18:14:27.093Z","source_hash":"content-fingerprint:fnv1a-cf477f26","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-81534-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Email Customizer for WooCommerce (Pro) plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 3.9.5. This is due to insufficient authorization and input sanitization in the send_test_mail() function, which allows user-controlled PHP code to be written to executable files in the uploads directory. This makes it possible for authenticated attackers, with subscriber-level access and above, to execute arbitrary PHP code on the server, leading to full site compromise.","source_quote_or_pointer":"Security Advisory CVE-2026-81534","fact_id":"SEA-CVE-2026-81534-F1","document_citation":"Security Advisory CVE-2026-81534"},{"id":"SEA-CVE-2026-81534-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Email Customizer for WooCommerce (Pro) plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 3.9.5. This is due to insufficient authorization and input sanitization in the sendtestmail() function, which allows user-controlled PHP code to be written to executable files in the…","source_quote_or_pointer":"Advisory description (CVE-2026-81534)","fact_id":"SEA-CVE-2026-81534-F2","document_citation":"Advisory description (CVE-2026-81534)"}],"source_stated_contributors":["The Email Customizer for WooCommerce (Pro) plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 3.9.5. This is due to insufficient authorization and input sanitization in the sendtestmail() function, which allows user-controlled PHP code to be written to executable files in the…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-81534","reporting_entity":"CVE-2026-81534","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-81534-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-81534-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-81534"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-3712","title":"The PhastPress plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3.10 This is due to the scripts service endpoint constructing its URL whitelist dynamically from the attacker-controlled HTTP 'Host' header. This makes it possible for unauthenticated attackers to spoof the header to match any target URL, bypassing the whitelist and forcing the server to make HTTP requests to arbitrary internal or external destinations and return the response content.","display_title":"Software component issue could reach internal services","display_summary":"The PhastPress plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3.10 This is due to the scripts service endpoint constructing its URL whitelist dynamically from the…","display_reference":"CVE-2026-3712","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-3712","source_title":"The PhastPress plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3.10 This is due to the scripts service endpoint constructing its URL whitelist dynamically from the attacker-controlled HTTP 'Host' header. This makes it possible for unauthenticated attackers to spoof the header to match any target URL, bypassing the whitelist and forcing the server to make HTTP requests to arbitrary internal or external destinations and return the response content.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T18:14:27.100Z","source_hash":"content-fingerprint:fnv1a-48a432c6","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-3712-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The PhastPress plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3.10 This is due to the scripts service endpoint constructing its URL whitelist dynamically from the attacker-controlled HTTP 'Host' header. This makes it possible for unauthenticated attackers to spoof the header to match any target URL, bypassing the whitelist and forcing the server to make HTTP requests to arbitrary internal or external destinations and return the response content.","source_quote_or_pointer":"Security Advisory CVE-2026-3712","fact_id":"SEA-CVE-2026-3712-F1","document_citation":"Security Advisory CVE-2026-3712"},{"id":"SEA-CVE-2026-3712-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The PhastPress plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3.10 This is due to the scripts service endpoint constructing its URL whitelist dynamically from the attacker-controlled HTTP 'Host' header.","source_quote_or_pointer":"Advisory description (CVE-2026-3712)","fact_id":"SEA-CVE-2026-3712-F2","document_citation":"Advisory description (CVE-2026-3712)"}],"source_stated_contributors":["The PhastPress plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3.10 This is due to the scripts service endpoint constructing its URL whitelist dynamically from the attacker-controlled HTTP 'Host' header."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Internal network access","Cloud metadata or credential exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-3712","reporting_entity":"CVE-2026-3712","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-3712-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-3712-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"The service fetched a URL chosen by the caller and could be steered at internal systems. Restrict outbound destinations and block internal address ranges.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-3712"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-17031","title":"The Checkout Field Manager (Checkout Manager) for WooCommerce plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 7.9.6 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with subscriber-level access and above, to delete arbitrary Media Library attachments.","display_title":"Software component issue could allow unauthorized access","display_summary":"The Checkout Field Manager (Checkout Manager) for WooCommerce plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 7.9.6 This is due to the plugin not properly verifying that a…","display_reference":"CVE-2026-17031","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-17031","source_title":"The Checkout Field Manager (Checkout Manager) for WooCommerce plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 7.9.6 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with subscriber-level access and above, to delete arbitrary Media Library attachments.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T18:14:27.101Z","source_hash":"content-fingerprint:fnv1a-86198c31","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-17031-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Checkout Field Manager (Checkout Manager) for WooCommerce plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 7.9.6 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with subscriber-level access and above, to delete arbitrary Media Library attachments.","source_quote_or_pointer":"Security Advisory CVE-2026-17031","fact_id":"SEA-CVE-2026-17031-F1","document_citation":"Security Advisory CVE-2026-17031"},{"id":"SEA-CVE-2026-17031-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Checkout Field Manager (Checkout Manager) for WooCommerce plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 7.9.6 This is due to the plugin not properly verifying that a user is authorized to perform an action.","source_quote_or_pointer":"Advisory description (CVE-2026-17031)","fact_id":"SEA-CVE-2026-17031-F2","document_citation":"Advisory description (CVE-2026-17031)"}],"source_stated_contributors":["The Checkout Field Manager (Checkout Manager) for WooCommerce plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 7.9.6 This is due to the plugin not properly verifying that a user is authorized to perform an action."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.financial_action","auth.destructive_action","auth.write_action","data.pii","data.uploaded_files"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-17031","reporting_entity":"CVE-2026-17031","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-17031-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-17031-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-17031"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-15090","title":"The Link Library plugin for WordPress is vulnerable to time-based SQL Injection via the 'link_url' parameter in all versions up to, and including, 7.9.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.","display_title":"Software component issue could expose or alter stored data","display_summary":"The Link Library plugin for WordPress is vulnerable to time-based SQL Injection via the 'linkurl' parameter in all versions up to, and including, 7.9.2 due to insufficient escaping on the user supplied parameter and lack…","display_reference":"CVE-2026-15090","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-15090","source_title":"The Link Library plugin for WordPress is vulnerable to time-based SQL Injection via the 'link_url' parameter in all versions up to, and including, 7.9.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T18:14:27.101Z","source_hash":"content-fingerprint:fnv1a-4fc674a","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-15090-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Link Library plugin for WordPress is vulnerable to time-based SQL Injection via the 'link_url' parameter in all versions up to, and including, 7.9.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.","source_quote_or_pointer":"Security Advisory CVE-2026-15090","fact_id":"SEA-CVE-2026-15090-F1","document_citation":"Security Advisory CVE-2026-15090"},{"id":"SEA-CVE-2026-15090-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Link Library plugin for WordPress is vulnerable to time-based SQL Injection via the 'linkurl' parameter in all versions up to, and including, 7.9.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.","source_quote_or_pointer":"Advisory description (CVE-2026-15090)","fact_id":"SEA-CVE-2026-15090-F2","document_citation":"Advisory description (CVE-2026-15090)"}],"source_stated_contributors":["The Link Library plugin for WordPress is vulnerable to time-based SQL Injection via the 'linkurl' parameter in all versions up to, and including, 7.9.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-15090","reporting_entity":"CVE-2026-15090","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-15090-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-15090-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-15090"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-111091","title":"In JetBrains Junie CLI before 26.8.3 code execution was possible via an untrusted project's MCP server configuration","display_title":"Software component issue could allow unintended commands to run","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-111091","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111091","source_title":"In JetBrains Junie CLI before 26.8.3 code execution was possible via an untrusted project's MCP server configuration","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T18:14:27.102Z","source_hash":"content-fingerprint:fnv1a-4161ea4","affected_system":{"organization":"Software component project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-111091-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"In JetBrains Junie CLI before 26.8.3 code execution was possible via an untrusted project's MCP server configuration","source_quote_or_pointer":"Security Advisory CVE-2026-111091","fact_id":"SEA-CVE-2026-111091-F1","document_citation":"Security Advisory CVE-2026-111091"},{"id":"SEA-CVE-2026-111091-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"In JetBrains Junie CLI before 26.8.3 code execution was possible via an untrusted project's MCP server configuration","source_quote_or_pointer":"Advisory description (CVE-2026-111091)","fact_id":"SEA-CVE-2026-111091-F2","document_citation":"Advisory description (CVE-2026-111091)"}],"source_stated_contributors":["In JetBrains Junie CLI before 26.8.3 code execution was possible via an untrusted project's MCP server configuration"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-004","SEA-FM-002","SEA-FM-010"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-111091","reporting_entity":"CVE-2026-111091","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-111091-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-111091-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-111091"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108587","title":"The 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.34.10 via the compressCustom function. This is due to missing file type validation and extension filtering on the page_id parameter, combined with a world-readable leaked nonce that bypasses authentication checks. This makes it possible for unauthenticated attackers to upload files that may be executable, which makes remote code execution possible. This exploit chain requires obtaining the plugin's REST nonce (tenwebio_rest), which is automatically serialized to a world-readable file under wp-content/uploads/ whenever a bulk optimisation batch pauses; because the nonce is generated in a cron/loopback context with a user ID of 0, it is valid for unauthenticated visitors.","display_title":"Software component issue could allow unintended commands to run","display_summary":"The 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.34.10 via the compressCustom function.","display_reference":"CVE-2026-108587","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108587","source_title":"The 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.34.10 via the compressCustom function. This is due to missing file type validation and extension filtering on the page_id parameter, combined with a world-readable leaked nonce that bypasses authentication checks. This makes it possible for unauthenticated attackers to upload files that may be executable, which makes remote code execution possible. This exploit chain requires obtaining the plugin's REST nonce (tenwebio_rest), which is automatically serialized to a world-readable file under wp-content/uploads/ whenever a bulk optimisation batch pauses; because the nonce is generated in a cron/loopback context with a user ID of 0, it is valid for unauthenticated visitors.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T18:14:27.105Z","source_hash":"content-fingerprint:fnv1a-43ad6100","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108587-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.34.10 via the compressCustom function. This is due to missing file type validation and extension filtering on the page_id parameter, combined with a world-readable leaked nonce that bypasses authentication checks. This makes it possible for unauthenticated attackers to upload files that may be executable, which makes remote code execution possible. This exploit chain requires obtaining the plugin's REST nonce (tenwebio_rest), which is automatically serialized to a world-readable file under wp-content/uploads/ whenever a bulk optimisation batch pauses; because the nonce is generated in a cron/loopback context with a user ID of 0, it is valid for unauthenticated visitors.","source_quote_or_pointer":"Security Advisory CVE-2026-108587","fact_id":"SEA-CVE-2026-108587-F1","document_citation":"Security Advisory CVE-2026-108587"},{"id":"SEA-CVE-2026-108587-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.34.10 via the compressCustom function.","source_quote_or_pointer":"Advisory description (CVE-2026-108587)","fact_id":"SEA-CVE-2026-108587-F2","document_citation":"Advisory description (CVE-2026-108587)"}],"source_stated_contributors":["The 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.34.10 via the compressCustom function."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","data.uploaded_files","arch.caching","arch.async_job"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108587","reporting_entity":"CVE-2026-108587","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108587-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108587-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108587"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108092","title":"The Blog2Social – Social Media Auto Post & Scheduler plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 9.1.4. This is due to the b2s_ship_item and b2s_ship_item_reload_url AJAX handlers lacking per-object authorization on the postId parameter. This makes it possible for authenticated attackers with Contributor-level access and above to read the title and content of any post, including private and pending posts belonging to other users.","display_title":"Security issue reported in Software component","display_summary":"The Blog2Social – Social Media Auto Post & Scheduler plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 9.1.4.","display_reference":"CVE-2026-108092","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108092","source_title":"The Blog2Social – Social Media Auto Post & Scheduler plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 9.1.4. This is due to the b2s_ship_item and b2s_ship_item_reload_url AJAX handlers lacking per-object authorization on the postId parameter. This makes it possible for authenticated attackers with Contributor-level access and above to read the title and content of any post, including private and pending posts belonging to other users.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T18:14:27.107Z","source_hash":"content-fingerprint:fnv1a-3dddfbd9","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108092-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Blog2Social – Social Media Auto Post & Scheduler plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 9.1.4. This is due to the b2s_ship_item and b2s_ship_item_reload_url AJAX handlers lacking per-object authorization on the postId parameter. This makes it possible for authenticated attackers with Contributor-level access and above to read the title and content of any post, including private and pending posts belonging to other users.","source_quote_or_pointer":"Security Advisory CVE-2026-108092","fact_id":"SEA-CVE-2026-108092-F1","document_citation":"Security Advisory CVE-2026-108092"},{"id":"SEA-CVE-2026-108092-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Blog2Social – Social Media Auto Post & Scheduler plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 9.1.4. This is due to the b2sshipitem and b2sshipitemreloadurl AJAX handlers lacking per-object authorization on the postId parameter.","source_quote_or_pointer":"Advisory description (CVE-2026-108092)","fact_id":"SEA-CVE-2026-108092-F2","document_citation":"Advisory description (CVE-2026-108092)"}],"source_stated_contributors":["The Blog2Social – Social Media Auto Post & Scheduler plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 9.1.4. This is due to the b2sshipitem and b2sshipitemreloadurl AJAX handlers lacking per-object authorization on the postId parameter."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.public_publication","data.pii","arch.async_job"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108092","reporting_entity":"CVE-2026-108092","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108092-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108092-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-108092"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-105474","title":"A server-side template injection exists in SolusVM 2 up to version 2.0.0-44576 that allows remote authenticated users to execute arbitrary code as root.","display_title":"Software component issue could allow unintended commands to run","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-105474","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105474","source_title":"A server-side template injection exists in SolusVM 2 up to version 2.0.0-44576 that allows remote authenticated users to execute arbitrary code as root.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T18:14:27.108Z","source_hash":"content-fingerprint:fnv1a-3efda5ba","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-105474-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A server-side template injection exists in SolusVM 2 up to version 2.0.0-44576 that allows remote authenticated users to execute arbitrary code as root.","source_quote_or_pointer":"Security Advisory CVE-2026-105474","fact_id":"SEA-CVE-2026-105474-F1","document_citation":"Security Advisory CVE-2026-105474"},{"id":"SEA-CVE-2026-105474-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A server-side template injection exists in SolusVM 2 up to version 2.0.0-44576 that allows remote authenticated users to execute arbitrary code as root.","source_quote_or_pointer":"Advisory description (CVE-2026-105474)","fact_id":"SEA-CVE-2026-105474-F2","document_citation":"Advisory description (CVE-2026-105474)"}],"source_stated_contributors":["A server-side template injection exists in SolusVM 2 up to version 2.0.0-44576 that allows remote authenticated users to execute arbitrary code as root."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.code_execution","auth.privileged_action","data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-105474","reporting_entity":"CVE-2026-105474","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-105474-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-105474-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-105474"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-101287","title":"Authentication bypass vulnerability in Stela, versions prior to 1.60.1, due to the use of a cookie named “authProcess” without validating its integrity. The application stores the user identifier (userId) and the status of the authentication process (validSteps) in this cookie and relies on these values—which can be modified by the client—to complete the login process. A remote attacker, without valid credentials or interaction from other users, could manipulate the cookie to bypass authentication checks and impersonate any account, including one with SUPER_ADMIN privileges. This would allow the attacker to obtain a valid JWT token with administrative privileges and compromise the confidentiality and integrity of the application.","display_title":"Software component issue could allow unauthorized access","display_summary":"Authentication bypass vulnerability in Stela, versions prior to 1.60.1, due to the use of a cookie named “authProcess” without validating its integrity.","display_reference":"CVE-2026-101287","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-101287","source_title":"Authentication bypass vulnerability in Stela, versions prior to 1.60.1, due to the use of a cookie named “authProcess” without validating its integrity. The application stores the user identifier (userId) and the status of the authentication process (validSteps) in this cookie and relies on these values—which can be modified by the client—to complete the login process. A remote attacker, without valid credentials or interaction from other users, could manipulate the cookie to bypass authentication checks and impersonate any account, including one with SUPER_ADMIN privileges. This would allow the attacker to obtain a valid JWT token with administrative privileges and compromise the confidentiality and integrity of the application.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T18:14:27.118Z","source_hash":"content-fingerprint:fnv1a-17aadca6","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-101287-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Authentication bypass vulnerability in Stela, versions prior to 1.60.1, due to the use of a cookie named “authProcess” without validating its integrity. The application stores the user identifier (userId) and the status of the authentication process (validSteps) in this cookie and relies on these values—which can be modified by the client—to complete the login process. A remote attacker, without valid credentials or interaction from other users, could manipulate the cookie to bypass authentication checks and impersonate any account, including one with SUPER_ADMIN privileges. This would allow the attacker to obtain a valid JWT token with administrative privileges and compromise the confidentiality and integrity of the application.","source_quote_or_pointer":"Security Advisory CVE-2026-101287","fact_id":"SEA-CVE-2026-101287-F1","document_citation":"Security Advisory CVE-2026-101287"},{"id":"SEA-CVE-2026-101287-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Authentication bypass vulnerability in Stela, versions prior to 1.60.1, due to the use of a cookie named “authProcess” without validating its integrity. The application stores the user identifier (userId) and the status of the authentication process (validSteps) in this cookie and relies on these values—which can be…","source_quote_or_pointer":"Advisory description (CVE-2026-101287)","fact_id":"SEA-CVE-2026-101287-F2","document_citation":"Advisory description (CVE-2026-101287)"}],"source_stated_contributors":["Authentication bypass vulnerability in Stela, versions prior to 1.60.1, due to the use of a cookie named “authProcess” without validating its integrity. The application stores the user identifier (userId) and the status of the authentication process (validSteps) in this cookie and relies on these values—which can be…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-101287","reporting_entity":"CVE-2026-101287","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-101287-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-101287-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-101287"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-77711","title":"When Jetty's HttpClient make a request to a server through a forward proxy, the server may reply with a 407 (Proxy Authentication Required). The client mistakenly interprets the 407 as coming from the proxy, so it re-sends the request with the Proxy-Authentication header, which arrives to the server, that now has access to the proxy credentials.","display_title":"Software component issue could expose accounts or credentials","display_summary":"When Jetty's HttpClient make a request to a server through a forward proxy, the server may reply with a 407 (Proxy Authentication Required).","display_reference":"CVE-2026-77711","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-77711","source_title":"When Jetty's HttpClient make a request to a server through a forward proxy, the server may reply with a 407 (Proxy Authentication Required). The client mistakenly interprets the 407 as coming from the proxy, so it re-sends the request with the Proxy-Authentication header, which arrives to the server, that now has access to the proxy credentials.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T13:22:22.911Z","source_hash":"content-fingerprint:fnv1a-5cf7365e","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-77711-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"When Jetty's HttpClient make a request to a server through a forward proxy, the server may reply with a 407 (Proxy Authentication Required). The client mistakenly interprets the 407 as coming from the proxy, so it re-sends the request with the Proxy-Authentication header, which arrives to the server, that now has access to the proxy credentials.","source_quote_or_pointer":"Security Advisory CVE-2026-77711","fact_id":"SEA-CVE-2026-77711-F1","document_citation":"Security Advisory CVE-2026-77711"},{"id":"SEA-CVE-2026-77711-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"When Jetty's HttpClient make a request to a server through a forward proxy, the server may reply with a 407 (Proxy Authentication Required).","source_quote_or_pointer":"Advisory description (CVE-2026-77711)","fact_id":"SEA-CVE-2026-77711-F2","document_citation":"Advisory description (CVE-2026-77711)"}],"source_stated_contributors":["When Jetty's HttpClient make a request to a server through a forward proxy, the server may reply with a 407 (Proxy Authentication Required)."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-77711","reporting_entity":"CVE-2026-77711","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-77711-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-77711-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-77711"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-63314","title":"WebCTI service for Slican IPx telephone exchanges is vulnerable to SQL Injection in /webcti/admin_json.php enpoint. Improper neutralization of input allows an authenticated attacker to execute SQL Injection attacks. This issue was fixed in IPx series version 6.62.0100.","display_title":"Software component issue could expose or alter stored data","display_summary":"WebCTI service for Slican IPx telephone exchanges is vulnerable to SQL Injection in /webcti/adminjson.php enpoint. Improper neutralization of input allows an authenticated attacker to execute SQL Injection attacks.","display_reference":"CVE-2026-63314","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63314","source_title":"WebCTI service for Slican IPx telephone exchanges is vulnerable to SQL Injection in /webcti/admin_json.php enpoint. Improper neutralization of input allows an authenticated attacker to execute SQL Injection attacks. This issue was fixed in IPx series version 6.62.0100.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T13:22:22.912Z","source_hash":"content-fingerprint:fnv1a-17131b4c","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-63314-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"WebCTI service for Slican IPx telephone exchanges is vulnerable to SQL Injection in /webcti/admin_json.php enpoint. Improper neutralization of input allows an authenticated attacker to execute SQL Injection attacks. This issue was fixed in IPx series version 6.62.0100.","source_quote_or_pointer":"Security Advisory CVE-2026-63314","fact_id":"SEA-CVE-2026-63314-F1","document_citation":"Security Advisory CVE-2026-63314"},{"id":"SEA-CVE-2026-63314-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"WebCTI service for Slican IPx telephone exchanges is vulnerable to SQL Injection in /webcti/adminjson.php enpoint. Improper neutralization of input allows an authenticated attacker to execute SQL Injection attacks.","source_quote_or_pointer":"Advisory description (CVE-2026-63314)","fact_id":"SEA-CVE-2026-63314-F2","document_citation":"Advisory description (CVE-2026-63314)"}],"source_stated_contributors":["WebCTI service for Slican IPx telephone exchanges is vulnerable to SQL Injection in /webcti/adminjson.php enpoint. Improper neutralization of input allows an authenticated attacker to execute SQL Injection attacks."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-63314","reporting_entity":"CVE-2026-63314","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-63314-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-63314-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-63314"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-35088","title":"Slican telephone exchanges use symmetric encryption for TCP/IP communication. Secret key is hardcoded in multiple binary files. An attacker who has access to these files can decrypt the communication. This issue was fixed in IPx series version 6.62.0100. The issue STILL EXISTS in End-Of-Life telephone exchanges: - CCT-1668 (CCT1CPU) - MAC-6400 - CXS-0424 These products were discontinued in 2011 and 2012 and and will not receive updates. These products require a hardware update in order to receive a software update. The vendor recommends that users of these devices contact the their service department directly to determine the options for upgrading.","display_title":"Software component issue could expose accounts or credentials","display_summary":"Slican telephone exchanges use symmetric encryption for TCP/IP communication. Secret key is hardcoded in multiple binary files. An attacker who has access to these files can decrypt the communication.","display_reference":"CVE-2026-35088","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-35088","source_title":"Slican telephone exchanges use symmetric encryption for TCP/IP communication. Secret key is hardcoded in multiple binary files. An attacker who has access to these files can decrypt the communication. This issue was fixed in IPx series version 6.62.0100. The issue STILL EXISTS in End-Of-Life telephone exchanges: - CCT-1668 (CCT1CPU) - MAC-6400 - CXS-0424 These products were discontinued in 2011 and 2012 and and will not receive updates. These products require a hardware update in order to receive a software update. The vendor recommends that users of these devices contact the their service department directly to determine the options for upgrading.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T13:22:22.913Z","source_hash":"content-fingerprint:fnv1a-510b7985","affected_system":{"organization":"Slican telephone exchanges use symmetric encryption for TCP/IP communication. Secret key is hardcoded in multiple binary files. An attacker who has access to these files can decrypt the communication. This issue was fixed in IPx series version 6.62.0100. The issue STILL EXISTS in End-Of-Life telephone exchanges project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-35088-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Slican telephone exchanges use symmetric encryption for TCP/IP communication. Secret key is hardcoded in multiple binary files. An attacker who has access to these files can decrypt the communication. This issue was fixed in IPx series version 6.62.0100. The issue STILL EXISTS in End-Of-Life telephone exchanges: - CCT-1668 (CCT1CPU) - MAC-6400 - CXS-0424 These products were discontinued in 2011 and 2012 and and will not receive updates. These products require a hardware update in order to receive a software update. The vendor recommends that users of these devices contact the their service department directly to determine the options for upgrading.","source_quote_or_pointer":"Security Advisory CVE-2026-35088","fact_id":"SEA-CVE-2026-35088-F1","document_citation":"Security Advisory CVE-2026-35088"},{"id":"SEA-CVE-2026-35088-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Slican telephone exchanges use symmetric encryption for TCP/IP communication. Secret key is hardcoded in multiple binary files. An attacker who has access to these files can decrypt the communication.","source_quote_or_pointer":"Advisory description (CVE-2026-35088)","fact_id":"SEA-CVE-2026-35088-F2","document_citation":"Advisory description (CVE-2026-35088)"}],"source_stated_contributors":["Slican telephone exchanges use symmetric encryption for TCP/IP communication. Secret key is hardcoded in multiple binary files. An attacker who has access to these files can decrypt the communication."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-35088","reporting_entity":"CVE-2026-35088","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-35088-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-35088-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-35088"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109855","title":"undici is an HTTP client library for Node.js. In versions 8.11.0 and 8.11.1, its experimental WebSocket client, which is enabled by default when HTTP/2 is allowed, mishandles a failed WebSocket handshake over HTTP/2: the request is already marked completed, so the abort becomes a no-op and the underlying HTTP/2 stream is left open with no error listener. When a malicious server then destroys the connection, the orphaned stream emits an unhandled error and the Node.js process exits. A remote, unauthenticated server can therefore crash any client that opens a WebSocket to it over HTTP/2, resulting in a denial of service. The issue is fixed in undici 8.11.2, and users should upgrade to 8.11.2 or later. As a workaround, set allowH2 to false to disable HTTP/2 for WebSocket connections, or avoid opening WebSocket connections to untrusted servers.","display_title":"Software component issue could make the service unavailable","display_summary":"undici is an HTTP client library for Node.js. In versions 8.11.0 and 8.11.1, its experimental WebSocket client, which is enabled by default when HTTP/2 is allowed, mishandles a failed WebSocket handshake over HTTP/2: the…","display_reference":"CVE-2026-109855","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109855","source_title":"undici is an HTTP client library for Node.js. In versions 8.11.0 and 8.11.1, its experimental WebSocket client, which is enabled by default when HTTP/2 is allowed, mishandles a failed WebSocket handshake over HTTP/2: the request is already marked completed, so the abort becomes a no-op and the underlying HTTP/2 stream is left open with no error listener. When a malicious server then destroys the connection, the orphaned stream emits an unhandled error and the Node.js process exits. A remote, unauthenticated server can therefore crash any client that opens a WebSocket to it over HTTP/2, resulting in a denial of service. The issue is fixed in undici 8.11.2, and users should upgrade to 8.11.2 or later. As a workaround, set allowH2 to false to disable HTTP/2 for WebSocket connections, or avoid opening WebSocket connections to untrusted servers.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T13:22:22.921Z","source_hash":"content-fingerprint:fnv1a-2792c4a7","affected_system":{"organization":"undici is an HTTP client library for Node.js. In versions 8.11.0 and 8.11.1, its experimental WebSocket client, which is enabled by default when HTTP/2 is allowed, mishandles a failed WebSocket handshake over HTTP/2 project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109855-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"undici is an HTTP client library for Node.js. In versions 8.11.0 and 8.11.1, its experimental WebSocket client, which is enabled by default when HTTP/2 is allowed, mishandles a failed WebSocket handshake over HTTP/2: the request is already marked completed, so the abort becomes a no-op and the underlying HTTP/2 stream is left open with no error listener. When a malicious server then destroys the connection, the orphaned stream emits an unhandled error and the Node.js process exits. A remote, unauthenticated server can therefore crash any client that opens a WebSocket to it over HTTP/2, resulting in a denial of service. The issue is fixed in undici 8.11.2, and users should upgrade to 8.11.2 or later. As a workaround, set allowH2 to false to disable HTTP/2 for WebSocket connections, or avoid opening WebSocket connections to untrusted servers.","source_quote_or_pointer":"Security Advisory CVE-2026-109855","fact_id":"SEA-CVE-2026-109855-F1","document_citation":"Security Advisory CVE-2026-109855"},{"id":"SEA-CVE-2026-109855-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"undici is an HTTP client library for Node.js. In versions 8.11.0 and 8.11.1, its experimental WebSocket client, which is enabled by default when HTTP/2 is allowed, mishandles a failed WebSocket handshake over HTTP/2: the request is already marked completed, so the abort becomes a no-op and the underlying HTTP/2 stream…","source_quote_or_pointer":"Advisory description (CVE-2026-109855)","fact_id":"SEA-CVE-2026-109855-F2","document_citation":"Advisory description (CVE-2026-109855)"}],"source_stated_contributors":["undici is an HTTP client library for Node.js. In versions 8.11.0 and 8.11.1, its experimental WebSocket client, which is enabled by default when HTTP/2 is allowed, mishandles a failed WebSocket handshake over HTTP/2: the request is already marked completed, so the abort becomes a no-op and the underlying HTTP/2 stream…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","data.pii","arch.external_api","arch.async_job","arch.event_driven"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109855","reporting_entity":"CVE-2026-109855","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109855-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109855-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-109855"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-103224","title":"In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the MySQL message decoder aggregates inbound multi-packet payloads into a composite direct-memory buffer without any cumulative size limit. A malicious, compromised, or man-in-the-middle MySQL server can send a continuous stream of packets with the maximum payload length (0xFFFFFF), preventing the end-of-message condition from being reached, causing unbounded direct-memory allocation on the client and leading to an out-of-memory crash. This occurs before authentication completes. The impacted component is io.vertx:vertx-mysql-client.","display_title":"Security issue reported in Software component","display_summary":"In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the MySQL message decoder aggregates inbound multi-packet payloads into a composite direct-memory buffer without any…","display_reference":"CVE-2026-103224","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103224","source_title":"In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the MySQL message decoder aggregates inbound multi-packet payloads into a composite direct-memory buffer without any cumulative size limit. A malicious, compromised, or man-in-the-middle MySQL server can send a continuous stream of packets with the maximum payload length (0xFFFFFF), preventing the end-of-message condition from being reached, causing unbounded direct-memory allocation on the client and leading to an out-of-memory crash. This occurs before authentication completes. The impacted component is io.vertx:vertx-mysql-client.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T13:22:22.921Z","source_hash":"content-fingerprint:fnv1a-436ca41d","affected_system":{"organization":"In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the MySQL message decoder aggregates inbound multi-packet payloads into a composite direct-memory buffer without any cumulative size limit. A malicious, compromised, or man-in-the-middle MySQL server can send a continuous stream of packets with the maximum payload length (0xFFFFFF), preventing the end-of-message condition from being reached, causing unbounded direct-memory allocation on the client and leading to an out-of-memory crash. This occurs before authentication completes. The impacted component is io.vertx project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-103224-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the MySQL message decoder aggregates inbound multi-packet payloads into a composite direct-memory buffer without any cumulative size limit. A malicious, compromised, or man-in-the-middle MySQL server can send a continuous stream of packets with the maximum payload length (0xFFFFFF), preventing the end-of-message condition from being reached, causing unbounded direct-memory allocation on the client and leading to an out-of-memory crash. This occurs before authentication completes. The impacted component is io.vertx:vertx-mysql-client.","source_quote_or_pointer":"Security Advisory CVE-2026-103224","fact_id":"SEA-CVE-2026-103224-F1","document_citation":"Security Advisory CVE-2026-103224"},{"id":"SEA-CVE-2026-103224-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the MySQL message decoder aggregates inbound multi-packet payloads into a composite direct-memory buffer without any cumulative size limit.","source_quote_or_pointer":"Advisory description (CVE-2026-103224)","fact_id":"SEA-CVE-2026-103224-F2","document_citation":"Advisory description (CVE-2026-103224)"}],"source_stated_contributors":["In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the MySQL message decoder aggregates inbound multi-packet payloads into a composite direct-memory buffer without any cumulative size limit."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","arch.async_job","arch.event_driven"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-103224","reporting_entity":"CVE-2026-103224","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-103224-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-103224-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-103224"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-103223","title":"In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the PostgreSQL message decoder reads the 4-byte message length field from the PostgreSQL wire protocol without any maximum validation. A malicious, compromised, or man-in-the-middle PostgreSQL server can send a message header with the length field set to an extremely large value (up to Integer.MAX_VALUE), causing the decoder to accumulate subsequent TCP data into a composite buffer without bound, leading to unbounded memory allocation on the client and an out-of-memory crash. This occurs before authentication completes. The impacted component is io.vertx:vertx-pg-client.","display_title":"Security issue reported in Software component","display_summary":"In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the PostgreSQL message decoder reads the 4-byte message length field from the PostgreSQL wire protocol without any maximum…","display_reference":"CVE-2026-103223","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103223","source_title":"In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the PostgreSQL message decoder reads the 4-byte message length field from the PostgreSQL wire protocol without any maximum validation. A malicious, compromised, or man-in-the-middle PostgreSQL server can send a message header with the length field set to an extremely large value (up to Integer.MAX_VALUE), causing the decoder to accumulate subsequent TCP data into a composite buffer without bound, leading to unbounded memory allocation on the client and an out-of-memory crash. This occurs before authentication completes. The impacted component is io.vertx:vertx-pg-client.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T13:22:22.923Z","source_hash":"content-fingerprint:fnv1a-4486cca0","affected_system":{"organization":"In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the PostgreSQL message decoder reads the 4-byte message length field from the PostgreSQL wire protocol without any maximum validation. A malicious, compromised, or man-in-the-middle PostgreSQL server can send a message header with the length field set to an extremely large value (up to Integer.MAXVALUE), causing the decoder to accumulate subsequent TCP data into a composite buffer without bound, leading to unbounded memory allocation on the client and an out-of-memory crash. This occurs before authentication completes. The impacted component is io.vertx project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-103223-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the PostgreSQL message decoder reads the 4-byte message length field from the PostgreSQL wire protocol without any maximum validation. A malicious, compromised, or man-in-the-middle PostgreSQL server can send a message header with the length field set to an extremely large value (up to Integer.MAX_VALUE), causing the decoder to accumulate subsequent TCP data into a composite buffer without bound, leading to unbounded memory allocation on the client and an out-of-memory crash. This occurs before authentication completes. The impacted component is io.vertx:vertx-pg-client.","source_quote_or_pointer":"Security Advisory CVE-2026-103223","fact_id":"SEA-CVE-2026-103223-F1","document_citation":"Security Advisory CVE-2026-103223"},{"id":"SEA-CVE-2026-103223-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the PostgreSQL message decoder reads the 4-byte message length field from the PostgreSQL wire protocol without any maximum validation.","source_quote_or_pointer":"Advisory description (CVE-2026-103223)","fact_id":"SEA-CVE-2026-103223-F2","document_citation":"Advisory description (CVE-2026-103223)"}],"source_stated_contributors":["In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the PostgreSQL message decoder reads the 4-byte message length field from the PostgreSQL wire protocol without any maximum validation."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.financial_action","auth.write_action","data.financial_records"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-103223","reporting_entity":"CVE-2026-103223","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-103223-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-103223-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-103223"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-102469","title":"In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x DB2 client (vertx-db2-client) contains DRDA protocol handling code that deserializes User Defined Type (UDT) column data using a bare ObjectInputStream.readObject() call with no ObjectInputFilter or class allowlist. This code path is triggered when a DRDA server sends a result set with a column tagged as UDT (FDOCA protocol LID 0x50). However, DB2 does not support this type of UDT. The FDOCA 0x50 type is never sent by a legitimate DB2 server. Nevertheless, a malicious or man-in-the-middle DRDA server could craft a response with a 0x50-tagged column, causing the client to deserialize arbitrary attacker-controlled bytes on the Vert.x event loop before any application code can inspect or reject the data. If a Java deserialization gadget chain is present on the application's classpath, this enables remote code execution. Without a gadget chain, denial of service is possible via crafted object graphs. TLS is disabled by default, making man-in-the-middle exploitation feasible. The impacted component is io.vertx:vertx-db2-client.","display_title":"Software component issue could allow unintended commands to run","display_summary":"In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x DB2 client (vertx-db2-client) contains DRDA protocol handling code that deserializes User Defined Type (UDT)…","display_reference":"CVE-2026-102469","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-102469","source_title":"In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x DB2 client (vertx-db2-client) contains DRDA protocol handling code that deserializes User Defined Type (UDT) column data using a bare ObjectInputStream.readObject() call with no ObjectInputFilter or class allowlist. This code path is triggered when a DRDA server sends a result set with a column tagged as UDT (FDOCA protocol LID 0x50). However, DB2 does not support this type of UDT. The FDOCA 0x50 type is never sent by a legitimate DB2 server. Nevertheless, a malicious or man-in-the-middle DRDA server could craft a response with a 0x50-tagged column, causing the client to deserialize arbitrary attacker-controlled bytes on the Vert.x event loop before any application code can inspect or reject the data. If a Java deserialization gadget chain is present on the application's classpath, this enables remote code execution. Without a gadget chain, denial of service is possible via crafted object graphs. TLS is disabled by default, making man-in-the-middle exploitation feasible. The impacted component is io.vertx:vertx-db2-client.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T13:22:22.924Z","source_hash":"content-fingerprint:fnv1a-e641f33b","affected_system":{"organization":"In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x DB2 client (vertx-db2-client) contains DRDA protocol handling code that deserializes User Defined Type (UDT) column data using a bare ObjectInputStream.readObject() call with no ObjectInputFilter or class allowlist. This code path is triggered when a DRDA server sends a result set with a column tagged as UDT (FDOCA protocol LID 0x50). However, DB2 does not support this type of UDT. The FDOCA 0x50 type is never sent by a legitimate DB2 server. Nevertheless, a malicious or man-in-the-middle DRDA server could craft a response with a 0x50-tagged column, causing the client to deserialize arbitrary attacker-controlled bytes on the Vert.x event loop before any application code can inspect or reject the data. If a Java deserialization gadget chain is present on the application's classpath, this enables remote code execution. Without a gadget chain, denial of service is possible via crafted object graphs. TLS is disabled by default, making man-in-the-middle exploitation feasible. The impacted component is io.vertx project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-102469-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x DB2 client (vertx-db2-client) contains DRDA protocol handling code that deserializes User Defined Type (UDT) column data using a bare ObjectInputStream.readObject() call with no ObjectInputFilter or class allowlist. This code path is triggered when a DRDA server sends a result set with a column tagged as UDT (FDOCA protocol LID 0x50). However, DB2 does not support this type of UDT. The FDOCA 0x50 type is never sent by a legitimate DB2 server. Nevertheless, a malicious or man-in-the-middle DRDA server could craft a response with a 0x50-tagged column, causing the client to deserialize arbitrary attacker-controlled bytes on the Vert.x event loop before any application code can inspect or reject the data. If a Java deserialization gadget chain is present on the application's classpath, this enables remote code execution. Without a gadget chain, denial of service is possible via crafted object graphs. TLS is disabled by default, making man-in-the-middle exploitation feasible. The impacted component is io.vertx:vertx-db2-client.","source_quote_or_pointer":"Security Advisory CVE-2026-102469","fact_id":"SEA-CVE-2026-102469-F1","document_citation":"Security Advisory CVE-2026-102469"},{"id":"SEA-CVE-2026-102469-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x DB2 client (vertx-db2-client) contains DRDA protocol handling code that deserializes User Defined Type (UDT) column data using a bare ObjectInputStream.readObject() call with no ObjectInputFilter or class…","source_quote_or_pointer":"Advisory description (CVE-2026-102469)","fact_id":"SEA-CVE-2026-102469-F2","document_citation":"Advisory description (CVE-2026-102469)"}],"source_stated_contributors":["In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x DB2 client (vertx-db2-client) contains DRDA protocol handling code that deserializes User Defined Type (UDT) column data using a bare ObjectInputStream.readObject() call with no ObjectInputFilter or class…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","arch.event_driven"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-102469","reporting_entity":"CVE-2026-102469","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-102469-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-102469-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-102469"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-102466","title":"In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x MySQL client (vertx-mysql-client) pre-allocates an array for column definitions based on a server-declared column count with no upper-bound validation. A malicious or compromised MySQL server, or an attacker with man-in-the-middle positioning, can send a crafted result set packet with an extremely large column count, causing the client to attempt a massive heap allocation. The resulting OutOfMemoryError crashes the Netty event loop thread, causing a complete denial of service for all connections and verticles in the Vert.x application. The impacted component is io.vertx:vertx-mysql-client.","display_title":"Software component issue could make the service unavailable","display_summary":"In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x MySQL client (vertx-mysql-client) pre-allocates an array for column definitions based on a server-declared…","display_reference":"CVE-2026-102466","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-102466","source_title":"In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x MySQL client (vertx-mysql-client) pre-allocates an array for column definitions based on a server-declared column count with no upper-bound validation. A malicious or compromised MySQL server, or an attacker with man-in-the-middle positioning, can send a crafted result set packet with an extremely large column count, causing the client to attempt a massive heap allocation. The resulting OutOfMemoryError crashes the Netty event loop thread, causing a complete denial of service for all connections and verticles in the Vert.x application. The impacted component is io.vertx:vertx-mysql-client.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T13:22:22.924Z","source_hash":"content-fingerprint:fnv1a-d056071a","affected_system":{"organization":"In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x MySQL client (vertx-mysql-client) pre-allocates an array for column definitions based on a server-declared column count with no upper-bound validation. A malicious or compromised MySQL server, or an attacker with man-in-the-middle positioning, can send a crafted result set packet with an extremely large column count, causing the client to attempt a massive heap allocation. The resulting OutOfMemoryError crashes the Netty event loop thread, causing a complete denial of service for all connections and verticles in the Vert.x application. The impacted component is io.vertx project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-102466-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x MySQL client (vertx-mysql-client) pre-allocates an array for column definitions based on a server-declared column count with no upper-bound validation. A malicious or compromised MySQL server, or an attacker with man-in-the-middle positioning, can send a crafted result set packet with an extremely large column count, causing the client to attempt a massive heap allocation. The resulting OutOfMemoryError crashes the Netty event loop thread, causing a complete denial of service for all connections and verticles in the Vert.x application. The impacted component is io.vertx:vertx-mysql-client.","source_quote_or_pointer":"Security Advisory CVE-2026-102466","fact_id":"SEA-CVE-2026-102466-F1","document_citation":"Security Advisory CVE-2026-102466"},{"id":"SEA-CVE-2026-102466-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x MySQL client (vertx-mysql-client) pre-allocates an array for column definitions based on a server-declared column count with no upper-bound validation.","source_quote_or_pointer":"Advisory description (CVE-2026-102466)","fact_id":"SEA-CVE-2026-102466-F2","document_citation":"Advisory description (CVE-2026-102466)"}],"source_stated_contributors":["In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x MySQL client (vertx-mysql-client) pre-allocates an array for column definitions based on a server-declared column count with no upper-bound validation."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","arch.event_driven"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-102466","reporting_entity":"CVE-2026-102466","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-102466-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-102466-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-102466"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-102462","title":"In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the TDS message decoder in the Vert.x MSSQL client (vertx-mssql-client) aggregates inbound TDS packets into a composite direct-memory buffer without any cumulative size limit. A malicious, compromised, or man-in-the-middle SQL Server can send a continuous stream of TDS packets without setting the END_OF_MESSAGE status flag, causing unbounded direct-memory allocation on the client and leading to an out-of-memory crash. This occurs before authentication completes. The impacted component is io.vertx:vertx-mssql-client.","display_title":"Security issue reported in Software component","display_summary":"In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the TDS message decoder in the Vert.x MSSQL client (vertx-mssql-client) aggregates inbound TDS packets into a composite…","display_reference":"CVE-2026-102462","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-102462","source_title":"In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the TDS message decoder in the Vert.x MSSQL client (vertx-mssql-client) aggregates inbound TDS packets into a composite direct-memory buffer without any cumulative size limit. A malicious, compromised, or man-in-the-middle SQL Server can send a continuous stream of TDS packets without setting the END_OF_MESSAGE status flag, causing unbounded direct-memory allocation on the client and leading to an out-of-memory crash. This occurs before authentication completes. The impacted component is io.vertx:vertx-mssql-client.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T13:22:22.925Z","source_hash":"content-fingerprint:fnv1a-bc82a422","affected_system":{"organization":"In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the TDS message decoder in the Vert.x MSSQL client (vertx-mssql-client) aggregates inbound TDS packets into a composite direct-memory buffer without any cumulative size limit. A malicious, compromised, or man-in-the-middle SQL Server can send a continuous stream of TDS packets without setting the ENDOFMESSAGE status flag, causing unbounded direct-memory allocation on the client and leading to an out-of-memory crash. This occurs before authentication completes. The impacted component is io.vertx project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-102462-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the TDS message decoder in the Vert.x MSSQL client (vertx-mssql-client) aggregates inbound TDS packets into a composite direct-memory buffer without any cumulative size limit. A malicious, compromised, or man-in-the-middle SQL Server can send a continuous stream of TDS packets without setting the END_OF_MESSAGE status flag, causing unbounded direct-memory allocation on the client and leading to an out-of-memory crash. This occurs before authentication completes. The impacted component is io.vertx:vertx-mssql-client.","source_quote_or_pointer":"Security Advisory CVE-2026-102462","fact_id":"SEA-CVE-2026-102462-F1","document_citation":"Security Advisory CVE-2026-102462"},{"id":"SEA-CVE-2026-102462-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the TDS message decoder in the Vert.x MSSQL client (vertx-mssql-client) aggregates inbound TDS packets into a composite direct-memory buffer without any cumulative size limit.","source_quote_or_pointer":"Advisory description (CVE-2026-102462)","fact_id":"SEA-CVE-2026-102462-F2","document_citation":"Advisory description (CVE-2026-102462)"}],"source_stated_contributors":["In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the TDS message decoder in the Vert.x MSSQL client (vertx-mssql-client) aggregates inbound TDS packets into a composite direct-memory buffer without any cumulative size limit."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["arch.async_job","arch.event_driven"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-102462","reporting_entity":"CVE-2026-102462","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-102462-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-102462-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-102462"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-24723","title":"A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5243 and later","display_title":"Software component issue could make the service unavailable","display_summary":"A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack.","display_reference":"CVE-2026-24723","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-24723","source_title":"A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5243 and later","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T13:22:22.927Z","source_hash":"content-fingerprint:fnv1a-88275f1b","affected_system":{"organization":"A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-24723-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5243 and later","source_quote_or_pointer":"Security Advisory CVE-2026-24723","fact_id":"SEA-CVE-2026-24723-F1","document_citation":"Security Advisory CVE-2026-24723"},{"id":"SEA-CVE-2026-24723-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack.","source_quote_or_pointer":"Advisory description (CVE-2026-24723)","fact_id":"SEA-CVE-2026-24723-F2","document_citation":"Advisory description (CVE-2026-24723)"}],"source_stated_contributors":["A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-24723","reporting_entity":"CVE-2026-24723","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-24723-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-24723-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-24723"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-24722","title":"A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5243 and later","display_title":"Software component issue could make the service unavailable","display_summary":"A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack.","display_reference":"CVE-2026-24722","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-24722","source_title":"A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5243 and later","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T13:22:22.927Z","source_hash":"content-fingerprint:fnv1a-2a3568e2","affected_system":{"organization":"A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-24722-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5243 and later","source_quote_or_pointer":"Security Advisory CVE-2026-24722","fact_id":"SEA-CVE-2026-24722-F1","document_citation":"Security Advisory CVE-2026-24722"},{"id":"SEA-CVE-2026-24722-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack.","source_quote_or_pointer":"Advisory description (CVE-2026-24722)","fact_id":"SEA-CVE-2026-24722-F2","document_citation":"Advisory description (CVE-2026-24722)"}],"source_stated_contributors":["A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-24722","reporting_entity":"CVE-2026-24722","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-24722-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-24722-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-24722"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-24721","title":"A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5243 and later","display_title":"Software component issue could make the service unavailable","display_summary":"A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack.","display_reference":"CVE-2026-24721","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-24721","source_title":"A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5243 and later","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T13:22:22.927Z","source_hash":"content-fingerprint:fnv1a-870826c1","affected_system":{"organization":"A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-24721-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5243 and later","source_quote_or_pointer":"Security Advisory CVE-2026-24721","fact_id":"SEA-CVE-2026-24721-F1","document_citation":"Security Advisory CVE-2026-24721"},{"id":"SEA-CVE-2026-24721-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack.","source_quote_or_pointer":"Advisory description (CVE-2026-24721)","fact_id":"SEA-CVE-2026-24721-F2","document_citation":"Advisory description (CVE-2026-24721)"}],"source_stated_contributors":["A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-24721","reporting_entity":"CVE-2026-24721","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-24721-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-24721-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-24721"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2025-29896","title":"A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.4 and later","display_title":"Software component issue could make the service unavailable","display_summary":"A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack.","display_reference":"CVE-2025-29896","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2025-29896","source_title":"A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.4 and later","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T13:22:22.929Z","source_hash":"content-fingerprint:fnv1a-10fa2ba0","affected_system":{"organization":"A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2025-29896-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.4 and later","source_quote_or_pointer":"Security Advisory CVE-2025-29896","fact_id":"SEA-CVE-2025-29896-F1","document_citation":"Security Advisory CVE-2025-29896"},{"id":"SEA-CVE-2025-29896-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack.","source_quote_or_pointer":"Advisory description (CVE-2025-29896)","fact_id":"SEA-CVE-2025-29896-F2","document_citation":"Advisory description (CVE-2025-29896)"}],"source_stated_contributors":["A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2025-29896","reporting_entity":"CVE-2025-29896","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2025-29896-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2025-29896-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2025-29896"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2025-29895","title":"A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.4 and later","display_title":"Software component issue could make the service unavailable","display_summary":"A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack.","display_reference":"CVE-2025-29895","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2025-29895","source_title":"A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.4 and later","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T13:22:22.930Z","source_hash":"content-fingerprint:fnv1a-14756657","affected_system":{"organization":"A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2025-29895-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.4 and later","source_quote_or_pointer":"Security Advisory CVE-2025-29895","fact_id":"SEA-CVE-2025-29895-F1","document_citation":"Security Advisory CVE-2025-29895"},{"id":"SEA-CVE-2025-29895-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack.","source_quote_or_pointer":"Advisory description (CVE-2025-29895)","fact_id":"SEA-CVE-2025-29895-F2","document_citation":"Advisory description (CVE-2025-29895)"}],"source_stated_contributors":["A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2025-29895","reporting_entity":"CVE-2025-29895","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2025-29895-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2025-29895-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2025-29895"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-92429","title":"The Rede Itaú for WooCommerce WordPress plugin before 5.5.3 does not verify the authenticity of a payment gateway webhook before updating an order's status, allowing unauthenticated attackers to change the status of arbitrary WooCommerce orders, including marking unpaid orders as paid and cancelling completed orders.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-92429","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92429","source_title":"The Rede Itaú for WooCommerce WordPress plugin before 5.5.3 does not verify the authenticity of a payment gateway webhook before updating an order's status, allowing unauthenticated attackers to change the status of arbitrary WooCommerce orders, including marking unpaid orders as paid and cancelling completed orders.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T13:22:22.931Z","source_hash":"content-fingerprint:fnv1a-1312282d","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-92429-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Rede Itaú for WooCommerce WordPress plugin before 5.5.3 does not verify the authenticity of a payment gateway webhook before updating an order's status, allowing unauthenticated attackers to change the status of arbitrary WooCommerce orders, including marking unpaid orders as paid and cancelling completed orders.","source_quote_or_pointer":"Security Advisory CVE-2026-92429","fact_id":"SEA-CVE-2026-92429-F1","document_citation":"Security Advisory CVE-2026-92429"},{"id":"SEA-CVE-2026-92429-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Rede Itaú for WooCommerce WordPress plugin before 5.5.3 does not verify the authenticity of a payment gateway webhook before updating an order's status, allowing unauthenticated attackers to change the status of arbitrary WooCommerce orders, including marking unpaid orders as paid and cancelling completed orders.","source_quote_or_pointer":"Advisory description (CVE-2026-92429)","fact_id":"SEA-CVE-2026-92429-F2","document_citation":"Advisory description (CVE-2026-92429)"}],"source_stated_contributors":["The Rede Itaú for WooCommerce WordPress plugin before 5.5.3 does not verify the authenticity of a payment gateway webhook before updating an order's status, allowing unauthenticated attackers to change the status of arbitrary WooCommerce orders, including marking unpaid orders as paid and cancelling completed orders."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.financial_action","arch.external_api","arch.event_driven"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-92429","reporting_entity":"CVE-2026-92429","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-92429-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-92429-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-92429"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-92428","title":"The Rede Itaú for WooCommerce WordPress plugin before 5.5.3 does not verify the authenticity of a payment gateway webhook before updating an order's status, allowing unauthenticated attackers to change the status of arbitrary WooCommerce orders, including orders that were already paid or completed.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-92428","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92428","source_title":"The Rede Itaú for WooCommerce WordPress plugin before 5.5.3 does not verify the authenticity of a payment gateway webhook before updating an order's status, allowing unauthenticated attackers to change the status of arbitrary WooCommerce orders, including orders that were already paid or completed.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T13:22:22.931Z","source_hash":"content-fingerprint:fnv1a-fc4f0a2","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-92428-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Rede Itaú for WooCommerce WordPress plugin before 5.5.3 does not verify the authenticity of a payment gateway webhook before updating an order's status, allowing unauthenticated attackers to change the status of arbitrary WooCommerce orders, including orders that were already paid or completed.","source_quote_or_pointer":"Security Advisory CVE-2026-92428","fact_id":"SEA-CVE-2026-92428-F1","document_citation":"Security Advisory CVE-2026-92428"},{"id":"SEA-CVE-2026-92428-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Rede Itaú for WooCommerce WordPress plugin before 5.5.3 does not verify the authenticity of a payment gateway webhook before updating an order's status, allowing unauthenticated attackers to change the status of arbitrary WooCommerce orders, including orders that were already paid or completed.","source_quote_or_pointer":"Advisory description (CVE-2026-92428)","fact_id":"SEA-CVE-2026-92428-F2","document_citation":"Advisory description (CVE-2026-92428)"}],"source_stated_contributors":["The Rede Itaú for WooCommerce WordPress plugin before 5.5.3 does not verify the authenticity of a payment gateway webhook before updating an order's status, allowing unauthenticated attackers to change the status of arbitrary WooCommerce orders, including orders that were already paid or completed."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.financial_action","arch.external_api","arch.event_driven"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-92428","reporting_entity":"CVE-2026-92428","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-92428-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-92428-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-92428"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-103324","title":"The Cardinity Payment Gateway for WooCommerce WordPress plugin before 3.4.2 does not properly verify the authenticity of the payment notifications it receives, as the secret used to sign them is empty by default, allowing unauthenticated attackers to forge an approved-payment notification and mark arbitrary orders as paid, or force them to failed.","display_title":"Software component issue could expose accounts or credentials","display_summary":"The Cardinity Payment Gateway for WooCommerce WordPress plugin before 3.4.2 does not properly verify the authenticity of the payment notifications it receives, as the secret used to sign them is empty by default,…","display_reference":"CVE-2026-103324","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103324","source_title":"The Cardinity Payment Gateway for WooCommerce WordPress plugin before 3.4.2 does not properly verify the authenticity of the payment notifications it receives, as the secret used to sign them is empty by default, allowing unauthenticated attackers to forge an approved-payment notification and mark arbitrary orders as paid, or force them to failed.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T13:22:22.932Z","source_hash":"content-fingerprint:fnv1a-45f8e6f6","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-103324-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Cardinity Payment Gateway for WooCommerce WordPress plugin before 3.4.2 does not properly verify the authenticity of the payment notifications it receives, as the secret used to sign them is empty by default, allowing unauthenticated attackers to forge an approved-payment notification and mark arbitrary orders as paid, or force them to failed.","source_quote_or_pointer":"Security Advisory CVE-2026-103324","fact_id":"SEA-CVE-2026-103324-F1","document_citation":"Security Advisory CVE-2026-103324"},{"id":"SEA-CVE-2026-103324-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Cardinity Payment Gateway for WooCommerce WordPress plugin before 3.4.2 does not properly verify the authenticity of the payment notifications it receives, as the secret used to sign them is empty by default, allowing unauthenticated attackers to forge an approved-payment notification and mark arbitrary orders as…","source_quote_or_pointer":"Advisory description (CVE-2026-103324)","fact_id":"SEA-CVE-2026-103324-F2","document_citation":"Advisory description (CVE-2026-103324)"}],"source_stated_contributors":["The Cardinity Payment Gateway for WooCommerce WordPress plugin before 3.4.2 does not properly verify the authenticity of the payment notifications it receives, as the secret used to sign them is empty by default, allowing unauthenticated attackers to forge an approved-payment notification and mark arbitrary orders as…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.financial_action","data.credentials_secrets","arch.external_api"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-103324","reporting_entity":"CVE-2026-103324","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-103324-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-103324-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-103324"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-103304","title":"The eaSYNC Booking WordPress plugin before 1.3.31 does not perform authorization or nonce checks on several of its cancellation-related AJAX actions, allowing unauthenticated users to create booking cancellation requests, trigger booking notification emails, and overwrite the content of the emails the site sends.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-103304","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103304","source_title":"The eaSYNC Booking WordPress plugin before 1.3.31 does not perform authorization or nonce checks on several of its cancellation-related AJAX actions, allowing unauthenticated users to create booking cancellation requests, trigger booking notification emails, and overwrite the content of the emails the site sends.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T13:22:22.933Z","source_hash":"content-fingerprint:fnv1a-91d670e6","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-103304-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The eaSYNC Booking WordPress plugin before 1.3.31 does not perform authorization or nonce checks on several of its cancellation-related AJAX actions, allowing unauthenticated users to create booking cancellation requests, trigger booking notification emails, and overwrite the content of the emails the site sends.","source_quote_or_pointer":"Security Advisory CVE-2026-103304","fact_id":"SEA-CVE-2026-103304-F1","document_citation":"Security Advisory CVE-2026-103304"},{"id":"SEA-CVE-2026-103304-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The eaSYNC Booking WordPress plugin before 1.3.31 does not perform authorization or nonce checks on several of its cancellation-related AJAX actions, allowing unauthenticated users to create booking cancellation requests, trigger booking notification emails, and overwrite the content of the emails the site sends.","source_quote_or_pointer":"Advisory description (CVE-2026-103304)","fact_id":"SEA-CVE-2026-103304-F2","document_citation":"Advisory description (CVE-2026-103304)"}],"source_stated_contributors":["The eaSYNC Booking WordPress plugin before 1.3.31 does not perform authorization or nonce checks on several of its cancellation-related AJAX actions, allowing unauthenticated users to create booking cancellation requests, trigger booking notification emails, and overwrite the content of the emails the site sends."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-103304","reporting_entity":"CVE-2026-103304","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-103304-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-103304-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-103304"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-101302","title":"TLS 1.3 embeds the actual record type as the last non-zero byte of the decrypted payload, optionally followed by zero padding. The code which searches for the inner record type had an off-by-one bug which could be triggered by an invalid frame, leading to an underflow followed by an unconditional NULL pointer dereference, causing a kernel panic. A remote TLS 1.3 peer can send a specially crafted record to trigger a kernel panic, resulting in a Denial of Service (DoS).","display_title":"Software component issue could make the service unavailable","display_summary":"TLS 1.3 embeds the actual record type as the last non-zero byte of the decrypted payload, optionally followed by zero padding.","display_reference":"CVE-2026-101302","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-101302","source_title":"TLS 1.3 embeds the actual record type as the last non-zero byte of the decrypted payload, optionally followed by zero padding. The code which searches for the inner record type had an off-by-one bug which could be triggered by an invalid frame, leading to an underflow followed by an unconditional NULL pointer dereference, causing a kernel panic. A remote TLS 1.3 peer can send a specially crafted record to trigger a kernel panic, resulting in a Denial of Service (DoS).","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T13:22:22.933Z","source_hash":"content-fingerprint:fnv1a-578c614e","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-101302-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"TLS 1.3 embeds the actual record type as the last non-zero byte of the decrypted payload, optionally followed by zero padding. The code which searches for the inner record type had an off-by-one bug which could be triggered by an invalid frame, leading to an underflow followed by an unconditional NULL pointer dereference, causing a kernel panic. A remote TLS 1.3 peer can send a specially crafted record to trigger a kernel panic, resulting in a Denial of Service (DoS).","source_quote_or_pointer":"Security Advisory CVE-2026-101302","fact_id":"SEA-CVE-2026-101302-F1","document_citation":"Security Advisory CVE-2026-101302"},{"id":"SEA-CVE-2026-101302-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"TLS 1.3 embeds the actual record type as the last non-zero byte of the decrypted payload, optionally followed by zero padding. The code which searches for the inner record type had an off-by-one bug which could be triggered by an invalid frame, leading to an underflow followed by an unconditional NULL pointer…","source_quote_or_pointer":"Advisory description (CVE-2026-101302)","fact_id":"SEA-CVE-2026-101302-F2","document_citation":"Advisory description (CVE-2026-101302)"}],"source_stated_contributors":["TLS 1.3 embeds the actual record type as the last non-zero byte of the decrypted payload, optionally followed by zero padding. The code which searches for the inner record type had an off-by-one bug which could be triggered by an invalid frame, leading to an underflow followed by an unconditional NULL pointer…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-101302","reporting_entity":"CVE-2026-101302","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-101302-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-101302-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-101302"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-77931","title":"MoviePilot through 3.1.5 contains a command injection vulnerability that allows attackers to execute arbitrary OS commands by embedding malicious instructions in untrusted content processed through tools like browse_webpage, search_web, and torrent metadata parsers, which then get passed to the unrestricted ExecuteCommandTool via asyncio.create_subprocess_shell. Attackers can craft content that instructs the model to invoke execute_command with confirm_dangerous set to true, bypassing the validate_command_safety denylist and exploiting the admin session's is_admin context to achieve remote code execution on the host.","display_title":"Software component issue could allow unintended commands to run","display_summary":"MoviePilot through 3.1.5 contains a command injection vulnerability that allows attackers to execute arbitrary OS commands by embedding malicious instructions in untrusted content processed through tools like…","display_reference":"CVE-2026-77931","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-77931","source_title":"MoviePilot through 3.1.5 contains a command injection vulnerability that allows attackers to execute arbitrary OS commands by embedding malicious instructions in untrusted content processed through tools like browse_webpage, search_web, and torrent metadata parsers, which then get passed to the unrestricted ExecuteCommandTool via asyncio.create_subprocess_shell. Attackers can craft content that instructs the model to invoke execute_command with confirm_dangerous set to true, bypassing the validate_command_safety denylist and exploiting the admin session's is_admin context to achieve remote code execution on the host.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T07:22:13.606Z","source_hash":"content-fingerprint:fnv1a-e2d24428","affected_system":{"organization":"Software component project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-77931-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"MoviePilot through 3.1.5 contains a command injection vulnerability that allows attackers to execute arbitrary OS commands by embedding malicious instructions in untrusted content processed through tools like browse_webpage, search_web, and torrent metadata parsers, which then get passed to the unrestricted ExecuteCommandTool via asyncio.create_subprocess_shell. Attackers can craft content that instructs the model to invoke execute_command with confirm_dangerous set to true, bypassing the validate_command_safety denylist and exploiting the admin session's is_admin context to achieve remote code execution on the host.","source_quote_or_pointer":"Security Advisory CVE-2026-77931","fact_id":"SEA-CVE-2026-77931-F1","document_citation":"Security Advisory CVE-2026-77931"},{"id":"SEA-CVE-2026-77931-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"MoviePilot through 3.1.5 contains a command injection vulnerability that allows attackers to execute arbitrary OS commands by embedding malicious instructions in untrusted content processed through tools like browsewebpage, searchweb, and torrent metadata parsers, which then get passed to the unrestricted…","source_quote_or_pointer":"Advisory description (CVE-2026-77931)","fact_id":"SEA-CVE-2026-77931-F2","document_citation":"Advisory description (CVE-2026-77931)"}],"source_stated_contributors":["MoviePilot through 3.1.5 contains a command injection vulnerability that allows attackers to execute arbitrary OS commands by embedding malicious instructions in untrusted content processed through tools like browsewebpage, searchweb, and torrent metadata parsers, which then get passed to the unrestricted…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-004","SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-77931","reporting_entity":"CVE-2026-77931","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-77931-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-77931-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-77931"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-76659","title":"A vulnerability in the finger daemon of HPE NonStop TCP/IP UTILITIES could allow an unauthenticated remote attacker to cause a denial of service.","display_title":"Software component issue could make the service unavailable","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-76659","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-76659","source_title":"A vulnerability in the finger daemon of HPE NonStop TCP/IP UTILITIES could allow an unauthenticated remote attacker to cause a denial of service.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T07:22:13.606Z","source_hash":"content-fingerprint:fnv1a-fd46e1e","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-76659-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability in the finger daemon of HPE NonStop TCP/IP UTILITIES could allow an unauthenticated remote attacker to cause a denial of service.","source_quote_or_pointer":"Security Advisory CVE-2026-76659","fact_id":"SEA-CVE-2026-76659-F1","document_citation":"Security Advisory CVE-2026-76659"},{"id":"SEA-CVE-2026-76659-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability in the finger daemon of HPE NonStop TCP/IP UTILITIES could allow an unauthenticated remote attacker to cause a denial of service.","source_quote_or_pointer":"Advisory description (CVE-2026-76659)","fact_id":"SEA-CVE-2026-76659-F2","document_citation":"Advisory description (CVE-2026-76659)"}],"source_stated_contributors":["A vulnerability in the finger daemon of HPE NonStop TCP/IP UTILITIES could allow an unauthenticated remote attacker to cause a denial of service."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-76659","reporting_entity":"CVE-2026-76659","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-76659-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-76659-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-76659"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-76656","title":"A vulnerability in HPE NonStop TCP/IP UTILITIES could allow an unauthenticated remote attacker to cause a denial of service when traceroute is executed under certain conditions.","display_title":"Software component issue could make the service unavailable","display_summary":"vulnerability in HPE NonStop TCP/IP UTILITIES could allow an unauthenticated remote","display_reference":"CVE-2026-76656","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-76656","source_title":"A vulnerability in HPE NonStop TCP/IP UTILITIES could allow an unauthenticated remote attacker to cause a denial of service when traceroute is executed under certain conditions.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T07:22:13.607Z","source_hash":"content-fingerprint:fnv1a-f3452ed1","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-76656-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability in HPE NonStop TCP/IP UTILITIES could allow an unauthenticated remote attacker to cause a denial of service when traceroute is executed under certain conditions.","source_quote_or_pointer":"Security Advisory CVE-2026-76656","fact_id":"SEA-CVE-2026-76656-F1","document_citation":"Security Advisory CVE-2026-76656"},{"id":"SEA-CVE-2026-76656-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"vulnerability in HPE NonStop TCP/IP UTILITIES could allow an unauthenticated remote","source_quote_or_pointer":"Advisory description (CVE-2026-76656)","fact_id":"SEA-CVE-2026-76656-F2","document_citation":"Advisory description (CVE-2026-76656)"}],"source_stated_contributors":["vulnerability in HPE NonStop TCP/IP UTILITIES could allow an unauthenticated remote"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-76656","reporting_entity":"CVE-2026-76656","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-76656-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-76656-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-76656"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-76066","title":"IntentKit through 2.6.3 contains an authorization bypass vulnerability where the executor validates tool calls against the full tool registry rather than the per-request narrowed tool advertisement enforced by ToolBindingMiddleware, allowing owner-only state-changing tools such as wallet transfer, posting, memory-write, and call-agent to execute without any human-in-the-loop or approval gate. An unauthenticated or public caller in WEB, API, TWITTER, or TELEGRAM contexts can exploit this by supplying the exact de-advertised tool name and arguments via indirect prompt injection or by replaying checkpoint and history data on a reused thread, achieving unauthorized execution of owner-restricted capabilities.","display_title":"Software component issue could allow unauthorized access","display_summary":"IntentKit through 2.6.3 contains an authorization bypass vulnerability where the executor validates tool calls against the full tool registry rather than the per-request narrowed tool advertisement enforced by…","display_reference":"CVE-2026-76066","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-76066","source_title":"IntentKit through 2.6.3 contains an authorization bypass vulnerability where the executor validates tool calls against the full tool registry rather than the per-request narrowed tool advertisement enforced by ToolBindingMiddleware, allowing owner-only state-changing tools such as wallet transfer, posting, memory-write, and call-agent to execute without any human-in-the-loop or approval gate. An unauthenticated or public caller in WEB, API, TWITTER, or TELEGRAM contexts can exploit this by supplying the exact de-advertised tool name and arguments via indirect prompt injection or by replaying checkpoint and history data on a reused thread, achieving unauthorized execution of owner-restricted capabilities.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T07:22:13.607Z","source_hash":"content-fingerprint:fnv1a-a5e9e4ac","affected_system":{"organization":"Software component project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-76066-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"IntentKit through 2.6.3 contains an authorization bypass vulnerability where the executor validates tool calls against the full tool registry rather than the per-request narrowed tool advertisement enforced by ToolBindingMiddleware, allowing owner-only state-changing tools such as wallet transfer, posting, memory-write, and call-agent to execute without any human-in-the-loop or approval gate. An unauthenticated or public caller in WEB, API, TWITTER, or TELEGRAM contexts can exploit this by supplying the exact de-advertised tool name and arguments via indirect prompt injection or by replaying checkpoint and history data on a reused thread, achieving unauthorized execution of owner-restricted capabilities.","source_quote_or_pointer":"Security Advisory CVE-2026-76066","fact_id":"SEA-CVE-2026-76066-F1","document_citation":"Security Advisory CVE-2026-76066"},{"id":"SEA-CVE-2026-76066-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"IntentKit through 2.6.3 contains an authorization bypass vulnerability where the executor validates tool calls against the full tool registry rather than the per-request narrowed tool advertisement enforced by ToolBindingMiddleware, allowing owner-only state-changing tools such as wallet transfer, posting,…","source_quote_or_pointer":"Advisory description (CVE-2026-76066)","fact_id":"SEA-CVE-2026-76066-F2","document_citation":"Advisory description (CVE-2026-76066)"}],"source_stated_contributors":["IntentKit through 2.6.3 contains an authorization bypass vulnerability where the executor validates tool calls against the full tool registry rather than the per-request narrowed tool advertisement enforced by ToolBindingMiddleware, allowing owner-only state-changing tools such as wallet transfer, posting,…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","auth.public_publication","arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-003","SEA-FM-010"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-76066","reporting_entity":"CVE-2026-76066","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-76066-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-76066-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-76066"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109430","title":"Ellucian WebAdvisor 3.2 contains an unauthenticated XML External Entity (XXE) injection vulnerability that allows remote attackers to submit crafted XML POST requests to the /WebAdvisor/WebAdvisor endpoint without disabling external entity and DTD resolution. Attackers can exploit this flaw to force the server into SSRF requests, coerce NTLMv2 hash disclosure via attacker-controlled SMB shares, and read arbitrary files from the underlying Windows host through an out-of-band error-based channel. WebAdvisor entered end-of-support status in June 2022 and users are encouraged to migrate to Colleague Self-Service.","display_title":"Software component issue could reach internal services","display_summary":"Ellucian WebAdvisor 3.2 contains an unauthenticated XML External Entity (XXE) injection vulnerability that allows remote attackers to submit crafted XML POST requests to the /WebAdvisor/WebAdvisor endpoint without…","display_reference":"CVE-2026-109430","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109430","source_title":"Ellucian WebAdvisor 3.2 contains an unauthenticated XML External Entity (XXE) injection vulnerability that allows remote attackers to submit crafted XML POST requests to the /WebAdvisor/WebAdvisor endpoint without disabling external entity and DTD resolution. Attackers can exploit this flaw to force the server into SSRF requests, coerce NTLMv2 hash disclosure via attacker-controlled SMB shares, and read arbitrary files from the underlying Windows host through an out-of-band error-based channel. WebAdvisor entered end-of-support status in June 2022 and users are encouraged to migrate to Colleague Self-Service.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T07:22:13.608Z","source_hash":"content-fingerprint:fnv1a-c4bd6b44","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109430-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Ellucian WebAdvisor 3.2 contains an unauthenticated XML External Entity (XXE) injection vulnerability that allows remote attackers to submit crafted XML POST requests to the /WebAdvisor/WebAdvisor endpoint without disabling external entity and DTD resolution. Attackers can exploit this flaw to force the server into SSRF requests, coerce NTLMv2 hash disclosure via attacker-controlled SMB shares, and read arbitrary files from the underlying Windows host through an out-of-band error-based channel. WebAdvisor entered end-of-support status in June 2022 and users are encouraged to migrate to Colleague Self-Service.","source_quote_or_pointer":"Security Advisory CVE-2026-109430","fact_id":"SEA-CVE-2026-109430-F1","document_citation":"Security Advisory CVE-2026-109430"},{"id":"SEA-CVE-2026-109430-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Ellucian WebAdvisor 3.2 contains an unauthenticated XML External Entity (XXE) injection vulnerability that allows remote attackers to submit crafted XML POST requests to the /WebAdvisor/WebAdvisor endpoint without disabling external entity and DTD resolution.","source_quote_or_pointer":"Advisory description (CVE-2026-109430)","fact_id":"SEA-CVE-2026-109430-F2","document_citation":"Advisory description (CVE-2026-109430)"}],"source_stated_contributors":["Ellucian WebAdvisor 3.2 contains an unauthenticated XML External Entity (XXE) injection vulnerability that allows remote attackers to submit crafted XML POST requests to the /WebAdvisor/WebAdvisor endpoint without disabling external entity and DTD resolution."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Internal network access","Cloud metadata or credential exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109430","reporting_entity":"CVE-2026-109430","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109430-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109430-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"The service fetched a URL chosen by the caller and could be steered at internal systems. Restrict outbound destinations and block internal address ranges.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-109430"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-110809","title":"A security vulnerability has been detected in sgl-project SGLang up to 0.5.19. Affected by this issue is the function Session.create_req of the file python/sglang/srt/session/session_controller.py of the component Session Cleanup. Such manipulation leads to denial of service. The attack may be performed from remote. The exploit has been disclosed publicly and may be used. The pull request to fix this issue awaits acceptance.","display_title":"Software component issue could make the service unavailable","display_summary":"A security vulnerability has been detected in sgl-project SGLang up to 0.5.19. Affected by this issue is the function Session.createreq of the file python/sglang/srt/session/sessioncontroller.py of the component Session…","display_reference":"CVE-2026-110809","display_source_type":"Security advisory","incident_date":"2026-10-15","disclosure_date":"2026-10-15","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110809","source_title":"A security vulnerability has been detected in sgl-project SGLang up to 0.5.19. Affected by this issue is the function Session.create_req of the file python/sglang/srt/session/session_controller.py of the component Session Cleanup. Such manipulation leads to denial of service. The attack may be performed from remote. The exploit has been disclosed publicly and may be used. The pull request to fix this issue awaits acceptance.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T07:22:13.608Z","source_hash":"content-fingerprint:fnv1a-7f3f771c","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-110809-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A security vulnerability has been detected in sgl-project SGLang up to 0.5.19. Affected by this issue is the function Session.create_req of the file python/sglang/srt/session/session_controller.py of the component Session Cleanup. Such manipulation leads to denial of service. The attack may be performed from remote. The exploit has been disclosed publicly and may be used. The pull request to fix this issue awaits acceptance.","source_quote_or_pointer":"Security Advisory CVE-2026-110809","fact_id":"SEA-CVE-2026-110809-F1","document_citation":"Security Advisory CVE-2026-110809"},{"id":"SEA-CVE-2026-110809-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A security vulnerability has been detected in sgl-project SGLang up to 0.5.19. Affected by this issue is the function Session.createreq of the file python/sglang/srt/session/sessioncontroller.py of the component Session Cleanup. Such manipulation leads to denial of service. The attack may be performed from remote.","source_quote_or_pointer":"Advisory description (CVE-2026-110809)","fact_id":"SEA-CVE-2026-110809-F2","document_citation":"Advisory description (CVE-2026-110809)"}],"source_stated_contributors":["A security vulnerability has been detected in sgl-project SGLang up to 0.5.19. Affected by this issue is the function Session.createreq of the file python/sglang/srt/session/sessioncontroller.py of the component Session Cleanup. Such manipulation leads to denial of service. The attack may be performed from remote."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","data.pii","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-110809","reporting_entity":"CVE-2026-110809","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-110809-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-110809-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-110809"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-7pxr-59rr-hqj2","title":"Microsoft.OpenApi.YamlReader vulnerable to denial of service via YAML alias expansion","display_title":"Microsoft.OpenApi.YamlReader issue could make the service unavailable","display_summary":"A small YAML OpenAPI document containing nested anchors and aliases can cause uncontrolled resource consumption in Microsoft.OpenApi.YamlReader and Microsoft.OpenApi.Readers.","display_reference":"CVE-2026-72923","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-7pxr-59rr-hqj2","source_title":"Microsoft.OpenApi.YamlReader vulnerable to denial of service via YAML alias expansion","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-14T21:37:17.359Z","source_hash":"content-fingerprint:fnv1a-2018d09f","affected_system":{"organization":"Microsoft.OpenApi.YamlReader project","product":"Microsoft.OpenApi.YamlReader","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"C# / .NET"},"documented_facts":[{"id":"SEA-GHSA-7pxr-59rr-hqj2-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Microsoft.OpenApi.YamlReader vulnerable to denial of service via YAML alias expansion","source_quote_or_pointer":"Security Advisory GHSA-7pxr-59rr-hqj2","fact_id":"SEA-GHSA-7pxr-59rr-hqj2-F1","document_citation":"Security Advisory GHSA-7pxr-59rr-hqj2"},{"id":"SEA-GHSA-7pxr-59rr-hqj2-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A small YAML OpenAPI document containing nested anchors and aliases can cause uncontrolled resource consumption in Microsoft.OpenApi.YamlReader and Microsoft.OpenApi.Readers.","source_quote_or_pointer":"Advisory description (GHSA-7pxr-59rr-hqj2)","fact_id":"SEA-GHSA-7pxr-59rr-hqj2-F2","document_citation":"Advisory description (GHSA-7pxr-59rr-hqj2)"}],"source_stated_contributors":["A small YAML OpenAPI document containing nested anchors and aliases can cause uncontrolled resource consumption in Microsoft.OpenApi.YamlReader and Microsoft.OpenApi.Readers."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-7pxr-59rr-hqj2","reporting_entity":"CVE-2026-72923","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-7pxr-59rr-hqj2-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-7pxr-59rr-hqj2-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-72923"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-m6wq-39m7-9xpp","title":"Metalama allows local code execution through DLL planting in shared temporary directories","display_title":"Metalama.Framework issue could allow unintended commands to run","display_summary":"Metalama loaded and executed compile-time assemblies, auxiliary executable tools, and embedded helper assemblies from predictable temporary directories.","display_reference":"CVE-2026-62847","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-m6wq-39m7-9xpp","source_title":"Metalama allows local code execution through DLL planting in shared temporary directories","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-14T21:37:17.363Z","source_hash":"content-fingerprint:fnv1a-39597007","affected_system":{"organization":"Metalama.Framework project","product":"Metalama.Framework","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"C# / .NET"},"documented_facts":[{"id":"SEA-GHSA-m6wq-39m7-9xpp-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Metalama allows local code execution through DLL planting in shared temporary directories","source_quote_or_pointer":"Security Advisory GHSA-m6wq-39m7-9xpp","fact_id":"SEA-GHSA-m6wq-39m7-9xpp-F1","document_citation":"Security Advisory GHSA-m6wq-39m7-9xpp"},{"id":"SEA-GHSA-m6wq-39m7-9xpp-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Metalama loaded and executed compile-time assemblies, auxiliary executable tools, and embedded helper assemblies from predictable temporary directories. On Linux and macOS the default cache location was the world-writable system temporary directory (Path.GetTempPath(), i.e.","source_quote_or_pointer":"Advisory description (GHSA-m6wq-39m7-9xpp)","fact_id":"SEA-GHSA-m6wq-39m7-9xpp-F2","document_citation":"Advisory description (GHSA-m6wq-39m7-9xpp)"}],"source_stated_contributors":["Metalama loaded and executed compile-time assemblies, auxiliary executable tools, and embedded helper assemblies from predictable temporary directories. On Linux and macOS the default cache location was the world-writable system temporary directory (Path.GetTempPath(), i.e."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["arch.caching"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-m6wq-39m7-9xpp","reporting_entity":"CVE-2026-62847","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-m6wq-39m7-9xpp-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-m6wq-39m7-9xpp-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-62847"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-856c-92hv-3vxx","title":"Apprise forwards configured auth headers across cross-origin HTTP redirects","display_title":"Security issue reported in apprise","display_summary":"Apprise's HTTP-based notification plugins and its HTTP attachment / config loaders (apprise/attachment/http.py, apprise/config/http.py) follow HTTP 3xx redirects by default and re-send the user-configured auth headers…","display_reference":"CVE-2026-59180","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-856c-92hv-3vxx","source_title":"Apprise forwards configured auth headers across cross-origin HTTP redirects","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-14T21:37:17.364Z","source_hash":"content-fingerprint:fnv1a-ffd750bf","affected_system":{"organization":"apprise project","product":"apprise","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Python"},"documented_facts":[{"id":"SEA-GHSA-856c-92hv-3vxx-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Apprise forwards configured auth headers across cross-origin HTTP redirects","source_quote_or_pointer":"Security Advisory GHSA-856c-92hv-3vxx","fact_id":"SEA-GHSA-856c-92hv-3vxx-F1","document_citation":"Security Advisory GHSA-856c-92hv-3vxx"},{"id":"SEA-GHSA-856c-92hv-3vxx-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Apprise's HTTP-based notification plugins and its HTTP attachment / config loaders (apprise/attachment/http.py, apprise/config/http.py) follow HTTP 3xx redirects by default and re-send the user-configured auth headers and query parameters on the redirected request.","source_quote_or_pointer":"Advisory description (GHSA-856c-92hv-3vxx)","fact_id":"SEA-GHSA-856c-92hv-3vxx-F2","document_citation":"Advisory description (GHSA-856c-92hv-3vxx)"}],"source_stated_contributors":["Apprise's HTTP-based notification plugins and its HTTP attachment / config loaders (apprise/attachment/http.py, apprise/config/http.py) follow HTTP 3xx redirects by default and re-send the user-configured auth headers and query parameters on the redirected request."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-856c-92hv-3vxx","reporting_entity":"CVE-2026-59180","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-856c-92hv-3vxx-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-856c-92hv-3vxx-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-59180"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CISA-2026-105134","title":"Ahsay AhsayCBS Command Injection Vulnerability","display_title":"AhsayCBS issue could allow unintended commands to run","display_summary":"Ahsay AhsayCBS contains a command injection vulnerability that could allow a remote attacker to execute operating system commands via manipulation of the random parameter in the Replication Receiver component’s…","display_reference":"CVE-2026-105134","display_source_type":"CISA advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://www.ahsay.com/en/company/announcements/patch-cve-105133-105134-update","source_title":"Ahsay AhsayCBS Command Injection Vulnerability","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-14T21:37:17.497Z","source_hash":"content-fingerprint:fnv1a-ecb91a87","affected_system":{"organization":"Ahsay","product":"AhsayCBS","system_type":"Enterprise Software Platform & Infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Enterprise Software"},"documented_facts":[{"id":"SEA-CISA-2026-105134-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Ahsay AhsayCBS contains a command injection vulnerability that could allow a remote attacker to execute operating system commands via manipulation of the random parameter in the Replication Receiver component’s /rps/api/json/UpdateReceivers.do endpoint. This vulnerability can be chained with CVE-2026-105133.","source_quote_or_pointer":"CISA BOD 22-01 Catalog (CVE-2026-105134)","fact_id":"SEA-CISA-2026-105134-F1","document_citation":"CISA BOD 22-01 Catalog (CVE-2026-105134)"},{"id":"SEA-CISA-2026-105134-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Mandatory remediation: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","source_quote_or_pointer":"Remediation Deadline: 2026-10-17","fact_id":"SEA-CISA-2026-105134-F2","document_citation":"Remediation Deadline: 2026-10-17"}],"source_stated_contributors":["Actively exploited in production systems pursuant to CISA Binding Operational Directive BOD 22-01","Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-004"],"consequences":["Actively exploited in the wild"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-cisa-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"CISA Known Exploited Vulnerabilities Directive","filing_id":"CVE-2026-105134","reporting_entity":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","regulatory_body":"U.S. Department of Homeland Security / CISA"},"safeguards":[{"safeguard_id":"SEA-CISA-2026-105134-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CISA-2026-105134-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-105134"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CISA-2026-105133","title":"Ahsay AhsayCBS Improper Authentication Vulnerability","display_title":"Security issue reported in AhsayCBS","display_summary":"Ahsay AhsayCBS contains an improper authentication vulnerability that could allow a remote attacker to bypass authentication via manipulation of the random parameter in the API component’s checkSysPwd function.","display_reference":"CVE-2026-105133","display_source_type":"CISA advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://www.ahsay.com/en/company/announcements/patch-cve-105133-105134-update","source_title":"Ahsay AhsayCBS Improper Authentication Vulnerability","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-14T21:37:17.502Z","source_hash":"content-fingerprint:fnv1a-753bb341","affected_system":{"organization":"Ahsay","product":"AhsayCBS","system_type":"Enterprise Software Platform & Infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Enterprise Software"},"documented_facts":[{"id":"SEA-CISA-2026-105133-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Ahsay AhsayCBS contains an improper authentication vulnerability that could allow a remote attacker to bypass authentication via manipulation of the random parameter in the API component’s checkSysPwd function. This vulnerability can be chained with CVE-2026-105134.","source_quote_or_pointer":"CISA BOD 22-01 Catalog (CVE-2026-105133)","fact_id":"SEA-CISA-2026-105133-F1","document_citation":"CISA BOD 22-01 Catalog (CVE-2026-105133)"},{"id":"SEA-CISA-2026-105133-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Mandatory remediation: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","source_quote_or_pointer":"Remediation Deadline: 2026-10-17","fact_id":"SEA-CISA-2026-105133-F2","document_citation":"Remediation Deadline: 2026-10-17"}],"source_stated_contributors":["Actively exploited in production systems pursuant to CISA Binding Operational Directive BOD 22-01","Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-004"],"consequences":["Actively exploited in the wild"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-cisa-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"CISA Known Exploited Vulnerabilities Directive","filing_id":"CVE-2026-105133","reporting_entity":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","regulatory_body":"U.S. Department of Homeland Security / CISA"},"safeguards":[{"safeguard_id":"SEA-CISA-2026-105133-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CISA-2026-105133-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-105133"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-96596","title":"Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Erlang OTP stdlib (erl_tar module), hexpm hex_core (hex_erl_tar module), hexpm hex (mix_hex_erl_tar module) and erlang rebar3 (r3_hex_erl_tar module) allows an attacker who supplies a tar archive to cause a denial of service via a crafted GNU sparse member. When erl_tar:extract/1,2 writes a member to disk, erl_tar:stream_to_file_loop/3 reads it in chunks of 65536 bytes by default. For a GNU sparse member whose sparse map ends before its real size, erl_tar:do_sparse_read/3 matches its trailing-hole clause before its zero-length clause. After the chunk is used up, the trailing-hole clause reads zero bytes, does not advance the position, and recurses forever. A 2048-byte archive keeps the extracting process and one scheduler busy until the process is killed. The {max_size, N} option prevents this only when N is below the real size of the member. Extraction with the memory option is not affected. hex_core ships its own copy of erl_tar as hex_erl_tar, and Hex and rebar3 ship hex_core with prefixed module names (mix_hex_erl_tar and r3_hex_erl_tar). These copies contain the same code and do not call stdlib's erl_tar, so they are affected on any OTP version. OTP 28 is not affected, but an application running on OTP 28 is affected if it extracts archives through an affected version of hex_core, Hex or rebar3. This issue affects OTP from OTP 29.0 before OTP 29.1.2, corresponding to stdlib from 8.0 before 8.1.1, and rebar3 from 3.27.1 onward, and hex from 2.4.2 before 2.5.3; hex_core: from 0.14.0 before 0.20.1.","display_title":"Software component issue could make the service unavailable","display_summary":"Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Erlang OTP stdlib (erltar module), hexpm hexcore (hexerltar module), hexpm hex (mixhexerltar module) and erlang rebar3 (r3hexerltar module) allows…","display_reference":"CVE-2026-96596","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-96596","source_title":"Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Erlang OTP stdlib (erl_tar module), hexpm hex_core (hex_erl_tar module), hexpm hex (mix_hex_erl_tar module) and erlang rebar3 (r3_hex_erl_tar module) allows an attacker who supplies a tar archive to cause a denial of service via a crafted GNU sparse member. When erl_tar:extract/1,2 writes a member to disk, erl_tar:stream_to_file_loop/3 reads it in chunks of 65536 bytes by default. For a GNU sparse member whose sparse map ends before its real size, erl_tar:do_sparse_read/3 matches its trailing-hole clause before its zero-length clause. After the chunk is used up, the trailing-hole clause reads zero bytes, does not advance the position, and recurses forever. A 2048-byte archive keeps the extracting process and one scheduler busy until the process is killed. The {max_size, N} option prevents this only when N is below the real size of the member. Extraction with the memory option is not affected. hex_core ships its own copy of erl_tar as hex_erl_tar, and Hex and rebar3 ship hex_core with prefixed module names (mix_hex_erl_tar and r3_hex_erl_tar). These copies contain the same code and do not call stdlib's erl_tar, so they are affected on any OTP version. OTP 28 is not affected, but an application running on OTP 28 is affected if it extracts archives through an affected version of hex_core, Hex or rebar3. This issue affects OTP from OTP 29.0 before OTP 29.1.2, corresponding to stdlib from 8.0 before 8.1.1, and rebar3 from 3.27.1 onward, and hex from 2.4.2 before 2.5.3; hex_core: from 0.14.0 before 0.20.1.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-17T00:24:19.367Z","source_hash":"content-fingerprint:fnv1a-a2a575a4","affected_system":{"organization":"Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Erlang OTP stdlib (erltar module), hexpm hexcore (hexerltar module), hexpm hex (mixhexerltar module) and erlang rebar3 (r3hexerltar module) allows an attacker who supplies a tar archive to cause a denial of service via a crafted GNU sparse member. When erltar project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-96596-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Erlang OTP stdlib (erl_tar module), hexpm hex_core (hex_erl_tar module), hexpm hex (mix_hex_erl_tar module) and erlang rebar3 (r3_hex_erl_tar module) allows an attacker who supplies a tar archive to cause a denial of service via a crafted GNU sparse member. When erl_tar:extract/1,2 writes a member to disk, erl_tar:stream_to_file_loop/3 reads it in chunks of 65536 bytes by default. For a GNU sparse member whose sparse map ends before its real size, erl_tar:do_sparse_read/3 matches its trailing-hole clause before its zero-length clause. After the chunk is used up, the trailing-hole clause reads zero bytes, does not advance the position, and recurses forever. A 2048-byte archive keeps the extracting process and one scheduler busy until the process is killed. The {max_size, N} option prevents this only when N is below the real size of the member. Extraction with the memory option is not affected. hex_core ships its own copy of erl_tar as hex_erl_tar, and Hex and rebar3 ship hex_core with prefixed module names (mix_hex_erl_tar and r3_hex_erl_tar). These copies contain the same code and do not call stdlib's erl_tar, so they are affected on any OTP version. OTP 28 is not affected, but an application running on OTP 28 is affected if it extracts archives through an affected version of hex_core, Hex or rebar3. This issue affects OTP from OTP 29.0 before OTP 29.1.2, corresponding to stdlib from 8.0 before 8.1.1, and rebar3 from 3.27.1 onward, and hex from 2.4.2 before 2.5.3; hex_core: from 0.14.0 before 0.20.1.","source_quote_or_pointer":"Security Advisory CVE-2026-96596","fact_id":"SEA-CVE-2026-96596-F1","document_citation":"Security Advisory CVE-2026-96596"},{"id":"SEA-CVE-2026-96596-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Erlang OTP stdlib (erltar module), hexpm hexcore (hexerltar module), hexpm hex (mixhexerltar module) and erlang rebar3 (r3hexerltar module) allows an attacker who supplies a tar archive to cause a denial of service via a crafted GNU sparse member.","source_quote_or_pointer":"Advisory description (CVE-2026-96596)","fact_id":"SEA-CVE-2026-96596-F2","document_citation":"Advisory description (CVE-2026-96596)"}],"source_stated_contributors":["Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Erlang OTP stdlib (erltar module), hexpm hexcore (hexerltar module), hexpm hex (mixhexerltar module) and erlang rebar3 (r3hexerltar module) allows an attacker who supplies a tar archive to cause a denial of service via a crafted GNU sparse member."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","arch.async_job"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-96596","reporting_entity":"CVE-2026-96596","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-96596-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-96596-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-96596"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-94200","title":"Improper Validation of Consistency within Input vulnerability in Erlang OTP ssl (tls_handshake_1_3, ssl_handshake and tls_client_ticket_store modules) allows a malicious TLS 1.3 server to cause a denial of service of the ssl application on the client node. The TLS 1.3 client decodes the extensions of a NewSessionTicket message as if they came from EncryptedExtensions. It therefore accepts a 0-length early_data extension, a form that is only valid in ClientHello and EncryptedExtensions. With {session_tickets, auto}, the client stores the ticket in the node-global tls_client_ticket_store. On the next automatic resumption, tls_handshake_1_3:get_max_early_data/1 crashes the store with a case_clause. Repeated crashes can exceed the restart intensity of the ssl supervisors, which use the rest_for_one strategy, and take down ssl for all connections on the node. This issue affects OTP from OTP 23.3 before OTP 27.3.4.19, OTP 28.5.0.8, and OTP 29.1.2, corresponding to ssl from 10.3 before 11.2.12.14, 11.6.0.7, and 11.7.8.","display_title":"Software component issue could make the service unavailable","display_summary":"Improper Validation of Consistency within Input vulnerability in Erlang OTP ssl (tlshandshake13, sslhandshake and tlsclientticketstore modules) allows a malicious TLS 1.3 server to cause a denial of service of the ssl…","display_reference":"CVE-2026-94200","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-94200","source_title":"Improper Validation of Consistency within Input vulnerability in Erlang OTP ssl (tls_handshake_1_3, ssl_handshake and tls_client_ticket_store modules) allows a malicious TLS 1.3 server to cause a denial of service of the ssl application on the client node. The TLS 1.3 client decodes the extensions of a NewSessionTicket message as if they came from EncryptedExtensions. It therefore accepts a 0-length early_data extension, a form that is only valid in ClientHello and EncryptedExtensions. With {session_tickets, auto}, the client stores the ticket in the node-global tls_client_ticket_store. On the next automatic resumption, tls_handshake_1_3:get_max_early_data/1 crashes the store with a case_clause. Repeated crashes can exceed the restart intensity of the ssl supervisors, which use the rest_for_one strategy, and take down ssl for all connections on the node. This issue affects OTP from OTP 23.3 before OTP 27.3.4.19, OTP 28.5.0.8, and OTP 29.1.2, corresponding to ssl from 10.3 before 11.2.12.14, 11.6.0.7, and 11.7.8.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-17T00:24:19.368Z","source_hash":"content-fingerprint:fnv1a-69d9bc70","affected_system":{"organization":"Improper Validation of Consistency within Input vulnerability in Erlang OTP ssl (tlshandshake13, sslhandshake and tlsclientticketstore modules) allows a malicious TLS 1.3 server to cause a denial of service of the ssl application on the client node. The TLS 1.3 client decodes the extensions of a NewSessionTicket message as if they came from EncryptedExtensions. It therefore accepts a 0-length earlydata extension, a form that is only valid in ClientHello and EncryptedExtensions. With {sessiontickets, auto}, the client stores the ticket in the node-global tlsclientticketstore. On the next automatic resumption, tlshandshake13 project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-94200-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Improper Validation of Consistency within Input vulnerability in Erlang OTP ssl (tls_handshake_1_3, ssl_handshake and tls_client_ticket_store modules) allows a malicious TLS 1.3 server to cause a denial of service of the ssl application on the client node. The TLS 1.3 client decodes the extensions of a NewSessionTicket message as if they came from EncryptedExtensions. It therefore accepts a 0-length early_data extension, a form that is only valid in ClientHello and EncryptedExtensions. With {session_tickets, auto}, the client stores the ticket in the node-global tls_client_ticket_store. On the next automatic resumption, tls_handshake_1_3:get_max_early_data/1 crashes the store with a case_clause. Repeated crashes can exceed the restart intensity of the ssl supervisors, which use the rest_for_one strategy, and take down ssl for all connections on the node. This issue affects OTP from OTP 23.3 before OTP 27.3.4.19, OTP 28.5.0.8, and OTP 29.1.2, corresponding to ssl from 10.3 before 11.2.12.14, 11.6.0.7, and 11.7.8.","source_quote_or_pointer":"Security Advisory CVE-2026-94200","fact_id":"SEA-CVE-2026-94200-F1","document_citation":"Security Advisory CVE-2026-94200"},{"id":"SEA-CVE-2026-94200-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Improper Validation of Consistency within Input vulnerability in Erlang OTP ssl (tlshandshake13, sslhandshake and tlsclientticketstore modules) allows a malicious TLS 1.3 server to cause a denial of service of the ssl application on the client node.","source_quote_or_pointer":"Advisory description (CVE-2026-94200)","fact_id":"SEA-CVE-2026-94200-F2","document_citation":"Advisory description (CVE-2026-94200)"}],"source_stated_contributors":["Improper Validation of Consistency within Input vulnerability in Erlang OTP ssl (tlshandshake13, sslhandshake and tlsclientticketstore modules) allows a malicious TLS 1.3 server to cause a denial of service of the ssl application on the client node."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-94200","reporting_entity":"CVE-2026-94200","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-94200-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-94200-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-94200"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-79957","title":"ServiceNext contains an insecure direct object reference (IDOR) in the /api/Usuario/GetUsuarios endpoint, which accepts a user-controlled numeric ID in the request body without verifying that the authenticated token belongs to the requested account (CWE-639). Any authenticated user can iterate the ID parameter to retrieve the full profile record of every other user, including passwords stored in cleartext (CWE-256), enabling account takeover and credential-stuffing attacks.","display_title":"Software component issue could allow unauthorized access","display_summary":"ServiceNext contains an insecure direct object reference (IDOR) in the /api/Usuario/GetUsuarios endpoint, which accepts a user-controlled numeric ID in the request body without verifying that the authenticated token…","display_reference":"CVE-2026-79957","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-79957","source_title":"ServiceNext contains an insecure direct object reference (IDOR) in the /api/Usuario/GetUsuarios endpoint, which accepts a user-controlled numeric ID in the request body without verifying that the authenticated token belongs to the requested account (CWE-639). Any authenticated user can iterate the ID parameter to retrieve the full profile record of every other user, including passwords stored in cleartext (CWE-256), enabling account takeover and credential-stuffing attacks.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-17T00:24:19.368Z","source_hash":"content-fingerprint:fnv1a-84bc80da","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-79957-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"ServiceNext contains an insecure direct object reference (IDOR) in the /api/Usuario/GetUsuarios endpoint, which accepts a user-controlled numeric ID in the request body without verifying that the authenticated token belongs to the requested account (CWE-639). Any authenticated user can iterate the ID parameter to retrieve the full profile record of every other user, including passwords stored in cleartext (CWE-256), enabling account takeover and credential-stuffing attacks.","source_quote_or_pointer":"Security Advisory CVE-2026-79957","fact_id":"SEA-CVE-2026-79957-F1","document_citation":"Security Advisory CVE-2026-79957"},{"id":"SEA-CVE-2026-79957-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"ServiceNext contains an insecure direct object reference (IDOR) in the /api/Usuario/GetUsuarios endpoint, which accepts a user-controlled numeric ID in the request body without verifying that the authenticated token belongs to the requested account (CWE-639).","source_quote_or_pointer":"Advisory description (CVE-2026-79957)","fact_id":"SEA-CVE-2026-79957-F2","document_citation":"Advisory description (CVE-2026-79957)"}],"source_stated_contributors":["ServiceNext contains an insecure direct object reference (IDOR) in the /api/Usuario/GetUsuarios endpoint, which accepts a user-controlled numeric ID in the request body without verifying that the authenticated token belongs to the requested account (CWE-639)."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-79957","reporting_entity":"CVE-2026-79957","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-79957-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-79957-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-79957"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108337","title":"An administrator could retrieve the password reset code for any user and take over the account. The password reset codes were included in the output of an API and could be used to reset the password of any account. The API is limited to use by administrator accounts only. An attacker who already has administrative access to the application could compromise the credentials of other accounts on the application. Device credentials and customer data cannot be accessed with this vulnerability.","display_title":"Software component issue could expose accounts or credentials","display_summary":"An administrator could retrieve the password reset code for any user and take over the account.","display_reference":"CVE-2026-108337","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108337","source_title":"An administrator could retrieve the password reset code for any user and take over the account. The password reset codes were included in the output of an API and could be used to reset the password of any account. The API is limited to use by administrator accounts only. An attacker who already has administrative access to the application could compromise the credentials of other accounts on the application. Device credentials and customer data cannot be accessed with this vulnerability.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-17T00:24:19.372Z","source_hash":"content-fingerprint:fnv1a-a11f3429","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108337-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"An administrator could retrieve the password reset code for any user and take over the account. The password reset codes were included in the output of an API and could be used to reset the password of any account. The API is limited to use by administrator accounts only. An attacker who already has administrative access to the application could compromise the credentials of other accounts on the application. Device credentials and customer data cannot be accessed with this vulnerability.","source_quote_or_pointer":"Security Advisory CVE-2026-108337","fact_id":"SEA-CVE-2026-108337-F1","document_citation":"Security Advisory CVE-2026-108337"},{"id":"SEA-CVE-2026-108337-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"An administrator could retrieve the password reset code for any user and take over the account.","source_quote_or_pointer":"Advisory description (CVE-2026-108337)","fact_id":"SEA-CVE-2026-108337-F2","document_citation":"Advisory description (CVE-2026-108337)"}],"source_stated_contributors":["An administrator could retrieve the password reset code for any user and take over the account."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108337","reporting_entity":"CVE-2026-108337","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108337-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108337-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108337"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-107349","title":"An infinite loop in PgBouncer 1.20.0 through 1.26.0 allows an unauthenticated remote attacker to cause a denial of service. A StartupMessage whose options parameter contains an empty parameter name, such as \"-c=\", makes the ignore_startup_parameters list lookup loop forever. Because PgBouncer serves all clients from a single process, this saturates a CPU core and makes PgBouncer unresponsive to all clients until the process is restarted.","display_title":"Software component issue could make the service unavailable","display_summary":"An infinite loop in PgBouncer 1.20.0 through 1.26.0 allows an unauthenticated remote attacker to cause a denial of service.","display_reference":"CVE-2026-107349","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107349","source_title":"An infinite loop in PgBouncer 1.20.0 through 1.26.0 allows an unauthenticated remote attacker to cause a denial of service. A StartupMessage whose options parameter contains an empty parameter name, such as \"-c=\", makes the ignore_startup_parameters list lookup loop forever. Because PgBouncer serves all clients from a single process, this saturates a CPU core and makes PgBouncer unresponsive to all clients until the process is restarted.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-17T00:24:19.372Z","source_hash":"content-fingerprint:fnv1a-6d2defcf","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-107349-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"An infinite loop in PgBouncer 1.20.0 through 1.26.0 allows an unauthenticated remote attacker to cause a denial of service. A StartupMessage whose options parameter contains an empty parameter name, such as \"-c=\", makes the ignore_startup_parameters list lookup loop forever. Because PgBouncer serves all clients from a single process, this saturates a CPU core and makes PgBouncer unresponsive to all clients until the process is restarted.","source_quote_or_pointer":"Security Advisory CVE-2026-107349","fact_id":"SEA-CVE-2026-107349-F1","document_citation":"Security Advisory CVE-2026-107349"},{"id":"SEA-CVE-2026-107349-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"An infinite loop in PgBouncer 1.20.0 through 1.26.0 allows an unauthenticated remote attacker to cause a denial of service. A StartupMessage whose options parameter contains an empty parameter name, such as \"-c=\", makes the ignorestartupparameters list lookup loop forever.","source_quote_or_pointer":"Advisory description (CVE-2026-107349)","fact_id":"SEA-CVE-2026-107349-F2","document_citation":"Advisory description (CVE-2026-107349)"}],"source_stated_contributors":["An infinite loop in PgBouncer 1.20.0 through 1.26.0 allows an unauthenticated remote attacker to cause a denial of service. A StartupMessage whose options parameter contains an empty parameter name, such as \"-c=\", makes the ignorestartupparameters list lookup loop forever."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-107349","reporting_entity":"CVE-2026-107349","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-107349-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-107349-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-107349"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-107348","title":"Integer overflow in the message buffer growth logic (mbuf_make_room) in PgBouncer 1.21.0 through 1.26.0 allows a remote attacker to cause a denial of service when max_packet_size is configured above 2147483648. A packet header declaring a length above 2^31 makes the buffer size computation overflow, leaving the growth loop unable to terminate. Because PgBouncer serves all clients from a single process, this saturates a CPU core and stalls every pooled connection until the process is restarted. Since 1.23.0 the overflow is reachable before authentication with a five-byte packet header.","display_title":"Software component issue could make the service unavailable","display_summary":"Integer overflow in the message buffer growth logic (mbufmakeroom) in PgBouncer 1.21.0 through 1.26.0 allows a remote attacker to cause a denial of service when maxpacketsize is configured above 2147483648.","display_reference":"CVE-2026-107348","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107348","source_title":"Integer overflow in the message buffer growth logic (mbuf_make_room) in PgBouncer 1.21.0 through 1.26.0 allows a remote attacker to cause a denial of service when max_packet_size is configured above 2147483648. A packet header declaring a length above 2^31 makes the buffer size computation overflow, leaving the growth loop unable to terminate. Because PgBouncer serves all clients from a single process, this saturates a CPU core and stalls every pooled connection until the process is restarted. Since 1.23.0 the overflow is reachable before authentication with a five-byte packet header.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-17T00:24:19.373Z","source_hash":"content-fingerprint:fnv1a-2bf34c5c","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-107348-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Integer overflow in the message buffer growth logic (mbuf_make_room) in PgBouncer 1.21.0 through 1.26.0 allows a remote attacker to cause a denial of service when max_packet_size is configured above 2147483648. A packet header declaring a length above 2^31 makes the buffer size computation overflow, leaving the growth loop unable to terminate. Because PgBouncer serves all clients from a single process, this saturates a CPU core and stalls every pooled connection until the process is restarted. Since 1.23.0 the overflow is reachable before authentication with a five-byte packet header.","source_quote_or_pointer":"Security Advisory CVE-2026-107348","fact_id":"SEA-CVE-2026-107348-F1","document_citation":"Security Advisory CVE-2026-107348"},{"id":"SEA-CVE-2026-107348-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Integer overflow in the message buffer growth logic (mbufmakeroom) in PgBouncer 1.21.0 through 1.26.0 allows a remote attacker to cause a denial of service when maxpacketsize is configured above 2147483648.","source_quote_or_pointer":"Advisory description (CVE-2026-107348)","fact_id":"SEA-CVE-2026-107348-F2","document_citation":"Advisory description (CVE-2026-107348)"}],"source_stated_contributors":["Integer overflow in the message buffer growth logic (mbufmakeroom) in PgBouncer 1.21.0 through 1.26.0 allows a remote attacker to cause a denial of service when maxpacketsize is configured above 2147483648."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-107348","reporting_entity":"CVE-2026-107348","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-107348-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-107348-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-107348"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-105236","title":"Improper Certificate Validation vulnerability in the ssl application in Erlang/OTP allows a client that holds a certificate trusted by one SNI virtual host to authenticate to a second SNI virtual host on the same listener by resuming its TLS 1.2 session there. A server that serves several SNI names from one listen socket through sni_fun or sni_hosts keeps one pre-TLS 1.3 session cache per listener and does not bind a cached session to the SNI name or client trust policy that established it. When an SNI option set switches to verify_peer without naming reuse_sessions, ssl_config:update_options/3 inherits the base listener's reuse_sessions value of true, so the default that disables reuse for client-authenticating servers does not apply. On an abbreviated handshake ssl_session:is_resumable/4 checks only that the cached session uses one of the current server certificates and carries some peer certificate, and never revalidates that certificate against the CA selected for the requested name. The names must share a server certificate, which is common with wildcard or multi-SAN certificates. TLS 1.3 does not use this cache and is not affected. This issue affects OTP from OTP 18.0 before OTP 27.3.4.19, OTP 28.5.0.8, and OTP 29.1.2, corresponding to ssl from 7.0 before 11.2.12.14, 11.6.0.7, and 11.7.8.","display_title":"Security issue reported in Software component","display_summary":"Improper Certificate Validation vulnerability in the ssl application in Erlang/OTP allows a client that holds a certificate trusted by one SNI virtual host to authenticate to a second SNI virtual host on the same…","display_reference":"CVE-2026-105236","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105236","source_title":"Improper Certificate Validation vulnerability in the ssl application in Erlang/OTP allows a client that holds a certificate trusted by one SNI virtual host to authenticate to a second SNI virtual host on the same listener by resuming its TLS 1.2 session there. A server that serves several SNI names from one listen socket through sni_fun or sni_hosts keeps one pre-TLS 1.3 session cache per listener and does not bind a cached session to the SNI name or client trust policy that established it. When an SNI option set switches to verify_peer without naming reuse_sessions, ssl_config:update_options/3 inherits the base listener's reuse_sessions value of true, so the default that disables reuse for client-authenticating servers does not apply. On an abbreviated handshake ssl_session:is_resumable/4 checks only that the cached session uses one of the current server certificates and carries some peer certificate, and never revalidates that certificate against the CA selected for the requested name. The names must share a server certificate, which is common with wildcard or multi-SAN certificates. TLS 1.3 does not use this cache and is not affected. This issue affects OTP from OTP 18.0 before OTP 27.3.4.19, OTP 28.5.0.8, and OTP 29.1.2, corresponding to ssl from 7.0 before 11.2.12.14, 11.6.0.7, and 11.7.8.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-17T00:24:19.373Z","source_hash":"content-fingerprint:fnv1a-a9990276","affected_system":{"organization":"Improper Certificate Validation vulnerability in the ssl application in Erlang/OTP allows a client that holds a certificate trusted by one SNI virtual host to authenticate to a second SNI virtual host on the same listener by resuming its TLS 1.2 session there. A server that serves several SNI names from one listen socket through snifun or snihosts keeps one pre-TLS 1.3 session cache per listener and does not bind a cached session to the SNI name or client trust policy that established it. When an SNI option set switches to verifypeer without naming reusesessions, sslconfig project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-105236-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Improper Certificate Validation vulnerability in the ssl application in Erlang/OTP allows a client that holds a certificate trusted by one SNI virtual host to authenticate to a second SNI virtual host on the same listener by resuming its TLS 1.2 session there. A server that serves several SNI names from one listen socket through sni_fun or sni_hosts keeps one pre-TLS 1.3 session cache per listener and does not bind a cached session to the SNI name or client trust policy that established it. When an SNI option set switches to verify_peer without naming reuse_sessions, ssl_config:update_options/3 inherits the base listener's reuse_sessions value of true, so the default that disables reuse for client-authenticating servers does not apply. On an abbreviated handshake ssl_session:is_resumable/4 checks only that the cached session uses one of the current server certificates and carries some peer certificate, and never revalidates that certificate against the CA selected for the requested name. The names must share a server certificate, which is common with wildcard or multi-SAN certificates. TLS 1.3 does not use this cache and is not affected. This issue affects OTP from OTP 18.0 before OTP 27.3.4.19, OTP 28.5.0.8, and OTP 29.1.2, corresponding to ssl from 7.0 before 11.2.12.14, 11.6.0.7, and 11.7.8.","source_quote_or_pointer":"Security Advisory CVE-2026-105236","fact_id":"SEA-CVE-2026-105236-F1","document_citation":"Security Advisory CVE-2026-105236"},{"id":"SEA-CVE-2026-105236-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Improper Certificate Validation vulnerability in the ssl application in Erlang/OTP allows a client that holds a certificate trusted by one SNI virtual host to authenticate to a second SNI virtual host on the same listener by resuming its TLS 1.2 session there.","source_quote_or_pointer":"Advisory description (CVE-2026-105236)","fact_id":"SEA-CVE-2026-105236-F2","document_citation":"Advisory description (CVE-2026-105236)"}],"source_stated_contributors":["Improper Certificate Validation vulnerability in the ssl application in Erlang/OTP allows a client that holds a certificate trusted by one SNI virtual host to authenticate to a second SNI virtual host on the same listener by resuming its TLS 1.2 session there."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["arch.caching"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-105236","reporting_entity":"CVE-2026-105236","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-105236-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-105236-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-105236"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-103415","title":"When a TLS 1.3 client processes a HelloRetryRequest, it copies the server's cookie into its second ClientHello without checking that the cookie fits in the outgoing packet. Both the length and the contents of that cookie come from the peer, and the write happens before certificate authentication completes, so a malicious or compromised server can overwrite memory past the caller supplied TLS packet buffer without presenting a certificate. Only the client path is affected.","display_title":"Security issue reported in Software component","display_summary":"When a TLS 1.3 client processes a HelloRetryRequest, it copies the server's cookie into its second ClientHello without checking that the cookie fits in the outgoing packet.","display_reference":"CVE-2026-103415","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103415","source_title":"When a TLS 1.3 client processes a HelloRetryRequest, it copies the server's cookie into its second ClientHello without checking that the cookie fits in the outgoing packet. Both the length and the contents of that cookie come from the peer, and the write happens before certificate authentication completes, so a malicious or compromised server can overwrite memory past the caller supplied TLS packet buffer without presenting a certificate. Only the client path is affected.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-17T00:24:19.374Z","source_hash":"content-fingerprint:fnv1a-dde2756b","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-103415-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"When a TLS 1.3 client processes a HelloRetryRequest, it copies the server's cookie into its second ClientHello without checking that the cookie fits in the outgoing packet. Both the length and the contents of that cookie come from the peer, and the write happens before certificate authentication completes, so a malicious or compromised server can overwrite memory past the caller supplied TLS packet buffer without presenting a certificate. Only the client path is affected.","source_quote_or_pointer":"Security Advisory CVE-2026-103415","fact_id":"SEA-CVE-2026-103415-F1","document_citation":"Security Advisory CVE-2026-103415"},{"id":"SEA-CVE-2026-103415-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"When a TLS 1.3 client processes a HelloRetryRequest, it copies the server's cookie into its second ClientHello without checking that the cookie fits in the outgoing packet.","source_quote_or_pointer":"Advisory description (CVE-2026-103415)","fact_id":"SEA-CVE-2026-103415-F2","document_citation":"Advisory description (CVE-2026-103415)"}],"source_stated_contributors":["When a TLS 1.3 client processes a HelloRetryRequest, it copies the server's cookie into its second ClientHello without checking that the cookie fits in the outgoing packet."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-103415","reporting_entity":"CVE-2026-103415","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-103415-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-103415-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-103415"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-110359","title":"Hyland Desktop Host for Windows before 25.1.1 is vulnerable to local privilege escalation. This is caused by a privileged service running from the %PROGRAMDATA%\\Hyland\\DesktopHost\\bin folder with weak permissions. A local user can exploit this to escalate privileges.","display_title":"Software component issue could grant elevated privileges","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-110359","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110359","source_title":"Hyland Desktop Host for Windows before 25.1.1 is vulnerable to local privilege escalation. This is caused by a privileged service running from the %PROGRAMDATA%\\Hyland\\DesktopHost\\bin folder with weak permissions. A local user can exploit this to escalate privileges.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T21:01:43.269Z","source_hash":"content-fingerprint:fnv1a-60eaa3e4","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-110359-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Hyland Desktop Host for Windows before 25.1.1 is vulnerable to local privilege escalation. This is caused by a privileged service running from the %PROGRAMDATA%\\Hyland\\DesktopHost\\bin folder with weak permissions. A local user can exploit this to escalate privileges.","source_quote_or_pointer":"Security Advisory CVE-2026-110359","fact_id":"SEA-CVE-2026-110359-F1","document_citation":"Security Advisory CVE-2026-110359"},{"id":"SEA-CVE-2026-110359-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Hyland Desktop Host for Windows before 25.1.1 is vulnerable to local privilege escalation. This is caused by a privileged service running from the %PROGRAMDATA%\\Hyland\\DesktopHost\\bin folder with weak permissions. A local user can exploit this to escalate privileges.","source_quote_or_pointer":"Advisory description (CVE-2026-110359)","fact_id":"SEA-CVE-2026-110359-F2","document_citation":"Advisory description (CVE-2026-110359)"}],"source_stated_contributors":["Hyland Desktop Host for Windows before 25.1.1 is vulnerable to local privilege escalation. This is caused by a privileged service running from the %PROGRAMDATA%\\Hyland\\DesktopHost\\bin folder with weak permissions. A local user can exploit this to escalate privileges."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Elevated privileges","Boundary bypass"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-110359","reporting_entity":"CVE-2026-110359","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-110359-SG1","label":"Enforce privilege boundaries in code","description":"Require explicit, server-verified authorization for privileged operations and isolate components with separate identities.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-110359-SG1","label":"Enforce privilege boundaries in code","description":"Require explicit, server-verified authorization for privileged operations and isolate components with separate identities.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A low-privilege actor reached a high-privilege capability. Enforce approval and privilege boundaries in deterministic code, not by convention.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-110359"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-110447","title":"Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution, as exploited in the wild in September and October 2026, a different vulnerability than CVE-2025-66208. This is an OS command injection in proxy.php when the CODE server isn't running (e.g., the product was recently restarted). The vulnerability is not present in standalone Collabora Online servers; only this deployment with CODE Server is affected.","display_title":"Software component issue could allow unintended commands to run","display_summary":"Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution, as exploited in the wild in September and October 2026, a different vulnerability than…","display_reference":"CVE-2026-110447","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110447","source_title":"Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution, as exploited in the wild in September and October 2026, a different vulnerability than CVE-2025-66208. This is an OS command injection in proxy.php when the CODE server isn't running (e.g., the product was recently restarted). The vulnerability is not present in standalone Collabora Online servers; only this deployment with CODE Server is affected.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T21:01:43.269Z","source_hash":"content-fingerprint:fnv1a-607e5222","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-110447-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution, as exploited in the wild in September and October 2026, a different vulnerability than CVE-2025-66208. This is an OS command injection in proxy.php when the CODE server isn't running (e.g., the product was recently restarted). The vulnerability is not present in standalone Collabora Online servers; only this deployment with CODE Server is affected.","source_quote_or_pointer":"Security Advisory CVE-2026-110447","fact_id":"SEA-CVE-2026-110447-F1","document_citation":"Security Advisory CVE-2026-110447"},{"id":"SEA-CVE-2026-110447-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution, as exploited in the wild in September and October 2026, a different vulnerability than CVE-2025-66208.","source_quote_or_pointer":"Advisory description (CVE-2026-110447)","fact_id":"SEA-CVE-2026-110447-F2","document_citation":"Advisory description (CVE-2026-110447)"}],"source_stated_contributors":["Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution, as exploited in the wild in September and October 2026, a different vulnerability than CVE-2025-66208."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-110447","reporting_entity":"CVE-2026-110447","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-110447-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-110447-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-110447"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108065","title":"SQL Injection (CWE-89) in the SOAP GetUser method of the /preapproval.asmx endpoint in Channel Software WebAlliance eCommerce [VERSION — missing] allows an unauthenticated remote attacker to read, write, and potentially execute commands on the backend Microsoft SQL Server via a crafted sUserID parameter value containing a single quote and stacked SQL query.","display_title":"Software component issue could expose or alter stored data","display_summary":"SQL Injection (CWE-89) in the SOAP GetUser method of the /preapproval.asmx endpoint in Channel Software WebAlliance eCommerce [VERSION — missing] allows an unauthenticated remote attacker to read, write, and potentially…","display_reference":"CVE-2026-108065","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108065","source_title":"SQL Injection (CWE-89) in the SOAP GetUser method of the /preapproval.asmx endpoint in Channel Software WebAlliance eCommerce [VERSION — missing] allows an unauthenticated remote attacker to read, write, and potentially execute commands on the backend Microsoft SQL Server via a crafted sUserID parameter value containing a single quote and stacked SQL query.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T21:01:43.271Z","source_hash":"content-fingerprint:fnv1a-d7a842cf","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108065-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"SQL Injection (CWE-89) in the SOAP GetUser method of the /preapproval.asmx endpoint in Channel Software WebAlliance eCommerce [VERSION — missing] allows an unauthenticated remote attacker to read, write, and potentially execute commands on the backend Microsoft SQL Server via a crafted sUserID parameter value containing a single quote and stacked SQL query.","source_quote_or_pointer":"Security Advisory CVE-2026-108065","fact_id":"SEA-CVE-2026-108065-F1","document_citation":"Security Advisory CVE-2026-108065"},{"id":"SEA-CVE-2026-108065-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"SQL Injection (CWE-89) in the SOAP GetUser method of the /preapproval.asmx endpoint in Channel Software WebAlliance eCommerce [VERSION — missing] allows an unauthenticated remote attacker to read, write, and potentially execute commands on the backend Microsoft SQL Server via a crafted sUserID parameter value…","source_quote_or_pointer":"Advisory description (CVE-2026-108065)","fact_id":"SEA-CVE-2026-108065-F2","document_citation":"Advisory description (CVE-2026-108065)"}],"source_stated_contributors":["SQL Injection (CWE-89) in the SOAP GetUser method of the /preapproval.asmx endpoint in Channel Software WebAlliance eCommerce [VERSION — missing] allows an unauthenticated remote attacker to read, write, and potentially execute commands on the backend Microsoft SQL Server via a crafted sUserID parameter value…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108065","reporting_entity":"CVE-2026-108065","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108065-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108065-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108065"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-100169","title":"Improper Authentication in the social account linking path of the Prowler API in Prowler from 5.4.0 before 5.35.0 allows a remote unauthenticated attacker to obtain persistent access to the account of a user who has not yet registered, because ProwlerSocialAccountAdapter.pre_social_login() in api/src/backend/api/adapters.py links a Google or GitHub login to any existing local account that has the same email address as the one returned by the provider, without requiring that the address has been verified by the provider or on the existing account, and without any other check that both accounts belong to the same person. Self registration is open and the new account is usable at once, because UserViewSet.get_permissions() in api/src/backend/api/v1/views.py grants AllowAny to the create action, ACCOUNT_EMAIL_VERIFICATION is set to none in api/src/backend/config/settings/social_login.py, and the Django ModelBackend checks only the password and is_active, not the django-allauth EmailAddress record. An attacker who registers an email address before its owner keeps the password set at registration after the link is made, because sociallogin.connect() does not reset the password and does not disable the existing account, and the owner who later signs in with Google or GitHub is logged into the attacker's account. django-allauth makes the same email based link on its own, because SOCIALACCOUNT_EMAIL_AUTHENTICATION and SOCIALACCOUNT_EMAIL_AUTHENTICATION_AUTO_CONNECT are both set to True in the same settings module. This gives the attacker the cloud provider credentials, scan findings and tenant memberships held in the account.","display_title":"Software component issue could expose accounts or credentials","display_summary":"Improper Authentication in the social account linking path of the Prowler API in Prowler from 5.4.0 before 5.35.0 allows a remote unauthenticated attacker to obtain persistent access to the account of a user who has not…","display_reference":"CVE-2026-100169","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100169","source_title":"Improper Authentication in the social account linking path of the Prowler API in Prowler from 5.4.0 before 5.35.0 allows a remote unauthenticated attacker to obtain persistent access to the account of a user who has not yet registered, because ProwlerSocialAccountAdapter.pre_social_login() in api/src/backend/api/adapters.py links a Google or GitHub login to any existing local account that has the same email address as the one returned by the provider, without requiring that the address has been verified by the provider or on the existing account, and without any other check that both accounts belong to the same person. Self registration is open and the new account is usable at once, because UserViewSet.get_permissions() in api/src/backend/api/v1/views.py grants AllowAny to the create action, ACCOUNT_EMAIL_VERIFICATION is set to none in api/src/backend/config/settings/social_login.py, and the Django ModelBackend checks only the password and is_active, not the django-allauth EmailAddress record. An attacker who registers an email address before its owner keeps the password set at registration after the link is made, because sociallogin.connect() does not reset the password and does not disable the existing account, and the owner who later signs in with Google or GitHub is logged into the attacker's account. django-allauth makes the same email based link on its own, because SOCIALACCOUNT_EMAIL_AUTHENTICATION and SOCIALACCOUNT_EMAIL_AUTHENTICATION_AUTO_CONNECT are both set to True in the same settings module. This gives the attacker the cloud provider credentials, scan findings and tenant memberships held in the account.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T21:01:43.273Z","source_hash":"content-fingerprint:fnv1a-a60ff7f8","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Cloud & container infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-100169-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Improper Authentication in the social account linking path of the Prowler API in Prowler from 5.4.0 before 5.35.0 allows a remote unauthenticated attacker to obtain persistent access to the account of a user who has not yet registered, because ProwlerSocialAccountAdapter.pre_social_login() in api/src/backend/api/adapters.py links a Google or GitHub login to any existing local account that has the same email address as the one returned by the provider, without requiring that the address has been verified by the provider or on the existing account, and without any other check that both accounts belong to the same person. Self registration is open and the new account is usable at once, because UserViewSet.get_permissions() in api/src/backend/api/v1/views.py grants AllowAny to the create action, ACCOUNT_EMAIL_VERIFICATION is set to none in api/src/backend/config/settings/social_login.py, and the Django ModelBackend checks only the password and is_active, not the django-allauth EmailAddress record. An attacker who registers an email address before its owner keeps the password set at registration after the link is made, because sociallogin.connect() does not reset the password and does not disable the existing account, and the owner who later signs in with Google or GitHub is logged into the attacker's account. django-allauth makes the same email based link on its own, because SOCIALACCOUNT_EMAIL_AUTHENTICATION and SOCIALACCOUNT_EMAIL_AUTHENTICATION_AUTO_CONNECT are both set to True in the same settings module. This gives the attacker the cloud provider credentials, scan findings and tenant memberships held in the account.","source_quote_or_pointer":"Security Advisory CVE-2026-100169","fact_id":"SEA-CVE-2026-100169-F1","document_citation":"Security Advisory CVE-2026-100169"},{"id":"SEA-CVE-2026-100169-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Improper Authentication in the social account linking path of the Prowler API in Prowler from 5.4.0 before 5.35.0 allows a remote unauthenticated attacker to obtain persistent access to the account of a user who has not yet registered, because ProwlerSocialAccountAdapter.presociallogin() in…","source_quote_or_pointer":"Advisory description (CVE-2026-100169)","fact_id":"SEA-CVE-2026-100169-F2","document_citation":"Advisory description (CVE-2026-100169)"}],"source_stated_contributors":["Improper Authentication in the social account linking path of the Prowler API in Prowler from 5.4.0 before 5.35.0 allows a remote unauthenticated attacker to obtain persistent access to the account of a user who has not yet registered, because ProwlerSocialAccountAdapter.presociallogin() in…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-100169","reporting_entity":"CVE-2026-100169","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-100169-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-100169-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-100169"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-110385","title":"A remote code execution vulnerability in ONLYOFFICE Document Server versions before10.0.0 allows an authenticated attacker with a valid Inbox-compatible JWT to execute arbitrary operating system commands as the ds service account. The Document Builder API improperly processes user-controlled converter XML supplied through the optional third argument of builder.SaveFile(). By injecting a duplicate m_sFileTo element, an attacker can override the server-generated output path and write arbitrary content outside the designated job directory. This allows the attacker to overwrite the runtime.json configuration file, modify the Document Builder executable path and arguments, and execute arbitrary commands when a subsequent Document Builder job is processed.","display_title":"Software component issue could allow unintended commands to run","display_summary":"A remote code execution vulnerability in ONLYOFFICE Document Server versions before10.0.0 allows an authenticated attacker with a valid Inbox-compatible JWT to execute arbitrary operating system commands as the ds…","display_reference":"CVE-2026-110385","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110385","source_title":"A remote code execution vulnerability in ONLYOFFICE Document Server versions before10.0.0 allows an authenticated attacker with a valid Inbox-compatible JWT to execute arbitrary operating system commands as the ds service account. The Document Builder API improperly processes user-controlled converter XML supplied through the optional third argument of builder.SaveFile(). By injecting a duplicate m_sFileTo element, an attacker can override the server-generated output path and write arbitrary content outside the designated job directory. This allows the attacker to overwrite the runtime.json configuration file, modify the Document Builder executable path and arguments, and execute arbitrary commands when a subsequent Document Builder job is processed.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T21:01:43.287Z","source_hash":"content-fingerprint:fnv1a-556a6869","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-110385-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A remote code execution vulnerability in ONLYOFFICE Document Server versions before10.0.0 allows an authenticated attacker with a valid Inbox-compatible JWT to execute arbitrary operating system commands as the ds service account. The Document Builder API improperly processes user-controlled converter XML supplied through the optional third argument of builder.SaveFile(). By injecting a duplicate m_sFileTo element, an attacker can override the server-generated output path and write arbitrary content outside the designated job directory. This allows the attacker to overwrite the runtime.json configuration file, modify the Document Builder executable path and arguments, and execute arbitrary commands when a subsequent Document Builder job is processed.","source_quote_or_pointer":"Security Advisory CVE-2026-110385","fact_id":"SEA-CVE-2026-110385-F1","document_citation":"Security Advisory CVE-2026-110385"},{"id":"SEA-CVE-2026-110385-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A remote code execution vulnerability in ONLYOFFICE Document Server versions before10.0.0 allows an authenticated attacker with a valid Inbox-compatible JWT to execute arbitrary operating system commands as the ds service account.","source_quote_or_pointer":"Advisory description (CVE-2026-110385)","fact_id":"SEA-CVE-2026-110385-F2","document_citation":"Advisory description (CVE-2026-110385)"}],"source_stated_contributors":["A remote code execution vulnerability in ONLYOFFICE Document Server versions before10.0.0 allows an authenticated attacker with a valid Inbox-compatible JWT to execute arbitrary operating system commands as the ds service account."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-110385","reporting_entity":"CVE-2026-110385","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-110385-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-110385-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-110385"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-46449","title":"The Akamai Guardicore Platform Agent (GPA) before 7.4 for macOS is affected by a local privilege escalation vulnerability within the wapptunneld component. The vulnerability is caused by a lack of input validation when the service uses network interface names to execute system utilities, resulting in command injection. An unprivileged local user with permissions to modify network interface names can exploit this by renaming a network interface to include a malicious shell payload via System Settings. When the \"Log out from your IdP\" action is subsequently triggered, the wapptunneld service processes the poisoned interface name, leading to the execution of arbitrary commands with root privileges.","display_title":"Software component issue could allow unintended commands to run","display_summary":"The Akamai Guardicore Platform Agent (GPA) before 7.4 for macOS is affected by a local privilege escalation vulnerability within the wapptunneld component.","display_reference":"CVE-2026-46449","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46449","source_title":"The Akamai Guardicore Platform Agent (GPA) before 7.4 for macOS is affected by a local privilege escalation vulnerability within the wapptunneld component. The vulnerability is caused by a lack of input validation when the service uses network interface names to execute system utilities, resulting in command injection. An unprivileged local user with permissions to modify network interface names can exploit this by renaming a network interface to include a malicious shell payload via System Settings. When the \"Log out from your IdP\" action is subsequently triggered, the wapptunneld service processes the poisoned interface name, leading to the execution of arbitrary commands with root privileges.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T21:01:43.288Z","source_hash":"content-fingerprint:fnv1a-e6f63a7c","affected_system":{"organization":"Software component project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-46449-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Akamai Guardicore Platform Agent (GPA) before 7.4 for macOS is affected by a local privilege escalation vulnerability within the wapptunneld component. The vulnerability is caused by a lack of input validation when the service uses network interface names to execute system utilities, resulting in command injection. An unprivileged local user with permissions to modify network interface names can exploit this by renaming a network interface to include a malicious shell payload via System Settings. When the \"Log out from your IdP\" action is subsequently triggered, the wapptunneld service processes the poisoned interface name, leading to the execution of arbitrary commands with root privileges.","source_quote_or_pointer":"Security Advisory CVE-2026-46449","fact_id":"SEA-CVE-2026-46449-F1","document_citation":"Security Advisory CVE-2026-46449"},{"id":"SEA-CVE-2026-46449-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Akamai Guardicore Platform Agent (GPA) before 7.4 for macOS is affected by a local privilege escalation vulnerability within the wapptunneld component. The vulnerability is caused by a lack of input validation when the service uses network interface names to execute system utilities, resulting in command…","source_quote_or_pointer":"Advisory description (CVE-2026-46449)","fact_id":"SEA-CVE-2026-46449-F2","document_citation":"Advisory description (CVE-2026-46449)"}],"source_stated_contributors":["The Akamai Guardicore Platform Agent (GPA) before 7.4 for macOS is affected by a local privilege escalation vulnerability within the wapptunneld component. The vulnerability is caused by a lack of input validation when the service uses network interface names to execute system utilities, resulting in command…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.write_action","data.pii","arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-004","SEA-FM-002","SEA-FM-010"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-46449","reporting_entity":"CVE-2026-46449","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-46449-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-46449-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-46449"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-50216","title":"An integer underflow exists in the DNS proxy component of the macOS NetworkExtension system extension shipped with Akamai Guardicore Platform Agent (GPA) for macOS, whereby if a UDP datagram shorter than 96 bytes that begins with a specific value is received, a subsequent size computation underflows to a near-SIZE_MAX value, causing an allocation failure and uncaught Objective-C exception that aborts the root system extension.","display_title":"Security issue reported in Software component","display_summary":"An integer underflow exists in the DNS proxy component of the macOS NetworkExtension system extension shipped with Akamai Guardicore Platform Agent (GPA) for macOS, whereby if a UDP datagram shorter than 96 bytes that…","display_reference":"CVE-2026-50216","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-50216","source_title":"An integer underflow exists in the DNS proxy component of the macOS NetworkExtension system extension shipped with Akamai Guardicore Platform Agent (GPA) for macOS, whereby if a UDP datagram shorter than 96 bytes that begins with a specific value is received, a subsequent size computation underflows to a near-SIZE_MAX value, causing an allocation failure and uncaught Objective-C exception that aborts the root system extension.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T21:01:43.288Z","source_hash":"content-fingerprint:fnv1a-6d7d30ef","affected_system":{"organization":"Software component project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-50216-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"An integer underflow exists in the DNS proxy component of the macOS NetworkExtension system extension shipped with Akamai Guardicore Platform Agent (GPA) for macOS, whereby if a UDP datagram shorter than 96 bytes that begins with a specific value is received, a subsequent size computation underflows to a near-SIZE_MAX value, causing an allocation failure and uncaught Objective-C exception that aborts the root system extension.","source_quote_or_pointer":"Security Advisory CVE-2026-50216","fact_id":"SEA-CVE-2026-50216-F1","document_citation":"Security Advisory CVE-2026-50216"},{"id":"SEA-CVE-2026-50216-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"An integer underflow exists in the DNS proxy component of the macOS NetworkExtension system extension shipped with Akamai Guardicore Platform Agent (GPA) for macOS, whereby if a UDP datagram shorter than 96 bytes that begins with a specific value is received, a subsequent size computation underflows to a near-SIZEMAX…","source_quote_or_pointer":"Advisory description (CVE-2026-50216)","fact_id":"SEA-CVE-2026-50216-F2","document_citation":"Advisory description (CVE-2026-50216)"}],"source_stated_contributors":["An integer underflow exists in the DNS proxy component of the macOS NetworkExtension system extension shipped with Akamai Guardicore Platform Agent (GPA) for macOS, whereby if a UDP datagram shorter than 96 bytes that begins with a specific value is received, a subsequent size computation underflows to a near-SIZEMAX…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-010"],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-50216","reporting_entity":"CVE-2026-50216","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-50216-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-50216-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-50216"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-50218","title":"Akamai GPA (Guardicore Platform Agent) client on all platforms before 7.4 improperly validates JWT tokens used for seeding. By convincing a user to interact with a malicious link, an attacker can use a spoofed JWT token to inject arbitrary parameters into the client software, resulting in unauthorized reconfiguration and full compromise of the application's functionality. This attack can also be targeted against an already seeded client if the attacker knows the URL of the IDP that the client used for enrollment.","display_title":"Security issue reported in Software component","display_summary":"Akamai GPA (Guardicore Platform Agent) client on all platforms before 7.4 improperly validates JWT tokens used for seeding.","display_reference":"CVE-2026-50218","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-50218","source_title":"Akamai GPA (Guardicore Platform Agent) client on all platforms before 7.4 improperly validates JWT tokens used for seeding. By convincing a user to interact with a malicious link, an attacker can use a spoofed JWT token to inject arbitrary parameters into the client software, resulting in unauthorized reconfiguration and full compromise of the application's functionality. This attack can also be targeted against an already seeded client if the attacker knows the URL of the IDP that the client used for enrollment.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T21:01:43.288Z","source_hash":"content-fingerprint:fnv1a-58c21c95","affected_system":{"organization":"Software component project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-50218-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Akamai GPA (Guardicore Platform Agent) client on all platforms before 7.4 improperly validates JWT tokens used for seeding. By convincing a user to interact with a malicious link, an attacker can use a spoofed JWT token to inject arbitrary parameters into the client software, resulting in unauthorized reconfiguration and full compromise of the application's functionality. This attack can also be targeted against an already seeded client if the attacker knows the URL of the IDP that the client used for enrollment.","source_quote_or_pointer":"Security Advisory CVE-2026-50218","fact_id":"SEA-CVE-2026-50218-F1","document_citation":"Security Advisory CVE-2026-50218"},{"id":"SEA-CVE-2026-50218-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Akamai GPA (Guardicore Platform Agent) client on all platforms before 7.4 improperly validates JWT tokens used for seeding. By convincing a user to interact with a malicious link, an attacker can use a spoofed JWT token to inject arbitrary parameters into the client software, resulting in unauthorized reconfiguration…","source_quote_or_pointer":"Advisory description (CVE-2026-50218)","fact_id":"SEA-CVE-2026-50218-F2","document_citation":"Advisory description (CVE-2026-50218)"}],"source_stated_contributors":["Akamai GPA (Guardicore Platform Agent) client on all platforms before 7.4 improperly validates JWT tokens used for seeding. By convincing a user to interact with a malicious link, an attacker can use a spoofed JWT token to inject arbitrary parameters into the client software, resulting in unauthorized reconfiguration…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","data.credentials_secrets","arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-010"],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-50218","reporting_entity":"CVE-2026-50218","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-50218-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-50218-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-50218"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-103946","title":"An SQL injection vulnerability could allow an authenticated user to read or modify data stored by Nessus.","display_title":"Software component issue could expose or alter stored data","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-103946","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103946","source_title":"An SQL injection vulnerability could allow an authenticated user to read or modify data stored by Nessus.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T21:01:43.289Z","source_hash":"content-fingerprint:fnv1a-c7725258","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-103946-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"An SQL injection vulnerability could allow an authenticated user to read or modify data stored by Nessus.","source_quote_or_pointer":"Security Advisory CVE-2026-103946","fact_id":"SEA-CVE-2026-103946-F1","document_citation":"Security Advisory CVE-2026-103946"},{"id":"SEA-CVE-2026-103946-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"An SQL injection vulnerability could allow an authenticated user to read or modify data stored by Nessus.","source_quote_or_pointer":"Advisory description (CVE-2026-103946)","fact_id":"SEA-CVE-2026-103946-F2","document_citation":"Advisory description (CVE-2026-103946)"}],"source_stated_contributors":["An SQL injection vulnerability could allow an authenticated user to read or modify data stored by Nessus."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-103946","reporting_entity":"CVE-2026-103946","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-103946-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-103946-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-103946"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-93637","title":"An authentication rate-limit bypass in Zimbra Collaboration Suite 10.1.0 through 10.1.21 allows unauthenticated attackers to make repeated password guesses through GraphQL without incrementing Zimbra’s source-IP failure counter. GraphQL aliases allow multiple authentication attempts in one HTTP request.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-93637","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93637","source_title":"An authentication rate-limit bypass in Zimbra Collaboration Suite 10.1.0 through 10.1.21 allows unauthenticated attackers to make repeated password guesses through GraphQL without incrementing Zimbra’s source-IP failure counter. GraphQL aliases allow multiple authentication attempts in one HTTP request.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T21:01:43.289Z","source_hash":"content-fingerprint:fnv1a-37697031","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-93637-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"An authentication rate-limit bypass in Zimbra Collaboration Suite 10.1.0 through 10.1.21 allows unauthenticated attackers to make repeated password guesses through GraphQL without incrementing Zimbra’s source-IP failure counter. GraphQL aliases allow multiple authentication attempts in one HTTP request.","source_quote_or_pointer":"Security Advisory CVE-2026-93637","fact_id":"SEA-CVE-2026-93637-F1","document_citation":"Security Advisory CVE-2026-93637"},{"id":"SEA-CVE-2026-93637-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"An authentication rate-limit bypass in Zimbra Collaboration Suite 10.1.0 through 10.1.21 allows unauthenticated attackers to make repeated password guesses through GraphQL without incrementing Zimbra’s source-IP failure counter. GraphQL aliases allow multiple authentication attempts in one HTTP request.","source_quote_or_pointer":"Advisory description (CVE-2026-93637)","fact_id":"SEA-CVE-2026-93637-F2","document_citation":"Advisory description (CVE-2026-93637)"}],"source_stated_contributors":["An authentication rate-limit bypass in Zimbra Collaboration Suite 10.1.0 through 10.1.21 allows unauthenticated attackers to make repeated password guesses through GraphQL without incrementing Zimbra’s source-IP failure counter. GraphQL aliases allow multiple authentication attempts in one HTTP request."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-93637","reporting_entity":"CVE-2026-93637","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-93637-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-93637-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-93637"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-110248","title":"Insertion of sensitive information into log files in the git_utils[.]py component in Amazon SageMaker Python SDK V3 before 3.10.0 and V2 before 2.257.3 might allow an authenticated remote user to obtain plaintext repository credentials from CloudWatch Logs when a git clone operation fails, because the runclone_command() function does not redact credentials from subprocess error output. To remediate this issue, users should upgrade to Amazon SageMaker Python SDK V3 3.10.0 or V2 2.257.3.","display_title":"Software component issue could expose accounts or credentials","display_summary":"Insertion of sensitive information into log files in the gitutils[.]py component in Amazon SageMaker Python SDK V3 before 3.10.0 and V2 before 2.257.3 might allow an authenticated remote user to obtain plaintext…","display_reference":"CVE-2026-110248","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110248","source_title":"Insertion of sensitive information into log files in the git_utils[.]py component in Amazon SageMaker Python SDK V3 before 3.10.0 and V2 before 2.257.3 might allow an authenticated remote user to obtain plaintext repository credentials from CloudWatch Logs when a git clone operation fails, because the runclone_command() function does not redact credentials from subprocess error output. To remediate this issue, users should upgrade to Amazon SageMaker Python SDK V3 3.10.0 or V2 2.257.3.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T16:33:35.961Z","source_hash":"content-fingerprint:fnv1a-35918235","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-110248-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Insertion of sensitive information into log files in the git_utils[.]py component in Amazon SageMaker Python SDK V3 before 3.10.0 and V2 before 2.257.3 might allow an authenticated remote user to obtain plaintext repository credentials from CloudWatch Logs when a git clone operation fails, because the runclone_command() function does not redact credentials from subprocess error output. To remediate this issue, users should upgrade to Amazon SageMaker Python SDK V3 3.10.0 or V2 2.257.3.","source_quote_or_pointer":"Security Advisory CVE-2026-110248","fact_id":"SEA-CVE-2026-110248-F1","document_citation":"Security Advisory CVE-2026-110248"},{"id":"SEA-CVE-2026-110248-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Insertion of sensitive information into log files in the gitutils[.]py component in Amazon SageMaker Python SDK V3 before 3.10.0 and V2 before 2.257.3 might allow an authenticated remote user to obtain plaintext repository credentials from CloudWatch Logs when a git clone operation fails, because the runclonecommand()…","source_quote_or_pointer":"Advisory description (CVE-2026-110248)","fact_id":"SEA-CVE-2026-110248-F2","document_citation":"Advisory description (CVE-2026-110248)"}],"source_stated_contributors":["Insertion of sensitive information into log files in the gitutils[.]py component in Amazon SageMaker Python SDK V3 before 3.10.0 and V2 before 2.257.3 might allow an authenticated remote user to obtain plaintext repository credentials from CloudWatch Logs when a git clone operation fails, because the runclonecommand()…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-110248","reporting_entity":"CVE-2026-110248","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-110248-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-110248-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-110248"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-55383","title":"InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates. Prior to version 2.4.0, InvoiceShelf public customer invoice, estimate, and payment routes use an EmailLog token's numeric mailable_id without verifying mailable_type, and the JSON handlers do not enforce EmailLog::isExpired. A token issued for one document type can therefore disclose a different company's document when numeric identifiers collide, and an expired token can remain usable on the JSON routes GET /customer/invoices/{email_log:token}, GET /customer/estimates/{email_log:token}, and GET /customer/payments/{email_log:token}. View handlers can also mark a mismatched invoice or estimate as viewed and send a notification. This issue is fixed in version 2.4.0.","display_title":"Security issue reported in Software component","display_summary":"InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates.","display_reference":"CVE-2026-55383","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-55383","source_title":"InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates. Prior to version 2.4.0, InvoiceShelf public customer invoice, estimate, and payment routes use an EmailLog token's numeric mailable_id without verifying mailable_type, and the JSON handlers do not enforce EmailLog::isExpired. A token issued for one document type can therefore disclose a different company's document when numeric identifiers collide, and an expired token can remain usable on the JSON routes GET /customer/invoices/{email_log:token}, GET /customer/estimates/{email_log:token}, and GET /customer/payments/{email_log:token}. View handlers can also mark a mismatched invoice or estimate as viewed and send a notification. This issue is fixed in version 2.4.0.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:45.569Z","source_hash":"content-fingerprint:fnv1a-5e008051","affected_system":{"organization":"InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates. Prior to version 2.4.0, InvoiceShelf public customer invoice, estimate, and payment routes use an EmailLog token's numeric mailableid without verifying mailabletype, and the JSON handlers do not enforce EmailLog project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-55383-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates. Prior to version 2.4.0, InvoiceShelf public customer invoice, estimate, and payment routes use an EmailLog token's numeric mailable_id without verifying mailable_type, and the JSON handlers do not enforce EmailLog::isExpired. A token issued for one document type can therefore disclose a different company's document when numeric identifiers collide, and an expired token can remain usable on the JSON routes GET /customer/invoices/{email_log:token}, GET /customer/estimates/{email_log:token}, and GET /customer/payments/{email_log:token}. View handlers can also mark a mismatched invoice or estimate as viewed and send a notification. This issue is fixed in version 2.4.0.","source_quote_or_pointer":"Security Advisory CVE-2026-55383","fact_id":"SEA-CVE-2026-55383-F1","document_citation":"Security Advisory CVE-2026-55383"},{"id":"SEA-CVE-2026-55383-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates. Prior to version 2.4.0, InvoiceShelf public customer invoice, estimate, and payment routes use an EmailLog token's numeric mailableid without verifying mailabletype, and the JSON handlers…","source_quote_or_pointer":"Advisory description (CVE-2026-55383)","fact_id":"SEA-CVE-2026-55383-F2","document_citation":"Advisory description (CVE-2026-55383)"}],"source_stated_contributors":["InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates. Prior to version 2.4.0, InvoiceShelf public customer invoice, estimate, and payment routes use an EmailLog token's numeric mailableid without verifying mailabletype, and the JSON handlers…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.financial_action","auth.public_publication","data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-55383","reporting_entity":"CVE-2026-55383","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-55383-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-55383-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-55383"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-55387","title":"InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates. In version 2.3.3 and earlier, InvoiceShelf bulk-delete request validation accepts record identifiers without consistently binding them to the authenticated user's company_id. The affected DeleteCustomersRequest, DeleteEstimatesRequest, DeleteExpensesRequest, DeleteInvoiceRequest, DeleteItemsRequest, DeletePaymentsRequest, and DeleteUserRequest validators check that identifiers exist but do not consistently check tenant ownership. An authenticated user can submit another company's identifier and delete cross-company records. This vulnerability is fixed in 2.4.0.","display_title":"Security issue reported in Software component","display_summary":"InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates.","display_reference":"CVE-2026-55387","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-55387","source_title":"InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates. In version 2.3.3 and earlier, InvoiceShelf bulk-delete request validation accepts record identifiers without consistently binding them to the authenticated user's company_id. The affected DeleteCustomersRequest, DeleteEstimatesRequest, DeleteExpensesRequest, DeleteInvoiceRequest, DeleteItemsRequest, DeletePaymentsRequest, and DeleteUserRequest validators check that identifiers exist but do not consistently check tenant ownership. An authenticated user can submit another company's identifier and delete cross-company records. This vulnerability is fixed in 2.4.0.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:45.569Z","source_hash":"content-fingerprint:fnv1a-e6e36b0d","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-55387-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates. In version 2.3.3 and earlier, InvoiceShelf bulk-delete request validation accepts record identifiers without consistently binding them to the authenticated user's company_id. The affected DeleteCustomersRequest, DeleteEstimatesRequest, DeleteExpensesRequest, DeleteInvoiceRequest, DeleteItemsRequest, DeletePaymentsRequest, and DeleteUserRequest validators check that identifiers exist but do not consistently check tenant ownership. An authenticated user can submit another company's identifier and delete cross-company records. This vulnerability is fixed in 2.4.0.","source_quote_or_pointer":"Security Advisory CVE-2026-55387","fact_id":"SEA-CVE-2026-55387-F1","document_citation":"Security Advisory CVE-2026-55387"},{"id":"SEA-CVE-2026-55387-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates. In version 2.3.3 and earlier, InvoiceShelf bulk-delete request validation accepts record identifiers without consistently binding them to the authenticated user's companyid.","source_quote_or_pointer":"Advisory description (CVE-2026-55387)","fact_id":"SEA-CVE-2026-55387-F2","document_citation":"Advisory description (CVE-2026-55387)"}],"source_stated_contributors":["InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates. In version 2.3.3 and earlier, InvoiceShelf bulk-delete request validation accepts record identifiers without consistently binding them to the authenticated user's companyid."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.financial_action","auth.destructive_action","auth.write_action","data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-55387","reporting_entity":"CVE-2026-55387","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-55387-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-55387-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-55387"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-106931","title":"SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS commands with root or SYSTEM privileges on the system running the affected product.","display_title":"Software component issue could allow unintended commands to run","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-106931","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-106931","source_title":"SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS commands with root or SYSTEM privileges on the system running the affected product.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:45.575Z","source_hash":"content-fingerprint:fnv1a-3c6c10e1","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-106931-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS commands with root or SYSTEM privileges on the system running the affected product.","source_quote_or_pointer":"Security Advisory CVE-2026-106931","fact_id":"SEA-CVE-2026-106931-F1","document_citation":"Security Advisory CVE-2026-106931"},{"id":"SEA-CVE-2026-106931-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS commands with root or SYSTEM privileges on the system running the affected product.","source_quote_or_pointer":"Advisory description (CVE-2026-106931)","fact_id":"SEA-CVE-2026-106931-F2","document_citation":"Advisory description (CVE-2026-106931)"}],"source_stated_contributors":["SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS commands with root or SYSTEM privileges on the system running the affected product."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-106931","reporting_entity":"CVE-2026-106931","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-106931-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-106931-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-106931"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-97668","title":"The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the guest cart persistent meta_value in all versions up to, and including, 10.8.0 due to insufficient escaping on user supplied data and lack of sufficient preparation on the existing SQL query in the update_guest_persistent_cart() function. The abandoned_cart_info value, populated from attacker-controlled checkout fields such as the SMS consent field, is passed through stripslashes() and concatenated directly into an UPDATE statement while the adjacent SELECT and INSERT use prepared statements. This makes it possible for unauthenticated attackers to append additional SQL to the query. Because the sink is an UPDATE ... SET on the wp_usermeta table, the injection can both extract sensitive information from the database via time-based blind techniques and modify usermeta rows; it has been demonstrated to escalate an arbitrary account to administrator by writing a wp_capabilities row that shadows the legitimate one.","display_title":"Software component issue could expose or alter stored data","display_summary":"The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the guest cart persistent metavalue in all versions up to, and including, 10.8.0 due to insufficient escaping on user…","display_reference":"CVE-2026-97668","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97668","source_title":"The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the guest cart persistent meta_value in all versions up to, and including, 10.8.0 due to insufficient escaping on user supplied data and lack of sufficient preparation on the existing SQL query in the update_guest_persistent_cart() function. The abandoned_cart_info value, populated from attacker-controlled checkout fields such as the SMS consent field, is passed through stripslashes() and concatenated directly into an UPDATE statement while the adjacent SELECT and INSERT use prepared statements. This makes it possible for unauthenticated attackers to append additional SQL to the query. Because the sink is an UPDATE ... SET on the wp_usermeta table, the injection can both extract sensitive information from the database via time-based blind techniques and modify usermeta rows; it has been demonstrated to escalate an arbitrary account to administrator by writing a wp_capabilities row that shadows the legitimate one.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T18:14:27.081Z","source_hash":"content-fingerprint:fnv1a-2e9d522b","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-97668-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the guest cart persistent meta_value in all versions up to, and including, 10.8.0 due to insufficient escaping on user supplied data and lack of sufficient preparation on the existing SQL query in the update_guest_persistent_cart() function. The abandoned_cart_info value, populated from attacker-controlled checkout fields such as the SMS consent field, is passed through stripslashes() and concatenated directly into an UPDATE statement while the adjacent SELECT and INSERT use prepared statements. This makes it possible for unauthenticated attackers to append additional SQL to the query. Because the sink is an UPDATE ... SET on the wp_usermeta table, the injection can both extract sensitive information from the database via time-based blind techniques and modify usermeta rows; it has been demonstrated to escalate an arbitrary account to administrator by writing a wp_capabilities row that shadows the legitimate one.","source_quote_or_pointer":"Security Advisory CVE-2026-97668","fact_id":"SEA-CVE-2026-97668-F1","document_citation":"Security Advisory CVE-2026-97668"},{"id":"SEA-CVE-2026-97668-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the guest cart persistent metavalue in all versions up to, and including, 10.8.0 due to insufficient escaping on user supplied data and lack of sufficient preparation on the existing SQL query in the…","source_quote_or_pointer":"Advisory description (CVE-2026-97668)","fact_id":"SEA-CVE-2026-97668-F2","document_citation":"Advisory description (CVE-2026-97668)"}],"source_stated_contributors":["The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the guest cart persistent metavalue in all versions up to, and including, 10.8.0 due to insufficient escaping on user supplied data and lack of sufficient preparation on the existing SQL query in the…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.financial_action","auth.privileged_action","auth.write_action","data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-97668","reporting_entity":"CVE-2026-97668","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-97668-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-97668-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-97668"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-97629","title":"Description When NGINX Plus or NGINX Open Source is configured with ssl_session_cache shared:name:size without an explicit ssl_session_ticket_key file directives to automatically rotate SSL session ticket keys, a remote unauthenticated attacker is able to forge client SSL sessions in a non-deterministic manner that is beyond the attacker's control. An attacker could leverage this vulnerability to bypass verification of client certificates. Impact This vulnerability can lead to the exposure of resources or functionality to unintended actors, possibly providing attackers with access to sensitive information. There is no control plane exposure; this is a data plane issue only. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.","display_title":"Security issue reported in Software component","display_summary":"When NGINX Plus or NGINX Open Source is configured with sslsessioncache","display_reference":"CVE-2026-97629","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97629","source_title":"Description When NGINX Plus or NGINX Open Source is configured with ssl_session_cache shared:name:size without an explicit ssl_session_ticket_key file directives to automatically rotate SSL session ticket keys, a remote unauthenticated attacker is able to forge client SSL sessions in a non-deterministic manner that is beyond the attacker's control. An attacker could leverage this vulnerability to bypass verification of client certificates. Impact This vulnerability can lead to the exposure of resources or functionality to unintended actors, possibly providing attackers with access to sensitive information. There is no control plane exposure; this is a data plane issue only. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T18:14:27.084Z","source_hash":"content-fingerprint:fnv1a-80b54512","affected_system":{"organization":"Description When NGINX Plus or NGINX Open Source is configured with sslsessioncache shared project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-97629-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Description When NGINX Plus or NGINX Open Source is configured with ssl_session_cache shared:name:size without an explicit ssl_session_ticket_key file directives to automatically rotate SSL session ticket keys, a remote unauthenticated attacker is able to forge client SSL sessions in a non-deterministic manner that is beyond the attacker's control. An attacker could leverage this vulnerability to bypass verification of client certificates. Impact This vulnerability can lead to the exposure of resources or functionality to unintended actors, possibly providing attackers with access to sensitive information. There is no control plane exposure; this is a data plane issue only. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.","source_quote_or_pointer":"Security Advisory CVE-2026-97629","fact_id":"SEA-CVE-2026-97629-F1","document_citation":"Security Advisory CVE-2026-97629"},{"id":"SEA-CVE-2026-97629-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"When NGINX Plus or NGINX Open Source is configured with sslsessioncache","source_quote_or_pointer":"Advisory description (CVE-2026-97629)","fact_id":"SEA-CVE-2026-97629-F2","document_citation":"Advisory description (CVE-2026-97629)"}],"source_stated_contributors":["When NGINX Plus or NGINX Open Source is configured with sslsessioncache"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-97629","reporting_entity":"CVE-2026-97629","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-97629-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-97629-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-97629"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-96615","title":"Description NGINX Gateway Fabric has a vulnerability when it is configured with Gateway Custom Resource Definition (CRD) and have an authenticated gRPC connection with NGINX Agent. A namespaced authenticated attacker with access to a service account may impersonate the authenticated NGINX Agent gRPC connection to read TLS private keys of Gateway deployments in another namespace. Impact A remote authenticated attacker may be able to read TLS private keys of Gateway deployments in another namespace. There is no data plane exposure; this is a control plane issue only. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.","display_title":"Security issue reported in Software component","display_summary":"NGINX Gateway Fabric has a vulnerability when it is configured with Gateway","display_reference":"CVE-2026-96615","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-96615","source_title":"Description NGINX Gateway Fabric has a vulnerability when it is configured with Gateway Custom Resource Definition (CRD) and have an authenticated gRPC connection with NGINX Agent. A namespaced authenticated attacker with access to a service account may impersonate the authenticated NGINX Agent gRPC connection to read TLS private keys of Gateway deployments in another namespace. Impact A remote authenticated attacker may be able to read TLS private keys of Gateway deployments in another namespace. There is no data plane exposure; this is a control plane issue only. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T18:14:27.087Z","source_hash":"content-fingerprint:fnv1a-19a4698c","affected_system":{"organization":"Description NGINX Gateway Fabric has a vulnerability when it is configured with Gateway Custom Resource Definition (CRD) and have an authenticated gRPC connection with NGINX Agent. A namespaced authenticated attacker with access to a service account may impersonate the authenticated NGINX Agent gRPC connection to read TLS private keys of Gateway deployments in another namespace. Impact A remote authenticated attacker may be able to read TLS private keys of Gateway deployments in another namespace. There is no data plane exposure; this is a control plane issue only. Note project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-96615-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Description NGINX Gateway Fabric has a vulnerability when it is configured with Gateway Custom Resource Definition (CRD) and have an authenticated gRPC connection with NGINX Agent. A namespaced authenticated attacker with access to a service account may impersonate the authenticated NGINX Agent gRPC connection to read TLS private keys of Gateway deployments in another namespace. Impact A remote authenticated attacker may be able to read TLS private keys of Gateway deployments in another namespace. There is no data plane exposure; this is a control plane issue only. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.","source_quote_or_pointer":"Security Advisory CVE-2026-96615","fact_id":"SEA-CVE-2026-96615-F1","document_citation":"Security Advisory CVE-2026-96615"},{"id":"SEA-CVE-2026-96615-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"NGINX Gateway Fabric has a vulnerability when it is configured with Gateway","source_quote_or_pointer":"Advisory description (CVE-2026-96615)","fact_id":"SEA-CVE-2026-96615-F2","document_citation":"Advisory description (CVE-2026-96615)"}],"source_stated_contributors":["NGINX Gateway Fabric has a vulnerability when it is configured with Gateway"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.credentials_secrets","arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-010"],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-96615","reporting_entity":"CVE-2026-96615","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-96615-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-96615-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-96615"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-95816","title":"The Smart Forms – when you need more than just a contact form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'formString' parameter in all versions up to, and including, 2.6.104 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The nonce check protecting the rednao_smart_forms_save_form_values AJAX handler is only enforced when the smart_forms_block_anonymous_submissions option is enabled, meaning default installations require no authentication or nonce verification whatsoever to submit and store malicious payloads.","display_title":"Software component issue could run attacker-controlled scripts in a browser","display_summary":"The Smart Forms – when you need more than just a contact form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'formString' parameter in all versions up to, and including, 2.6.104 due to…","display_reference":"CVE-2026-95816","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95816","source_title":"The Smart Forms – when you need more than just a contact form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'formString' parameter in all versions up to, and including, 2.6.104 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The nonce check protecting the rednao_smart_forms_save_form_values AJAX handler is only enforced when the smart_forms_block_anonymous_submissions option is enabled, meaning default installations require no authentication or nonce verification whatsoever to submit and store malicious payloads.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T18:14:27.088Z","source_hash":"content-fingerprint:fnv1a-bf9f2712","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-95816-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Smart Forms – when you need more than just a contact form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'formString' parameter in all versions up to, and including, 2.6.104 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The nonce check protecting the rednao_smart_forms_save_form_values AJAX handler is only enforced when the smart_forms_block_anonymous_submissions option is enabled, meaning default installations require no authentication or nonce verification whatsoever to submit and store malicious payloads.","source_quote_or_pointer":"Security Advisory CVE-2026-95816","fact_id":"SEA-CVE-2026-95816-F1","document_citation":"Security Advisory CVE-2026-95816"},{"id":"SEA-CVE-2026-95816-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Smart Forms – when you need more than just a contact form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'formString' parameter in all versions up to, and including, 2.6.104 due to insufficient input sanitization and output escaping.","source_quote_or_pointer":"Advisory description (CVE-2026-95816)","fact_id":"SEA-CVE-2026-95816-F2","document_citation":"Advisory description (CVE-2026-95816)"}],"source_stated_contributors":["The Smart Forms – when you need more than just a contact form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'formString' parameter in all versions up to, and including, 2.6.104 due to insufficient input sanitization and output escaping."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-95816","reporting_entity":"CVE-2026-95816","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-95816-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-95816-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-95816"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-94197","title":"An authentication and authorization bypass vulnerability exists in F5 NGINX Kubernetes Ingress Controller (NIC) when configured with the ExternalAuth policy or Ingress external authentication. Client-supplied X-Forwarded-Prefix, X-Forwarded-URI, X-Original-URI, and X-Forwarded-Method routing and method headers are forwarded unsanitized into the internal authentication subrequest (handled by the NGINX auth_request directive). As a result, an unauthenticated, remote attacker may spoof request attributes evaluated by the external authentication provider. Impact: This vulnerability may allow remote attackers unauthenticated access to protected paths. There is no control plane exposure; this is a data plane issue only. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.","display_title":"Software component issue could allow unauthorized access","display_summary":"An authentication and authorization bypass vulnerability exists in F5 NGINX Kubernetes Ingress Controller (NIC) when configured with the ExternalAuth policy or Ingress external authentication.","display_reference":"CVE-2026-94197","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-94197","source_title":"An authentication and authorization bypass vulnerability exists in F5 NGINX Kubernetes Ingress Controller (NIC) when configured with the ExternalAuth policy or Ingress external authentication. Client-supplied X-Forwarded-Prefix, X-Forwarded-URI, X-Original-URI, and X-Forwarded-Method routing and method headers are forwarded unsanitized into the internal authentication subrequest (handled by the NGINX auth_request directive). As a result, an unauthenticated, remote attacker may spoof request attributes evaluated by the external authentication provider. Impact: This vulnerability may allow remote attackers unauthenticated access to protected paths. There is no control plane exposure; this is a data plane issue only. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T18:14:27.089Z","source_hash":"content-fingerprint:fnv1a-6c70ee69","affected_system":{"organization":"An authentication and authorization bypass vulnerability exists in F5 NGINX Kubernetes Ingress Controller (NIC) when configured with the ExternalAuth policy or Ingress external authentication. Client-supplied X-Forwarded-Prefix, X-Forwarded-URI, X-Original-URI, and X-Forwarded-Method routing and method headers are forwarded unsanitized into the internal authentication subrequest (handled by the NGINX authrequest directive). As a result, an unauthenticated, remote attacker may spoof request attributes evaluated by the external authentication provider. Impact project","product":"Software component","system_type":"Cloud & container infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-94197-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"An authentication and authorization bypass vulnerability exists in F5 NGINX Kubernetes Ingress Controller (NIC) when configured with the ExternalAuth policy or Ingress external authentication. Client-supplied X-Forwarded-Prefix, X-Forwarded-URI, X-Original-URI, and X-Forwarded-Method routing and method headers are forwarded unsanitized into the internal authentication subrequest (handled by the NGINX auth_request directive). As a result, an unauthenticated, remote attacker may spoof request attributes evaluated by the external authentication provider. Impact: This vulnerability may allow remote attackers unauthenticated access to protected paths. There is no control plane exposure; this is a data plane issue only. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.","source_quote_or_pointer":"Security Advisory CVE-2026-94197","fact_id":"SEA-CVE-2026-94197-F1","document_citation":"Security Advisory CVE-2026-94197"},{"id":"SEA-CVE-2026-94197-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"An authentication and authorization bypass vulnerability exists in F5 NGINX Kubernetes Ingress Controller (NIC) when configured with the ExternalAuth policy or Ingress external authentication.","source_quote_or_pointer":"Advisory description (CVE-2026-94197)","fact_id":"SEA-CVE-2026-94197-F2","document_citation":"Advisory description (CVE-2026-94197)"}],"source_stated_contributors":["An authentication and authorization bypass vulnerability exists in F5 NGINX Kubernetes Ingress Controller (NIC) when configured with the ExternalAuth policy or Ingress external authentication."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.infrastructure_modification"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-94197","reporting_entity":"CVE-2026-94197","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-94197-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-94197-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-94197"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-93885","title":"The Cryptocurrency Donation Box – Bitcoin & Crypto Donations plugin for WordPress is vulnerable to Stored Cross-Site Scripting via data_object Parameter in all versions up to, and including, 2.2.13 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This is exploitable by unauthenticated attackers because the cdbbc_payment_verify AJAX action is registered under wp_ajax_nopriv_ and its only authentication gate — a nonce check — is bypassable, as the cdbbc_donation_box nonce is publicly exposed to anonymous visitors via the wallets_data JavaScript object emitted by the [crypto-donation-box] shortcode.","display_title":"Software component issue could run attacker-controlled scripts in a browser","display_summary":"The Cryptocurrency Donation Box – Bitcoin & Crypto Donations plugin for WordPress is vulnerable to Stored Cross-Site Scripting via dataobject Parameter in all versions up to, and including, 2.2.13 due to insufficient…","display_reference":"CVE-2026-93885","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93885","source_title":"The Cryptocurrency Donation Box – Bitcoin & Crypto Donations plugin for WordPress is vulnerable to Stored Cross-Site Scripting via data_object Parameter in all versions up to, and including, 2.2.13 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This is exploitable by unauthenticated attackers because the cdbbc_payment_verify AJAX action is registered under wp_ajax_nopriv_ and its only authentication gate — a nonce check — is bypassable, as the cdbbc_donation_box nonce is publicly exposed to anonymous visitors via the wallets_data JavaScript object emitted by the [crypto-donation-box] shortcode.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T18:14:27.090Z","source_hash":"content-fingerprint:fnv1a-9b59d0ce","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-93885-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Cryptocurrency Donation Box – Bitcoin & Crypto Donations plugin for WordPress is vulnerable to Stored Cross-Site Scripting via data_object Parameter in all versions up to, and including, 2.2.13 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This is exploitable by unauthenticated attackers because the cdbbc_payment_verify AJAX action is registered under wp_ajax_nopriv_ and its only authentication gate — a nonce check — is bypassable, as the cdbbc_donation_box nonce is publicly exposed to anonymous visitors via the wallets_data JavaScript object emitted by the [crypto-donation-box] shortcode.","source_quote_or_pointer":"Security Advisory CVE-2026-93885","fact_id":"SEA-CVE-2026-93885-F1","document_citation":"Security Advisory CVE-2026-93885"},{"id":"SEA-CVE-2026-93885-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Cryptocurrency Donation Box – Bitcoin & Crypto Donations plugin for WordPress is vulnerable to Stored Cross-Site Scripting via dataobject Parameter in all versions up to, and including, 2.2.13 due to insufficient input sanitization and output escaping.","source_quote_or_pointer":"Advisory description (CVE-2026-93885)","fact_id":"SEA-CVE-2026-93885-F2","document_citation":"Advisory description (CVE-2026-93885)"}],"source_stated_contributors":["The Cryptocurrency Donation Box – Bitcoin & Crypto Donations plugin for WordPress is vulnerable to Stored Cross-Site Scripting via dataobject Parameter in all versions up to, and including, 2.2.13 due to insufficient input sanitization and output escaping."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.financial_action","data.pii","data.financial_records"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-93885","reporting_entity":"CVE-2026-93885","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-93885-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-93885-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-93885"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-92097","title":"The Click to Chat for WhatsApp plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in versions up to, and including, 4.44 This is due to the greetings_dialog() function building the {url} template placeholder from a sanitize_text_field()-filtered $_SERVER['REQUEST_URI'] on archive pages and then passing the substituted greeting content to do_shortcode() in the greetings-1 and greetings-2 templates, without stripping shortcode delimiters. Because wp_kses() runs against main_content BEFORE the {url} substitution, the attacker-controlled URL bytes reach do_shortcode() unfiltered. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes registered by WordPress core, the active theme, or any other plugin (e.","display_title":"Software component issue could allow unintended commands to run","display_summary":"The Click to Chat for WhatsApp plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in versions up to, and including, 4.44 This is due to the greetingsdialog() function building the {url} template…","display_reference":"CVE-2026-92097","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92097","source_title":"The Click to Chat for WhatsApp plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in versions up to, and including, 4.44 This is due to the greetings_dialog() function building the {url} template placeholder from a sanitize_text_field()-filtered $_SERVER['REQUEST_URI'] on archive pages and then passing the substituted greeting content to do_shortcode() in the greetings-1 and greetings-2 templates, without stripping shortcode delimiters. Because wp_kses() runs against main_content BEFORE the {url} substitution, the attacker-controlled URL bytes reach do_shortcode() unfiltered. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes registered by WordPress core, the active theme, or any other plugin (e.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T18:14:27.091Z","source_hash":"content-fingerprint:fnv1a-c32790e8","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-92097-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Click to Chat for WhatsApp plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in versions up to, and including, 4.44 This is due to the greetings_dialog() function building the {url} template placeholder from a sanitize_text_field()-filtered $_SERVER['REQUEST_URI'] on archive pages and then passing the substituted greeting content to do_shortcode() in the greetings-1 and greetings-2 templates, without stripping shortcode delimiters. Because wp_kses() runs against main_content BEFORE the {url} substitution, the attacker-controlled URL bytes reach do_shortcode() unfiltered. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes registered by WordPress core, the active theme, or any other plugin (e.","source_quote_or_pointer":"Security Advisory CVE-2026-92097","fact_id":"SEA-CVE-2026-92097-F1","document_citation":"Security Advisory CVE-2026-92097"},{"id":"SEA-CVE-2026-92097-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Click to Chat for WhatsApp plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in versions up to, and including, 4.44 This is due to the greetingsdialog() function building the {url} template placeholder from a sanitizetextfield()-filtered $SERVER['REQUESTURI'] on archive pages and then passing the…","source_quote_or_pointer":"Advisory description (CVE-2026-92097)","fact_id":"SEA-CVE-2026-92097-F2","document_citation":"Advisory description (CVE-2026-92097)"}],"source_stated_contributors":["The Click to Chat for WhatsApp plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in versions up to, and including, 4.44 This is due to the greetingsdialog() function building the {url} template placeholder from a sanitizetextfield()-filtered $SERVER['REQUESTURI'] on archive pages and then passing the…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-92097","reporting_entity":"CVE-2026-92097","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-92097-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-92097-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-92097"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-77114","title":"The Document Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'dg_thumber_webhook' Action Request Body in all versions up to, and including, 5.1.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Exploitation requires that logging be enabled in the plugin's Advanced settings, which is only the default state when WP_DEBUG is true; otherwise an administrator must manually enable it.","display_title":"Software component issue could run attacker-controlled scripts in a browser","display_summary":"The Document Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'dgthumberwebhook' Action Request Body in all versions up to, and including, 5.1.1 due to insufficient input sanitization and…","display_reference":"CVE-2026-77114","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-77114","source_title":"The Document Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'dg_thumber_webhook' Action Request Body in all versions up to, and including, 5.1.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Exploitation requires that logging be enabled in the plugin's Advanced settings, which is only the default state when WP_DEBUG is true; otherwise an administrator must manually enable it.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T18:14:27.096Z","source_hash":"content-fingerprint:fnv1a-dd6d27bf","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-77114-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Document Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'dg_thumber_webhook' Action Request Body in all versions up to, and including, 5.1.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Exploitation requires that logging be enabled in the plugin's Advanced settings, which is only the default state when WP_DEBUG is true; otherwise an administrator must manually enable it.","source_quote_or_pointer":"Security Advisory CVE-2026-77114","fact_id":"SEA-CVE-2026-77114-F1","document_citation":"Security Advisory CVE-2026-77114"},{"id":"SEA-CVE-2026-77114-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Document Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'dgthumberwebhook' Action Request Body in all versions up to, and including, 5.1.1 due to insufficient input sanitization and output escaping.","source_quote_or_pointer":"Advisory description (CVE-2026-77114)","fact_id":"SEA-CVE-2026-77114-F2","document_citation":"Advisory description (CVE-2026-77114)"}],"source_stated_contributors":["The Document Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'dgthumberwebhook' Action Request Body in all versions up to, and including, 5.1.1 due to insufficient input sanitization and output escaping."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-77114","reporting_entity":"CVE-2026-77114","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-77114-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-77114-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-77114"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-110284","title":"The LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 10.3.1 via attacker-controlled attributes of the [lifterlms_checkout] shortcode. This is due to the llms_get_template() helper performing extract() on the shortcode attribute array before resolving the template path, which allows the attacker-supplied 'template_name' and 'default_path' shortcode attributes to overwrite the function's local parameters and ultimately control the path passed to a PHP include. This makes it possible for authenticated attackers, with Instructor-level access and above, to include and execute arbitrary files on the server, that can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where files with safe extensions containing attacker-controlled content can be uploaded and included.","display_title":"Software component issue could allow unintended commands to run","display_summary":"The LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 10.3.1 via attacker-controlled attributes of the…","display_reference":"CVE-2026-110284","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110284","source_title":"The LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 10.3.1 via attacker-controlled attributes of the [lifterlms_checkout] shortcode. This is due to the llms_get_template() helper performing extract() on the shortcode attribute array before resolving the template path, which allows the attacker-supplied 'template_name' and 'default_path' shortcode attributes to overwrite the function's local parameters and ultimately control the path passed to a PHP include. This makes it possible for authenticated attackers, with Instructor-level access and above, to include and execute arbitrary files on the server, that can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where files with safe extensions containing attacker-controlled content can be uploaded and included.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T18:14:27.103Z","source_hash":"content-fingerprint:fnv1a-a63dca7","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-110284-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 10.3.1 via attacker-controlled attributes of the [lifterlms_checkout] shortcode. This is due to the llms_get_template() helper performing extract() on the shortcode attribute array before resolving the template path, which allows the attacker-supplied 'template_name' and 'default_path' shortcode attributes to overwrite the function's local parameters and ultimately control the path passed to a PHP include. This makes it possible for authenticated attackers, with Instructor-level access and above, to include and execute arbitrary files on the server, that can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where files with safe extensions containing attacker-controlled content can be uploaded and included.","source_quote_or_pointer":"Security Advisory CVE-2026-110284","fact_id":"SEA-CVE-2026-110284-F1","document_citation":"Security Advisory CVE-2026-110284"},{"id":"SEA-CVE-2026-110284-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 10.3.1 via attacker-controlled attributes of the [lifterlmscheckout] shortcode.","source_quote_or_pointer":"Advisory description (CVE-2026-110284)","fact_id":"SEA-CVE-2026-110284-F2","document_citation":"Advisory description (CVE-2026-110284)"}],"source_stated_contributors":["The LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 10.3.1 via attacker-controlled attributes of the [lifterlmscheckout] shortcode."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-110284","reporting_entity":"CVE-2026-110284","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-110284-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-110284-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-110284"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-110002","title":"The Snazzy Social Media Feed plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.5 via the (file scope) function. This is due to missing WordPress bootstrap, authentication, capability, and nonce checks in the standalone save-to-cache.php script, combined with insufficient sanitization of the pluginURL parameter before it is written to a web-executable PHP file. This makes it possible for authenticated attackers, with subscriber-level access and above, to upload files that may be executable, which makes remote code execution possible. The save-to-cache.php script is directly reachable without loading WordPress; FILTER_SANITIZE_URL — the only filter applied to the pluginURL value — preserves the characters required to craft a valid PHP payload, which is then written verbatim into cached-content/cached-feed.php and immediately executable via a single GET request.","display_title":"Software component issue could allow unintended commands to run","display_summary":"The Snazzy Social Media Feed plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.5 via the (file scope) function.","display_reference":"CVE-2026-110002","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110002","source_title":"The Snazzy Social Media Feed plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.5 via the (file scope) function. This is due to missing WordPress bootstrap, authentication, capability, and nonce checks in the standalone save-to-cache.php script, combined with insufficient sanitization of the pluginURL parameter before it is written to a web-executable PHP file. This makes it possible for authenticated attackers, with subscriber-level access and above, to upload files that may be executable, which makes remote code execution possible. The save-to-cache.php script is directly reachable without loading WordPress; FILTER_SANITIZE_URL — the only filter applied to the pluginURL value — preserves the characters required to craft a valid PHP payload, which is then written verbatim into cached-content/cached-feed.php and immediately executable via a single GET request.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T18:14:27.104Z","source_hash":"content-fingerprint:fnv1a-5ee67007","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-110002-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Snazzy Social Media Feed plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.5 via the (file scope) function. This is due to missing WordPress bootstrap, authentication, capability, and nonce checks in the standalone save-to-cache.php script, combined with insufficient sanitization of the pluginURL parameter before it is written to a web-executable PHP file. This makes it possible for authenticated attackers, with subscriber-level access and above, to upload files that may be executable, which makes remote code execution possible. The save-to-cache.php script is directly reachable without loading WordPress; FILTER_SANITIZE_URL — the only filter applied to the pluginURL value — preserves the characters required to craft a valid PHP payload, which is then written verbatim into cached-content/cached-feed.php and immediately executable via a single GET request.","source_quote_or_pointer":"Security Advisory CVE-2026-110002","fact_id":"SEA-CVE-2026-110002-F1","document_citation":"Security Advisory CVE-2026-110002"},{"id":"SEA-CVE-2026-110002-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Snazzy Social Media Feed plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.5 via the (file scope) function. This is due to missing WordPress bootstrap, authentication, capability, and nonce checks in the standalone save-to-cache.php script, combined with…","source_quote_or_pointer":"Advisory description (CVE-2026-110002)","fact_id":"SEA-CVE-2026-110002-F2","document_citation":"Advisory description (CVE-2026-110002)"}],"source_stated_contributors":["The Snazzy Social Media Feed plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.5 via the (file scope) function. This is due to missing WordPress bootstrap, authentication, capability, and nonce checks in the standalone save-to-cache.php script, combined with…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","auth.public_publication","data.uploaded_files","arch.caching"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-110002","reporting_entity":"CVE-2026-110002","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-110002-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-110002-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-110002"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108151","title":"Improper Control of Generation of Code ('Code Injection') vulnerability in PluginUs.Net MDTF wp-meta-data-filter-and-taxonomy-filter allows Code Injection.This issue affects MDTF: from n/a through 1.3.9.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-108151","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108151","source_title":"Improper Control of Generation of Code ('Code Injection') vulnerability in PluginUs.Net MDTF wp-meta-data-filter-and-taxonomy-filter allows Code Injection.This issue affects MDTF: from n/a through 1.3.9.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T18:14:27.106Z","source_hash":"content-fingerprint:fnv1a-94c5ad3f","affected_system":{"organization":"Improper Control of Generation of Code ('Code Injection') vulnerability in PluginUs.Net MDTF wp-meta-data-filter-and-taxonomy-filter allows Code Injection.This issue affects MDTF project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108151-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Improper Control of Generation of Code ('Code Injection') vulnerability in PluginUs.Net MDTF wp-meta-data-filter-and-taxonomy-filter allows Code Injection.This issue affects MDTF: from n/a through 1.3.9.","source_quote_or_pointer":"Security Advisory CVE-2026-108151","fact_id":"SEA-CVE-2026-108151-F1","document_citation":"Security Advisory CVE-2026-108151"},{"id":"SEA-CVE-2026-108151-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Improper Control of Generation of Code ('Code Injection') vulnerability in PluginUs.Net MDTF wp-meta-data-filter-and-taxonomy-filter allows Code Injection.This issue affects MDTF: from n/a through 1.3.9.","source_quote_or_pointer":"Advisory description (CVE-2026-108151)","fact_id":"SEA-CVE-2026-108151-F2","document_citation":"Advisory description (CVE-2026-108151)"}],"source_stated_contributors":["Improper Control of Generation of Code ('Code Injection') vulnerability in PluginUs.Net MDTF wp-meta-data-filter-and-taxonomy-filter allows Code Injection.This issue affects MDTF: from n/a through 1.3.9."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108151","reporting_entity":"CVE-2026-108151","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108151-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108151-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-108151"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-107421","title":"Session Fixation vulnerability in VideoWhisper.com Broadcast Live Video videowhisper-live-streaming-integration allows Session Hijacking.This issue affects Broadcast Live Video: from n/a through 7.3.2.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-107421","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107421","source_title":"Session Fixation vulnerability in VideoWhisper.com Broadcast Live Video videowhisper-live-streaming-integration allows Session Hijacking.This issue affects Broadcast Live Video: from n/a through 7.3.2.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T18:14:27.108Z","source_hash":"content-fingerprint:fnv1a-5d920c4c","affected_system":{"organization":"Session Fixation vulnerability in VideoWhisper.com Broadcast Live Video videowhisper-live-streaming-integration allows Session Hijacking.This issue affects Broadcast Live Video project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-107421-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Session Fixation vulnerability in VideoWhisper.com Broadcast Live Video videowhisper-live-streaming-integration allows Session Hijacking.This issue affects Broadcast Live Video: from n/a through 7.3.2.","source_quote_or_pointer":"Security Advisory CVE-2026-107421","fact_id":"SEA-CVE-2026-107421-F1","document_citation":"Security Advisory CVE-2026-107421"},{"id":"SEA-CVE-2026-107421-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Session Fixation vulnerability in VideoWhisper.com Broadcast Live Video videowhisper-live-streaming-integration allows Session Hijacking.This issue affects Broadcast Live Video: from n/a through 7.3.2.","source_quote_or_pointer":"Advisory description (CVE-2026-107421)","fact_id":"SEA-CVE-2026-107421-F2","document_citation":"Advisory description (CVE-2026-107421)"}],"source_stated_contributors":["Session Fixation vulnerability in VideoWhisper.com Broadcast Live Video videowhisper-live-streaming-integration allows Session Hijacking.This issue affects Broadcast Live Video: from n/a through 7.3.2."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["arch.event_driven"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-107421","reporting_entity":"CVE-2026-107421","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-107421-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-107421-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-107421"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-104939","title":"Description NGINX Ingress Controller has a vulnerability when implementing an externalAuth policy for ingress. NGINX Ingress Controller may mishandle the HTTP response from an OAuth IdP and allow an attacker to acquire unauthenticated access to protected paths before the proper external authentication can happen. Impact This vulnerability may allow remote attackers unauthenticated access to protected paths. There is no control plane exposure; this is a data plane issue only. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.","display_title":"Security issue reported in Software component","display_summary":"NGINX Ingress Controller has a vulnerability when implementing an externalAuth policy for ingress. NGINX Ingress Controller may mishandle the HTTP response from an OAuth IdP and allow an attacker to acquire…","display_reference":"CVE-2026-104939","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104939","source_title":"Description NGINX Ingress Controller has a vulnerability when implementing an externalAuth policy for ingress. NGINX Ingress Controller may mishandle the HTTP response from an OAuth IdP and allow an attacker to acquire unauthenticated access to protected paths before the proper external authentication can happen. Impact This vulnerability may allow remote attackers unauthenticated access to protected paths. There is no control plane exposure; this is a data plane issue only. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T18:14:27.109Z","source_hash":"content-fingerprint:fnv1a-dd611f","affected_system":{"organization":"Description NGINX Ingress Controller has a vulnerability when implementing an externalAuth policy for ingress. NGINX Ingress Controller may mishandle the HTTP response from an OAuth IdP and allow an attacker to acquire unauthenticated access to protected paths before the proper external authentication can happen. Impact This vulnerability may allow remote attackers unauthenticated access to protected paths. There is no control plane exposure; this is a data plane issue only. Note project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-104939-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Description NGINX Ingress Controller has a vulnerability when implementing an externalAuth policy for ingress. NGINX Ingress Controller may mishandle the HTTP response from an OAuth IdP and allow an attacker to acquire unauthenticated access to protected paths before the proper external authentication can happen. Impact This vulnerability may allow remote attackers unauthenticated access to protected paths. There is no control plane exposure; this is a data plane issue only. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.","source_quote_or_pointer":"Security Advisory CVE-2026-104939","fact_id":"SEA-CVE-2026-104939-F1","document_citation":"Security Advisory CVE-2026-104939"},{"id":"SEA-CVE-2026-104939-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"NGINX Ingress Controller has a vulnerability when implementing an externalAuth policy for ingress. NGINX Ingress Controller may mishandle the HTTP response from an OAuth IdP and allow an attacker to acquire unauthenticated access to protected paths before the proper external authentication can happen.","source_quote_or_pointer":"Advisory description (CVE-2026-104939)","fact_id":"SEA-CVE-2026-104939-F2","document_citation":"Advisory description (CVE-2026-104939)"}],"source_stated_contributors":["NGINX Ingress Controller has a vulnerability when implementing an externalAuth policy for ingress. NGINX Ingress Controller may mishandle the HTTP response from an OAuth IdP and allow an attacker to acquire unauthenticated access to protected paths before the proper external authentication can happen."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.credentials_secrets"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-104939","reporting_entity":"CVE-2026-104939","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-104939-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-104939-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-104939"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-104800","title":"The AGE-GATE plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.0 via the 'width (and height)' parameter parameter. This is due to missing authentication, capability checks, and nonce verification on the standalone admin.php endpoint, combined with unsanitized injection of POST parameters directly into generated PHP source written to an included file. This makes it possible for unauthenticated attackers to execute code on the server. This is possible because admin.php does not load WordPress and carries no ABSPATH guard, making it a fully unauthenticated entry point regardless of the decorative capability arguments registered via the plugin's simulated menu API.","display_title":"Software component issue could allow unintended commands to run","display_summary":"The AGE-GATE plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.0 via the 'width (and height)' parameter parameter.","display_reference":"CVE-2026-104800","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104800","source_title":"The AGE-GATE plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.0 via the 'width (and height)' parameter parameter. This is due to missing authentication, capability checks, and nonce verification on the standalone admin.php endpoint, combined with unsanitized injection of POST parameters directly into generated PHP source written to an included file. This makes it possible for unauthenticated attackers to execute code on the server. This is possible because admin.php does not load WordPress and carries no ABSPATH guard, making it a fully unauthenticated entry point regardless of the decorative capability arguments registered via the plugin's simulated menu API.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T18:14:27.109Z","source_hash":"content-fingerprint:fnv1a-955703f6","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-104800-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The AGE-GATE plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.0 via the 'width (and height)' parameter parameter. This is due to missing authentication, capability checks, and nonce verification on the standalone admin.php endpoint, combined with unsanitized injection of POST parameters directly into generated PHP source written to an included file. This makes it possible for unauthenticated attackers to execute code on the server. This is possible because admin.php does not load WordPress and carries no ABSPATH guard, making it a fully unauthenticated entry point regardless of the decorative capability arguments registered via the plugin's simulated menu API.","source_quote_or_pointer":"Security Advisory CVE-2026-104800","fact_id":"SEA-CVE-2026-104800-F1","document_citation":"Security Advisory CVE-2026-104800"},{"id":"SEA-CVE-2026-104800-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The AGE-GATE plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.0 via the 'width (and height)' parameter parameter.","source_quote_or_pointer":"Advisory description (CVE-2026-104800)","fact_id":"SEA-CVE-2026-104800-F2","document_citation":"Advisory description (CVE-2026-104800)"}],"source_stated_contributors":["The AGE-GATE plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.0 via the 'width (and height)' parameter parameter."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.code_execution","auth.privileged_action"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-104800","reporting_entity":"CVE-2026-104800","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-104800-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-104800-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-104800"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-104767","title":"The Membership & User Roles for WooCommerce (Automatic Role Changer) plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 20260828. This is due to the maybe_add_role_to_user() function unconditionally re-assigning every role stored in the dfxwcrc_foreign_roles user meta cache without verifying that each cached role is still actively assigned by the external provider — a condition made permanent by remember_foreign_roles(), which merges new foreign roles into the cache but never evicts roles that have since been revoked. This makes it possible for authenticated attackers with subscriber-level access and above to restore a previously revoked Administrator role to their own account, gaining full administrative control of the site, by triggering any role-assignment event such as completing a purchase for a role-mapped product. Exploitation requires Replace Roles mode to be enabled and the attacker's account to have previously received Administrator legitimately through a separate role-management mechanism while the plugin was active, so that administrator was written into the dfxwcrc_foreign_roles user meta cache before the external provider revoked it.","display_title":"Software component issue could grant elevated privileges","display_summary":"The Membership & User Roles for WooCommerce (Automatic Role Changer) plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 20260828.","display_reference":"CVE-2026-104767","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104767","source_title":"The Membership & User Roles for WooCommerce (Automatic Role Changer) plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 20260828. This is due to the maybe_add_role_to_user() function unconditionally re-assigning every role stored in the dfxwcrc_foreign_roles user meta cache without verifying that each cached role is still actively assigned by the external provider — a condition made permanent by remember_foreign_roles(), which merges new foreign roles into the cache but never evicts roles that have since been revoked. This makes it possible for authenticated attackers with subscriber-level access and above to restore a previously revoked Administrator role to their own account, gaining full administrative control of the site, by triggering any role-assignment event such as completing a purchase for a role-mapped product. Exploitation requires Replace Roles mode to be enabled and the attacker's account to have previously received Administrator legitimately through a separate role-management mechanism while the plugin was active, so that administrator was written into the dfxwcrc_foreign_roles user meta cache before the external provider revoked it.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T18:14:27.110Z","source_hash":"content-fingerprint:fnv1a-a1eb510","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-104767-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Membership & User Roles for WooCommerce (Automatic Role Changer) plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 20260828. This is due to the maybe_add_role_to_user() function unconditionally re-assigning every role stored in the dfxwcrc_foreign_roles user meta cache without verifying that each cached role is still actively assigned by the external provider — a condition made permanent by remember_foreign_roles(), which merges new foreign roles into the cache but never evicts roles that have since been revoked. This makes it possible for authenticated attackers with subscriber-level access and above to restore a previously revoked Administrator role to their own account, gaining full administrative control of the site, by triggering any role-assignment event such as completing a purchase for a role-mapped product. Exploitation requires Replace Roles mode to be enabled and the attacker's account to have previously received Administrator legitimately through a separate role-management mechanism while the plugin was active, so that administrator was written into the dfxwcrc_foreign_roles user meta cache before the external provider revoked it.","source_quote_or_pointer":"Security Advisory CVE-2026-104767","fact_id":"SEA-CVE-2026-104767-F1","document_citation":"Security Advisory CVE-2026-104767"},{"id":"SEA-CVE-2026-104767-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Membership & User Roles for WooCommerce (Automatic Role Changer) plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 20260828.","source_quote_or_pointer":"Advisory description (CVE-2026-104767)","fact_id":"SEA-CVE-2026-104767-F2","document_citation":"Advisory description (CVE-2026-104767)"}],"source_stated_contributors":["The Membership & User Roles for WooCommerce (Automatic Role Changer) plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 20260828."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii","arch.caching","arch.event_driven"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Elevated privileges","Boundary bypass"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-104767","reporting_entity":"CVE-2026-104767","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-104767-SG1","label":"Enforce privilege boundaries in code","description":"Require explicit, server-verified authorization for privileged operations and isolate components with separate identities.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-104767-SG1","label":"Enforce privilege boundaries in code","description":"Require explicit, server-verified authorization for privileged operations and isolate components with separate identities.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A low-privilege actor reached a high-privilege capability. Enforce approval and privilege boundaries in deterministic code, not by convention.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-104767"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-104764","title":"The Post Export Import with Media plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.17.1 via deserialization of untrusted input . This makes it possible for authenticated attackers, with administrator-level access and above, to inject a PHP Object. No known POP chain is present in the vulnerable software, which means this vulnerability has no impact unless another plugin or theme containing a POP chain is installed on the site. If a POP chain is present via an additional plugin or theme installed on the target system, it may allow the attacker to perform actions like delete arbitrary files, retrieve sensitive data, or execute code depending on the POP chain present.","display_title":"Software component issue could make the application process unsafe input","display_summary":"The Post Export Import with Media plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.17.1 via deserialization of untrusted input .","display_reference":"CVE-2026-104764","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104764","source_title":"The Post Export Import with Media plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.17.1 via deserialization of untrusted input . This makes it possible for authenticated attackers, with administrator-level access and above, to inject a PHP Object. No known POP chain is present in the vulnerable software, which means this vulnerability has no impact unless another plugin or theme containing a POP chain is installed on the site. If a POP chain is present via an additional plugin or theme installed on the target system, it may allow the attacker to perform actions like delete arbitrary files, retrieve sensitive data, or execute code depending on the POP chain present.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T18:14:27.111Z","source_hash":"content-fingerprint:fnv1a-5d2fa665","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-104764-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Post Export Import with Media plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.17.1 via deserialization of untrusted input . This makes it possible for authenticated attackers, with administrator-level access and above, to inject a PHP Object. No known POP chain is present in the vulnerable software, which means this vulnerability has no impact unless another plugin or theme containing a POP chain is installed on the site. If a POP chain is present via an additional plugin or theme installed on the target system, it may allow the attacker to perform actions like delete arbitrary files, retrieve sensitive data, or execute code depending on the POP chain present.","source_quote_or_pointer":"Security Advisory CVE-2026-104764","fact_id":"SEA-CVE-2026-104764-F1","document_citation":"Security Advisory CVE-2026-104764"},{"id":"SEA-CVE-2026-104764-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Post Export Import with Media plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.17.1 via deserialization of untrusted input . This makes it possible for authenticated attackers, with administrator-level access and above, to inject a PHP Object.","source_quote_or_pointer":"Advisory description (CVE-2026-104764)","fact_id":"SEA-CVE-2026-104764-F2","document_citation":"Advisory description (CVE-2026-104764)"}],"source_stated_contributors":["The Post Export Import with Media plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.17.1 via deserialization of untrusted input . This makes it possible for authenticated attackers, with administrator-level access and above, to inject a PHP Object."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.code_execution","auth.destructive_action","auth.privileged_action","auth.write_action"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unsafe object construction","Possible code execution"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-104764","reporting_entity":"CVE-2026-104764","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-104764-SG1","label":"Use schema-validated data formats","description":"Parse untrusted input into plain data with an explicit schema; never deserialize into arbitrary types.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-104764-SG1","label":"Use schema-validated data formats","description":"Parse untrusted input into plain data with an explicit schema; never deserialize into arbitrary types.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"The application rebuilt objects from untrusted data. Use data-only formats with schema validation instead of native object deserialization.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-104764"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-104748","title":"The SimpleForm – Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.10.0 This is due to the wp_ajax_nopriv_simpleform_wp_register AJAX action lacking any capability check for role assignment and the save_custom_fields_to_user_meta() function using an exclusion list that omits wp_capabilities, combined with get_form_settings() returning a hard-coded defaults array that unconditionally enables meta writing regardless of the supplied form_id. This makes it possible for unauthenticated attackers to create a new Administrator-level WordPress account by supplying wp_capabilities[administrator]=1 alongside standard registration fields. The nonce required by the endpoint is publicly emitted into the front_end_data JavaScript object on every front-end page via wp_enqueue_scripts, making it trivially obtainable by any unauthenticated visitor before submitting the malicious request.","display_title":"Software component issue could grant elevated privileges","display_summary":"The SimpleForm – Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.10.0 This is due to the…","display_reference":"CVE-2026-104748","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104748","source_title":"The SimpleForm – Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.10.0 This is due to the wp_ajax_nopriv_simpleform_wp_register AJAX action lacking any capability check for role assignment and the save_custom_fields_to_user_meta() function using an exclusion list that omits wp_capabilities, combined with get_form_settings() returning a hard-coded defaults array that unconditionally enables meta writing regardless of the supplied form_id. This makes it possible for unauthenticated attackers to create a new Administrator-level WordPress account by supplying wp_capabilities[administrator]=1 alongside standard registration fields. The nonce required by the endpoint is publicly emitted into the front_end_data JavaScript object on every front-end page via wp_enqueue_scripts, making it trivially obtainable by any unauthenticated visitor before submitting the malicious request.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T18:14:27.111Z","source_hash":"content-fingerprint:fnv1a-ea86feeb","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-104748-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The SimpleForm – Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.10.0 This is due to the wp_ajax_nopriv_simpleform_wp_register AJAX action lacking any capability check for role assignment and the save_custom_fields_to_user_meta() function using an exclusion list that omits wp_capabilities, combined with get_form_settings() returning a hard-coded defaults array that unconditionally enables meta writing regardless of the supplied form_id. This makes it possible for unauthenticated attackers to create a new Administrator-level WordPress account by supplying wp_capabilities[administrator]=1 alongside standard registration fields. The nonce required by the endpoint is publicly emitted into the front_end_data JavaScript object on every front-end page via wp_enqueue_scripts, making it trivially obtainable by any unauthenticated visitor before submitting the malicious request.","source_quote_or_pointer":"Security Advisory CVE-2026-104748","fact_id":"SEA-CVE-2026-104748-F1","document_citation":"Security Advisory CVE-2026-104748"},{"id":"SEA-CVE-2026-104748-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The SimpleForm – Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.10.0 This is due to the wpajaxnoprivsimpleformwpregister AJAX action lacking any capability check for role assignment and the…","source_quote_or_pointer":"Advisory description (CVE-2026-104748)","fact_id":"SEA-CVE-2026-104748-F2","document_citation":"Advisory description (CVE-2026-104748)"}],"source_stated_contributors":["The SimpleForm – Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.10.0 This is due to the wpajaxnoprivsimpleformwpregister AJAX action lacking any capability check for role assignment and the…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Elevated privileges","Boundary bypass"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-104748","reporting_entity":"CVE-2026-104748","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-104748-SG1","label":"Enforce privilege boundaries in code","description":"Require explicit, server-verified authorization for privileged operations and isolate components with separate identities.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-104748-SG1","label":"Enforce privilege boundaries in code","description":"Require explicit, server-verified authorization for privileged operations and isolate components with separate identities.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A low-privilege actor reached a high-privilege capability. Enforce approval and privilege boundaries in deterministic code, not by convention.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-104748"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-104141","title":"DataEase is an open source data visualization and analysis tool. Authenticated users with datasource access can supply crafted schema names, connection usernames, table names, or database names to datasource metadata operations, including getSchema, validate, save, and update flows. CalciteProvider inserts these identifiers into metadata queries that are executed through a plain JDBC Statement, allowing the generated SQL to be altered and run against the configured backend with application-held datasource credentials. The issue can compromise the confidentiality, integrity, and availability of the connected database without requiring a victim action.","display_title":"Software component issue could expose accounts or credentials","display_summary":"DataEase is an open source data visualization and analysis tool. Authenticated users with datasource access can supply crafted schema names, connection usernames, table names, or database names to datasource metadata…","display_reference":"CVE-2026-104141","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104141","source_title":"DataEase is an open source data visualization and analysis tool. Authenticated users with datasource access can supply crafted schema names, connection usernames, table names, or database names to datasource metadata operations, including getSchema, validate, save, and update flows. CalciteProvider inserts these identifiers into metadata queries that are executed through a plain JDBC Statement, allowing the generated SQL to be altered and run against the configured backend with application-held datasource credentials. The issue can compromise the confidentiality, integrity, and availability of the connected database without requiring a victim action.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T18:14:27.112Z","source_hash":"content-fingerprint:fnv1a-d27f7e36","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-104141-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"DataEase is an open source data visualization and analysis tool. Authenticated users with datasource access can supply crafted schema names, connection usernames, table names, or database names to datasource metadata operations, including getSchema, validate, save, and update flows. CalciteProvider inserts these identifiers into metadata queries that are executed through a plain JDBC Statement, allowing the generated SQL to be altered and run against the configured backend with application-held datasource credentials. The issue can compromise the confidentiality, integrity, and availability of the connected database without requiring a victim action.","source_quote_or_pointer":"Security Advisory CVE-2026-104141","fact_id":"SEA-CVE-2026-104141-F1","document_citation":"Security Advisory CVE-2026-104141"},{"id":"SEA-CVE-2026-104141-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"DataEase is an open source data visualization and analysis tool. Authenticated users with datasource access can supply crafted schema names, connection usernames, table names, or database names to datasource metadata operations, including getSchema, validate, save, and update flows.","source_quote_or_pointer":"Advisory description (CVE-2026-104141)","fact_id":"SEA-CVE-2026-104141-F2","document_citation":"Advisory description (CVE-2026-104141)"}],"source_stated_contributors":["DataEase is an open source data visualization and analysis tool. Authenticated users with datasource access can supply crafted schema names, connection usernames, table names, or database names to datasource metadata operations, including getSchema, validate, save, and update flows."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-104141","reporting_entity":"CVE-2026-104141","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-104141-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-104141-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-104141"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-103380","title":"The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.7.3 via the 'params[customer][first_name]' parameter. This makes it possible for authenticated attackers, with subscriber-level access and above, to extract privileged booking data including the administrator-only admin_notes field, assigned agent internal contact details, transaction tokens, and payment request URLs delivered via rendered notification emails. A LatePoint customer can exploit this by storing a template placeholder such as {{customer_admin_notes}} in their own first_name field via the customer_cabinet__update route, then triggering the password-reset email flow to receive the expanded value in the resulting notification.","display_title":"Security issue reported in Software component","display_summary":"The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.7.3 via the…","display_reference":"CVE-2026-103380","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103380","source_title":"The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.7.3 via the 'params[customer][first_name]' parameter. This makes it possible for authenticated attackers, with subscriber-level access and above, to extract privileged booking data including the administrator-only admin_notes field, assigned agent internal contact details, transaction tokens, and payment request URLs delivered via rendered notification emails. A LatePoint customer can exploit this by storing a template placeholder such as {{customer_admin_notes}} in their own first_name field via the customer_cabinet__update route, then triggering the password-reset email flow to receive the expanded value in the resulting notification.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T18:14:27.113Z","source_hash":"content-fingerprint:fnv1a-e56f2722","affected_system":{"organization":"Software component project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-103380-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.7.3 via the 'params[customer][first_name]' parameter. This makes it possible for authenticated attackers, with subscriber-level access and above, to extract privileged booking data including the administrator-only admin_notes field, assigned agent internal contact details, transaction tokens, and payment request URLs delivered via rendered notification emails. A LatePoint customer can exploit this by storing a template placeholder such as {{customer_admin_notes}} in their own first_name field via the customer_cabinet__update route, then triggering the password-reset email flow to receive the expanded value in the resulting notification.","source_quote_or_pointer":"Security Advisory CVE-2026-103380","fact_id":"SEA-CVE-2026-103380-F1","document_citation":"Security Advisory CVE-2026-103380"},{"id":"SEA-CVE-2026-103380-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.7.3 via the 'params[customer][firstname]' parameter.","source_quote_or_pointer":"Advisory description (CVE-2026-103380)","fact_id":"SEA-CVE-2026-103380-F2","document_citation":"Advisory description (CVE-2026-103380)"}],"source_stated_contributors":["The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.7.3 via the 'params[customer][firstname]' parameter."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.financial_action","auth.privileged_action","auth.write_action","data.pii","data.credentials_secrets","arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-012","SEA-FM-010"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-103380","reporting_entity":"CVE-2026-103380","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-103380-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-103380-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-103380"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-103366","title":"The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 5.7.3 via the booking[id] and cart[id] parameters on the steps__reload_booking_form_summary_panel and steps__start public routes (reachable through wp_ajax_nopriv_latepoint_route_call). This is due to OsStepsHelper::set_required_objects() feeding raw request parameters into set_booking_object() and set_cart_object(), which call OsModel::set_data() and load an arbitrary booking or cart row by primary key with no ownership check — the ownership guard the vendor added for the earlier disclosure lives only inside OsStepsHelper::load_step() and does not cover the sibling routes or cart[id] at all. This makes it possible for unauthenticated attackers to enumerate sequential booking / cart identifiers and read other customers' appointment details (service name, agent, date/time, duration, price breakdown, status) and other shoppers' pending checkout contents directly from the JSON responses.","display_title":"Security issue reported in Software component","display_summary":"The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 5.7.3 via the booking[id] and…","display_reference":"CVE-2026-103366","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103366","source_title":"The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 5.7.3 via the booking[id] and cart[id] parameters on the steps__reload_booking_form_summary_panel and steps__start public routes (reachable through wp_ajax_nopriv_latepoint_route_call). This is due to OsStepsHelper::set_required_objects() feeding raw request parameters into set_booking_object() and set_cart_object(), which call OsModel::set_data() and load an arbitrary booking or cart row by primary key with no ownership check — the ownership guard the vendor added for the earlier disclosure lives only inside OsStepsHelper::load_step() and does not cover the sibling routes or cart[id] at all. This makes it possible for unauthenticated attackers to enumerate sequential booking / cart identifiers and read other customers' appointment details (service name, agent, date/time, duration, price breakdown, status) and other shoppers' pending checkout contents directly from the JSON responses.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T18:14:27.114Z","source_hash":"content-fingerprint:fnv1a-c3d356fc","affected_system":{"organization":"The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 5.7.3 via the booking[id] and cart[id] parameters on the stepsreloadbookingformsummarypanel and stepsstart public routes (reachable through wpajaxnoprivlatepointroutecall). This is due to OsStepsHelper project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-103366-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 5.7.3 via the booking[id] and cart[id] parameters on the steps__reload_booking_form_summary_panel and steps__start public routes (reachable through wp_ajax_nopriv_latepoint_route_call). This is due to OsStepsHelper::set_required_objects() feeding raw request parameters into set_booking_object() and set_cart_object(), which call OsModel::set_data() and load an arbitrary booking or cart row by primary key with no ownership check — the ownership guard the vendor added for the earlier disclosure lives only inside OsStepsHelper::load_step() and does not cover the sibling routes or cart[id] at all. This makes it possible for unauthenticated attackers to enumerate sequential booking / cart identifiers and read other customers' appointment details (service name, agent, date/time, duration, price breakdown, status) and other shoppers' pending checkout contents directly from the JSON responses.","source_quote_or_pointer":"Security Advisory CVE-2026-103366","fact_id":"SEA-CVE-2026-103366-F1","document_citation":"Security Advisory CVE-2026-103366"},{"id":"SEA-CVE-2026-103366-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 5.7.3 via the booking[id] and cart[id] parameters on the stepsreloadbookingformsummarypanel and stepsstart public routes (reachable…","source_quote_or_pointer":"Advisory description (CVE-2026-103366)","fact_id":"SEA-CVE-2026-103366-F2","document_citation":"Advisory description (CVE-2026-103366)"}],"source_stated_contributors":["The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 5.7.3 via the booking[id] and cart[id] parameters on the stepsreloadbookingformsummarypanel and stepsstart public routes (reachable…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.financial_action","auth.public_publication","data.pii","arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-010"],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-103366","reporting_entity":"CVE-2026-103366","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-103366-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-103366-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-103366"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-102986","title":"Plane is an open-source project management tool. In 1.3.1 and earlier, EntityAssetEndpoint at the public project asset endpoint /api/public/assets/v2/anchor/{anchor}/ requires authentication for write operations but does not verify workspace or project membership. An authenticated user who knows a published project's public DeployBoard.anchor can create FileAsset records in that project and soft-delete existing assets by identifier, allowing cross-workspace file injection, storage abuse, and data loss. The issue is fixed in version 1.4.0.","display_title":"Security issue reported in Software component","display_summary":"Plane is an open-source project management tool. In 1.3.1 and earlier, EntityAssetEndpoint at the public project asset endpoint /api/public/assets/v2/anchor/{anchor}/ requires authentication for write operations but does…","display_reference":"CVE-2026-102986","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-102986","source_title":"Plane is an open-source project management tool. In 1.3.1 and earlier, EntityAssetEndpoint at the public project asset endpoint /api/public/assets/v2/anchor/{anchor}/ requires authentication for write operations but does not verify workspace or project membership. An authenticated user who knows a published project's public DeployBoard.anchor can create FileAsset records in that project and soft-delete existing assets by identifier, allowing cross-workspace file injection, storage abuse, and data loss. The issue is fixed in version 1.4.0.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T18:14:27.114Z","source_hash":"content-fingerprint:fnv1a-90dc55","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-102986-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Plane is an open-source project management tool. In 1.3.1 and earlier, EntityAssetEndpoint at the public project asset endpoint /api/public/assets/v2/anchor/{anchor}/ requires authentication for write operations but does not verify workspace or project membership. An authenticated user who knows a published project's public DeployBoard.anchor can create FileAsset records in that project and soft-delete existing assets by identifier, allowing cross-workspace file injection, storage abuse, and data loss. The issue is fixed in version 1.4.0.","source_quote_or_pointer":"Security Advisory CVE-2026-102986","fact_id":"SEA-CVE-2026-102986-F1","document_citation":"Security Advisory CVE-2026-102986"},{"id":"SEA-CVE-2026-102986-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Plane is an open-source project management tool. In 1.3.1 and earlier, EntityAssetEndpoint at the public project asset endpoint /api/public/assets/v2/anchor/{anchor}/ requires authentication for write operations but does not verify workspace or project membership.","source_quote_or_pointer":"Advisory description (CVE-2026-102986)","fact_id":"SEA-CVE-2026-102986-F2","document_citation":"Advisory description (CVE-2026-102986)"}],"source_stated_contributors":["Plane is an open-source project management tool. In 1.3.1 and earlier, EntityAssetEndpoint at the public project asset endpoint /api/public/assets/v2/anchor/{anchor}/ requires authentication for write operations but does not verify workspace or project membership."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.write_action","auth.public_publication","data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-102986","reporting_entity":"CVE-2026-102986","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-102986-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-102986-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-102986"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-102354","title":"BentoPDF is a privacy-focused PDF toolkit that runs in the browser. In versions through 2.8.6, cloudflare/cors-proxy-worker.js performs a DNS-over-HTTPS safety check in hostnameResolvesToPrivate(), as used by isValidCertificateUrl() and isValidTsaUrl(), separately from the outbound fetch(targetUrl, ...). In deployments where PROXY_SECRET validation is not enabled, a direct client that controls authoritative DNS can forge the Origin header, supply a certificate, OCSP, CRL, or TSA URL that passes the proxy's accepted path checks, return a public address during validation, and return a private or link-local address during the later fetch. The endpoint can return allowed response bodies to the attacker, but exploitation requires precise timing, redirects and IP-literal obfuscation are blocked, and network reachability limits the target. This vulnerability is fixed in 2.8.7.","display_title":"Software component issue could expose accounts or credentials","display_summary":"BentoPDF is a privacy-focused PDF toolkit that runs in the browser. In versions through 2.8.6, cloudflare/cors-proxy-worker.js performs a DNS-over-HTTPS safety check in hostnameResolvesToPrivate(), as used by…","display_reference":"CVE-2026-102354","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-102354","source_title":"BentoPDF is a privacy-focused PDF toolkit that runs in the browser. In versions through 2.8.6, cloudflare/cors-proxy-worker.js performs a DNS-over-HTTPS safety check in hostnameResolvesToPrivate(), as used by isValidCertificateUrl() and isValidTsaUrl(), separately from the outbound fetch(targetUrl, ...). In deployments where PROXY_SECRET validation is not enabled, a direct client that controls authoritative DNS can forge the Origin header, supply a certificate, OCSP, CRL, or TSA URL that passes the proxy's accepted path checks, return a public address during validation, and return a private or link-local address during the later fetch. The endpoint can return allowed response bodies to the attacker, but exploitation requires precise timing, redirects and IP-literal obfuscation are blocked, and network reachability limits the target. This vulnerability is fixed in 2.8.7.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T18:14:27.115Z","source_hash":"content-fingerprint:fnv1a-eb7ac980","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-102354-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"BentoPDF is a privacy-focused PDF toolkit that runs in the browser. In versions through 2.8.6, cloudflare/cors-proxy-worker.js performs a DNS-over-HTTPS safety check in hostnameResolvesToPrivate(), as used by isValidCertificateUrl() and isValidTsaUrl(), separately from the outbound fetch(targetUrl, ...). In deployments where PROXY_SECRET validation is not enabled, a direct client that controls authoritative DNS can forge the Origin header, supply a certificate, OCSP, CRL, or TSA URL that passes the proxy's accepted path checks, return a public address during validation, and return a private or link-local address during the later fetch. The endpoint can return allowed response bodies to the attacker, but exploitation requires precise timing, redirects and IP-literal obfuscation are blocked, and network reachability limits the target. This vulnerability is fixed in 2.8.7.","source_quote_or_pointer":"Security Advisory CVE-2026-102354","fact_id":"SEA-CVE-2026-102354-F1","document_citation":"Security Advisory CVE-2026-102354"},{"id":"SEA-CVE-2026-102354-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"BentoPDF is a privacy-focused PDF toolkit that runs in the browser. In versions through 2.8.6, cloudflare/cors-proxy-worker.js performs a DNS-over-HTTPS safety check in hostnameResolvesToPrivate(), as used by isValidCertificateUrl() and isValidTsaUrl(), separately from the outbound fetch(targetUrl, ...).","source_quote_or_pointer":"Advisory description (CVE-2026-102354)","fact_id":"SEA-CVE-2026-102354-F2","document_citation":"Advisory description (CVE-2026-102354)"}],"source_stated_contributors":["BentoPDF is a privacy-focused PDF toolkit that runs in the browser. In versions through 2.8.6, cloudflare/cors-proxy-worker.js performs a DNS-over-HTTPS safety check in hostnameResolvesToPrivate(), as used by isValidCertificateUrl() and isValidTsaUrl(), separately from the outbound fetch(targetUrl, ...)."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.infrastructure_modification","auth.public_publication","data.uploaded_files","arch.async_job"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-102354","reporting_entity":"CVE-2026-102354","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-102354-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-102354-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-102354"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-102251","title":"The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to generic SQL Injection via the 'validate' parameter in all versions up to, and including, 10.8.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. AES-CTR is a malleable stream cipher, so an attacker who obtains one legitimate token by abandoning a cart with an email address they control can recover the keystream and forge a ciphertext carrying arbitrary SQL. The HMAC check added in 10.4.1 is enforced only when the wcap_nonce parameter is present, so omitting the parameter skips it entirely.","display_title":"Software component issue could expose or alter stored data","display_summary":"The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to generic SQL Injection via the 'validate' parameter in all versions up to, and including, 10.8.0 due to insufficient escaping on the user…","display_reference":"CVE-2026-102251","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-102251","source_title":"The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to generic SQL Injection via the 'validate' parameter in all versions up to, and including, 10.8.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. AES-CTR is a malleable stream cipher, so an attacker who obtains one legitimate token by abandoning a cart with an email address they control can recover the keystream and forge a ciphertext carrying arbitrary SQL. The HMAC check added in 10.4.1 is enforced only when the wcap_nonce parameter is present, so omitting the parameter skips it entirely.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T18:14:27.116Z","source_hash":"content-fingerprint:fnv1a-4e6736ee","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-102251-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to generic SQL Injection via the 'validate' parameter in all versions up to, and including, 10.8.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. AES-CTR is a malleable stream cipher, so an attacker who obtains one legitimate token by abandoning a cart with an email address they control can recover the keystream and forge a ciphertext carrying arbitrary SQL. The HMAC check added in 10.4.1 is enforced only when the wcap_nonce parameter is present, so omitting the parameter skips it entirely.","source_quote_or_pointer":"Security Advisory CVE-2026-102251","fact_id":"SEA-CVE-2026-102251-F1","document_citation":"Security Advisory CVE-2026-102251"},{"id":"SEA-CVE-2026-102251-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to generic SQL Injection via the 'validate' parameter in all versions up to, and including, 10.8.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.","source_quote_or_pointer":"Advisory description (CVE-2026-102251)","fact_id":"SEA-CVE-2026-102251-F2","document_citation":"Advisory description (CVE-2026-102251)"}],"source_stated_contributors":["The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to generic SQL Injection via the 'validate' parameter in all versions up to, and including, 10.8.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.pii","arch.async_job","arch.event_driven"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-102251","reporting_entity":"CVE-2026-102251","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-102251-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-102251-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-102251"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-101025","title":"Description NGINX JavaScript (njs) has a vulnerability where the built-in njs engine leaks a libxml2 parser context when xml.parse() fails. The failure path did not register cleanup and the context was not released for the lifetime of the process. An unauthenticated attacker may send requests with malformed XML and can cause unbounded memory growth in long-lived NGINX worker processes. Impact This vulnerability may allow remote attackers to send requests that trigger repeated parsing of malformed XML and may lead to NGINX worker termination or denial of service. There is no control plane exposure; this is a data plane issue only. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.","display_title":"Software component issue could make the service unavailable","display_summary":"NGINX JavaScript (njs) has a vulnerability where the built-in njs engine leaks a libxml2 parser context when xml.parse() fails.","display_reference":"CVE-2026-101025","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-101025","source_title":"Description NGINX JavaScript (njs) has a vulnerability where the built-in njs engine leaks a libxml2 parser context when xml.parse() fails. The failure path did not register cleanup and the context was not released for the lifetime of the process. An unauthenticated attacker may send requests with malformed XML and can cause unbounded memory growth in long-lived NGINX worker processes. Impact This vulnerability may allow remote attackers to send requests that trigger repeated parsing of malformed XML and may lead to NGINX worker termination or denial of service. There is no control plane exposure; this is a data plane issue only. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T18:14:27.116Z","source_hash":"content-fingerprint:fnv1a-affaef2e","affected_system":{"organization":"Description NGINX JavaScript (njs) has a vulnerability where the built-in njs engine leaks a libxml2 parser context when xml.parse() fails. The failure path did not register cleanup and the context was not released for the lifetime of the process. An unauthenticated attacker may send requests with malformed XML and can cause unbounded memory growth in long-lived NGINX worker processes. Impact This vulnerability may allow remote attackers to send requests that trigger repeated parsing of malformed XML and may lead to NGINX worker termination or denial of service. There is no control plane exposure; this is a data plane issue only. Note project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-101025-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Description NGINX JavaScript (njs) has a vulnerability where the built-in njs engine leaks a libxml2 parser context when xml.parse() fails. The failure path did not register cleanup and the context was not released for the lifetime of the process. An unauthenticated attacker may send requests with malformed XML and can cause unbounded memory growth in long-lived NGINX worker processes. Impact This vulnerability may allow remote attackers to send requests that trigger repeated parsing of malformed XML and may lead to NGINX worker termination or denial of service. There is no control plane exposure; this is a data plane issue only. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.","source_quote_or_pointer":"Security Advisory CVE-2026-101025","fact_id":"SEA-CVE-2026-101025-F1","document_citation":"Security Advisory CVE-2026-101025"},{"id":"SEA-CVE-2026-101025-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"NGINX JavaScript (njs) has a vulnerability where the built-in njs engine leaks a libxml2 parser context when xml.parse() fails. The failure path did not register cleanup and the context was not released for the lifetime of the process.","source_quote_or_pointer":"Advisory description (CVE-2026-101025)","fact_id":"SEA-CVE-2026-101025-F2","document_citation":"Advisory description (CVE-2026-101025)"}],"source_stated_contributors":["NGINX JavaScript (njs) has a vulnerability where the built-in njs engine leaks a libxml2 parser context when xml.parse() fails. The failure path did not register cleanup and the context was not released for the lifetime of the process."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","arch.async_job"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-101025","reporting_entity":"CVE-2026-101025","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-101025-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-101025-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-101025"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-0311","title":"A server-side request forgery vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local unauthenticated user to make unauthorized network requests from host to internal services.","display_title":"Software component issue could reach internal services","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-0311","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-0311","source_title":"A server-side request forgery vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local unauthenticated user to make unauthorized network requests from host to internal services.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T18:14:27.116Z","source_hash":"content-fingerprint:fnv1a-fa043ba0","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Cloud & container infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-0311-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A server-side request forgery vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local unauthenticated user to make unauthorized network requests from host to internal services.","source_quote_or_pointer":"Security Advisory CVE-2026-0311","fact_id":"SEA-CVE-2026-0311-F1","document_citation":"Security Advisory CVE-2026-0311"},{"id":"SEA-CVE-2026-0311-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A server-side request forgery vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local unauthenticated user to make unauthorized network requests from host to internal services.","source_quote_or_pointer":"Advisory description (CVE-2026-0311)","fact_id":"SEA-CVE-2026-0311-F2","document_citation":"Advisory description (CVE-2026-0311)"}],"source_stated_contributors":["A server-side request forgery vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local unauthenticated user to make unauthorized network requests from host to internal services."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Internal network access","Cloud metadata or credential exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-0311","reporting_entity":"CVE-2026-0311","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-0311-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-0311-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"The service fetched a URL chosen by the caller and could be steered at internal systems. Restrict outbound destinations and block internal address ranges.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-0311"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-14851","title":"A vulnerability relating to the exposure of confidential information in the customer invoicing web application, which exposes personally identifiable information (PII) and financial data – including customer names, addresses, invoice numbers, payment details and tax information – to unauthorised individuals. The issue is caused by a lack of authorisation checks at the endpoint responsible for serving PDF invoice files. Furthermore, some URLs for invoicing documents appear to be publicly accessible via search engines, exposing paths to confidential files. Successful exploitation of this vulnerability could allow an attacker to access data to which they should not have access, as well as to predict identifiers in order to access even more confidential information.","display_title":"Security issue reported in Software component","display_summary":"A vulnerability relating to the exposure of confidential information in the customer invoicing web application, which exposes personally identifiable information (PII) and financial data – including customer names,…","display_reference":"CVE-2026-14851","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-14851","source_title":"A vulnerability relating to the exposure of confidential information in the customer invoicing web application, which exposes personally identifiable information (PII) and financial data – including customer names, addresses, invoice numbers, payment details and tax information – to unauthorised individuals. The issue is caused by a lack of authorisation checks at the endpoint responsible for serving PDF invoice files. Furthermore, some URLs for invoicing documents appear to be publicly accessible via search engines, exposing paths to confidential files. Successful exploitation of this vulnerability could allow an attacker to access data to which they should not have access, as well as to predict identifiers in order to access even more confidential information.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T18:14:27.117Z","source_hash":"content-fingerprint:fnv1a-7157dc3a","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-14851-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability relating to the exposure of confidential information in the customer invoicing web application, which exposes personally identifiable information (PII) and financial data – including customer names, addresses, invoice numbers, payment details and tax information – to unauthorised individuals. The issue is caused by a lack of authorisation checks at the endpoint responsible for serving PDF invoice files. Furthermore, some URLs for invoicing documents appear to be publicly accessible via search engines, exposing paths to confidential files. Successful exploitation of this vulnerability could allow an attacker to access data to which they should not have access, as well as to predict identifiers in order to access even more confidential information.","source_quote_or_pointer":"Security Advisory CVE-2026-14851","fact_id":"SEA-CVE-2026-14851-F1","document_citation":"Security Advisory CVE-2026-14851"},{"id":"SEA-CVE-2026-14851-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability relating to the exposure of confidential information in the customer invoicing web application, which exposes personally identifiable information (PII) and financial data – including customer names, addresses, invoice numbers, payment details and tax information – to unauthorised individuals.","source_quote_or_pointer":"Advisory description (CVE-2026-14851)","fact_id":"SEA-CVE-2026-14851-F2","document_citation":"Advisory description (CVE-2026-14851)"}],"source_stated_contributors":["A vulnerability relating to the exposure of confidential information in the customer invoicing web application, which exposes personally identifiable information (PII) and financial data – including customer names, addresses, invoice numbers, payment details and tax information – to unauthorised individuals."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.financial_action","data.pii","data.uploaded_files"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-14851","reporting_entity":"CVE-2026-14851","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-14851-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-14851-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-14851"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108070","title":"A vulnerability involving improper access control in the TSplus Remote Access web server that allows an unauthenticated remote attacker to access internal resources protected by manipulated paths through the /socket.io/JWN/ endpoint, bypassing the access restrictions intended for certain internal resources.","display_title":"Software component issue could allow unauthorized access","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-108070","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108070","source_title":"A vulnerability involving improper access control in the TSplus Remote Access web server that allows an unauthenticated remote attacker to access internal resources protected by manipulated paths through the /socket.io/JWN/ endpoint, bypassing the access restrictions intended for certain internal resources.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T18:14:27.117Z","source_hash":"content-fingerprint:fnv1a-5291a387","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108070-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability involving improper access control in the TSplus Remote Access web server that allows an unauthenticated remote attacker to access internal resources protected by manipulated paths through the /socket.io/JWN/ endpoint, bypassing the access restrictions intended for certain internal resources.","source_quote_or_pointer":"Security Advisory CVE-2026-108070","fact_id":"SEA-CVE-2026-108070-F1","document_citation":"Security Advisory CVE-2026-108070"},{"id":"SEA-CVE-2026-108070-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability involving improper access control in the TSplus Remote Access web server that allows an unauthenticated remote attacker to access internal resources protected by manipulated paths through the /socket.io/JWN/ endpoint, bypassing the access restrictions intended for certain internal resources.","source_quote_or_pointer":"Advisory description (CVE-2026-108070)","fact_id":"SEA-CVE-2026-108070-F2","document_citation":"Advisory description (CVE-2026-108070)"}],"source_stated_contributors":["A vulnerability involving improper access control in the TSplus Remote Access web server that allows an unauthenticated remote attacker to access internal resources protected by manipulated paths through the /socket.io/JWN/ endpoint, bypassing the access restrictions intended for certain internal resources."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108070","reporting_entity":"CVE-2026-108070","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108070-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108070-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108070"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108072","title":"Vulnerability due to incorrect permissions in TSplus Remote Access shared login scripts. The autostart1.tscr files, located in the shared themes directory, allow users without sufficient privileges to write to them. A local attacker with a valid session on the terminal or remote desktop server could modify these files to execute arbitrary commands within another user’s security context when that user logs in using the same theme or operating mode. Depending on the affected user’s privileges, exploitation could allow lateral movement between users or privilege escalation.","display_title":"Software component issue could grant elevated privileges","display_summary":"Vulnerability due to incorrect permissions in TSplus Remote Access shared login scripts. The autostart1.tscr files, located in the shared themes directory, allow users without sufficient privileges to write to them.","display_reference":"CVE-2026-108072","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108072","source_title":"Vulnerability due to incorrect permissions in TSplus Remote Access shared login scripts. The autostart1.tscr files, located in the shared themes directory, allow users without sufficient privileges to write to them. A local attacker with a valid session on the terminal or remote desktop server could modify these files to execute arbitrary commands within another user’s security context when that user logs in using the same theme or operating mode. Depending on the affected user’s privileges, exploitation could allow lateral movement between users or privilege escalation.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T18:14:27.118Z","source_hash":"content-fingerprint:fnv1a-ee4c0f2b","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108072-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Vulnerability due to incorrect permissions in TSplus Remote Access shared login scripts. The autostart1.tscr files, located in the shared themes directory, allow users without sufficient privileges to write to them. A local attacker with a valid session on the terminal or remote desktop server could modify these files to execute arbitrary commands within another user’s security context when that user logs in using the same theme or operating mode. Depending on the affected user’s privileges, exploitation could allow lateral movement between users or privilege escalation.","source_quote_or_pointer":"Security Advisory CVE-2026-108072","fact_id":"SEA-CVE-2026-108072-F1","document_citation":"Security Advisory CVE-2026-108072"},{"id":"SEA-CVE-2026-108072-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Vulnerability due to incorrect permissions in TSplus Remote Access shared login scripts. The autostart1.tscr files, located in the shared themes directory, allow users without sufficient privileges to write to them.","source_quote_or_pointer":"Advisory description (CVE-2026-108072)","fact_id":"SEA-CVE-2026-108072-F2","document_citation":"Advisory description (CVE-2026-108072)"}],"source_stated_contributors":["Vulnerability due to incorrect permissions in TSplus Remote Access shared login scripts. The autostart1.tscr files, located in the shared themes directory, allow users without sufficient privileges to write to them."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.code_execution","auth.write_action","data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108072","reporting_entity":"CVE-2026-108072","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108072-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108072-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108072"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-91184","title":"Description NGINX Gateway Fabric has a vulnerability when it renders the spec.basic.realm (and spec.jwt.realm) field of a namespaced AuthenticationFilter verbatim, unescaped and unvalidated, into the shared data-plane nginx.conf as auth_basic \"<realm>\";. A namespaced authenticated attacker that configures AuthenticationFilter CRD to an HTTPRoute/GRPCRoute on a shared Gateway can craft a realm value that closes the quoted directive and the enclosing location {} block and injects arbitrary NGINX directives into that Gateway's data-plane config. Impact A remote authenticated attacker can send crafted requests to configure NGINX Gateway Fabric AuthenticationFilter CRD and may be able to read every co-located tenant's mounted secrets, SSRF via proxy_pass, reading the pod ServiceAccount token, or hijacking other tenants' routes. There is no data plane exposure; this is a control plane issue only. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.","display_title":"Software component issue could reach internal services","display_summary":"NGINX Gateway Fabric has a vulnerability when it renders the spec.basic.realm (and spec.jwt.realm) field of a namespaced AuthenticationFilter verbatim, unescaped and unvalidated, into the shared data-plane nginx.conf as…","display_reference":"CVE-2026-91184","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91184","source_title":"Description NGINX Gateway Fabric has a vulnerability when it renders the spec.basic.realm (and spec.jwt.realm) field of a namespaced AuthenticationFilter verbatim, unescaped and unvalidated, into the shared data-plane nginx.conf as auth_basic \"<realm>\";. A namespaced authenticated attacker that configures AuthenticationFilter CRD to an HTTPRoute/GRPCRoute on a shared Gateway can craft a realm value that closes the quoted directive and the enclosing location {} block and injects arbitrary NGINX directives into that Gateway's data-plane config. Impact A remote authenticated attacker can send crafted requests to configure NGINX Gateway Fabric AuthenticationFilter CRD and may be able to read every co-located tenant's mounted secrets, SSRF via proxy_pass, reading the pod ServiceAccount token, or hijacking other tenants' routes. There is no data plane exposure; this is a control plane issue only. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T07:22:13.580Z","source_hash":"content-fingerprint:fnv1a-19164cd4","affected_system":{"organization":"Description NGINX Gateway Fabric has a vulnerability when it renders the spec.basic.realm (and spec.jwt.realm) field of a namespaced AuthenticationFilter verbatim, unescaped and unvalidated, into the shared data-plane nginx.conf as authbasic \"<realm>\";. A namespaced authenticated attacker that configures AuthenticationFilter CRD to an HTTPRoute/GRPCRoute on a shared Gateway can craft a realm value that closes the quoted directive and the enclosing location {} block and injects arbitrary NGINX directives into that Gateway's data-plane config. Impact A remote authenticated attacker can send crafted requests to configure NGINX Gateway Fabric AuthenticationFilter CRD and may be able to read every co-located tenant's mounted secrets, SSRF via proxypass, reading the pod ServiceAccount token, or hijacking other tenants' routes. There is no data plane exposure; this is a control plane issue only. Note project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-91184-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Description NGINX Gateway Fabric has a vulnerability when it renders the spec.basic.realm (and spec.jwt.realm) field of a namespaced AuthenticationFilter verbatim, unescaped and unvalidated, into the shared data-plane nginx.conf as auth_basic \"<realm>\";. A namespaced authenticated attacker that configures AuthenticationFilter CRD to an HTTPRoute/GRPCRoute on a shared Gateway can craft a realm value that closes the quoted directive and the enclosing location {} block and injects arbitrary NGINX directives into that Gateway's data-plane config. Impact A remote authenticated attacker can send crafted requests to configure NGINX Gateway Fabric AuthenticationFilter CRD and may be able to read every co-located tenant's mounted secrets, SSRF via proxy_pass, reading the pod ServiceAccount token, or hijacking other tenants' routes. There is no data plane exposure; this is a control plane issue only. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.","source_quote_or_pointer":"Security Advisory CVE-2026-91184","fact_id":"SEA-CVE-2026-91184-F1","document_citation":"Security Advisory CVE-2026-91184"},{"id":"SEA-CVE-2026-91184-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"NGINX Gateway Fabric has a vulnerability when it renders the spec.basic.realm (and spec.jwt.realm) field of a namespaced AuthenticationFilter verbatim, unescaped and unvalidated, into the shared data-plane nginx.conf as authbasic \"\";.","source_quote_or_pointer":"Advisory description (CVE-2026-91184)","fact_id":"SEA-CVE-2026-91184-F2","document_citation":"Advisory description (CVE-2026-91184)"}],"source_stated_contributors":["NGINX Gateway Fabric has a vulnerability when it renders the spec.basic.realm (and spec.jwt.realm) field of a namespaced AuthenticationFilter verbatim, unescaped and unvalidated, into the shared data-plane nginx.conf as authbasic \"\";."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.credentials_secrets"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Internal network access","Cloud metadata or credential exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-91184","reporting_entity":"CVE-2026-91184","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-91184-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-91184-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"The service fetched a URL chosen by the caller and could be steered at internal systems. Restrict outbound destinations and block internal address ranges.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-91184"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-89076","title":"Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Progress MOVEit Transfer (Custom Reports module). This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.","display_title":"Software component issue could expose or alter stored data","display_summary":"Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Progress MOVEit Transfer (Custom Reports module).","display_reference":"CVE-2026-89076","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89076","source_title":"Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Progress MOVEit Transfer (Custom Reports module). This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T07:22:13.580Z","source_hash":"content-fingerprint:fnv1a-b69fe405","affected_system":{"organization":"Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Progress MOVEit Transfer (Custom Reports module). This issue affects MOVEit Transfer project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-89076-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Progress MOVEit Transfer (Custom Reports module). This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.","source_quote_or_pointer":"Security Advisory CVE-2026-89076","fact_id":"SEA-CVE-2026-89076-F1","document_citation":"Security Advisory CVE-2026-89076"},{"id":"SEA-CVE-2026-89076-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Progress MOVEit Transfer (Custom Reports module).","source_quote_or_pointer":"Advisory description (CVE-2026-89076)","fact_id":"SEA-CVE-2026-89076-F2","document_citation":"Advisory description (CVE-2026-89076)"}],"source_stated_contributors":["Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Progress MOVEit Transfer (Custom Reports module)."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-89076","reporting_entity":"CVE-2026-89076","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-89076-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-89076-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-89076"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-89073","title":"Insufficient Session Expiration vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.","display_title":"Security issue reported in Software component","display_summary":"Insufficient Session Expiration vulnerability in Progress MOVEit Transfer.","display_reference":"CVE-2026-89073","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89073","source_title":"Insufficient Session Expiration vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T07:22:13.581Z","source_hash":"content-fingerprint:fnv1a-d14da7b6","affected_system":{"organization":"Insufficient Session Expiration vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-89073-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Insufficient Session Expiration vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.","source_quote_or_pointer":"Security Advisory CVE-2026-89073","fact_id":"SEA-CVE-2026-89073-F1","document_citation":"Security Advisory CVE-2026-89073"},{"id":"SEA-CVE-2026-89073-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Insufficient Session Expiration vulnerability in Progress MOVEit Transfer.","source_quote_or_pointer":"Advisory description (CVE-2026-89073)","fact_id":"SEA-CVE-2026-89073-F2","document_citation":"Advisory description (CVE-2026-89073)"}],"source_stated_contributors":["Insufficient Session Expiration vulnerability in Progress MOVEit Transfer."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-89073","reporting_entity":"CVE-2026-89073","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-89073-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-89073-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-89073"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-76519","title":"A vulnerability in the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system. This vulnerability is due to improper handling of email attachments when the file reputation service is enabled. An attacker could exploit this vulnerability by sending an email that contains a crafted attachment through an affected device. A successful exploit could allow the attacker to write arbitrary files and execute commands with&nbsp;root privileges on the underlying operating system.","display_title":"Security issue reported in Software component","display_summary":"A vulnerability in the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system.","display_reference":"CVE-2026-76519","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-76519","source_title":"A vulnerability in the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system. This vulnerability is due to improper handling of email attachments when the file reputation service is enabled. An attacker could exploit this vulnerability by sending an email that contains a crafted attachment through an affected device. A successful exploit could allow the attacker to write arbitrary files and execute commands with&nbsp;root privileges on the underlying operating system.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T07:22:13.582Z","source_hash":"content-fingerprint:fnv1a-bb373adf","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-76519-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability in the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system. This vulnerability is due to improper handling of email attachments when the file reputation service is enabled. An attacker could exploit this vulnerability by sending an email that contains a crafted attachment through an affected device. A successful exploit could allow the attacker to write arbitrary files and execute commands with&nbsp;root privileges on the underlying operating system.","source_quote_or_pointer":"Security Advisory CVE-2026-76519","fact_id":"SEA-CVE-2026-76519-F1","document_citation":"Security Advisory CVE-2026-76519"},{"id":"SEA-CVE-2026-76519-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability in the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system.","source_quote_or_pointer":"Advisory description (CVE-2026-76519)","fact_id":"SEA-CVE-2026-76519-F2","document_citation":"Advisory description (CVE-2026-76519)"}],"source_stated_contributors":["A vulnerability in the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.write_action","data.uploaded_files"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-76519","reporting_entity":"CVE-2026-76519","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-76519-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-76519-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-76519"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-59774","title":"Gitea's Org-mode markup renderer processes INCLUDE directives supplied to the repository markup endpoint without preventing access to server-side files. An unauthenticated attacker can use a suitable public repository to read files accessible to the Gitea service account. If the disclosed files include app.ini and its INTERNAL_TOKEN, the attacker can chain the disclosure with internal logger access to modify a Git hook and execute commands as the Gitea service account.","display_title":"Security issue reported in Software component","display_summary":"Gitea's Org-mode markup renderer processes INCLUDE directives supplied to the repository markup endpoint without preventing access to server-side files.","display_reference":"CVE-2026-59774","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-59774","source_title":"Gitea's Org-mode markup renderer processes INCLUDE directives supplied to the repository markup endpoint without preventing access to server-side files. An unauthenticated attacker can use a suitable public repository to read files accessible to the Gitea service account. If the disclosed files include app.ini and its INTERNAL_TOKEN, the attacker can chain the disclosure with internal logger access to modify a Git hook and execute commands as the Gitea service account.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T07:22:13.584Z","source_hash":"content-fingerprint:fnv1a-626075f1","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-59774-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Gitea's Org-mode markup renderer processes INCLUDE directives supplied to the repository markup endpoint without preventing access to server-side files. An unauthenticated attacker can use a suitable public repository to read files accessible to the Gitea service account. If the disclosed files include app.ini and its INTERNAL_TOKEN, the attacker can chain the disclosure with internal logger access to modify a Git hook and execute commands as the Gitea service account.","source_quote_or_pointer":"Security Advisory CVE-2026-59774","fact_id":"SEA-CVE-2026-59774-F1","document_citation":"Security Advisory CVE-2026-59774"},{"id":"SEA-CVE-2026-59774-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Gitea's Org-mode markup renderer processes INCLUDE directives supplied to the repository markup endpoint without preventing access to server-side files. An unauthenticated attacker can use a suitable public repository to read files accessible to the Gitea service account.","source_quote_or_pointer":"Advisory description (CVE-2026-59774)","fact_id":"SEA-CVE-2026-59774-F2","document_citation":"Advisory description (CVE-2026-59774)"}],"source_stated_contributors":["Gitea's Org-mode markup renderer processes INCLUDE directives supplied to the repository markup endpoint without preventing access to server-side files. An unauthenticated attacker can use a suitable public repository to read files accessible to the Gitea service account."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","auth.public_publication","data.credentials_secrets"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-59774","reporting_entity":"CVE-2026-59774","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-59774-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-59774-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-59774"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-110872","title":"Nodemailer from 3.0.0 before 10.0.10 contains a quadratic complexity denial of service vulnerability in the SMTP client reply parser in SMTPConnection._onData and isPartialResponse. A malicious SMTP server or on-path attacker can stream continuation lines without a completion line before authentication, blocking the Node.js event loop and exhausting memory.","display_title":"Software component issue could make the service unavailable","display_summary":"Nodemailer from 3.0.0 before 10.0.10 contains a quadratic complexity denial of service vulnerability in the SMTP client reply parser in SMTPConnection.onData and isPartialResponse.","display_reference":"CVE-2026-110872","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110872","source_title":"Nodemailer from 3.0.0 before 10.0.10 contains a quadratic complexity denial of service vulnerability in the SMTP client reply parser in SMTPConnection._onData and isPartialResponse. A malicious SMTP server or on-path attacker can stream continuation lines without a completion line before authentication, blocking the Node.js event loop and exhausting memory.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T01:57:40.308Z","source_hash":"content-fingerprint:fnv1a-6665665e","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-110872-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Nodemailer from 3.0.0 before 10.0.10 contains a quadratic complexity denial of service vulnerability in the SMTP client reply parser in SMTPConnection._onData and isPartialResponse. A malicious SMTP server or on-path attacker can stream continuation lines without a completion line before authentication, blocking the Node.js event loop and exhausting memory.","source_quote_or_pointer":"Security Advisory CVE-2026-110872","fact_id":"SEA-CVE-2026-110872-F1","document_citation":"Security Advisory CVE-2026-110872"},{"id":"SEA-CVE-2026-110872-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Nodemailer from 3.0.0 before 10.0.10 contains a quadratic complexity denial of service vulnerability in the SMTP client reply parser in SMTPConnection.onData and isPartialResponse.","source_quote_or_pointer":"Advisory description (CVE-2026-110872)","fact_id":"SEA-CVE-2026-110872-F2","document_citation":"Advisory description (CVE-2026-110872)"}],"source_stated_contributors":["Nodemailer from 3.0.0 before 10.0.10 contains a quadratic complexity denial of service vulnerability in the SMTP client reply parser in SMTPConnection.onData and isPartialResponse."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["arch.async_job","arch.event_driven"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-110872","reporting_entity":"CVE-2026-110872","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-110872-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-110872-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-110872"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-110871","title":"Nodemailer from 3.0.0 before 10.0.10 contains a denial of service vulnerability in MessageParser.parseHeaders that allows users to exhaust CPU through quadratic header unfolding. Attackers can supply large recipient lists or long headers that fold into tens of thousands of continuation lines, blocking the Node.js event loop during DKIM signing.","display_title":"Software component issue could make the service unavailable","display_summary":"Nodemailer from 3.0.0 before 10.0.10 contains a denial of service vulnerability in MessageParser.parseHeaders that allows users to exhaust CPU through quadratic header unfolding.","display_reference":"CVE-2026-110871","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110871","source_title":"Nodemailer from 3.0.0 before 10.0.10 contains a denial of service vulnerability in MessageParser.parseHeaders that allows users to exhaust CPU through quadratic header unfolding. Attackers can supply large recipient lists or long headers that fold into tens of thousands of continuation lines, blocking the Node.js event loop during DKIM signing.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T01:57:40.308Z","source_hash":"content-fingerprint:fnv1a-8eadcd7","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-110871-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Nodemailer from 3.0.0 before 10.0.10 contains a denial of service vulnerability in MessageParser.parseHeaders that allows users to exhaust CPU through quadratic header unfolding. Attackers can supply large recipient lists or long headers that fold into tens of thousands of continuation lines, blocking the Node.js event loop during DKIM signing.","source_quote_or_pointer":"Security Advisory CVE-2026-110871","fact_id":"SEA-CVE-2026-110871-F1","document_citation":"Security Advisory CVE-2026-110871"},{"id":"SEA-CVE-2026-110871-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Nodemailer from 3.0.0 before 10.0.10 contains a denial of service vulnerability in MessageParser.parseHeaders that allows users to exhaust CPU through quadratic header unfolding.","source_quote_or_pointer":"Advisory description (CVE-2026-110871)","fact_id":"SEA-CVE-2026-110871-F2","document_citation":"Advisory description (CVE-2026-110871)"}],"source_stated_contributors":["Nodemailer from 3.0.0 before 10.0.10 contains a denial of service vulnerability in MessageParser.parseHeaders that allows users to exhaust CPU through quadratic header unfolding."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","arch.event_driven"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-110871","reporting_entity":"CVE-2026-110871","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-110871-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-110871-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-110871"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-110869","title":"Nodemailer 3.0.0 before 10.0.13 has a regular expression denial of service in SMTPConnection._actionEHLO, whose four AUTH mechanism detection regexes contain overlapping whitespace sub-patterns that backtrack quadratically. A malicious or man-in-the-middle SMTP server can reply to EHLO with 250-AUTH, a long whitespace run and a non-matching token, blocking the Node.js event loop for tens of seconds to hours before authentication.","display_title":"Software component issue could make the service unavailable","display_summary":"Nodemailer 3.0.0 before 10.0.13 has a regular expression denial of service in SMTPConnection.actionEHLO, whose four AUTH mechanism detection regexes contain overlapping whitespace sub-patterns that backtrack…","display_reference":"CVE-2026-110869","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110869","source_title":"Nodemailer 3.0.0 before 10.0.13 has a regular expression denial of service in SMTPConnection._actionEHLO, whose four AUTH mechanism detection regexes contain overlapping whitespace sub-patterns that backtrack quadratically. A malicious or man-in-the-middle SMTP server can reply to EHLO with 250-AUTH, a long whitespace run and a non-matching token, blocking the Node.js event loop for tens of seconds to hours before authentication.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T01:57:40.308Z","source_hash":"content-fingerprint:fnv1a-3237696","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-110869-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Nodemailer 3.0.0 before 10.0.13 has a regular expression denial of service in SMTPConnection._actionEHLO, whose four AUTH mechanism detection regexes contain overlapping whitespace sub-patterns that backtrack quadratically. A malicious or man-in-the-middle SMTP server can reply to EHLO with 250-AUTH, a long whitespace run and a non-matching token, blocking the Node.js event loop for tens of seconds to hours before authentication.","source_quote_or_pointer":"Security Advisory CVE-2026-110869","fact_id":"SEA-CVE-2026-110869-F1","document_citation":"Security Advisory CVE-2026-110869"},{"id":"SEA-CVE-2026-110869-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Nodemailer 3.0.0 before 10.0.13 has a regular expression denial of service in SMTPConnection.actionEHLO, whose four AUTH mechanism detection regexes contain overlapping whitespace sub-patterns that backtrack quadratically.","source_quote_or_pointer":"Advisory description (CVE-2026-110869)","fact_id":"SEA-CVE-2026-110869-F2","document_citation":"Advisory description (CVE-2026-110869)"}],"source_stated_contributors":["Nodemailer 3.0.0 before 10.0.13 has a regular expression denial of service in SMTPConnection.actionEHLO, whose four AUTH mechanism detection regexes contain overlapping whitespace sub-patterns that backtrack quadratically."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["arch.event_driven"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-110869","reporting_entity":"CVE-2026-110869","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-110869-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-110869-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-110869"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-110868","title":"Renovate before 44.79.0 contains a server-side request forgery vulnerability that allows users to make the shared HTTP client request arbitrary internal URLs via extends presets or customDatasources. Attackers can point a preset at an instance metadata service endpoint to obtain AWS credentials or leak sensitive information through Renovate logs.","display_title":"Software component issue could reach internal services","display_summary":"Renovate before 44.79.0 contains a server-side request forgery vulnerability that allows users to make the shared HTTP client request arbitrary internal URLs via extends presets or customDatasources.","display_reference":"CVE-2026-110868","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110868","source_title":"Renovate before 44.79.0 contains a server-side request forgery vulnerability that allows users to make the shared HTTP client request arbitrary internal URLs via extends presets or customDatasources. Attackers can point a preset at an instance metadata service endpoint to obtain AWS credentials or leak sensitive information through Renovate logs.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T01:57:40.309Z","source_hash":"content-fingerprint:fnv1a-e854b35b","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-110868-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Renovate before 44.79.0 contains a server-side request forgery vulnerability that allows users to make the shared HTTP client request arbitrary internal URLs via extends presets or customDatasources. Attackers can point a preset at an instance metadata service endpoint to obtain AWS credentials or leak sensitive information through Renovate logs.","source_quote_or_pointer":"Security Advisory CVE-2026-110868","fact_id":"SEA-CVE-2026-110868-F1","document_citation":"Security Advisory CVE-2026-110868"},{"id":"SEA-CVE-2026-110868-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Renovate before 44.79.0 contains a server-side request forgery vulnerability that allows users to make the shared HTTP client request arbitrary internal URLs via extends presets or customDatasources.","source_quote_or_pointer":"Advisory description (CVE-2026-110868)","fact_id":"SEA-CVE-2026-110868-F2","document_citation":"Advisory description (CVE-2026-110868)"}],"source_stated_contributors":["Renovate before 44.79.0 contains a server-side request forgery vulnerability that allows users to make the shared HTTP client request arbitrary internal URLs via extends presets or customDatasources."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.infrastructure_modification","data.pii","data.credentials_secrets","arch.external_api"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Internal network access","Cloud metadata or credential exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-110868","reporting_entity":"CVE-2026-110868","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-110868-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-110868-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"The service fetched a URL chosen by the caller and could be steered at internal systems. Restrict outbound destinations and block internal address ranges.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-110868"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-110864","title":"Better Auth from 1.5.0-beta.12 before 1.7.7 contains an authentication bypass vulnerability in the OAuth Proxy plugin that allows unauthenticated attackers to sign in as other users by forging encrypted profiles. When the proxy shares the global secret and cookie-stored state is used, attackers can obtain encrypted state for a fake profile with a victim's verified email to take over the account via implicit linking.","display_title":"Software component issue could allow unauthorized access","display_summary":"Better Auth from 1.5.0-beta.12 before 1.7.7 contains an authentication bypass vulnerability in the OAuth Proxy plugin that allows unauthenticated attackers to sign in as other users by forging encrypted profiles.","display_reference":"CVE-2026-110864","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110864","source_title":"Better Auth from 1.5.0-beta.12 before 1.7.7 contains an authentication bypass vulnerability in the OAuth Proxy plugin that allows unauthenticated attackers to sign in as other users by forging encrypted profiles. When the proxy shares the global secret and cookie-stored state is used, attackers can obtain encrypted state for a fake profile with a victim's verified email to take over the account via implicit linking.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T01:57:40.309Z","source_hash":"content-fingerprint:fnv1a-dca9375b","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-110864-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Better Auth from 1.5.0-beta.12 before 1.7.7 contains an authentication bypass vulnerability in the OAuth Proxy plugin that allows unauthenticated attackers to sign in as other users by forging encrypted profiles. When the proxy shares the global secret and cookie-stored state is used, attackers can obtain encrypted state for a fake profile with a victim's verified email to take over the account via implicit linking.","source_quote_or_pointer":"Security Advisory CVE-2026-110864","fact_id":"SEA-CVE-2026-110864-F1","document_citation":"Security Advisory CVE-2026-110864"},{"id":"SEA-CVE-2026-110864-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Better Auth from 1.5.0-beta.12 before 1.7.7 contains an authentication bypass vulnerability in the OAuth Proxy plugin that allows unauthenticated attackers to sign in as other users by forging encrypted profiles.","source_quote_or_pointer":"Advisory description (CVE-2026-110864)","fact_id":"SEA-CVE-2026-110864-F2","document_citation":"Advisory description (CVE-2026-110864)"}],"source_stated_contributors":["Better Auth from 1.5.0-beta.12 before 1.7.7 contains an authentication bypass vulnerability in the OAuth Proxy plugin that allows unauthenticated attackers to sign in as other users by forging encrypted profiles."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-110864","reporting_entity":"CVE-2026-110864","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-110864-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-110864-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-110864"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-110863","title":"Better Auth @better-auth/sso from 1.7.0-rc.2 before 1.7.3 contains an authentication bypass vulnerability that allows authenticated users to sign in as other users by registering a personal SSO provider. Attackers can copy a legitimate provider's OIDC issuer or SAML entity ID and assert a victim's subject or NameID, because account lookup ignores providerId, creating sessions for victim accounts.","display_title":"Software component issue could allow unauthorized access","display_summary":"Better Auth @better-auth/sso from 1.7.0-rc.2 before 1.7.3 contains an authentication bypass vulnerability that allows authenticated users to sign in as other users by registering a personal SSO provider.","display_reference":"CVE-2026-110863","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110863","source_title":"Better Auth @better-auth/sso from 1.7.0-rc.2 before 1.7.3 contains an authentication bypass vulnerability that allows authenticated users to sign in as other users by registering a personal SSO provider. Attackers can copy a legitimate provider's OIDC issuer or SAML entity ID and assert a victim's subject or NameID, because account lookup ignores providerId, creating sessions for victim accounts.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T01:57:40.309Z","source_hash":"content-fingerprint:fnv1a-d4a78f3e","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-110863-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Better Auth @better-auth/sso from 1.7.0-rc.2 before 1.7.3 contains an authentication bypass vulnerability that allows authenticated users to sign in as other users by registering a personal SSO provider. Attackers can copy a legitimate provider's OIDC issuer or SAML entity ID and assert a victim's subject or NameID, because account lookup ignores providerId, creating sessions for victim accounts.","source_quote_or_pointer":"Security Advisory CVE-2026-110863","fact_id":"SEA-CVE-2026-110863-F1","document_citation":"Security Advisory CVE-2026-110863"},{"id":"SEA-CVE-2026-110863-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Better Auth @better-auth/sso from 1.7.0-rc.2 before 1.7.3 contains an authentication bypass vulnerability that allows authenticated users to sign in as other users by registering a personal SSO provider.","source_quote_or_pointer":"Advisory description (CVE-2026-110863)","fact_id":"SEA-CVE-2026-110863-F2","document_citation":"Advisory description (CVE-2026-110863)"}],"source_stated_contributors":["Better Auth @better-auth/sso from 1.7.0-rc.2 before 1.7.3 contains an authentication bypass vulnerability that allows authenticated users to sign in as other users by registering a personal SSO provider."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-110863","reporting_entity":"CVE-2026-110863","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-110863-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-110863-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-110863"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-110862","title":"Better Auth from 1.4.0-beta.18 before 1.7.7 contains an authentication bypass vulnerability that allows unauthenticated attackers to sign in as other users by reusing OAuth state values as Magic Link tokens. Attackers can start an OAuth sign-in with a victim's email and submit the returned state to Magic Link verification, gaining sessions or creating falsely email-verified accounts.","display_title":"Software component issue could allow unauthorized access","display_summary":"Better Auth from 1.4.0-beta.18 before 1.7.7 contains an authentication bypass vulnerability that allows unauthenticated attackers to sign in as other users by reusing OAuth state values as Magic Link tokens.","display_reference":"CVE-2026-110862","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110862","source_title":"Better Auth from 1.4.0-beta.18 before 1.7.7 contains an authentication bypass vulnerability that allows unauthenticated attackers to sign in as other users by reusing OAuth state values as Magic Link tokens. Attackers can start an OAuth sign-in with a victim's email and submit the returned state to Magic Link verification, gaining sessions or creating falsely email-verified accounts.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T01:57:40.310Z","source_hash":"content-fingerprint:fnv1a-7bd3ee19","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-110862-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Better Auth from 1.4.0-beta.18 before 1.7.7 contains an authentication bypass vulnerability that allows unauthenticated attackers to sign in as other users by reusing OAuth state values as Magic Link tokens. Attackers can start an OAuth sign-in with a victim's email and submit the returned state to Magic Link verification, gaining sessions or creating falsely email-verified accounts.","source_quote_or_pointer":"Security Advisory CVE-2026-110862","fact_id":"SEA-CVE-2026-110862-F1","document_citation":"Security Advisory CVE-2026-110862"},{"id":"SEA-CVE-2026-110862-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Better Auth from 1.4.0-beta.18 before 1.7.7 contains an authentication bypass vulnerability that allows unauthenticated attackers to sign in as other users by reusing OAuth state values as Magic Link tokens.","source_quote_or_pointer":"Advisory description (CVE-2026-110862)","fact_id":"SEA-CVE-2026-110862-F2","document_citation":"Advisory description (CVE-2026-110862)"}],"source_stated_contributors":["Better Auth from 1.4.0-beta.18 before 1.7.7 contains an authentication bypass vulnerability that allows unauthenticated attackers to sign in as other users by reusing OAuth state values as Magic Link tokens."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-110862","reporting_entity":"CVE-2026-110862","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-110862-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-110862-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-110862"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-110861","title":"Better Auth @better-auth/drizzle-adapter and better-auth from 1.6.17 before 1.7.7, and @better-auth/kysely-adapter from 1.6.17 before 1.7.0, contain a race condition in database-backed rate limiting on PostgreSQL where the limit check is not atomic with the counter update. Remote attackers can send bursts of concurrent requests that pass the check together, exceeding configured limits on password sign-in, two-factor verification, one-time code, password reset, and other rate-limited endpoints.","display_title":"Software component issue could cause actions to run with inconsistent state","display_summary":"Better Auth @better-auth/drizzle-adapter and better-auth from 1.6.17 before 1.7.7, and @better-auth/kysely-adapter from 1.6.17 before 1.7.0, contain a race condition in database-backed rate limiting on PostgreSQL where…","display_reference":"CVE-2026-110861","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110861","source_title":"Better Auth @better-auth/drizzle-adapter and better-auth from 1.6.17 before 1.7.7, and @better-auth/kysely-adapter from 1.6.17 before 1.7.0, contain a race condition in database-backed rate limiting on PostgreSQL where the limit check is not atomic with the counter update. Remote attackers can send bursts of concurrent requests that pass the check together, exceeding configured limits on password sign-in, two-factor verification, one-time code, password reset, and other rate-limited endpoints.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T01:57:40.310Z","source_hash":"content-fingerprint:fnv1a-1b1fc822","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-110861-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Better Auth @better-auth/drizzle-adapter and better-auth from 1.6.17 before 1.7.7, and @better-auth/kysely-adapter from 1.6.17 before 1.7.0, contain a race condition in database-backed rate limiting on PostgreSQL where the limit check is not atomic with the counter update. Remote attackers can send bursts of concurrent requests that pass the check together, exceeding configured limits on password sign-in, two-factor verification, one-time code, password reset, and other rate-limited endpoints.","source_quote_or_pointer":"Security Advisory CVE-2026-110861","fact_id":"SEA-CVE-2026-110861-F1","document_citation":"Security Advisory CVE-2026-110861"},{"id":"SEA-CVE-2026-110861-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Better Auth @better-auth/drizzle-adapter and better-auth from 1.6.17 before 1.7.7, and @better-auth/kysely-adapter from 1.6.17 before 1.7.0, contain a race condition in database-backed rate limiting on PostgreSQL where the limit check is not atomic with the counter update.","source_quote_or_pointer":"Advisory description (CVE-2026-110861)","fact_id":"SEA-CVE-2026-110861-F2","document_citation":"Advisory description (CVE-2026-110861)"}],"source_stated_contributors":["Better Auth @better-auth/drizzle-adapter and better-auth from 1.6.17 before 1.7.7, and @better-auth/kysely-adapter from 1.6.17 before 1.7.0, contain a race condition in database-backed rate limiting on PostgreSQL where the limit check is not atomic with the counter update."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-110861","reporting_entity":"CVE-2026-110861","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-110861-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-110861-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-110861"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-110856","title":"GitPython before 3.2.0 contains a regular expression denial of service vulnerability in the _re_actor_epoch pattern used by parse_actor_and_date on author, committer, and tagger lines. Attackers can serve repositories with commit or tag objects containing long space-filled lines lacking a valid epoch or timezone, causing quadratic backtracking and CPU exhaustion.","display_title":"Software component issue could make the service unavailable","display_summary":"GitPython before 3.2.0 contains a regular expression denial of service vulnerability in the reactorepoch pattern used by parseactoranddate on author, committer, and tagger lines.","display_reference":"CVE-2026-110856","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110856","source_title":"GitPython before 3.2.0 contains a regular expression denial of service vulnerability in the _re_actor_epoch pattern used by parse_actor_and_date on author, committer, and tagger lines. Attackers can serve repositories with commit or tag objects containing long space-filled lines lacking a valid epoch or timezone, causing quadratic backtracking and CPU exhaustion.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T01:57:40.310Z","source_hash":"content-fingerprint:fnv1a-a6cacc62","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-110856-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"GitPython before 3.2.0 contains a regular expression denial of service vulnerability in the _re_actor_epoch pattern used by parse_actor_and_date on author, committer, and tagger lines. Attackers can serve repositories with commit or tag objects containing long space-filled lines lacking a valid epoch or timezone, causing quadratic backtracking and CPU exhaustion.","source_quote_or_pointer":"Security Advisory CVE-2026-110856","fact_id":"SEA-CVE-2026-110856-F1","document_citation":"Security Advisory CVE-2026-110856"},{"id":"SEA-CVE-2026-110856-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"GitPython before 3.2.0 contains a regular expression denial of service vulnerability in the reactorepoch pattern used by parseactoranddate on author, committer, and tagger lines.","source_quote_or_pointer":"Advisory description (CVE-2026-110856)","fact_id":"SEA-CVE-2026-110856-F2","document_citation":"Advisory description (CVE-2026-110856)"}],"source_stated_contributors":["GitPython before 3.2.0 contains a regular expression denial of service vulnerability in the reactorepoch pattern used by parseactoranddate on author, committer, and tagger lines."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-110856","reporting_entity":"CVE-2026-110856","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-110856-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-110856-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-110856"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-110854","title":"Parse Server before 8.6.97 and 9.0.0 before 9.10.2-alpha.6 does not handle errors raised while sending verification or password reset emails, causing the server process to exit. A client holding only the public application keys can sign up, request a verification email, or request a password reset while the mail provider rejects, rate limits, or is unavailable, crashing the server.","display_title":"Security issue reported in Software component","display_summary":"Parse Server before 8.6.97 and 9.0.0 before 9.10.2-alpha.6 does not handle errors raised while sending verification or password reset emails, causing the server process to exit.","display_reference":"CVE-2026-110854","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110854","source_title":"Parse Server before 8.6.97 and 9.0.0 before 9.10.2-alpha.6 does not handle errors raised while sending verification or password reset emails, causing the server process to exit. A client holding only the public application keys can sign up, request a verification email, or request a password reset while the mail provider rejects, rate limits, or is unavailable, crashing the server.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T01:57:40.311Z","source_hash":"content-fingerprint:fnv1a-5495bd8e","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-110854-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Parse Server before 8.6.97 and 9.0.0 before 9.10.2-alpha.6 does not handle errors raised while sending verification or password reset emails, causing the server process to exit. A client holding only the public application keys can sign up, request a verification email, or request a password reset while the mail provider rejects, rate limits, or is unavailable, crashing the server.","source_quote_or_pointer":"Security Advisory CVE-2026-110854","fact_id":"SEA-CVE-2026-110854-F1","document_citation":"Security Advisory CVE-2026-110854"},{"id":"SEA-CVE-2026-110854-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Parse Server before 8.6.97 and 9.0.0 before 9.10.2-alpha.6 does not handle errors raised while sending verification or password reset emails, causing the server process to exit.","source_quote_or_pointer":"Advisory description (CVE-2026-110854)","fact_id":"SEA-CVE-2026-110854-F2","document_citation":"Advisory description (CVE-2026-110854)"}],"source_stated_contributors":["Parse Server before 8.6.97 and 9.0.0 before 9.10.2-alpha.6 does not handle errors raised while sending verification or password reset emails, causing the server process to exit."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.public_publication","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-110854","reporting_entity":"CVE-2026-110854","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-110854-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-110854-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-110854"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-110852","title":"n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains an authentication bypass because dynamic-path webhook resolution matched requests on the path alone, ignoring the server-generated identifier that is the URL's only unguessable component. Unauthenticated attackers can omit this identifier in requests to webhook, form, or MCP routes to execute workflows in unrelated projects under those projects' credentials.","display_title":"Software component issue could allow unauthorized access","display_summary":"n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains an authentication bypass because dynamic-path webhook resolution matched requests on the path alone, ignoring the server-generated identifier that…","display_reference":"CVE-2026-110852","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110852","source_title":"n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains an authentication bypass because dynamic-path webhook resolution matched requests on the path alone, ignoring the server-generated identifier that is the URL's only unguessable component. Unauthenticated attackers can omit this identifier in requests to webhook, form, or MCP routes to execute workflows in unrelated projects under those projects' credentials.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T01:57:40.311Z","source_hash":"content-fingerprint:fnv1a-948b07fc","affected_system":{"organization":"Software component project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-110852-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains an authentication bypass because dynamic-path webhook resolution matched requests on the path alone, ignoring the server-generated identifier that is the URL's only unguessable component. Unauthenticated attackers can omit this identifier in requests to webhook, form, or MCP routes to execute workflows in unrelated projects under those projects' credentials.","source_quote_or_pointer":"Security Advisory CVE-2026-110852","fact_id":"SEA-CVE-2026-110852-F1","document_citation":"Security Advisory CVE-2026-110852"},{"id":"SEA-CVE-2026-110852-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains an authentication bypass because dynamic-path webhook resolution matched requests on the path alone, ignoring the server-generated identifier that is the URL's only unguessable component.","source_quote_or_pointer":"Advisory description (CVE-2026-110852)","fact_id":"SEA-CVE-2026-110852-F2","document_citation":"Advisory description (CVE-2026-110852)"}],"source_stated_contributors":["n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains an authentication bypass because dynamic-path webhook resolution matched requests on the path alone, ignoring the server-generated identifier that is the URL's only unguessable component."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.credentials_secrets","arch.external_api","arch.event_driven","arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-003","SEA-FM-010"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-110852","reporting_entity":"CVE-2026-110852","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-110852-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-110852-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-110852"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-110851","title":"n8n before 2.41.4 and 2.42.x before 2.42.1 contains an authorization bypass in the Agents create endpoint, which accepts a caller-supplied Agent ID, checks permissions only against the requested project, and updates an existing Agent without verifying which project owns it. An authenticated user with read-only Agent access to another project can supply an existing Agent ID to move that Agent into their own project and rewrite its name, schema and version.","display_title":"Software component issue could allow unauthorized access","display_summary":"n8n before 2.41.4 and 2.42.x before 2.42.1 contains an authorization bypass in the Agents create endpoint, which accepts a caller-supplied Agent ID, checks permissions only against the requested project, and updates an…","display_reference":"CVE-2026-110851","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110851","source_title":"n8n before 2.41.4 and 2.42.x before 2.42.1 contains an authorization bypass in the Agents create endpoint, which accepts a caller-supplied Agent ID, checks permissions only against the requested project, and updates an existing Agent without verifying which project owns it. An authenticated user with read-only Agent access to another project can supply an existing Agent ID to move that Agent into their own project and rewrite its name, schema and version.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T01:57:40.312Z","source_hash":"content-fingerprint:fnv1a-4bd9603","affected_system":{"organization":"Software component project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-110851-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"n8n before 2.41.4 and 2.42.x before 2.42.1 contains an authorization bypass in the Agents create endpoint, which accepts a caller-supplied Agent ID, checks permissions only against the requested project, and updates an existing Agent without verifying which project owns it. An authenticated user with read-only Agent access to another project can supply an existing Agent ID to move that Agent into their own project and rewrite its name, schema and version.","source_quote_or_pointer":"Security Advisory CVE-2026-110851","fact_id":"SEA-CVE-2026-110851-F1","document_citation":"Security Advisory CVE-2026-110851"},{"id":"SEA-CVE-2026-110851-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"n8n before 2.41.4 and 2.42.x before 2.42.1 contains an authorization bypass in the Agents create endpoint, which accepts a caller-supplied Agent ID, checks permissions only against the requested project, and updates an existing Agent without verifying which project owns it.","source_quote_or_pointer":"Advisory description (CVE-2026-110851)","fact_id":"SEA-CVE-2026-110851-F2","document_citation":"Advisory description (CVE-2026-110851)"}],"source_stated_contributors":["n8n before 2.41.4 and 2.42.x before 2.42.1 contains an authorization bypass in the Agents create endpoint, which accepts a caller-supplied Agent ID, checks permissions only against the requested project, and updates an existing Agent without verifying which project owns it."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.pii","arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-003","SEA-FM-010"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-110851","reporting_entity":"CVE-2026-110851","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-110851-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-110851-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-110851"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-110850","title":"n8n before 2.41.4 and 2.42.0 before 2.42.1 does not validate credential ids stored in agent node parameters when an editor saves a shared workflow, because the check inspects only a node's credentials field. An editor can configure a Message an Agent node in inline mode with tools they control to resolve the owner's credentials and send decrypted secrets to an attacker-chosen destination.","display_title":"Software component issue could expose accounts or credentials","display_summary":"n8n before 2.41.4 and 2.42.0 before 2.42.1 does not validate credential ids stored in agent node parameters when an editor saves a shared workflow, because the check inspects only a node's credentials field.","display_reference":"CVE-2026-110850","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110850","source_title":"n8n before 2.41.4 and 2.42.0 before 2.42.1 does not validate credential ids stored in agent node parameters when an editor saves a shared workflow, because the check inspects only a node's credentials field. An editor can configure a Message an Agent node in inline mode with tools they control to resolve the owner's credentials and send decrypted secrets to an attacker-chosen destination.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T01:57:40.312Z","source_hash":"content-fingerprint:fnv1a-c5a4804","affected_system":{"organization":"Software component project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-110850-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"n8n before 2.41.4 and 2.42.0 before 2.42.1 does not validate credential ids stored in agent node parameters when an editor saves a shared workflow, because the check inspects only a node's credentials field. An editor can configure a Message an Agent node in inline mode with tools they control to resolve the owner's credentials and send decrypted secrets to an attacker-chosen destination.","source_quote_or_pointer":"Security Advisory CVE-2026-110850","fact_id":"SEA-CVE-2026-110850-F1","document_citation":"Security Advisory CVE-2026-110850"},{"id":"SEA-CVE-2026-110850-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"n8n before 2.41.4 and 2.42.0 before 2.42.1 does not validate credential ids stored in agent node parameters when an editor saves a shared workflow, because the check inspects only a node's credentials field.","source_quote_or_pointer":"Advisory description (CVE-2026-110850)","fact_id":"SEA-CVE-2026-110850-F2","document_citation":"Advisory description (CVE-2026-110850)"}],"source_stated_contributors":["n8n before 2.41.4 and 2.42.0 before 2.42.1 does not validate credential ids stored in agent node parameters when an editor saves a shared workflow, because the check inspects only a node's credentials field."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.credentials_secrets","arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-012","SEA-FM-010"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-110850","reporting_entity":"CVE-2026-110850","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-110850-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-110850-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-110850"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-110849","title":"n8n before 1.123.83, 2.41.4, and 2.42.1 contains a stored cross-site scripting vulnerability in the file-preview modal, which re-publishes binary data as an unsandboxed same-origin blob URL. A member who uploads a crafted item can run script in the n8n origin of whoever previews it, typically the owner, and act with their session.","display_title":"Software component issue could run attacker-controlled scripts in a browser","display_summary":"n8n before 1.123.83, 2.41.4, and 2.42.1 contains a stored cross-site scripting vulnerability in the file-preview modal, which re-publishes binary data as an unsandboxed same-origin blob URL.","display_reference":"CVE-2026-110849","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110849","source_title":"n8n before 1.123.83, 2.41.4, and 2.42.1 contains a stored cross-site scripting vulnerability in the file-preview modal, which re-publishes binary data as an unsandboxed same-origin blob URL. A member who uploads a crafted item can run script in the n8n origin of whoever previews it, typically the owner, and act with their session.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T01:57:40.313Z","source_hash":"content-fingerprint:fnv1a-dd0def72","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-110849-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"n8n before 1.123.83, 2.41.4, and 2.42.1 contains a stored cross-site scripting vulnerability in the file-preview modal, which re-publishes binary data as an unsandboxed same-origin blob URL. A member who uploads a crafted item can run script in the n8n origin of whoever previews it, typically the owner, and act with their session.","source_quote_or_pointer":"Security Advisory CVE-2026-110849","fact_id":"SEA-CVE-2026-110849-F1","document_citation":"Security Advisory CVE-2026-110849"},{"id":"SEA-CVE-2026-110849-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"n8n before 1.123.83, 2.41.4, and 2.42.1 contains a stored cross-site scripting vulnerability in the file-preview modal, which re-publishes binary data as an unsandboxed same-origin blob URL.","source_quote_or_pointer":"Advisory description (CVE-2026-110849)","fact_id":"SEA-CVE-2026-110849-F2","document_citation":"Advisory description (CVE-2026-110849)"}],"source_stated_contributors":["n8n before 1.123.83, 2.41.4, and 2.42.1 contains a stored cross-site scripting vulnerability in the file-preview modal, which re-publishes binary data as an unsandboxed same-origin blob URL."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-110849","reporting_entity":"CVE-2026-110849","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-110849-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-110849-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-110849"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-110848","title":"n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains a prototype pollution vulnerability in the AI workflow builder, which merges workflow connections using node names as object members without checking for reserved keys. Authenticated users can create nodes named __proto__ through the API and invoke the connect-nodes operation to pollute the global object prototype, disrupting the instance until restart.","display_title":"Software component issue could make the application process unsafe input","display_summary":"n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains a prototype pollution vulnerability in the AI workflow builder, which merges workflow connections using node names as object members without…","display_reference":"CVE-2026-110848","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110848","source_title":"n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains a prototype pollution vulnerability in the AI workflow builder, which merges workflow connections using node names as object members without checking for reserved keys. Authenticated users can create nodes named __proto__ through the API and invoke the connect-nodes operation to pollute the global object prototype, disrupting the instance until restart.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T01:57:40.313Z","source_hash":"content-fingerprint:fnv1a-4c056e61","affected_system":{"organization":"Software component project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-110848-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains a prototype pollution vulnerability in the AI workflow builder, which merges workflow connections using node names as object members without checking for reserved keys. Authenticated users can create nodes named __proto__ through the API and invoke the connect-nodes operation to pollute the global object prototype, disrupting the instance until restart.","source_quote_or_pointer":"Security Advisory CVE-2026-110848","fact_id":"SEA-CVE-2026-110848-F1","document_citation":"Security Advisory CVE-2026-110848"},{"id":"SEA-CVE-2026-110848-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains a prototype pollution vulnerability in the AI workflow builder, which merges workflow connections using node names as object members without checking for reserved keys.","source_quote_or_pointer":"Advisory description (CVE-2026-110848)","fact_id":"SEA-CVE-2026-110848-F2","document_citation":"Advisory description (CVE-2026-110848)"}],"source_stated_contributors":["n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains a prototype pollution vulnerability in the AI workflow builder, which merges workflow connections using node names as object members without checking for reserved keys."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.infrastructure_modification","data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unsafe object construction","Possible code execution"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-110848","reporting_entity":"CVE-2026-110848","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-110848-SG1","label":"Use schema-validated data formats","description":"Parse untrusted input into plain data with an explicit schema; never deserialize into arbitrary types.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-110848-SG1","label":"Use schema-validated data formats","description":"Parse untrusted input into plain data with an explicit schema; never deserialize into arbitrary types.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"The application rebuilt objects from untrusted data. Use data-only formats with schema validation instead of native object deserialization.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-110848"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-110846","title":"n8n before 2.41.4 and 2.42.x before 2.42.1 contains a signature bypass in the waiting-webhook endpoint, which selects Send-and-Wait validation before normalising an alternate node reference form. Attackers holding an execution's resume token can approve waiting executions meant for others, running downstream actions under the workflow owner's credentials, potentially including command execution.","display_title":"Software component issue could expose accounts or credentials","display_summary":"n8n before 2.41.4 and 2.42.x before 2.42.1 contains a signature bypass in the waiting-webhook endpoint, which selects Send-and-Wait validation before normalising an alternate node reference form.","display_reference":"CVE-2026-110846","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110846","source_title":"n8n before 2.41.4 and 2.42.x before 2.42.1 contains a signature bypass in the waiting-webhook endpoint, which selects Send-and-Wait validation before normalising an alternate node reference form. Attackers holding an execution's resume token can approve waiting executions meant for others, running downstream actions under the workflow owner's credentials, potentially including command execution.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T01:57:40.314Z","source_hash":"content-fingerprint:fnv1a-89a57a93","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-110846-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"n8n before 2.41.4 and 2.42.x before 2.42.1 contains a signature bypass in the waiting-webhook endpoint, which selects Send-and-Wait validation before normalising an alternate node reference form. Attackers holding an execution's resume token can approve waiting executions meant for others, running downstream actions under the workflow owner's credentials, potentially including command execution.","source_quote_or_pointer":"Security Advisory CVE-2026-110846","fact_id":"SEA-CVE-2026-110846-F1","document_citation":"Security Advisory CVE-2026-110846"},{"id":"SEA-CVE-2026-110846-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"n8n before 2.41.4 and 2.42.x before 2.42.1 contains a signature bypass in the waiting-webhook endpoint, which selects Send-and-Wait validation before normalising an alternate node reference form.","source_quote_or_pointer":"Advisory description (CVE-2026-110846)","fact_id":"SEA-CVE-2026-110846-F2","document_citation":"Advisory description (CVE-2026-110846)"}],"source_stated_contributors":["n8n before 2.41.4 and 2.42.x before 2.42.1 contains a signature bypass in the waiting-webhook endpoint, which selects Send-and-Wait validation before normalising an alternate node reference form."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.credentials_secrets","arch.external_api","arch.event_driven"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-110846","reporting_entity":"CVE-2026-110846","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-110846-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-110846-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-110846"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-110845","title":"n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains a code execution vulnerability in the Git node Log operation, which fails to strip a repository's local git configuration before invoking an external program. Authenticated members who can point the node, including as an agent tool, at a repository whose local configuration they control can execute programs as the n8n process user.","display_title":"Software component issue could allow unintended commands to run","display_summary":"n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains a code execution vulnerability in the Git node Log operation, which fails to strip a repository's local git configuration before invoking an…","display_reference":"CVE-2026-110845","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110845","source_title":"n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains a code execution vulnerability in the Git node Log operation, which fails to strip a repository's local git configuration before invoking an external program. Authenticated members who can point the node, including as an agent tool, at a repository whose local configuration they control can execute programs as the n8n process user.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T01:57:40.314Z","source_hash":"content-fingerprint:fnv1a-296a72c2","affected_system":{"organization":"Software component project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-110845-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains a code execution vulnerability in the Git node Log operation, which fails to strip a repository's local git configuration before invoking an external program. Authenticated members who can point the node, including as an agent tool, at a repository whose local configuration they control can execute programs as the n8n process user.","source_quote_or_pointer":"Security Advisory CVE-2026-110845","fact_id":"SEA-CVE-2026-110845-F1","document_citation":"Security Advisory CVE-2026-110845"},{"id":"SEA-CVE-2026-110845-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains a code execution vulnerability in the Git node Log operation, which fails to strip a repository's local git configuration before invoking an external program.","source_quote_or_pointer":"Advisory description (CVE-2026-110845)","fact_id":"SEA-CVE-2026-110845-F2","document_citation":"Advisory description (CVE-2026-110845)"}],"source_stated_contributors":["n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains a code execution vulnerability in the Git node Log operation, which fails to strip a repository's local git configuration before invoking an external program."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-004","SEA-FM-002","SEA-FM-010"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-110845","reporting_entity":"CVE-2026-110845","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-110845-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-110845-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-110845"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-110842","title":"n8n before 2.41.4 and 2.42.x before 2.42.1 contains a prototype pollution vulnerability in the MCP workflow-validation tool, whose interpreter evaluates caller-supplied code in the main process, reads inherited properties, and permits assignment onto shared prototypes. An authenticated member holding only a workflow:read grant can replace a built-in method with one returning a truthy value so server-side permission checks accept unheld scopes, enabling takeover of owner accounts not protected by MFA.","display_title":"Software component issue could make the application process unsafe input","display_summary":"n8n before 2.41.4 and 2.42.x before 2.42.1 contains a prototype pollution vulnerability in the MCP workflow-validation tool, whose interpreter evaluates caller-supplied code in the main process, reads inherited…","display_reference":"CVE-2026-110842","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110842","source_title":"n8n before 2.41.4 and 2.42.x before 2.42.1 contains a prototype pollution vulnerability in the MCP workflow-validation tool, whose interpreter evaluates caller-supplied code in the main process, reads inherited properties, and permits assignment onto shared prototypes. An authenticated member holding only a workflow:read grant can replace a built-in method with one returning a truthy value so server-side permission checks accept unheld scopes, enabling takeover of owner accounts not protected by MFA.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T01:57:40.315Z","source_hash":"content-fingerprint:fnv1a-9a9b0517","affected_system":{"organization":"n8n before 2.41.4 and 2.42.x before 2.42.1 contains a prototype pollution vulnerability in the MCP workflow-validation tool, whose interpreter evaluates caller-supplied code in the main process, reads inherited properties, and permits assignment onto shared prototypes. An authenticated member holding only a workflow project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-110842-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"n8n before 2.41.4 and 2.42.x before 2.42.1 contains a prototype pollution vulnerability in the MCP workflow-validation tool, whose interpreter evaluates caller-supplied code in the main process, reads inherited properties, and permits assignment onto shared prototypes. An authenticated member holding only a workflow:read grant can replace a built-in method with one returning a truthy value so server-side permission checks accept unheld scopes, enabling takeover of owner accounts not protected by MFA.","source_quote_or_pointer":"Security Advisory CVE-2026-110842","fact_id":"SEA-CVE-2026-110842-F1","document_citation":"Security Advisory CVE-2026-110842"},{"id":"SEA-CVE-2026-110842-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"n8n before 2.41.4 and 2.42.x before 2.42.1 contains a prototype pollution vulnerability in the MCP workflow-validation tool, whose interpreter evaluates caller-supplied code in the main process, reads inherited properties, and permits assignment onto shared prototypes.","source_quote_or_pointer":"Advisory description (CVE-2026-110842)","fact_id":"SEA-CVE-2026-110842-F2","document_citation":"Advisory description (CVE-2026-110842)"}],"source_stated_contributors":["n8n before 2.41.4 and 2.42.x before 2.42.1 contains a prototype pollution vulnerability in the MCP workflow-validation tool, whose interpreter evaluates caller-supplied code in the main process, reads inherited properties, and permits assignment onto shared prototypes."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.code_execution","auth.privileged_action","arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-002","SEA-FM-010"],"consequences":["Unsafe object construction","Possible code execution"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-110842","reporting_entity":"CVE-2026-110842","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-110842-SG1","label":"Use schema-validated data formats","description":"Parse untrusted input into plain data with an explicit schema; never deserialize into arbitrary types.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-110842-SG1","label":"Use schema-validated data formats","description":"Parse untrusted input into plain data with an explicit schema; never deserialize into arbitrary types.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"The application rebuilt objects from untrusted data. Use data-only formats with schema validation instead of native object deserialization.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-110842"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-110841","title":"n8n before 2.41.4 and 2.42.0 contains an authorization bypass in the agent chat resume endpoint, which accepts a run identifier from the request body without verifying that the suspended checkpoint belongs to the caller. Authenticated project members can list and read other members' private agent conversations through project-scoped endpoints, then approve their pending tool calls, causing the tools to execute and write results into the victim's conversation.","display_title":"Software component issue could allow unauthorized access","display_summary":"n8n before 2.41.4 and 2.42.0 contains an authorization bypass in the agent chat resume endpoint, which accepts a run identifier from the request body without verifying that the suspended checkpoint belongs to the caller.","display_reference":"CVE-2026-110841","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110841","source_title":"n8n before 2.41.4 and 2.42.0 contains an authorization bypass in the agent chat resume endpoint, which accepts a run identifier from the request body without verifying that the suspended checkpoint belongs to the caller. Authenticated project members can list and read other members' private agent conversations through project-scoped endpoints, then approve their pending tool calls, causing the tools to execute and write results into the victim's conversation.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T01:57:40.315Z","source_hash":"content-fingerprint:fnv1a-6c2c9836","affected_system":{"organization":"Software component project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-110841-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"n8n before 2.41.4 and 2.42.0 contains an authorization bypass in the agent chat resume endpoint, which accepts a run identifier from the request body without verifying that the suspended checkpoint belongs to the caller. Authenticated project members can list and read other members' private agent conversations through project-scoped endpoints, then approve their pending tool calls, causing the tools to execute and write results into the victim's conversation.","source_quote_or_pointer":"Security Advisory CVE-2026-110841","fact_id":"SEA-CVE-2026-110841-F1","document_citation":"Security Advisory CVE-2026-110841"},{"id":"SEA-CVE-2026-110841-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"n8n before 2.41.4 and 2.42.0 contains an authorization bypass in the agent chat resume endpoint, which accepts a run identifier from the request body without verifying that the suspended checkpoint belongs to the caller.","source_quote_or_pointer":"Advisory description (CVE-2026-110841)","fact_id":"SEA-CVE-2026-110841-F2","document_citation":"Advisory description (CVE-2026-110841)"}],"source_stated_contributors":["n8n before 2.41.4 and 2.42.0 contains an authorization bypass in the agent chat resume endpoint, which accepts a run identifier from the request body without verifying that the suspended checkpoint belongs to the caller."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-003","SEA-FM-010"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-110841","reporting_entity":"CVE-2026-110841","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-110841-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-110841-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-110841"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-110840","title":"n8n before 2.41.4 and 2.42.x before 2.42.1 contains an SQL injection vulnerability in version 1 of the Microsoft SQL node, which substitutes Query field expression values directly into SQL text without parameterisation. When a workflow binds untrusted input such as webhook fields to the Query field, unauthenticated external callers can execute arbitrary SQL against the connected database with the stored credential's privileges.","display_title":"Software component issue could expose or alter stored data","display_summary":"n8n before 2.41.4 and 2.42.x before 2.42.1 contains an SQL injection vulnerability in version 1 of the Microsoft SQL node, which substitutes Query field expression values directly into SQL text without parameterisation.","display_reference":"CVE-2026-110840","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110840","source_title":"n8n before 2.41.4 and 2.42.x before 2.42.1 contains an SQL injection vulnerability in version 1 of the Microsoft SQL node, which substitutes Query field expression values directly into SQL text without parameterisation. When a workflow binds untrusted input such as webhook fields to the Query field, unauthenticated external callers can execute arbitrary SQL against the connected database with the stored credential's privileges.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T01:57:40.315Z","source_hash":"content-fingerprint:fnv1a-5fafe64d","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-110840-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"n8n before 2.41.4 and 2.42.x before 2.42.1 contains an SQL injection vulnerability in version 1 of the Microsoft SQL node, which substitutes Query field expression values directly into SQL text without parameterisation. When a workflow binds untrusted input such as webhook fields to the Query field, unauthenticated external callers can execute arbitrary SQL against the connected database with the stored credential's privileges.","source_quote_or_pointer":"Security Advisory CVE-2026-110840","fact_id":"SEA-CVE-2026-110840-F1","document_citation":"Security Advisory CVE-2026-110840"},{"id":"SEA-CVE-2026-110840-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"n8n before 2.41.4 and 2.42.x before 2.42.1 contains an SQL injection vulnerability in version 1 of the Microsoft SQL node, which substitutes Query field expression values directly into SQL text without parameterisation.","source_quote_or_pointer":"Advisory description (CVE-2026-110840)","fact_id":"SEA-CVE-2026-110840-F2","document_citation":"Advisory description (CVE-2026-110840)"}],"source_stated_contributors":["n8n before 2.41.4 and 2.42.x before 2.42.1 contains an SQL injection vulnerability in version 1 of the Microsoft SQL node, which substitutes Query field expression values directly into SQL text without parameterisation."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","arch.external_api","arch.event_driven"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-110840","reporting_entity":"CVE-2026-110840","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-110840-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-110840-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-110840"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-110838","title":"FreeRDP shadow server from 3.0.0 before 3.32.0 dispatches input PDUs during the Confirm Active state before authentication, allowing unauthenticated attackers to inject keyboard input. Attackers can negotiate TLS-only RDP and send an input PDU without Confirm Active to inject synthetic keystrokes into the host user's X11 session via XTEST.","display_title":"Security issue reported in Software component","display_summary":"FreeRDP shadow server from 3.0.0 before 3.32.0 dispatches input PDUs during the Confirm Active state before authentication, allowing unauthenticated attackers to inject keyboard input.","display_reference":"CVE-2026-110838","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110838","source_title":"FreeRDP shadow server from 3.0.0 before 3.32.0 dispatches input PDUs during the Confirm Active state before authentication, allowing unauthenticated attackers to inject keyboard input. Attackers can negotiate TLS-only RDP and send an input PDU without Confirm Active to inject synthetic keystrokes into the host user's X11 session via XTEST.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T01:57:40.316Z","source_hash":"content-fingerprint:fnv1a-fd26b082","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-110838-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"FreeRDP shadow server from 3.0.0 before 3.32.0 dispatches input PDUs during the Confirm Active state before authentication, allowing unauthenticated attackers to inject keyboard input. Attackers can negotiate TLS-only RDP and send an input PDU without Confirm Active to inject synthetic keystrokes into the host user's X11 session via XTEST.","source_quote_or_pointer":"Security Advisory CVE-2026-110838","fact_id":"SEA-CVE-2026-110838-F1","document_citation":"Security Advisory CVE-2026-110838"},{"id":"SEA-CVE-2026-110838-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"FreeRDP shadow server from 3.0.0 before 3.32.0 dispatches input PDUs during the Confirm Active state before authentication, allowing unauthenticated attackers to inject keyboard input.","source_quote_or_pointer":"Advisory description (CVE-2026-110838)","fact_id":"SEA-CVE-2026-110838-F2","document_citation":"Advisory description (CVE-2026-110838)"}],"source_stated_contributors":["FreeRDP shadow server from 3.0.0 before 3.32.0 dispatches input PDUs during the Confirm Active state before authentication, allowing unauthenticated attackers to inject keyboard input."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-110838","reporting_entity":"CVE-2026-110838","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-110838-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-110838-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-110838"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-110833","title":"FreeRDP from 3.0.0-beta1 before 3.32.0 fails to enforce cumulative or absolute size limits when reassembling RDPDR channel fragments in the proxy. Attackers can send a FIRST fragment followed by continuation fragments without LAST, growing per-session heap streams proportional to traffic and exhausting proxy memory.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-110833","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110833","source_title":"FreeRDP from 3.0.0-beta1 before 3.32.0 fails to enforce cumulative or absolute size limits when reassembling RDPDR channel fragments in the proxy. Attackers can send a FIRST fragment followed by continuation fragments without LAST, growing per-session heap streams proportional to traffic and exhausting proxy memory.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T01:57:40.316Z","source_hash":"content-fingerprint:fnv1a-647924cb","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-110833-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"FreeRDP from 3.0.0-beta1 before 3.32.0 fails to enforce cumulative or absolute size limits when reassembling RDPDR channel fragments in the proxy. Attackers can send a FIRST fragment followed by continuation fragments without LAST, growing per-session heap streams proportional to traffic and exhausting proxy memory.","source_quote_or_pointer":"Security Advisory CVE-2026-110833","fact_id":"SEA-CVE-2026-110833-F1","document_citation":"Security Advisory CVE-2026-110833"},{"id":"SEA-CVE-2026-110833-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"FreeRDP from 3.0.0-beta1 before 3.32.0 fails to enforce cumulative or absolute size limits when reassembling RDPDR channel fragments in the proxy. Attackers can send a FIRST fragment followed by continuation fragments without LAST, growing per-session heap streams proportional to traffic and exhausting proxy memory.","source_quote_or_pointer":"Advisory description (CVE-2026-110833)","fact_id":"SEA-CVE-2026-110833-F2","document_citation":"Advisory description (CVE-2026-110833)"}],"source_stated_contributors":["FreeRDP from 3.0.0-beta1 before 3.32.0 fails to enforce cumulative or absolute size limits when reassembling RDPDR channel fragments in the proxy. Attackers can send a FIRST fragment followed by continuation fragments without LAST, growing per-session heap streams proportional to traffic and exhausting proxy memory."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["arch.async_job"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-110833","reporting_entity":"CVE-2026-110833","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-110833-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-110833-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-110833"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-110832","title":"FreeRDP from 2.0.0 before 3.32.0 contains a memory exhaustion vulnerability in wts_read_drdynvc_data_first that allows authenticated clients to force servers to commit large memory allocations. Attackers can send a seven-byte DATA_FIRST message on an opened DVC declaring a large 32-bit length, causing zeroed resident memory growth and server resource exhaustion.","display_title":"Software component issue could make the service unavailable","display_summary":"FreeRDP from 2.0.0 before 3.32.0 contains a memory exhaustion vulnerability in wtsreaddrdynvcdatafirst that allows authenticated clients to force servers to commit large memory allocations.","display_reference":"CVE-2026-110832","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110832","source_title":"FreeRDP from 2.0.0 before 3.32.0 contains a memory exhaustion vulnerability in wts_read_drdynvc_data_first that allows authenticated clients to force servers to commit large memory allocations. Attackers can send a seven-byte DATA_FIRST message on an opened DVC declaring a large 32-bit length, causing zeroed resident memory growth and server resource exhaustion.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T01:57:40.316Z","source_hash":"content-fingerprint:fnv1a-506a0250","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-110832-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"FreeRDP from 2.0.0 before 3.32.0 contains a memory exhaustion vulnerability in wts_read_drdynvc_data_first that allows authenticated clients to force servers to commit large memory allocations. Attackers can send a seven-byte DATA_FIRST message on an opened DVC declaring a large 32-bit length, causing zeroed resident memory growth and server resource exhaustion.","source_quote_or_pointer":"Security Advisory CVE-2026-110832","fact_id":"SEA-CVE-2026-110832-F1","document_citation":"Security Advisory CVE-2026-110832"},{"id":"SEA-CVE-2026-110832-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"FreeRDP from 2.0.0 before 3.32.0 contains a memory exhaustion vulnerability in wtsreaddrdynvcdatafirst that allows authenticated clients to force servers to commit large memory allocations.","source_quote_or_pointer":"Advisory description (CVE-2026-110832)","fact_id":"SEA-CVE-2026-110832-F2","document_citation":"Advisory description (CVE-2026-110832)"}],"source_stated_contributors":["FreeRDP from 2.0.0 before 3.32.0 contains a memory exhaustion vulnerability in wtsreaddrdynvcdatafirst that allows authenticated clients to force servers to commit large memory allocations."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-110832","reporting_entity":"CVE-2026-110832","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-110832-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-110832-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-110832"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-110829","title":"FreeRDP versions from 3.0.0 before 3.32.0 contain a null pointer dereference in the rdpsnd channel when a fragment sets CHANNEL_FLAG_LAST without CHANNEL_FLAG_FIRST. A malicious RDP server can send a malformed rdpsnd PDU on a fresh channel to crash the client and cause denial of service.","display_title":"Software component issue could make the service unavailable","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-110829","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110829","source_title":"FreeRDP versions from 3.0.0 before 3.32.0 contain a null pointer dereference in the rdpsnd channel when a fragment sets CHANNEL_FLAG_LAST without CHANNEL_FLAG_FIRST. A malicious RDP server can send a malformed rdpsnd PDU on a fresh channel to crash the client and cause denial of service.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T01:57:40.317Z","source_hash":"content-fingerprint:fnv1a-f8fffa0a","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-110829-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"FreeRDP versions from 3.0.0 before 3.32.0 contain a null pointer dereference in the rdpsnd channel when a fragment sets CHANNEL_FLAG_LAST without CHANNEL_FLAG_FIRST. A malicious RDP server can send a malformed rdpsnd PDU on a fresh channel to crash the client and cause denial of service.","source_quote_or_pointer":"Security Advisory CVE-2026-110829","fact_id":"SEA-CVE-2026-110829-F1","document_citation":"Security Advisory CVE-2026-110829"},{"id":"SEA-CVE-2026-110829-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"FreeRDP versions from 3.0.0 before 3.32.0 contain a null pointer dereference in the rdpsnd channel when a fragment sets CHANNELFLAGLAST without CHANNELFLAGFIRST. A malicious RDP server can send a malformed rdpsnd PDU on a fresh channel to crash the client and cause denial of service.","source_quote_or_pointer":"Advisory description (CVE-2026-110829)","fact_id":"SEA-CVE-2026-110829-F2","document_citation":"Advisory description (CVE-2026-110829)"}],"source_stated_contributors":["FreeRDP versions from 3.0.0 before 3.32.0 contain a null pointer dereference in the rdpsnd channel when a fragment sets CHANNELFLAGLAST without CHANNELFLAGFIRST. A malicious RDP server can send a malformed rdpsnd PDU on a fresh channel to crash the client and cause denial of service."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-110829","reporting_entity":"CVE-2026-110829","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-110829-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-110829-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-110829"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-110807","title":"A weakness has been identified in sgl-project SGLang up to 0.5.19. Affected by this vulnerability is an unknown functionality of the file python/sglang/srt/managers/io_struct.py of the component generate Endpoint. This manipulation of the argument session_params causes denial of service. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.","display_title":"Software component issue could make the service unavailable","display_summary":"A weakness has been identified in sgl-project SGLang up to 0.5.19. Affected by this vulnerability is an unknown functionality of the file python/sglang/srt/managers/iostruct.py of the component generate Endpoint.","display_reference":"CVE-2026-110807","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110807","source_title":"A weakness has been identified in sgl-project SGLang up to 0.5.19. Affected by this vulnerability is an unknown functionality of the file python/sglang/srt/managers/io_struct.py of the component generate Endpoint. This manipulation of the argument session_params causes denial of service. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T01:57:40.317Z","source_hash":"content-fingerprint:fnv1a-cb859ba0","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-110807-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A weakness has been identified in sgl-project SGLang up to 0.5.19. Affected by this vulnerability is an unknown functionality of the file python/sglang/srt/managers/io_struct.py of the component generate Endpoint. This manipulation of the argument session_params causes denial of service. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.","source_quote_or_pointer":"Security Advisory CVE-2026-110807","fact_id":"SEA-CVE-2026-110807-F1","document_citation":"Security Advisory CVE-2026-110807"},{"id":"SEA-CVE-2026-110807-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A weakness has been identified in sgl-project SGLang up to 0.5.19. Affected by this vulnerability is an unknown functionality of the file python/sglang/srt/managers/iostruct.py of the component generate Endpoint. This manipulation of the argument sessionparams causes denial of service.","source_quote_or_pointer":"Advisory description (CVE-2026-110807)","fact_id":"SEA-CVE-2026-110807-F2","document_citation":"Advisory description (CVE-2026-110807)"}],"source_stated_contributors":["A weakness has been identified in sgl-project SGLang up to 0.5.19. Affected by this vulnerability is an unknown functionality of the file python/sglang/srt/managers/iostruct.py of the component generate Endpoint. This manipulation of the argument sessionparams causes denial of service."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.public_publication"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-110807","reporting_entity":"CVE-2026-110807","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-110807-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-110807-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-110807"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108336","title":"When the default self-signed certificate is used, an attacker could gain administrative access to the application. The SSL certificate for the web interface is used to sign JWT access tokens that are used to validate that the user is logged in. When the default SSL certificate is used, an attacker could have the capability to sign JWT access tokens and bypass login. An attacker could gain administrative access to the application and perform actions like configuring the service or requesting log collection. Device credentials and customer data cannot be accessed with this vulnerability.","display_title":"Software component issue could expose accounts or credentials","display_summary":"When the default self-signed certificate is used, an attacker could gain administrative access to the application.","display_reference":"CVE-2026-108336","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108336","source_title":"When the default self-signed certificate is used, an attacker could gain administrative access to the application. The SSL certificate for the web interface is used to sign JWT access tokens that are used to validate that the user is logged in. When the default SSL certificate is used, an attacker could have the capability to sign JWT access tokens and bypass login. An attacker could gain administrative access to the application and perform actions like configuring the service or requesting log collection. Device credentials and customer data cannot be accessed with this vulnerability.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T01:57:40.318Z","source_hash":"content-fingerprint:fnv1a-86ed6c78","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108336-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"When the default self-signed certificate is used, an attacker could gain administrative access to the application. The SSL certificate for the web interface is used to sign JWT access tokens that are used to validate that the user is logged in. When the default SSL certificate is used, an attacker could have the capability to sign JWT access tokens and bypass login. An attacker could gain administrative access to the application and perform actions like configuring the service or requesting log collection. Device credentials and customer data cannot be accessed with this vulnerability.","source_quote_or_pointer":"Security Advisory CVE-2026-108336","fact_id":"SEA-CVE-2026-108336-F1","document_citation":"Security Advisory CVE-2026-108336"},{"id":"SEA-CVE-2026-108336-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"When the default self-signed certificate is used, an attacker could gain administrative access to the application.","source_quote_or_pointer":"Advisory description (CVE-2026-108336)","fact_id":"SEA-CVE-2026-108336-F2","document_citation":"Advisory description (CVE-2026-108336)"}],"source_stated_contributors":["When the default self-signed certificate is used, an attacker could gain administrative access to the application."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.infrastructure_modification","data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108336","reporting_entity":"CVE-2026-108336","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108336-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108336-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108336"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108335","title":"When the password reset functionality is enabled, and email is configured, an attacker could take over any account using a brute-force attack. There is no rate limiting on the attempts to enter the reset code, leading to the possibility of a brute force solution to the password reset challenge. An attacker could gain administrative access to the application and perform actions like configuring the service or requesting log collection. Device credentials and customer data cannot be accessed with this vulnerability.","display_title":"Software component issue could expose accounts or credentials","display_summary":"When the password reset functionality is enabled, and email is configured, an attacker could take over any account using a brute-force attack.","display_reference":"CVE-2026-108335","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108335","source_title":"When the password reset functionality is enabled, and email is configured, an attacker could take over any account using a brute-force attack. There is no rate limiting on the attempts to enter the reset code, leading to the possibility of a brute force solution to the password reset challenge. An attacker could gain administrative access to the application and perform actions like configuring the service or requesting log collection. Device credentials and customer data cannot be accessed with this vulnerability.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T01:57:40.319Z","source_hash":"content-fingerprint:fnv1a-71f28ac1","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108335-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"When the password reset functionality is enabled, and email is configured, an attacker could take over any account using a brute-force attack. There is no rate limiting on the attempts to enter the reset code, leading to the possibility of a brute force solution to the password reset challenge. An attacker could gain administrative access to the application and perform actions like configuring the service or requesting log collection. Device credentials and customer data cannot be accessed with this vulnerability.","source_quote_or_pointer":"Security Advisory CVE-2026-108335","fact_id":"SEA-CVE-2026-108335-F1","document_citation":"Security Advisory CVE-2026-108335"},{"id":"SEA-CVE-2026-108335-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"When the password reset functionality is enabled, and email is configured, an attacker could take over any account using a brute-force attack.","source_quote_or_pointer":"Advisory description (CVE-2026-108335)","fact_id":"SEA-CVE-2026-108335-F2","document_citation":"Advisory description (CVE-2026-108335)"}],"source_stated_contributors":["When the password reset functionality is enabled, and email is configured, an attacker could take over any account using a brute-force attack."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108335","reporting_entity":"CVE-2026-108335","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108335-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108335-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108335"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-77427","title":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. From 3.9.0 until 3.22.0, pristine manual FileRise installations without PERSISTENT_TOKENS_KEY or metadata/persistent_tokens.key can activate a published legacy compatibility key. If an attacker separately obtains ciphertext-bearing account or configuration files, the known fallback key can enable decryption of TOTP secrets or credentials. Docker installations already generated a unique persistent key, and existing installations are not automatically rotated because doing so could make encrypted state unreadable. This issue is fixed in version 3.22.0.","display_title":"Software component issue could expose accounts or credentials","display_summary":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. From 3.9.0 until 3.22.0, pristine manual FileRise installations without PERSISTENTTOKENSKEY or…","display_reference":"CVE-2026-77427","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-77427","source_title":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. From 3.9.0 until 3.22.0, pristine manual FileRise installations without PERSISTENT_TOKENS_KEY or metadata/persistent_tokens.key can activate a published legacy compatibility key. If an attacker separately obtains ciphertext-bearing account or configuration files, the known fallback key can enable decryption of TOTP secrets or credentials. Docker installations already generated a unique persistent key, and existing installations are not automatically rotated because doing so could make encrypted state unreadable. This issue is fixed in version 3.22.0.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T01:57:40.319Z","source_hash":"content-fingerprint:fnv1a-5209cfee","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Cloud & container infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-77427-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. From 3.9.0 until 3.22.0, pristine manual FileRise installations without PERSISTENT_TOKENS_KEY or metadata/persistent_tokens.key can activate a published legacy compatibility key. If an attacker separately obtains ciphertext-bearing account or configuration files, the known fallback key can enable decryption of TOTP secrets or credentials. Docker installations already generated a unique persistent key, and existing installations are not automatically rotated because doing so could make encrypted state unreadable. This issue is fixed in version 3.22.0.","source_quote_or_pointer":"Security Advisory CVE-2026-77427","fact_id":"SEA-CVE-2026-77427-F1","document_citation":"Security Advisory CVE-2026-77427"},{"id":"SEA-CVE-2026-77427-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. From 3.9.0 until 3.22.0, pristine manual FileRise installations without PERSISTENTTOKENSKEY or metadata/persistenttokens.key can activate a published legacy compatibility key.","source_quote_or_pointer":"Advisory description (CVE-2026-77427)","fact_id":"SEA-CVE-2026-77427-F2","document_citation":"Advisory description (CVE-2026-77427)"}],"source_stated_contributors":["FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. From 3.9.0 until 3.22.0, pristine manual FileRise installations without PERSISTENTTOKENSKEY or metadata/persistenttokens.key can activate a published legacy compatibility key."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.code_execution","data.credentials_secrets","data.uploaded_files","arch.async_job"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-77427","reporting_entity":"CVE-2026-77427","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-77427-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-77427-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-77427"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-71854","title":"OpenAEV is an open source platform allowing organizations to plan, schedule and conduct cyber adversary simulation campaign and tests. Prior to version 2.260622.0, on a default installation, the /api/player/ lessons endpoints can be called without authentication, and they trust a client-supplied userId query parameter without verifying that the caller is that user or a member of the exercise. An unauthenticated client that knows an exercise UUID can read lessons-learned questions and answers (including each answer's author identity) and create or overwrite answers attributed to an arbitrary user. Version 2.260622.0 contains a patch.","display_title":"Security issue reported in Software component","display_summary":"OpenAEV is an open source platform allowing organizations to plan, schedule and conduct cyber adversary simulation campaign and tests.","display_reference":"CVE-2026-71854","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-71854","source_title":"OpenAEV is an open source platform allowing organizations to plan, schedule and conduct cyber adversary simulation campaign and tests. Prior to version 2.260622.0, on a default installation, the /api/player/ lessons endpoints can be called without authentication, and they trust a client-supplied userId query parameter without verifying that the caller is that user or a member of the exercise. An unauthenticated client that knows an exercise UUID can read lessons-learned questions and answers (including each answer's author identity) and create or overwrite answers attributed to an arbitrary user. Version 2.260622.0 contains a patch.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T01:57:40.321Z","source_hash":"content-fingerprint:fnv1a-1bee9fea","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-71854-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"OpenAEV is an open source platform allowing organizations to plan, schedule and conduct cyber adversary simulation campaign and tests. Prior to version 2.260622.0, on a default installation, the /api/player/ lessons endpoints can be called without authentication, and they trust a client-supplied userId query parameter without verifying that the caller is that user or a member of the exercise. An unauthenticated client that knows an exercise UUID can read lessons-learned questions and answers (including each answer's author identity) and create or overwrite answers attributed to an arbitrary user. Version 2.260622.0 contains a patch.","source_quote_or_pointer":"Security Advisory CVE-2026-71854","fact_id":"SEA-CVE-2026-71854-F1","document_citation":"Security Advisory CVE-2026-71854"},{"id":"SEA-CVE-2026-71854-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"OpenAEV is an open source platform allowing organizations to plan, schedule and conduct cyber adversary simulation campaign and tests. Prior to version 2.260622.0, on a default installation, the /api/player/ lessons endpoints can be called without authentication, and they trust a client-supplied userId query parameter…","source_quote_or_pointer":"Advisory description (CVE-2026-71854)","fact_id":"SEA-CVE-2026-71854-F2","document_citation":"Advisory description (CVE-2026-71854)"}],"source_stated_contributors":["OpenAEV is an open source platform allowing organizations to plan, schedule and conduct cyber adversary simulation campaign and tests. Prior to version 2.260622.0, on a default installation, the /api/player/ lessons endpoints can be called without authentication, and they trust a client-supplied userId query parameter…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-71854","reporting_entity":"CVE-2026-71854","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-71854-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-71854-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-71854"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-69191","title":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.21.0, FileRise enforces disableFormLogin, disableBasicAuth, and disableOIDCLogin in the client interface but not consistently in the corresponding server-side authentication flows. A user with otherwise valid credentials for a disabled method can call its backend endpoint directly and authenticate despite the administrator's login-method policy. The flaw does not permit credential-free authentication. This issue is fixed in version 3.21.0.","display_title":"Software component issue could expose accounts or credentials","display_summary":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.21.0, FileRise enforces disableFormLogin, disableBasicAuth, and disableOIDCLogin in the client interface…","display_reference":"CVE-2026-69191","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-69191","source_title":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.21.0, FileRise enforces disableFormLogin, disableBasicAuth, and disableOIDCLogin in the client interface but not consistently in the corresponding server-side authentication flows. A user with otherwise valid credentials for a disabled method can call its backend endpoint directly and authenticate despite the administrator's login-method policy. The flaw does not permit credential-free authentication. This issue is fixed in version 3.21.0.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T01:57:40.322Z","source_hash":"content-fingerprint:fnv1a-98e8dd0f","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-69191-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.21.0, FileRise enforces disableFormLogin, disableBasicAuth, and disableOIDCLogin in the client interface but not consistently in the corresponding server-side authentication flows. A user with otherwise valid credentials for a disabled method can call its backend endpoint directly and authenticate despite the administrator's login-method policy. The flaw does not permit credential-free authentication. This issue is fixed in version 3.21.0.","source_quote_or_pointer":"Security Advisory CVE-2026-69191","fact_id":"SEA-CVE-2026-69191-F1","document_citation":"Security Advisory CVE-2026-69191"},{"id":"SEA-CVE-2026-69191-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.21.0, FileRise enforces disableFormLogin, disableBasicAuth, and disableOIDCLogin in the client interface but not consistently in the corresponding server-side authentication flows.","source_quote_or_pointer":"Advisory description (CVE-2026-69191)","fact_id":"SEA-CVE-2026-69191-F2","document_citation":"Advisory description (CVE-2026-69191)"}],"source_stated_contributors":["FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.21.0, FileRise enforces disableFormLogin, disableBasicAuth, and disableOIDCLogin in the client interface but not consistently in the corresponding server-side authentication flows."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii","data.credentials_secrets","data.uploaded_files","arch.async_job"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-69191","reporting_entity":"CVE-2026-69191","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-69191-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-69191-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-69191"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-64856","title":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.20.0, FileRise /api/file/snippet.php does not apply the standard authenticated-session guard before processing short text preview requests. The endpoint still performs FileRise ACL checks, so normal installations do not expose an unauthenticated arbitrary file read, but unauthenticated requests can reach ACL evaluation instead of receiving an immediate 401 response. Only additional unusual proxy-header or ACL misconfiguration is documented as allowing requests to proceed into path and file-content handling. This issue is fixed in version 3.20.0.","display_title":"Software component issue could expose restricted files","display_summary":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.20.0, FileRise /api/file/snippet.php does not apply the standard authenticated-session guard before…","display_reference":"CVE-2026-64856","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64856","source_title":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.20.0, FileRise /api/file/snippet.php does not apply the standard authenticated-session guard before processing short text preview requests. The endpoint still performs FileRise ACL checks, so normal installations do not expose an unauthenticated arbitrary file read, but unauthenticated requests can reach ACL evaluation instead of receiving an immediate 401 response. Only additional unusual proxy-header or ACL misconfiguration is documented as allowing requests to proceed into path and file-content handling. This issue is fixed in version 3.20.0.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T01:57:40.322Z","source_hash":"content-fingerprint:fnv1a-526283e2","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-64856-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.20.0, FileRise /api/file/snippet.php does not apply the standard authenticated-session guard before processing short text preview requests. The endpoint still performs FileRise ACL checks, so normal installations do not expose an unauthenticated arbitrary file read, but unauthenticated requests can reach ACL evaluation instead of receiving an immediate 401 response. Only additional unusual proxy-header or ACL misconfiguration is documented as allowing requests to proceed into path and file-content handling. This issue is fixed in version 3.20.0.","source_quote_or_pointer":"Security Advisory CVE-2026-64856","fact_id":"SEA-CVE-2026-64856-F1","document_citation":"Security Advisory CVE-2026-64856"},{"id":"SEA-CVE-2026-64856-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.20.0, FileRise /api/file/snippet.php does not apply the standard authenticated-session guard before processing short text preview requests.","source_quote_or_pointer":"Advisory description (CVE-2026-64856)","fact_id":"SEA-CVE-2026-64856-F2","document_citation":"Advisory description (CVE-2026-64856)"}],"source_stated_contributors":["FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.20.0, FileRise /api/file/snippet.php does not apply the standard authenticated-session guard before processing short text preview requests."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.uploaded_files","arch.async_job"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Restricted file exposure","File overwrite"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-64856","reporting_entity":"CVE-2026-64856","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-64856-SG1","label":"Confine file access to a fixed root","description":"Resolve paths to canonical form and reject anything outside the intended directory before opening files.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-64856-SG1","label":"Confine file access to a fixed root","description":"Resolve paths to canonical form and reject anything outside the intended directory before opening files.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"File paths supplied by a caller escaped the intended directory. Canonicalise paths and confine file access to a fixed root.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-64856"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-62664","title":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.19.0, FileRise validates the complete folderName string but does not reject dot-dot path segments before FolderModel::createFolder() constructs and creates the destination. An authenticated low-privileged user with a valid CSRF token and create or owner permission on the parent can submit traversal segments to POST /api/folder/createFolder.php and create directories outside UPLOAD_DIR wherever the web-server account can write. This issue is fixed in version 3.19.0.","display_title":"Security issue reported in Software component","display_summary":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.19.0, FileRise validates the complete folderName string but does not reject dot-dot path segments before…","display_reference":"CVE-2026-62664","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-62664","source_title":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.19.0, FileRise validates the complete folderName string but does not reject dot-dot path segments before FolderModel::createFolder() constructs and creates the destination. An authenticated low-privileged user with a valid CSRF token and create or owner permission on the parent can submit traversal segments to POST /api/folder/createFolder.php and create directories outside UPLOAD_DIR wherever the web-server account can write. This issue is fixed in version 3.19.0.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T01:57:40.322Z","source_hash":"content-fingerprint:fnv1a-6369c7eb","affected_system":{"organization":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.19.0, FileRise validates the complete folderName string but does not reject dot-dot path segments before FolderModel project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-62664-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.19.0, FileRise validates the complete folderName string but does not reject dot-dot path segments before FolderModel::createFolder() constructs and creates the destination. An authenticated low-privileged user with a valid CSRF token and create or owner permission on the parent can submit traversal segments to POST /api/folder/createFolder.php and create directories outside UPLOAD_DIR wherever the web-server account can write. This issue is fixed in version 3.19.0.","source_quote_or_pointer":"Security Advisory CVE-2026-62664","fact_id":"SEA-CVE-2026-62664-F1","document_citation":"Security Advisory CVE-2026-62664"},{"id":"SEA-CVE-2026-62664-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.19.0, FileRise validates the complete folderName string but does not reject dot-dot path segments before FolderModel::createFolder() constructs and creates the destination.","source_quote_or_pointer":"Advisory description (CVE-2026-62664)","fact_id":"SEA-CVE-2026-62664-F2","document_citation":"Advisory description (CVE-2026-62664)"}],"source_stated_contributors":["FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.19.0, FileRise validates the complete folderName string but does not reject dot-dot path segments before FolderModel::createFolder() constructs and creates the destination."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.write_action","data.pii","data.uploaded_files","arch.async_job"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-62664","reporting_entity":"CVE-2026-62664","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-62664-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-62664-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-62664"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-61843","title":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.18.0, FileRise upload-enabled shared-folder and upload-only links do not reject a destination filename that already exists. An unauthenticated visitor with a valid share token and any configured share password can upload a file with the same name as an existing file and silently replace its content while the original uploader metadata remains. The same replacement gap affects ordinary authenticated uploads through /api/upload/upload.php and authenticated upload-only users who lack edit authority over the existing file. This issue is fixed in version 3.18.0.","display_title":"Security issue reported in Software component","display_summary":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.18.0, FileRise upload-enabled shared-folder and upload-only links do not reject a destination filename…","display_reference":"CVE-2026-61843","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-61843","source_title":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.18.0, FileRise upload-enabled shared-folder and upload-only links do not reject a destination filename that already exists. An unauthenticated visitor with a valid share token and any configured share password can upload a file with the same name as an existing file and silently replace its content while the original uploader metadata remains. The same replacement gap affects ordinary authenticated uploads through /api/upload/upload.php and authenticated upload-only users who lack edit authority over the existing file. This issue is fixed in version 3.18.0.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T01:57:40.323Z","source_hash":"content-fingerprint:fnv1a-e202f2f7","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-61843-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.18.0, FileRise upload-enabled shared-folder and upload-only links do not reject a destination filename that already exists. An unauthenticated visitor with a valid share token and any configured share password can upload a file with the same name as an existing file and silently replace its content while the original uploader metadata remains. The same replacement gap affects ordinary authenticated uploads through /api/upload/upload.php and authenticated upload-only users who lack edit authority over the existing file. This issue is fixed in version 3.18.0.","source_quote_or_pointer":"Security Advisory CVE-2026-61843","fact_id":"SEA-CVE-2026-61843-F1","document_citation":"Security Advisory CVE-2026-61843"},{"id":"SEA-CVE-2026-61843-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.18.0, FileRise upload-enabled shared-folder and upload-only links do not reject a destination filename that already exists.","source_quote_or_pointer":"Advisory description (CVE-2026-61843)","fact_id":"SEA-CVE-2026-61843-F2","document_citation":"Advisory description (CVE-2026-61843)"}],"source_stated_contributors":["FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.18.0, FileRise upload-enabled shared-folder and upload-only links do not reject a destination filename that already exists."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","data.credentials_secrets","data.uploaded_files","arch.async_job"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-61843","reporting_entity":"CVE-2026-61843","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-61843-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-61843-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-61843"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-57491","title":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.16.0, FileRise archive extraction does not apply UploadNamePolicy::isAllowedForWrite() before ZipArchive::extractTo() writes entries into the destination directory. An authenticated user with upload and extract permissions can place a blocked extension such as a PHP-family file inside a ZIP and cause it to be written to disk even when normal uploads reject that filename. Post-extraction metadata pruning does not remove the blocked file, so deployments that execute uploaded content may permit code execution. This issue is fixed in version 3.16.0.","display_title":"Software component issue could allow unintended commands to run","display_summary":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.16.0, FileRise archive extraction does not apply UploadNamePolicy::isAllowedForWrite() before…","display_reference":"CVE-2026-57491","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-57491","source_title":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.16.0, FileRise archive extraction does not apply UploadNamePolicy::isAllowedForWrite() before ZipArchive::extractTo() writes entries into the destination directory. An authenticated user with upload and extract permissions can place a blocked extension such as a PHP-family file inside a ZIP and cause it to be written to disk even when normal uploads reject that filename. Post-extraction metadata pruning does not remove the blocked file, so deployments that execute uploaded content may permit code execution. This issue is fixed in version 3.16.0.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T01:57:40.323Z","source_hash":"content-fingerprint:fnv1a-30e87eb3","affected_system":{"organization":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.16.0, FileRise archive extraction does not apply UploadNamePolicy project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-57491-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.16.0, FileRise archive extraction does not apply UploadNamePolicy::isAllowedForWrite() before ZipArchive::extractTo() writes entries into the destination directory. An authenticated user with upload and extract permissions can place a blocked extension such as a PHP-family file inside a ZIP and cause it to be written to disk even when normal uploads reject that filename. Post-extraction metadata pruning does not remove the blocked file, so deployments that execute uploaded content may permit code execution. This issue is fixed in version 3.16.0.","source_quote_or_pointer":"Security Advisory CVE-2026-57491","fact_id":"SEA-CVE-2026-57491-F1","document_citation":"Security Advisory CVE-2026-57491"},{"id":"SEA-CVE-2026-57491-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.16.0, FileRise archive extraction does not apply UploadNamePolicy::isAllowedForWrite() before ZipArchive::extractTo() writes entries into the destination directory.","source_quote_or_pointer":"Advisory description (CVE-2026-57491)","fact_id":"SEA-CVE-2026-57491-F2","document_citation":"Advisory description (CVE-2026-57491)"}],"source_stated_contributors":["FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.16.0, FileRise archive extraction does not apply UploadNamePolicy::isAllowedForWrite() before ZipArchive::extractTo() writes entries into the destination directory."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.write_action","data.pii","data.uploaded_files","arch.async_job"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-57491","reporting_entity":"CVE-2026-57491","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-57491-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-57491-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-57491"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-57490","title":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.16.0, when an administrator has enabled WebDAV, FileRise WebDAV Basic authentication validates only the account username and password through AuthModel::authenticate() and does not enforce the account's configured TOTP factor. An attacker who knows valid primary credentials for a TOTP-enabled account can authenticate to the enabled WebDAV service without supplying the second factor and exercise the account's WebDAV file permissions. The browser login path enforces TOTP, but the separate public/webdav.php authentication callback did not. This issue is fixed in version 3.16.0.","display_title":"Software component issue could expose accounts or credentials","display_summary":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.16.0, when an administrator has enabled WebDAV, FileRise WebDAV Basic authentication validates only the…","display_reference":"CVE-2026-57490","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-57490","source_title":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.16.0, when an administrator has enabled WebDAV, FileRise WebDAV Basic authentication validates only the account username and password through AuthModel::authenticate() and does not enforce the account's configured TOTP factor. An attacker who knows valid primary credentials for a TOTP-enabled account can authenticate to the enabled WebDAV service without supplying the second factor and exercise the account's WebDAV file permissions. The browser login path enforces TOTP, but the separate public/webdav.php authentication callback did not. This issue is fixed in version 3.16.0.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T01:57:40.324Z","source_hash":"content-fingerprint:fnv1a-146300bc","affected_system":{"organization":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.16.0, when an administrator has enabled WebDAV, FileRise WebDAV Basic authentication validates only the account username and password through AuthModel project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-57490-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.16.0, when an administrator has enabled WebDAV, FileRise WebDAV Basic authentication validates only the account username and password through AuthModel::authenticate() and does not enforce the account's configured TOTP factor. An attacker who knows valid primary credentials for a TOTP-enabled account can authenticate to the enabled WebDAV service without supplying the second factor and exercise the account's WebDAV file permissions. The browser login path enforces TOTP, but the separate public/webdav.php authentication callback did not. This issue is fixed in version 3.16.0.","source_quote_or_pointer":"Security Advisory CVE-2026-57490","fact_id":"SEA-CVE-2026-57490-F1","document_citation":"Security Advisory CVE-2026-57490"},{"id":"SEA-CVE-2026-57490-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.16.0, when an administrator has enabled WebDAV, FileRise WebDAV Basic authentication validates only the account username and password through AuthModel::authenticate() and does not enforce the account's…","source_quote_or_pointer":"Advisory description (CVE-2026-57490)","fact_id":"SEA-CVE-2026-57490-F2","document_citation":"Advisory description (CVE-2026-57490)"}],"source_stated_contributors":["FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.16.0, when an administrator has enabled WebDAV, FileRise WebDAV Basic authentication validates only the account username and password through AuthModel::authenticate() and does not enforce the account's…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.public_publication","data.credentials_secrets","data.uploaded_files","arch.async_job"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-57490","reporting_entity":"CVE-2026-57490","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-57490-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-57490-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-57490"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-57489","title":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.16.0, FileRise deployments with AUTH_BYPASS enabled trust the configured reverse-proxy identity header without verifying that the request originated from FR_TRUSTED_PROXIES. When the backend application port is reachable directly, an unauthenticated attacker can supply X-Remote-User and obtain a session for the asserted account, including an administrator account, without a password or MFA. The flaw is limited to deployments that enable proxy-header authentication and expose an untrusted path to the backend. This issue is fixed in version 3.16.0.","display_title":"Security issue reported in Software component","display_summary":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.16.0, FileRise deployments with AUTHBYPASS enabled trust the configured reverse-proxy identity header…","display_reference":"CVE-2026-57489","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-57489","source_title":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.16.0, FileRise deployments with AUTH_BYPASS enabled trust the configured reverse-proxy identity header without verifying that the request originated from FR_TRUSTED_PROXIES. When the backend application port is reachable directly, an unauthenticated attacker can supply X-Remote-User and obtain a session for the asserted account, including an administrator account, without a password or MFA. The flaw is limited to deployments that enable proxy-header authentication and expose an untrusted path to the backend. This issue is fixed in version 3.16.0.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T01:57:40.324Z","source_hash":"content-fingerprint:fnv1a-b710d792","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-57489-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.16.0, FileRise deployments with AUTH_BYPASS enabled trust the configured reverse-proxy identity header without verifying that the request originated from FR_TRUSTED_PROXIES. When the backend application port is reachable directly, an unauthenticated attacker can supply X-Remote-User and obtain a session for the asserted account, including an administrator account, without a password or MFA. The flaw is limited to deployments that enable proxy-header authentication and expose an untrusted path to the backend. This issue is fixed in version 3.16.0.","source_quote_or_pointer":"Security Advisory CVE-2026-57489","fact_id":"SEA-CVE-2026-57489-F1","document_citation":"Security Advisory CVE-2026-57489"},{"id":"SEA-CVE-2026-57489-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.16.0, FileRise deployments with AUTHBYPASS enabled trust the configured reverse-proxy identity header without verifying that the request originated from FRTRUSTEDPROXIES.","source_quote_or_pointer":"Advisory description (CVE-2026-57489)","fact_id":"SEA-CVE-2026-57489-F2","document_citation":"Advisory description (CVE-2026-57489)"}],"source_stated_contributors":["FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.16.0, FileRise deployments with AUTHBYPASS enabled trust the configured reverse-proxy identity header without verifying that the request originated from FRTRUSTEDPROXIES."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii","data.credentials_secrets","data.uploaded_files","arch.async_job"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-57489","reporting_entity":"CVE-2026-57489","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-57489-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-57489-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-57489"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-110718","title":"TurboDocx html-to-docx through 1.23.1 contains a server-side request forgery vulnerability that allows attackers supplying HTML to make the server fetch internal URLs via img src attributes. Attackers can reference loopback, private, or cloud metadata addresses that bypass the loose isValidUrl() check, and read responses embedded in the generated DOCX word/media folder.","display_title":"Software component issue could reach internal services","display_summary":"TurboDocx html-to-docx through 1.23.1 contains a server-side request forgery vulnerability that allows attackers supplying HTML to make the server fetch internal URLs via img src attributes.","display_reference":"CVE-2026-110718","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110718","source_title":"TurboDocx html-to-docx through 1.23.1 contains a server-side request forgery vulnerability that allows attackers supplying HTML to make the server fetch internal URLs via img src attributes. Attackers can reference loopback, private, or cloud metadata addresses that bypass the loose isValidUrl() check, and read responses embedded in the generated DOCX word/media folder.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T01:57:40.325Z","source_hash":"content-fingerprint:fnv1a-f401d61","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Cloud & container infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-110718-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"TurboDocx html-to-docx through 1.23.1 contains a server-side request forgery vulnerability that allows attackers supplying HTML to make the server fetch internal URLs via img src attributes. Attackers can reference loopback, private, or cloud metadata addresses that bypass the loose isValidUrl() check, and read responses embedded in the generated DOCX word/media folder.","source_quote_or_pointer":"Security Advisory CVE-2026-110718","fact_id":"SEA-CVE-2026-110718-F1","document_citation":"Security Advisory CVE-2026-110718"},{"id":"SEA-CVE-2026-110718-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"TurboDocx html-to-docx through 1.23.1 contains a server-side request forgery vulnerability that allows attackers supplying HTML to make the server fetch internal URLs via img src attributes.","source_quote_or_pointer":"Advisory description (CVE-2026-110718)","fact_id":"SEA-CVE-2026-110718-F2","document_citation":"Advisory description (CVE-2026-110718)"}],"source_stated_contributors":["TurboDocx html-to-docx through 1.23.1 contains a server-side request forgery vulnerability that allows attackers supplying HTML to make the server fetch internal URLs via img src attributes."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Internal network access","Cloud metadata or credential exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-110718","reporting_entity":"CVE-2026-110718","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-110718-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-110718-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"The service fetched a URL chosen by the caller and could be steered at internal systems. Restrict outbound destinations and block internal address ranges.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-110718"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-110670","title":"A vulnerability was found in cemtan sar2html 4.0.0. The affected element is the function updateDb of the file sar2html.py of the component Archive Processing. The manipulation of the argument s2host results in sql injection. The attack can be launched remotely. The project was informed of the problem early through an issue report but has not responded yet.","display_title":"Software component issue could expose or alter stored data","display_summary":"A vulnerability was found in cemtan sar2html 4.0.0. The affected element is the function updateDb of the file sar2html.py of the component Archive Processing.","display_reference":"CVE-2026-110670","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110670","source_title":"A vulnerability was found in cemtan sar2html 4.0.0. The affected element is the function updateDb of the file sar2html.py of the component Archive Processing. The manipulation of the argument s2host results in sql injection. The attack can be launched remotely. The project was informed of the problem early through an issue report but has not responded yet.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T01:57:40.325Z","source_hash":"content-fingerprint:fnv1a-e7f0e4f8","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-110670-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability was found in cemtan sar2html 4.0.0. The affected element is the function updateDb of the file sar2html.py of the component Archive Processing. The manipulation of the argument s2host results in sql injection. The attack can be launched remotely. The project was informed of the problem early through an issue report but has not responded yet.","source_quote_or_pointer":"Security Advisory CVE-2026-110670","fact_id":"SEA-CVE-2026-110670-F1","document_citation":"Security Advisory CVE-2026-110670"},{"id":"SEA-CVE-2026-110670-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability was found in cemtan sar2html 4.0.0. The affected element is the function updateDb of the file sar2html.py of the component Archive Processing. The manipulation of the argument s2host results in sql injection. The attack can be launched remotely.","source_quote_or_pointer":"Advisory description (CVE-2026-110670)","fact_id":"SEA-CVE-2026-110670-F2","document_citation":"Advisory description (CVE-2026-110670)"}],"source_stated_contributors":["A vulnerability was found in cemtan sar2html 4.0.0. The affected element is the function updateDb of the file sar2html.py of the component Archive Processing. The manipulation of the argument s2host results in sql injection. The attack can be launched remotely."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-110670","reporting_entity":"CVE-2026-110670","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-110670-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-110670-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-110670"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-110650","title":"The thumbnail Python package through 1.5 contains an OS command injection vulnerability in generate_thumbnail() that allows attackers to execute commands by supplying shell metacharacters in file paths. Attackers who control a file name passed to generate_thumbnail, such as an uploaded file, can inject commands into os.system() calls running ffmpeg, convert or unoconv with the Python process privileges.","display_title":"Software component issue could allow unintended commands to run","display_summary":"The thumbnail Python package through 1.5 contains an OS command injection vulnerability in generatethumbnail() that allows attackers to execute commands by supplying shell metacharacters in file paths.","display_reference":"CVE-2026-110650","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110650","source_title":"The thumbnail Python package through 1.5 contains an OS command injection vulnerability in generate_thumbnail() that allows attackers to execute commands by supplying shell metacharacters in file paths. Attackers who control a file name passed to generate_thumbnail, such as an uploaded file, can inject commands into os.system() calls running ffmpeg, convert or unoconv with the Python process privileges.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T01:57:40.325Z","source_hash":"content-fingerprint:fnv1a-82fc22c8","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-110650-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The thumbnail Python package through 1.5 contains an OS command injection vulnerability in generate_thumbnail() that allows attackers to execute commands by supplying shell metacharacters in file paths. Attackers who control a file name passed to generate_thumbnail, such as an uploaded file, can inject commands into os.system() calls running ffmpeg, convert or unoconv with the Python process privileges.","source_quote_or_pointer":"Security Advisory CVE-2026-110650","fact_id":"SEA-CVE-2026-110650-F1","document_citation":"Security Advisory CVE-2026-110650"},{"id":"SEA-CVE-2026-110650-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The thumbnail Python package through 1.5 contains an OS command injection vulnerability in generatethumbnail() that allows attackers to execute commands by supplying shell metacharacters in file paths.","source_quote_or_pointer":"Advisory description (CVE-2026-110650)","fact_id":"SEA-CVE-2026-110650-F2","document_citation":"Advisory description (CVE-2026-110650)"}],"source_stated_contributors":["The thumbnail Python package through 1.5 contains an OS command injection vulnerability in generatethumbnail() that allows attackers to execute commands by supplying shell metacharacters in file paths."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-110650","reporting_entity":"CVE-2026-110650","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-110650-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-110650-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-110650"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-110645","title":"Video-stitch before 2.0.0-beta.1 contains an OS command injection vulnerability that allows attackers to execute commands by supplying file names interpolated unquoted into shell-executed ffmpeg command lines. Attackers who influence file names passed to concat(), cut(), or merge() can inject shell metacharacters to run commands with the Node.js process privileges.","display_title":"Software component issue could allow unintended commands to run","display_summary":"Video-stitch before 2.0.0-beta.1 contains an OS command injection vulnerability that allows attackers to execute commands by supplying file names interpolated unquoted into shell-executed ffmpeg command lines.","display_reference":"CVE-2026-110645","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110645","source_title":"Video-stitch before 2.0.0-beta.1 contains an OS command injection vulnerability that allows attackers to execute commands by supplying file names interpolated unquoted into shell-executed ffmpeg command lines. Attackers who influence file names passed to concat(), cut(), or merge() can inject shell metacharacters to run commands with the Node.js process privileges.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T01:57:40.325Z","source_hash":"content-fingerprint:fnv1a-69fa2340","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-110645-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Video-stitch before 2.0.0-beta.1 contains an OS command injection vulnerability that allows attackers to execute commands by supplying file names interpolated unquoted into shell-executed ffmpeg command lines. Attackers who influence file names passed to concat(), cut(), or merge() can inject shell metacharacters to run commands with the Node.js process privileges.","source_quote_or_pointer":"Security Advisory CVE-2026-110645","fact_id":"SEA-CVE-2026-110645-F1","document_citation":"Security Advisory CVE-2026-110645"},{"id":"SEA-CVE-2026-110645-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Video-stitch before 2.0.0-beta.1 contains an OS command injection vulnerability that allows attackers to execute commands by supplying file names interpolated unquoted into shell-executed ffmpeg command lines.","source_quote_or_pointer":"Advisory description (CVE-2026-110645)","fact_id":"SEA-CVE-2026-110645-F2","document_citation":"Advisory description (CVE-2026-110645)"}],"source_stated_contributors":["Video-stitch before 2.0.0-beta.1 contains an OS command injection vulnerability that allows attackers to execute commands by supplying file names interpolated unquoted into shell-executed ffmpeg command lines."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-110645","reporting_entity":"CVE-2026-110645","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-110645-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-110645-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-110645"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-104107","title":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. In FileRise 3.22.0, the /api/file/saveFile.php operation accepts dot and dot-dot segments in its attacker-controlled folder input before ACL inheritance evaluates the uncanonicalized string. With an authenticated non-administrator session, a valid CSRF token, and inherited edit permission on a legitimate ancestor, the local filesystem or WebDAV adapter later resolves those segments as path navigation, permitting attacker-controlled file creation outside the authorized folder and, where backend credentials permit, outside the configured WebDAV root. Local storage also created directories before final containment validation and used a prefix comparison that accepted similarly named sibling roots. This issue is fixed in version 3.23.0.","display_title":"Software component issue could expose accounts or credentials","display_summary":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. In FileRise 3.22.0, the /api/file/saveFile.php operation accepts dot and dot-dot segments in its attacker-controlled…","display_reference":"CVE-2026-104107","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104107","source_title":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. In FileRise 3.22.0, the /api/file/saveFile.php operation accepts dot and dot-dot segments in its attacker-controlled folder input before ACL inheritance evaluates the uncanonicalized string. With an authenticated non-administrator session, a valid CSRF token, and inherited edit permission on a legitimate ancestor, the local filesystem or WebDAV adapter later resolves those segments as path navigation, permitting attacker-controlled file creation outside the authorized folder and, where backend credentials permit, outside the configured WebDAV root. Local storage also created directories before final containment validation and used a prefix comparison that accepted similarly named sibling roots. This issue is fixed in version 3.23.0.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T01:57:40.326Z","source_hash":"content-fingerprint:fnv1a-c5f2b950","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-104107-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. In FileRise 3.22.0, the /api/file/saveFile.php operation accepts dot and dot-dot segments in its attacker-controlled folder input before ACL inheritance evaluates the uncanonicalized string. With an authenticated non-administrator session, a valid CSRF token, and inherited edit permission on a legitimate ancestor, the local filesystem or WebDAV adapter later resolves those segments as path navigation, permitting attacker-controlled file creation outside the authorized folder and, where backend credentials permit, outside the configured WebDAV root. Local storage also created directories before final containment validation and used a prefix comparison that accepted similarly named sibling roots. This issue is fixed in version 3.23.0.","source_quote_or_pointer":"Security Advisory CVE-2026-104107","fact_id":"SEA-CVE-2026-104107-F1","document_citation":"Security Advisory CVE-2026-104107"},{"id":"SEA-CVE-2026-104107-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. In FileRise 3.22.0, the /api/file/saveFile.php operation accepts dot and dot-dot segments in its attacker-controlled folder input before ACL inheritance evaluates the uncanonicalized string.","source_quote_or_pointer":"Advisory description (CVE-2026-104107)","fact_id":"SEA-CVE-2026-104107-F2","document_citation":"Advisory description (CVE-2026-104107)"}],"source_stated_contributors":["FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. In FileRise 3.22.0, the /api/file/saveFile.php operation accepts dot and dot-dot segments in its attacker-controlled folder input before ACL inheritance evaluates the uncanonicalized string."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.credentials_secrets","data.uploaded_files","arch.async_job"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-104107","reporting_entity":"CVE-2026-104107","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-104107-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-104107-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-104107"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-104106","title":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.23.0, FileRise permits an authenticated session with a valid CSRF token to disable TOTP without recent full reauthentication or to begin enrollment when the account currently has no TOTP secret. The enrollment endpoint returns 409 rather than directly overwriting an already configured secret, but it persists and activates a newly generated secret before a TOTP code verifies possession. An attacker controlling an existing authenticated session can therefore disable an existing second factor or enroll one after the account has no configured secret; this is not a direct overwrite of an active authenticator. This issue is fixed in version 3.23.0.","display_title":"Software component issue could expose accounts or credentials","display_summary":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.23.0, FileRise permits an authenticated session with a valid CSRF token to disable TOTP without recent…","display_reference":"CVE-2026-104106","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104106","source_title":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.23.0, FileRise permits an authenticated session with a valid CSRF token to disable TOTP without recent full reauthentication or to begin enrollment when the account currently has no TOTP secret. The enrollment endpoint returns 409 rather than directly overwriting an already configured secret, but it persists and activates a newly generated secret before a TOTP code verifies possession. An attacker controlling an existing authenticated session can therefore disable an existing second factor or enroll one after the account has no configured secret; this is not a direct overwrite of an active authenticator. This issue is fixed in version 3.23.0.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T01:57:40.326Z","source_hash":"content-fingerprint:fnv1a-c48a362f","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-104106-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.23.0, FileRise permits an authenticated session with a valid CSRF token to disable TOTP without recent full reauthentication or to begin enrollment when the account currently has no TOTP secret. The enrollment endpoint returns 409 rather than directly overwriting an already configured secret, but it persists and activates a newly generated secret before a TOTP code verifies possession. An attacker controlling an existing authenticated session can therefore disable an existing second factor or enroll one after the account has no configured secret; this is not a direct overwrite of an active authenticator. This issue is fixed in version 3.23.0.","source_quote_or_pointer":"Security Advisory CVE-2026-104106","fact_id":"SEA-CVE-2026-104106-F1","document_citation":"Security Advisory CVE-2026-104106"},{"id":"SEA-CVE-2026-104106-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.23.0, FileRise permits an authenticated session with a valid CSRF token to disable TOTP without recent full reauthentication or to begin enrollment when the account currently has no TOTP secret.","source_quote_or_pointer":"Advisory description (CVE-2026-104106)","fact_id":"SEA-CVE-2026-104106-F2","document_citation":"Advisory description (CVE-2026-104106)"}],"source_stated_contributors":["FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.23.0, FileRise permits an authenticated session with a valid CSRF token to disable TOTP without recent full reauthentication or to begin enrollment when the account currently has no TOTP secret."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.credentials_secrets","data.uploaded_files","arch.async_job"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-104106","reporting_entity":"CVE-2026-104106","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-104106-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-104106-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-104106"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-104105","title":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.23.0, FileRise verifies that a TOTP code is valid for the accepted time window but does not record that the same account and time step already succeeded. An attacker who has the target account's valid primary credential and captures a TOTP code after its successful use can replay that code from another pending-login session before the window closes. The issue does not by itself disclose the primary credential or TOTP code. This issue is fixed in version 3.23.0.","display_title":"Software component issue could expose accounts or credentials","display_summary":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.23.0, FileRise verifies that a TOTP code is valid for the accepted time window but does not record that…","display_reference":"CVE-2026-104105","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104105","source_title":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.23.0, FileRise verifies that a TOTP code is valid for the accepted time window but does not record that the same account and time step already succeeded. An attacker who has the target account's valid primary credential and captures a TOTP code after its successful use can replay that code from another pending-login session before the window closes. The issue does not by itself disclose the primary credential or TOTP code. This issue is fixed in version 3.23.0.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T01:57:40.326Z","source_hash":"content-fingerprint:fnv1a-ddce3fae","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-104105-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.23.0, FileRise verifies that a TOTP code is valid for the accepted time window but does not record that the same account and time step already succeeded. An attacker who has the target account's valid primary credential and captures a TOTP code after its successful use can replay that code from another pending-login session before the window closes. The issue does not by itself disclose the primary credential or TOTP code. This issue is fixed in version 3.23.0.","source_quote_or_pointer":"Security Advisory CVE-2026-104105","fact_id":"SEA-CVE-2026-104105-F1","document_citation":"Security Advisory CVE-2026-104105"},{"id":"SEA-CVE-2026-104105-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.23.0, FileRise verifies that a TOTP code is valid for the accepted time window but does not record that the same account and time step already succeeded.","source_quote_or_pointer":"Advisory description (CVE-2026-104105)","fact_id":"SEA-CVE-2026-104105-F2","document_citation":"Advisory description (CVE-2026-104105)"}],"source_stated_contributors":["FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.23.0, FileRise verifies that a TOTP code is valid for the accepted time window but does not record that the same account and time step already succeeded."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.uploaded_files","arch.async_job"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-104105","reporting_entity":"CVE-2026-104105","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-104105-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-104105-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-104105"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-103988","title":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.23.0, FileRise /api/folder/renameFolder.php authorizes an authenticated, non-folder-scoped, non-administrator with a valid CSRF token against the source folder but does not independently authorize a changed destination parent. A qualifying user who owns a source folder can move that tree beneath another user's existing folder or into the root namespace, and the operation rekeys the moved ownership and ACL records to the new path. The destination must be unused and existing victim files cannot be overwritten. Distinct pre-fix errors reveal whether a specifically guessed destination path exists, but disclose no directory listing or file contents. This issue is fixed in version 3.23.0.","display_title":"Security issue reported in Software component","display_summary":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.23.0, FileRise /api/folder/renameFolder.php authorizes an authenticated, non-folder-scoped,…","display_reference":"CVE-2026-103988","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103988","source_title":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.23.0, FileRise /api/folder/renameFolder.php authorizes an authenticated, non-folder-scoped, non-administrator with a valid CSRF token against the source folder but does not independently authorize a changed destination parent. A qualifying user who owns a source folder can move that tree beneath another user's existing folder or into the root namespace, and the operation rekeys the moved ownership and ACL records to the new path. The destination must be unused and existing victim files cannot be overwritten. Distinct pre-fix errors reveal whether a specifically guessed destination path exists, but disclose no directory listing or file contents. This issue is fixed in version 3.23.0.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T01:57:40.327Z","source_hash":"content-fingerprint:fnv1a-5f061b6","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-103988-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.23.0, FileRise /api/folder/renameFolder.php authorizes an authenticated, non-folder-scoped, non-administrator with a valid CSRF token against the source folder but does not independently authorize a changed destination parent. A qualifying user who owns a source folder can move that tree beneath another user's existing folder or into the root namespace, and the operation rekeys the moved ownership and ACL records to the new path. The destination must be unused and existing victim files cannot be overwritten. Distinct pre-fix errors reveal whether a specifically guessed destination path exists, but disclose no directory listing or file contents. This issue is fixed in version 3.23.0.","source_quote_or_pointer":"Security Advisory CVE-2026-103988","fact_id":"SEA-CVE-2026-103988-F1","document_citation":"Security Advisory CVE-2026-103988"},{"id":"SEA-CVE-2026-103988-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.23.0, FileRise /api/folder/renameFolder.php authorizes an authenticated, non-folder-scoped, non-administrator with a valid CSRF token against the source folder but does not independently authorize a…","source_quote_or_pointer":"Advisory description (CVE-2026-103988)","fact_id":"SEA-CVE-2026-103988-F2","document_citation":"Advisory description (CVE-2026-103988)"}],"source_stated_contributors":["FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.23.0, FileRise /api/folder/renameFolder.php authorizes an authenticated, non-folder-scoped, non-administrator with a valid CSRF token against the source folder but does not independently authorize a…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii","data.uploaded_files","arch.async_job"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-103988","reporting_entity":"CVE-2026-103988","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-103988-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-103988-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-103988"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109901","title":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Codepeople CP Multi View Event Calendar cp-multi-view-calendar allows SQL Injection.This issue affects CP Multi View Event Calendar : from n/a through 1.4.41.","display_title":"Software component issue could expose or alter stored data","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-109901","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109901","source_title":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Codepeople CP Multi View Event Calendar cp-multi-view-calendar allows SQL Injection.This issue affects CP Multi View Event Calendar : from n/a through 1.4.41.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-14T17:05:08.247Z","source_hash":"content-fingerprint:fnv1a-a46ada1d","affected_system":{"organization":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Codepeople CP Multi View Event Calendar cp-multi-view-calendar allows SQL Injection.This issue affects CP Multi View Event Calendar project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109901-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Codepeople CP Multi View Event Calendar cp-multi-view-calendar allows SQL Injection.This issue affects CP Multi View Event Calendar : from n/a through 1.4.41.","source_quote_or_pointer":"Security Advisory CVE-2026-109901","fact_id":"SEA-CVE-2026-109901-F1","document_citation":"Security Advisory CVE-2026-109901"},{"id":"SEA-CVE-2026-109901-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Codepeople CP Multi View Event Calendar cp-multi-view-calendar allows SQL Injection.This issue affects CP Multi View Event Calendar : from n/a through 1.4.41.","source_quote_or_pointer":"Advisory description (CVE-2026-109901)","fact_id":"SEA-CVE-2026-109901-F2","document_citation":"Advisory description (CVE-2026-109901)"}],"source_stated_contributors":["Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Codepeople CP Multi View Event Calendar cp-multi-view-calendar allows SQL Injection.This issue affects CP Multi View Event Calendar : from n/a through 1.4.41."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["arch.event_driven"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109901","reporting_entity":"CVE-2026-109901","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109901-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109901-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-109901"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-107171","title":"An Hardcoded Cryptographic Key vulnerability existed in Trellix Agent 5.8.4 via mfecryptc.dll leads to Database Decryption by Regular Users.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-107171","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107171","source_title":"An Hardcoded Cryptographic Key vulnerability existed in Trellix Agent 5.8.4 via mfecryptc.dll leads to Database Decryption by Regular Users.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-14T17:05:08.248Z","source_hash":"content-fingerprint:fnv1a-258b34ac","affected_system":{"organization":"Software component project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-107171-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"An Hardcoded Cryptographic Key vulnerability existed in Trellix Agent 5.8.4 via mfecryptc.dll leads to Database Decryption by Regular Users.","source_quote_or_pointer":"Security Advisory CVE-2026-107171","fact_id":"SEA-CVE-2026-107171-F1","document_citation":"Security Advisory CVE-2026-107171"},{"id":"SEA-CVE-2026-107171-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"An Hardcoded Cryptographic Key vulnerability existed in Trellix Agent 5.8.4 via mfecryptc.dll leads to Database Decryption by Regular Users.","source_quote_or_pointer":"Advisory description (CVE-2026-107171)","fact_id":"SEA-CVE-2026-107171-F2","document_citation":"Advisory description (CVE-2026-107171)"}],"source_stated_contributors":["An Hardcoded Cryptographic Key vulnerability existed in Trellix Agent 5.8.4 via mfecryptc.dll leads to Database Decryption by Regular Users."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.pii","data.untrusted_external_text","arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-010"],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-107171","reporting_entity":"CVE-2026-107171","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-107171-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-107171-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-107171"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-105107","title":"Koha is vulnerable to SQL injection in the Most-circulated items report. The reports/cat_issues_top.pl script (sub calculate) concatenates the user-controlled Criteria, Filter, and Limit request parameters directly into dynamic SQL. Criteria is only prefix-normalized and never validated against an allow-list, so it is inserted verbatim into identifier positions (SELECT DISTINCTROW, GROUP BY, ORDER BY, and the main calculation query). Filter values are concatenated raw into single-quoted LIKE, BETWEEN, and comparison fragments. Limit is appended raw to a LIMIT clause. An authenticated staff user with the reports module permission (not requiring superlibrarian) can inject arbitrary SQL and read any table reachable by the Koha database user, including borrowers (userid and bcrypt password hashes, two-factor secrets, personal data), api_keys, and sessions. The issue is fixed in Koha 24.11.19, 25.05.14, 25.11.08, and 26.05.03, and in the 26.11 development branch. This is the unpatched twin of reports/bor_issues_top.pl (CVE-2026-70372).","display_title":"Software component issue could expose or alter stored data","display_summary":"Koha is vulnerable to SQL injection in the Most-circulated items report. The reports/catissuestop.pl script (sub calculate) concatenates the user-controlled Criteria, Filter, and Limit request parameters directly into…","display_reference":"CVE-2026-105107","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105107","source_title":"Koha is vulnerable to SQL injection in the Most-circulated items report. The reports/cat_issues_top.pl script (sub calculate) concatenates the user-controlled Criteria, Filter, and Limit request parameters directly into dynamic SQL. Criteria is only prefix-normalized and never validated against an allow-list, so it is inserted verbatim into identifier positions (SELECT DISTINCTROW, GROUP BY, ORDER BY, and the main calculation query). Filter values are concatenated raw into single-quoted LIKE, BETWEEN, and comparison fragments. Limit is appended raw to a LIMIT clause. An authenticated staff user with the reports module permission (not requiring superlibrarian) can inject arbitrary SQL and read any table reachable by the Koha database user, including borrowers (userid and bcrypt password hashes, two-factor secrets, personal data), api_keys, and sessions. The issue is fixed in Koha 24.11.19, 25.05.14, 25.11.08, and 26.05.03, and in the 26.11 development branch. This is the unpatched twin of reports/bor_issues_top.pl (CVE-2026-70372).","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-14T17:05:08.249Z","source_hash":"content-fingerprint:fnv1a-fa3260a1","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-105107-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Koha is vulnerable to SQL injection in the Most-circulated items report. The reports/cat_issues_top.pl script (sub calculate) concatenates the user-controlled Criteria, Filter, and Limit request parameters directly into dynamic SQL. Criteria is only prefix-normalized and never validated against an allow-list, so it is inserted verbatim into identifier positions (SELECT DISTINCTROW, GROUP BY, ORDER BY, and the main calculation query). Filter values are concatenated raw into single-quoted LIKE, BETWEEN, and comparison fragments. Limit is appended raw to a LIMIT clause. An authenticated staff user with the reports module permission (not requiring superlibrarian) can inject arbitrary SQL and read any table reachable by the Koha database user, including borrowers (userid and bcrypt password hashes, two-factor secrets, personal data), api_keys, and sessions. The issue is fixed in Koha 24.11.19, 25.05.14, 25.11.08, and 26.05.03, and in the 26.11 development branch. This is the unpatched twin of reports/bor_issues_top.pl (CVE-2026-70372).","source_quote_or_pointer":"Security Advisory CVE-2026-105107","fact_id":"SEA-CVE-2026-105107-F1","document_citation":"Security Advisory CVE-2026-105107"},{"id":"SEA-CVE-2026-105107-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Koha is vulnerable to SQL injection in the Most-circulated items report. The reports/catissuestop.pl script (sub calculate) concatenates the user-controlled Criteria, Filter, and Limit request parameters directly into dynamic SQL.","source_quote_or_pointer":"Advisory description (CVE-2026-105107)","fact_id":"SEA-CVE-2026-105107-F2","document_citation":"Advisory description (CVE-2026-105107)"}],"source_stated_contributors":["Koha is vulnerable to SQL injection in the Most-circulated items report. The reports/catissuestop.pl script (sub calculate) concatenates the user-controlled Criteria, Filter, and Limit request parameters directly into dynamic SQL."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.write_action","data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-105107","reporting_entity":"CVE-2026-105107","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-105107-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-105107-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-105107"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-104909","title":"The Mang Board plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.4.3 via the '<mode>_type (e.g. foo_type)' parameter parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary .php files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where .php file types can be uploaded and included. Exploitation is trivial via an unauthenticated POST to any page rendering a public [mb_board] shortcode, as no nonce or capability check is enforced on the shortcode render path; on servers with a standard PHP installation, pearcmd.php can be leveraged to write and then include an attacker-controlled payload file in a single request.","display_title":"Software component issue could allow unintended commands to run","display_summary":"The Mang Board plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.4.3 via the 'type (e.g. footype)' parameter parameter.","display_reference":"CVE-2026-104909","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104909","source_title":"The Mang Board plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.4.3 via the '<mode>_type (e.g. foo_type)' parameter parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary .php files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where .php file types can be uploaded and included. Exploitation is trivial via an unauthenticated POST to any page rendering a public [mb_board] shortcode, as no nonce or capability check is enforced on the shortcode render path; on servers with a standard PHP installation, pearcmd.php can be leveraged to write and then include an attacker-controlled payload file in a single request.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-14T17:05:08.250Z","source_hash":"content-fingerprint:fnv1a-585211fa","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-104909-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Mang Board plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.4.3 via the '<mode>_type (e.g. foo_type)' parameter parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary .php files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where .php file types can be uploaded and included. Exploitation is trivial via an unauthenticated POST to any page rendering a public [mb_board] shortcode, as no nonce or capability check is enforced on the shortcode render path; on servers with a standard PHP installation, pearcmd.php can be leveraged to write and then include an attacker-controlled payload file in a single request.","source_quote_or_pointer":"Security Advisory CVE-2026-104909","fact_id":"SEA-CVE-2026-104909-F1","document_citation":"Security Advisory CVE-2026-104909"},{"id":"SEA-CVE-2026-104909-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Mang Board plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.4.3 via the 'type (e.g. footype)' parameter parameter.","source_quote_or_pointer":"Advisory description (CVE-2026-104909)","fact_id":"SEA-CVE-2026-104909-F2","document_citation":"Advisory description (CVE-2026-104909)"}],"source_stated_contributors":["The Mang Board plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.4.3 via the 'type (e.g. footype)' parameter parameter."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","auth.public_publication"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-104909","reporting_entity":"CVE-2026-104909","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-104909-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-104909-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-104909"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-103367","title":"The ShopMagic – email automation for WordPress plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.9.0 via the 'billing_address.first_name' parameter parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary .php files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where .php file types can be uploaded and included. Exploitation requires a published recipe that processes the {{ customer.first_name }} placeholder — the plugin's built-in \"New Order email with social media profile links\" recipe satisfies this requirement out of the box, making the default configuration exploitable with no account, cookie, or nonce by simply submitting a guest checkout with the payload as the billing first name.","display_title":"Software component issue could allow unintended commands to run","display_summary":"The ShopMagic – email automation for WordPress plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.9.0 via the 'billingaddress.firstname' parameter parameter.","display_reference":"CVE-2026-103367","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103367","source_title":"The ShopMagic – email automation for WordPress plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.9.0 via the 'billing_address.first_name' parameter parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary .php files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where .php file types can be uploaded and included. Exploitation requires a published recipe that processes the {{ customer.first_name }} placeholder — the plugin's built-in \"New Order email with social media profile links\" recipe satisfies this requirement out of the box, making the default configuration exploitable with no account, cookie, or nonce by simply submitting a guest checkout with the payload as the billing first name.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-14T17:05:08.255Z","source_hash":"content-fingerprint:fnv1a-82d8e4ff","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-103367-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The ShopMagic – email automation for WordPress plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.9.0 via the 'billing_address.first_name' parameter parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary .php files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where .php file types can be uploaded and included. Exploitation requires a published recipe that processes the {{ customer.first_name }} placeholder — the plugin's built-in \"New Order email with social media profile links\" recipe satisfies this requirement out of the box, making the default configuration exploitable with no account, cookie, or nonce by simply submitting a guest checkout with the payload as the billing first name.","source_quote_or_pointer":"Security Advisory CVE-2026-103367","fact_id":"SEA-CVE-2026-103367-F1","document_citation":"Security Advisory CVE-2026-103367"},{"id":"SEA-CVE-2026-103367-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The ShopMagic – email automation for WordPress plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.9.0 via the 'billingaddress.firstname' parameter parameter.","source_quote_or_pointer":"Advisory description (CVE-2026-103367)","fact_id":"SEA-CVE-2026-103367-F2","document_citation":"Advisory description (CVE-2026-103367)"}],"source_stated_contributors":["The ShopMagic – email automation for WordPress plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.9.0 via the 'billingaddress.firstname' parameter parameter."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.financial_action","auth.public_publication","data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-103367","reporting_entity":"CVE-2026-103367","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-103367-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-103367-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-103367"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-100163","title":"The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 5.7.2 via the OsCustomerHelper::create_wp_user_for_customer() helper reached from the public process_step_customer() booking step. When the 'Use WordPress users as customers' option is enabled, the helper falls back from email_exists() to username_exists( $customer->email ), which matches any WordPress user whose user_login equals the victim customer's email even when that user's user_email is completely different, and links that WordPress user's ID into the victim's LatePoint customer row (only privileged roles are excluded; Subscriber is allowed). This makes it possible for authenticated attackers, with Subscriber-level access and above, to take over another customer's LatePoint account — accessing their bookings, service, agent, and calendar data, and having the victim customer's email overwritten with the attacker's on next login — by holding a Subscriber account whose user_login equals the victim's email and submitting an unauthenticated public booking step registration request.","display_title":"Software component issue could allow unauthorized access","display_summary":"The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 5.7.2 via the…","display_reference":"CVE-2026-100163","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100163","source_title":"The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 5.7.2 via the OsCustomerHelper::create_wp_user_for_customer() helper reached from the public process_step_customer() booking step. When the 'Use WordPress users as customers' option is enabled, the helper falls back from email_exists() to username_exists( $customer->email ), which matches any WordPress user whose user_login equals the victim customer's email even when that user's user_email is completely different, and links that WordPress user's ID into the victim's LatePoint customer row (only privileged roles are excluded; Subscriber is allowed). This makes it possible for authenticated attackers, with Subscriber-level access and above, to take over another customer's LatePoint account — accessing their bookings, service, agent, and calendar data, and having the victim customer's email overwritten with the attacker's on next login — by holding a Subscriber account whose user_login equals the victim's email and submitting an unauthenticated public booking step registration request.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-14T17:05:08.257Z","source_hash":"content-fingerprint:fnv1a-344daa6a","affected_system":{"organization":"The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 5.7.2 via the OsCustomerHelper project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-100163-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 5.7.2 via the OsCustomerHelper::create_wp_user_for_customer() helper reached from the public process_step_customer() booking step. When the 'Use WordPress users as customers' option is enabled, the helper falls back from email_exists() to username_exists( $customer->email ), which matches any WordPress user whose user_login equals the victim customer's email even when that user's user_email is completely different, and links that WordPress user's ID into the victim's LatePoint customer row (only privileged roles are excluded; Subscriber is allowed). This makes it possible for authenticated attackers, with Subscriber-level access and above, to take over another customer's LatePoint account — accessing their bookings, service, agent, and calendar data, and having the victim customer's email overwritten with the attacker's on next login — by holding a Subscriber account whose user_login equals the victim's email and submitting an unauthenticated public booking step registration request.","source_quote_or_pointer":"Security Advisory CVE-2026-100163","fact_id":"SEA-CVE-2026-100163-F1","document_citation":"Security Advisory CVE-2026-100163"},{"id":"SEA-CVE-2026-100163-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 5.7.2 via the OsCustomerHelper::createwpuserforcustomer() helper reached from the public processstepcustomer() booking step.","source_quote_or_pointer":"Advisory description (CVE-2026-100163)","fact_id":"SEA-CVE-2026-100163-F2","document_citation":"Advisory description (CVE-2026-100163)"}],"source_stated_contributors":["The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 5.7.2 via the OsCustomerHelper::createwpuserforcustomer() helper reached from the public processstepcustomer() booking step."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.public_publication","data.pii","arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-003","SEA-FM-010"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-100163","reporting_entity":"CVE-2026-100163","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-100163-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-100163-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-100163"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-94260","title":"The Sifalo Pay WordPress plugin before 2.5.3 does not verify ownership of, or authorisation for, the order being updated when it handles a payment return, allowing unauthenticated attackers to write arbitrary payment session metadata onto any order in the store and to force any order awaiting payment into a failed state.","display_title":"Security issue reported in Software component","display_summary":"The Sifalo Pay WordPress plugin before 2.5.3 does not verify ownership of, or authorisation for, the order being updated when it handles a payment return, allowing unauthenticated attackers to write arbitrary payment…","display_reference":"CVE-2026-94260","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-94260","source_title":"The Sifalo Pay WordPress plugin before 2.5.3 does not verify ownership of, or authorisation for, the order being updated when it handles a payment return, allowing unauthenticated attackers to write arbitrary payment session metadata onto any order in the store and to force any order awaiting payment into a failed state.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-14T17:05:08.258Z","source_hash":"content-fingerprint:fnv1a-c9d7f7da","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-94260-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Sifalo Pay WordPress plugin before 2.5.3 does not verify ownership of, or authorisation for, the order being updated when it handles a payment return, allowing unauthenticated attackers to write arbitrary payment session metadata onto any order in the store and to force any order awaiting payment into a failed state.","source_quote_or_pointer":"Security Advisory CVE-2026-94260","fact_id":"SEA-CVE-2026-94260-F1","document_citation":"Security Advisory CVE-2026-94260"},{"id":"SEA-CVE-2026-94260-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Sifalo Pay WordPress plugin before 2.5.3 does not verify ownership of, or authorisation for, the order being updated when it handles a payment return, allowing unauthenticated attackers to write arbitrary payment session metadata onto any order in the store and to force any order awaiting payment into a failed…","source_quote_or_pointer":"Advisory description (CVE-2026-94260)","fact_id":"SEA-CVE-2026-94260-F2","document_citation":"Advisory description (CVE-2026-94260)"}],"source_stated_contributors":["The Sifalo Pay WordPress plugin before 2.5.3 does not verify ownership of, or authorisation for, the order being updated when it handles a payment return, allowing unauthenticated attackers to write arbitrary payment session metadata onto any order in the store and to force any order awaiting payment into a failed…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.financial_action","auth.write_action"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-94260","reporting_entity":"CVE-2026-94260","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-94260-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-94260-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-94260"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-92426","title":"The YITH WooCommerce Popup WordPress plugin before 1.60.0 does not check the capability of the requesting user before deleting post meta, allowing users with the Contributor role and above to delete arbitrary post meta from any post, including content owned by higher-privileged users.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-92426","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92426","source_title":"The YITH WooCommerce Popup WordPress plugin before 1.60.0 does not check the capability of the requesting user before deleting post meta, allowing users with the Contributor role and above to delete arbitrary post meta from any post, including content owned by higher-privileged users.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-14T17:05:08.259Z","source_hash":"content-fingerprint:fnv1a-4c9099ec","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-92426-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The YITH WooCommerce Popup WordPress plugin before 1.60.0 does not check the capability of the requesting user before deleting post meta, allowing users with the Contributor role and above to delete arbitrary post meta from any post, including content owned by higher-privileged users.","source_quote_or_pointer":"Security Advisory CVE-2026-92426","fact_id":"SEA-CVE-2026-92426-F1","document_citation":"Security Advisory CVE-2026-92426"},{"id":"SEA-CVE-2026-92426-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The YITH WooCommerce Popup WordPress plugin before 1.60.0 does not check the capability of the requesting user before deleting post meta, allowing users with the Contributor role and above to delete arbitrary post meta from any post, including content owned by higher-privileged users.","source_quote_or_pointer":"Advisory description (CVE-2026-92426)","fact_id":"SEA-CVE-2026-92426-F2","document_citation":"Advisory description (CVE-2026-92426)"}],"source_stated_contributors":["The YITH WooCommerce Popup WordPress plugin before 1.60.0 does not check the capability of the requesting user before deleting post meta, allowing users with the Contributor role and above to delete arbitrary post meta from any post, including content owned by higher-privileged users."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.privileged_action","auth.write_action","data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-92426","reporting_entity":"CVE-2026-92426","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-92426-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-92426-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-92426"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-89288","title":"The Fast Courier WordPress plugin before 5.2.4 does not sanitize and escape a value before using it in a SQL query on an unauthenticated REST route, allowing unauthenticated attackers to perform SQL injection and read arbitrary data from the database.","display_title":"Software component issue could expose or alter stored data","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-89288","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89288","source_title":"The Fast Courier WordPress plugin before 5.2.4 does not sanitize and escape a value before using it in a SQL query on an unauthenticated REST route, allowing unauthenticated attackers to perform SQL injection and read arbitrary data from the database.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-14T17:05:08.261Z","source_hash":"content-fingerprint:fnv1a-d761e786","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-89288-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Fast Courier WordPress plugin before 5.2.4 does not sanitize and escape a value before using it in a SQL query on an unauthenticated REST route, allowing unauthenticated attackers to perform SQL injection and read arbitrary data from the database.","source_quote_or_pointer":"Security Advisory CVE-2026-89288","fact_id":"SEA-CVE-2026-89288-F1","document_citation":"Security Advisory CVE-2026-89288"},{"id":"SEA-CVE-2026-89288-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Fast Courier WordPress plugin before 5.2.4 does not sanitize and escape a value before using it in a SQL query on an unauthenticated REST route, allowing unauthenticated attackers to perform SQL injection and read arbitrary data from the database.","source_quote_or_pointer":"Advisory description (CVE-2026-89288)","fact_id":"SEA-CVE-2026-89288-F2","document_citation":"Advisory description (CVE-2026-89288)"}],"source_stated_contributors":["The Fast Courier WordPress plugin before 5.2.4 does not sanitize and escape a value before using it in a SQL query on an unauthenticated REST route, allowing unauthenticated attackers to perform SQL injection and read arbitrary data from the database."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-89288","reporting_entity":"CVE-2026-89288","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-89288-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-89288-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-89288"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-87974","title":"The Asaas Gateway for WooCommerce WordPress plugin before 2.7.8 does not properly authenticate its payment webhook, accepting an empty access token in its default configuration and not verifying that the confirmed payment corresponds to the order it marks paid, allowing unauthenticated attackers to mark arbitrary orders as paid.","display_title":"Software component issue could expose accounts or credentials","display_summary":"The Asaas Gateway for WooCommerce WordPress plugin before 2.7.8 does not properly authenticate its payment webhook, accepting an empty access token in its default configuration and not verifying that the confirmed…","display_reference":"CVE-2026-87974","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87974","source_title":"The Asaas Gateway for WooCommerce WordPress plugin before 2.7.8 does not properly authenticate its payment webhook, accepting an empty access token in its default configuration and not verifying that the confirmed payment corresponds to the order it marks paid, allowing unauthenticated attackers to mark arbitrary orders as paid.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-14T17:05:08.262Z","source_hash":"content-fingerprint:fnv1a-822fbb3a","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-87974-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Asaas Gateway for WooCommerce WordPress plugin before 2.7.8 does not properly authenticate its payment webhook, accepting an empty access token in its default configuration and not verifying that the confirmed payment corresponds to the order it marks paid, allowing unauthenticated attackers to mark arbitrary orders as paid.","source_quote_or_pointer":"Security Advisory CVE-2026-87974","fact_id":"SEA-CVE-2026-87974-F1","document_citation":"Security Advisory CVE-2026-87974"},{"id":"SEA-CVE-2026-87974-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Asaas Gateway for WooCommerce WordPress plugin before 2.7.8 does not properly authenticate its payment webhook, accepting an empty access token in its default configuration and not verifying that the confirmed payment corresponds to the order it marks paid, allowing unauthenticated attackers to mark arbitrary…","source_quote_or_pointer":"Advisory description (CVE-2026-87974)","fact_id":"SEA-CVE-2026-87974-F2","document_citation":"Advisory description (CVE-2026-87974)"}],"source_stated_contributors":["The Asaas Gateway for WooCommerce WordPress plugin before 2.7.8 does not properly authenticate its payment webhook, accepting an empty access token in its default configuration and not verifying that the confirmed payment corresponds to the order it marks paid, allowing unauthenticated attackers to mark arbitrary…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.financial_action","arch.external_api","arch.event_driven"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-87974","reporting_entity":"CVE-2026-87974","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-87974-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-87974-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-87974"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-87968","title":"The Product Feed for Google Shopping, Microsoft Advertising and 40+ Channels for WooCommerce Merchant WordPress plugin before 5.3.2 does not perform a nonce or capability check on the AJAX action that registers the store with its feed service and exposes it to unauthenticated users, so any visitor can force the store to re-register and overwrite the Product Feed for Google Shopping, Microsoft Advertising and 40+ Channels for WooCommerce Merchant WordPress plugin before 5.3.2's stored shop secret.","display_title":"Software component issue could expose accounts or credentials","display_summary":"The Product Feed for Google Shopping, Microsoft Advertising and 40+ Channels for WooCommerce Merchant WordPress plugin before 5.3.2 does not perform a nonce or capability check on the AJAX action that registers the store…","display_reference":"CVE-2026-87968","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87968","source_title":"The Product Feed for Google Shopping, Microsoft Advertising and 40+ Channels for WooCommerce Merchant WordPress plugin before 5.3.2 does not perform a nonce or capability check on the AJAX action that registers the store with its feed service and exposes it to unauthenticated users, so any visitor can force the store to re-register and overwrite the Product Feed for Google Shopping, Microsoft Advertising and 40+ Channels for WooCommerce Merchant WordPress plugin before 5.3.2's stored shop secret.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-14T17:05:08.262Z","source_hash":"content-fingerprint:fnv1a-7b0d9059","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-87968-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Product Feed for Google Shopping, Microsoft Advertising and 40+ Channels for WooCommerce Merchant WordPress plugin before 5.3.2 does not perform a nonce or capability check on the AJAX action that registers the store with its feed service and exposes it to unauthenticated users, so any visitor can force the store to re-register and overwrite the Product Feed for Google Shopping, Microsoft Advertising and 40+ Channels for WooCommerce Merchant WordPress plugin before 5.3.2's stored shop secret.","source_quote_or_pointer":"Security Advisory CVE-2026-87968","fact_id":"SEA-CVE-2026-87968-F1","document_citation":"Security Advisory CVE-2026-87968"},{"id":"SEA-CVE-2026-87968-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Product Feed for Google Shopping, Microsoft Advertising and 40+ Channels for WooCommerce Merchant WordPress plugin before 5.3.2 does not perform a nonce or capability check on the AJAX action that registers the store with its feed service and exposes it to unauthenticated users, so any visitor can force the store…","source_quote_or_pointer":"Advisory description (CVE-2026-87968)","fact_id":"SEA-CVE-2026-87968-F2","document_citation":"Advisory description (CVE-2026-87968)"}],"source_stated_contributors":["The Product Feed for Google Shopping, Microsoft Advertising and 40+ Channels for WooCommerce Merchant WordPress plugin before 5.3.2 does not perform a nonce or capability check on the AJAX action that registers the store with its feed service and exposes it to unauthenticated users, so any visitor can force the store…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-87968","reporting_entity":"CVE-2026-87968","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-87968-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-87968-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-87968"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-86787","title":"The affiliate-toolkit WordPress plugin before 3.9.1 does not prevent a low-privileged user from supplying a template body that its bundled templating engine compiles and executes as PHP, allowing users with the Contributor role or above to run arbitrary PHP code on the server.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-86787","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-86787","source_title":"The affiliate-toolkit WordPress plugin before 3.9.1 does not prevent a low-privileged user from supplying a template body that its bundled templating engine compiles and executes as PHP, allowing users with the Contributor role or above to run arbitrary PHP code on the server.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-14T17:05:08.263Z","source_hash":"content-fingerprint:fnv1a-cb3eaa25","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-86787-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The affiliate-toolkit WordPress plugin before 3.9.1 does not prevent a low-privileged user from supplying a template body that its bundled templating engine compiles and executes as PHP, allowing users with the Contributor role or above to run arbitrary PHP code on the server.","source_quote_or_pointer":"Security Advisory CVE-2026-86787","fact_id":"SEA-CVE-2026-86787-F1","document_citation":"Security Advisory CVE-2026-86787"},{"id":"SEA-CVE-2026-86787-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The affiliate-toolkit WordPress plugin before 3.9.1 does not prevent a low-privileged user from supplying a template body that its bundled templating engine compiles and executes as PHP, allowing users with the Contributor role or above to run arbitrary PHP code on the server.","source_quote_or_pointer":"Advisory description (CVE-2026-86787)","fact_id":"SEA-CVE-2026-86787-F2","document_citation":"Advisory description (CVE-2026-86787)"}],"source_stated_contributors":["The affiliate-toolkit WordPress plugin before 3.9.1 does not prevent a low-privileged user from supplying a template body that its bundled templating engine compiles and executes as PHP, allowing users with the Contributor role or above to run arbitrary PHP code on the server."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.code_execution","auth.privileged_action","data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-86787","reporting_entity":"CVE-2026-86787","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-86787-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-86787-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-86787"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-85345","title":"The FV Flowplayer Video Player WordPress plugin before 7.5.55.7212 does not properly validate a user-supplied URL before performing a server-side fetch, and an existing host-based restriction fails to cover all cases, allowing users with Contributor-level access and above to perform Server-Side Request Forgery (SSRF) attacks. The impact is limited to a semi-blind oracle: the server's fetch reveals whether an internal resource responds and its HTTP status, but the resource's contents are not returned to the attacker.","display_title":"Software component issue could reach internal services","display_summary":"The FV Flowplayer Video Player WordPress plugin before 7.5.55.7212 does not properly validate a user-supplied URL before performing a server-side fetch, and an existing host-based restriction fails to cover all cases,…","display_reference":"CVE-2026-85345","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85345","source_title":"The FV Flowplayer Video Player WordPress plugin before 7.5.55.7212 does not properly validate a user-supplied URL before performing a server-side fetch, and an existing host-based restriction fails to cover all cases, allowing users with Contributor-level access and above to perform Server-Side Request Forgery (SSRF) attacks. The impact is limited to a semi-blind oracle: the server's fetch reveals whether an internal resource responds and its HTTP status, but the resource's contents are not returned to the attacker.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-14T17:05:08.263Z","source_hash":"content-fingerprint:fnv1a-165e1b12","affected_system":{"organization":"The FV Flowplayer Video Player WordPress plugin before 7.5.55.7212 does not properly validate a user-supplied URL before performing a server-side fetch, and an existing host-based restriction fails to cover all cases, allowing users with Contributor-level access and above to perform Server-Side Request Forgery (SSRF) attacks. The impact is limited to a semi-blind oracle project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-85345-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The FV Flowplayer Video Player WordPress plugin before 7.5.55.7212 does not properly validate a user-supplied URL before performing a server-side fetch, and an existing host-based restriction fails to cover all cases, allowing users with Contributor-level access and above to perform Server-Side Request Forgery (SSRF) attacks. The impact is limited to a semi-blind oracle: the server's fetch reveals whether an internal resource responds and its HTTP status, but the resource's contents are not returned to the attacker.","source_quote_or_pointer":"Security Advisory CVE-2026-85345","fact_id":"SEA-CVE-2026-85345-F1","document_citation":"Security Advisory CVE-2026-85345"},{"id":"SEA-CVE-2026-85345-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The FV Flowplayer Video Player WordPress plugin before 7.5.55.7212 does not properly validate a user-supplied URL before performing a server-side fetch, and an existing host-based restriction fails to cover all cases, allowing users with Contributor-level access and above to perform Server-Side Request Forgery (SSRF)…","source_quote_or_pointer":"Advisory description (CVE-2026-85345)","fact_id":"SEA-CVE-2026-85345-F2","document_citation":"Advisory description (CVE-2026-85345)"}],"source_stated_contributors":["The FV Flowplayer Video Player WordPress plugin before 7.5.55.7212 does not properly validate a user-supplied URL before performing a server-side fetch, and an existing host-based restriction fails to cover all cases, allowing users with Contributor-level access and above to perform Server-Side Request Forgery (SSRF)…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Internal network access","Cloud metadata or credential exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-85345","reporting_entity":"CVE-2026-85345","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-85345-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-85345-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"The service fetched a URL chosen by the caller and could be steered at internal systems. Restrict outbound destinations and block internal address ranges.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-85345"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-85000","title":"The EmbedPress WordPress plugin before 4.6.8 does not perform any capability or nonce check on an unauthenticated request that triggers a server-side, credential-bearing request to a third-party API and stores attacker-controlled cache entries, allowing unauthenticated attackers to consume the site owner's third-party API quota and write unbounded records into the site's database.","display_title":"Software component issue could expose accounts or credentials","display_summary":"The EmbedPress WordPress plugin before 4.6.8 does not perform any capability or nonce check on an unauthenticated request that triggers a server-side, credential-bearing request to a third-party API and stores…","display_reference":"CVE-2026-85000","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85000","source_title":"The EmbedPress WordPress plugin before 4.6.8 does not perform any capability or nonce check on an unauthenticated request that triggers a server-side, credential-bearing request to a third-party API and stores attacker-controlled cache entries, allowing unauthenticated attackers to consume the site owner's third-party API quota and write unbounded records into the site's database.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-14T17:05:08.264Z","source_hash":"content-fingerprint:fnv1a-7eb5e748","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-85000-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The EmbedPress WordPress plugin before 4.6.8 does not perform any capability or nonce check on an unauthenticated request that triggers a server-side, credential-bearing request to a third-party API and stores attacker-controlled cache entries, allowing unauthenticated attackers to consume the site owner's third-party API quota and write unbounded records into the site's database.","source_quote_or_pointer":"Security Advisory CVE-2026-85000","fact_id":"SEA-CVE-2026-85000-F1","document_citation":"Security Advisory CVE-2026-85000"},{"id":"SEA-CVE-2026-85000-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The EmbedPress WordPress plugin before 4.6.8 does not perform any capability or nonce check on an unauthenticated request that triggers a server-side, credential-bearing request to a third-party API and stores attacker-controlled cache entries, allowing unauthenticated attackers to consume the site owner's third-party…","source_quote_or_pointer":"Advisory description (CVE-2026-85000)","fact_id":"SEA-CVE-2026-85000-F2","document_citation":"Advisory description (CVE-2026-85000)"}],"source_stated_contributors":["The EmbedPress WordPress plugin before 4.6.8 does not perform any capability or nonce check on an unauthenticated request that triggers a server-side, credential-bearing request to a third-party API and stores attacker-controlled cache entries, allowing unauthenticated attackers to consume the site owner's third-party…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","arch.caching","arch.external_api"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-85000","reporting_entity":"CVE-2026-85000","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-85000-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-85000-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-85000"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108066","title":"The WP 2FA WordPress plugin before 4.2.0 does not perform an object-level capability check before removing a user's two-factor authentication configuration, allowing a site administrator on WordPress Multisite to remove the 2FA configuration of users outside their own site, including accounts they are not permitted to edit. On single-site installs an administrator can already manage all users, so this crosses a trust boundary only on Multisite.","display_title":"Security issue reported in Software component","display_summary":"The WP 2FA WordPress plugin before 4.2.0 does not perform an object-level capability check before removing a user's two-factor authentication configuration, allowing a site administrator on WordPress Multisite to remove…","display_reference":"CVE-2026-108066","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108066","source_title":"The WP 2FA WordPress plugin before 4.2.0 does not perform an object-level capability check before removing a user's two-factor authentication configuration, allowing a site administrator on WordPress Multisite to remove the 2FA configuration of users outside their own site, including accounts they are not permitted to edit. On single-site installs an administrator can already manage all users, so this crosses a trust boundary only on Multisite.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-14T17:05:08.265Z","source_hash":"content-fingerprint:fnv1a-e172774e","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108066-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The WP 2FA WordPress plugin before 4.2.0 does not perform an object-level capability check before removing a user's two-factor authentication configuration, allowing a site administrator on WordPress Multisite to remove the 2FA configuration of users outside their own site, including accounts they are not permitted to edit. On single-site installs an administrator can already manage all users, so this crosses a trust boundary only on Multisite.","source_quote_or_pointer":"Security Advisory CVE-2026-108066","fact_id":"SEA-CVE-2026-108066-F1","document_citation":"Security Advisory CVE-2026-108066"},{"id":"SEA-CVE-2026-108066-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The WP 2FA WordPress plugin before 4.2.0 does not perform an object-level capability check before removing a user's two-factor authentication configuration, allowing a site administrator on WordPress Multisite to remove the 2FA configuration of users outside their own site, including accounts they are not permitted to…","source_quote_or_pointer":"Advisory description (CVE-2026-108066)","fact_id":"SEA-CVE-2026-108066-F2","document_citation":"Advisory description (CVE-2026-108066)"}],"source_stated_contributors":["The WP 2FA WordPress plugin before 4.2.0 does not perform an object-level capability check before removing a user's two-factor authentication configuration, allowing a site administrator on WordPress Multisite to remove the 2FA configuration of users outside their own site, including accounts they are not permitted to…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.privileged_action","data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108066","reporting_entity":"CVE-2026-108066","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108066-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108066-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-108066"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-107594","title":"The File Upload to Order WordPress plugin before 1.1.4 does not validate or confine a file path taken from attacker-controlled session data before deleting the file, and the action that performs the deletion is reachable by unauthenticated users, allowing them to delete arbitrary files on the server, including files whose removal leads to full site compromise.","display_title":"Security issue reported in Software component","display_summary":"The File Upload to Order WordPress plugin before 1.1.4 does not validate or confine a file path taken from attacker-controlled session data before deleting the file, and the action that performs the deletion is reachable…","display_reference":"CVE-2026-107594","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107594","source_title":"The File Upload to Order WordPress plugin before 1.1.4 does not validate or confine a file path taken from attacker-controlled session data before deleting the file, and the action that performs the deletion is reachable by unauthenticated users, allowing them to delete arbitrary files on the server, including files whose removal leads to full site compromise.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-14T17:05:08.265Z","source_hash":"content-fingerprint:fnv1a-98afd051","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-107594-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The File Upload to Order WordPress plugin before 1.1.4 does not validate or confine a file path taken from attacker-controlled session data before deleting the file, and the action that performs the deletion is reachable by unauthenticated users, allowing them to delete arbitrary files on the server, including files whose removal leads to full site compromise.","source_quote_or_pointer":"Security Advisory CVE-2026-107594","fact_id":"SEA-CVE-2026-107594-F1","document_citation":"Security Advisory CVE-2026-107594"},{"id":"SEA-CVE-2026-107594-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The File Upload to Order WordPress plugin before 1.1.4 does not validate or confine a file path taken from attacker-controlled session data before deleting the file, and the action that performs the deletion is reachable by unauthenticated users, allowing them to delete arbitrary files on the server, including files…","source_quote_or_pointer":"Advisory description (CVE-2026-107594)","fact_id":"SEA-CVE-2026-107594-F2","document_citation":"Advisory description (CVE-2026-107594)"}],"source_stated_contributors":["The File Upload to Order WordPress plugin before 1.1.4 does not validate or confine a file path taken from attacker-controlled session data before deleting the file, and the action that performs the deletion is reachable by unauthenticated users, allowing them to delete arbitrary files on the server, including files…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.write_action","data.pii","data.untrusted_external_text","data.uploaded_files"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-107594","reporting_entity":"CVE-2026-107594","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-107594-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-107594-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-107594"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-107160","title":"The LTL Freight Quotes WordPress plugin before 4.2.19 does not perform any authorization check or input sanitization before storing certain values from a request, allowing unauthenticated users to inject HTML and links that are rendered to visitors on the storefront.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-107160","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107160","source_title":"The LTL Freight Quotes WordPress plugin before 4.2.19 does not perform any authorization check or input sanitization before storing certain values from a request, allowing unauthenticated users to inject HTML and links that are rendered to visitors on the storefront.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-14T17:05:08.266Z","source_hash":"content-fingerprint:fnv1a-295f13f0","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-107160-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The LTL Freight Quotes WordPress plugin before 4.2.19 does not perform any authorization check or input sanitization before storing certain values from a request, allowing unauthenticated users to inject HTML and links that are rendered to visitors on the storefront.","source_quote_or_pointer":"Security Advisory CVE-2026-107160","fact_id":"SEA-CVE-2026-107160-F1","document_citation":"Security Advisory CVE-2026-107160"},{"id":"SEA-CVE-2026-107160-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The LTL Freight Quotes WordPress plugin before 4.2.19 does not perform any authorization check or input sanitization before storing certain values from a request, allowing unauthenticated users to inject HTML and links that are rendered to visitors on the storefront.","source_quote_or_pointer":"Advisory description (CVE-2026-107160)","fact_id":"SEA-CVE-2026-107160-F2","document_citation":"Advisory description (CVE-2026-107160)"}],"source_stated_contributors":["The LTL Freight Quotes WordPress plugin before 4.2.19 does not perform any authorization check or input sanitization before storing certain values from a request, allowing unauthenticated users to inject HTML and links that are rendered to visitors on the storefront."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-107160","reporting_entity":"CVE-2026-107160","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-107160-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-107160-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-107160"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-107158","title":"The LTL Freight Quotes WordPress plugin before 4.2.19 does not perform any authorization check or validation on one of its REST routes that writes to the database, allowing unauthenticated users to modify some of the LTL Freight Quotes WordPress plugin before 4.2.19's stored settings.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-107158","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107158","source_title":"The LTL Freight Quotes WordPress plugin before 4.2.19 does not perform any authorization check or validation on one of its REST routes that writes to the database, allowing unauthenticated users to modify some of the LTL Freight Quotes WordPress plugin before 4.2.19's stored settings.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-14T17:05:08.266Z","source_hash":"content-fingerprint:fnv1a-54402e3f","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-107158-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The LTL Freight Quotes WordPress plugin before 4.2.19 does not perform any authorization check or validation on one of its REST routes that writes to the database, allowing unauthenticated users to modify some of the LTL Freight Quotes WordPress plugin before 4.2.19's stored settings.","source_quote_or_pointer":"Security Advisory CVE-2026-107158","fact_id":"SEA-CVE-2026-107158-F1","document_citation":"Security Advisory CVE-2026-107158"},{"id":"SEA-CVE-2026-107158-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The LTL Freight Quotes WordPress plugin before 4.2.19 does not perform any authorization check or validation on one of its REST routes that writes to the database, allowing unauthenticated users to modify some of the LTL Freight Quotes WordPress plugin before 4.2.19's stored settings.","source_quote_or_pointer":"Advisory description (CVE-2026-107158)","fact_id":"SEA-CVE-2026-107158-F2","document_citation":"Advisory description (CVE-2026-107158)"}],"source_stated_contributors":["The LTL Freight Quotes WordPress plugin before 4.2.19 does not perform any authorization check or validation on one of its REST routes that writes to the database, allowing unauthenticated users to modify some of the LTL Freight Quotes WordPress plugin before 4.2.19's stored settings."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-107158","reporting_entity":"CVE-2026-107158","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-107158-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-107158-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-107158"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-107126","title":"The WP Booking System WordPress plugin before 2.1.0.1 does not sanitise and escape a client-controllable request value before storing it and later outputting it in an administration screen, allowing unauthenticated attackers to perform Stored Cross-Site Scripting attacks that execute in the session of an administrator who views the stored data.","display_title":"Software component issue could run attacker-controlled scripts in a browser","display_summary":"The WP Booking System WordPress plugin before 2.1.0.1 does not sanitise and escape a client-controllable request value before storing it and later outputting it in an administration screen, allowing unauthenticated…","display_reference":"CVE-2026-107126","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107126","source_title":"The WP Booking System WordPress plugin before 2.1.0.1 does not sanitise and escape a client-controllable request value before storing it and later outputting it in an administration screen, allowing unauthenticated attackers to perform Stored Cross-Site Scripting attacks that execute in the session of an administrator who views the stored data.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-14T17:05:08.267Z","source_hash":"content-fingerprint:fnv1a-f9472cd0","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-107126-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The WP Booking System WordPress plugin before 2.1.0.1 does not sanitise and escape a client-controllable request value before storing it and later outputting it in an administration screen, allowing unauthenticated attackers to perform Stored Cross-Site Scripting attacks that execute in the session of an administrator who views the stored data.","source_quote_or_pointer":"Security Advisory CVE-2026-107126","fact_id":"SEA-CVE-2026-107126-F1","document_citation":"Security Advisory CVE-2026-107126"},{"id":"SEA-CVE-2026-107126-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The WP Booking System WordPress plugin before 2.1.0.1 does not sanitise and escape a client-controllable request value before storing it and later outputting it in an administration screen, allowing unauthenticated attackers to perform Stored Cross-Site Scripting attacks that execute in the session of an administrator…","source_quote_or_pointer":"Advisory description (CVE-2026-107126)","fact_id":"SEA-CVE-2026-107126-F2","document_citation":"Advisory description (CVE-2026-107126)"}],"source_stated_contributors":["The WP Booking System WordPress plugin before 2.1.0.1 does not sanitise and escape a client-controllable request value before storing it and later outputting it in an administration screen, allowing unauthenticated attackers to perform Stored Cross-Site Scripting attacks that execute in the session of an administrator…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.write_action"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-107126","reporting_entity":"CVE-2026-107126","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-107126-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-107126-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-107126"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-106469","title":"The Gutenverse Form WordPress plugin before 3.0.11 does not sanitize SVG icon markup stored in its form blocks before it is decoded and inserted into the page in the browser, allowing authenticated users with Contributor-level access and above to store malicious SVG that executes JavaScript in the session of any user who views or previews the affected form, such as an administrator reviewing a pending post.","display_title":"Security issue reported in Software component","display_summary":"The Gutenverse Form WordPress plugin before 3.0.11 does not sanitize SVG icon markup stored in its form blocks before it is decoded and inserted into the page in the browser, allowing authenticated users with…","display_reference":"CVE-2026-106469","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-106469","source_title":"The Gutenverse Form WordPress plugin before 3.0.11 does not sanitize SVG icon markup stored in its form blocks before it is decoded and inserted into the page in the browser, allowing authenticated users with Contributor-level access and above to store malicious SVG that executes JavaScript in the session of any user who views or previews the affected form, such as an administrator reviewing a pending post.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-14T17:05:08.267Z","source_hash":"content-fingerprint:fnv1a-463e19c9","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-106469-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Gutenverse Form WordPress plugin before 3.0.11 does not sanitize SVG icon markup stored in its form blocks before it is decoded and inserted into the page in the browser, allowing authenticated users with Contributor-level access and above to store malicious SVG that executes JavaScript in the session of any user who views or previews the affected form, such as an administrator reviewing a pending post.","source_quote_or_pointer":"Security Advisory CVE-2026-106469","fact_id":"SEA-CVE-2026-106469-F1","document_citation":"Security Advisory CVE-2026-106469"},{"id":"SEA-CVE-2026-106469-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Gutenverse Form WordPress plugin before 3.0.11 does not sanitize SVG icon markup stored in its form blocks before it is decoded and inserted into the page in the browser, allowing authenticated users with Contributor-level access and above to store malicious SVG that executes JavaScript in the session of any user…","source_quote_or_pointer":"Advisory description (CVE-2026-106469)","fact_id":"SEA-CVE-2026-106469-F2","document_citation":"Advisory description (CVE-2026-106469)"}],"source_stated_contributors":["The Gutenverse Form WordPress plugin before 3.0.11 does not sanitize SVG icon markup stored in its form blocks before it is decoded and inserted into the page in the browser, allowing authenticated users with Contributor-level access and above to store malicious SVG that executes JavaScript in the session of any user…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.write_action","data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-106469","reporting_entity":"CVE-2026-106469","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-106469-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-106469-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-106469"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-106166","title":"The NEX-Forms WordPress plugin before 9.3.1 does not perform any authorization, ownership or request-validation checks before updating stored form entries, allowing unauthenticated attackers to overwrite, permanently erase, reassign or append to any previously submitted form entry by referencing its sequential identifier.","display_title":"Security issue reported in Software component","display_summary":"The NEX-Forms WordPress plugin before 9.3.1 does not perform any authorization, ownership or request-validation checks before updating stored form entries, allowing unauthenticated attackers to overwrite, permanently…","display_reference":"CVE-2026-106166","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-106166","source_title":"The NEX-Forms WordPress plugin before 9.3.1 does not perform any authorization, ownership or request-validation checks before updating stored form entries, allowing unauthenticated attackers to overwrite, permanently erase, reassign or append to any previously submitted form entry by referencing its sequential identifier.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-14T17:05:08.268Z","source_hash":"content-fingerprint:fnv1a-86e9c613","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-106166-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The NEX-Forms WordPress plugin before 9.3.1 does not perform any authorization, ownership or request-validation checks before updating stored form entries, allowing unauthenticated attackers to overwrite, permanently erase, reassign or append to any previously submitted form entry by referencing its sequential identifier.","source_quote_or_pointer":"Security Advisory CVE-2026-106166","fact_id":"SEA-CVE-2026-106166-F1","document_citation":"Security Advisory CVE-2026-106166"},{"id":"SEA-CVE-2026-106166-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The NEX-Forms WordPress plugin before 9.3.1 does not perform any authorization, ownership or request-validation checks before updating stored form entries, allowing unauthenticated attackers to overwrite, permanently erase, reassign or append to any previously submitted form entry by referencing its sequential…","source_quote_or_pointer":"Advisory description (CVE-2026-106166)","fact_id":"SEA-CVE-2026-106166-F2","document_citation":"Advisory description (CVE-2026-106166)"}],"source_stated_contributors":["The NEX-Forms WordPress plugin before 9.3.1 does not perform any authorization, ownership or request-validation checks before updating stored form entries, allowing unauthenticated attackers to overwrite, permanently erase, reassign or append to any previously submitted form entry by referencing its sequential…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-106166","reporting_entity":"CVE-2026-106166","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-106166-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-106166-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-106166"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-106099","title":"The WP Data Access WordPress plugin before 5.5.84 does not restrict its database table export action to authorized users, gating it only with a token that the WP Data Access WordPress plugin before 5.5.84 itself prints into the public pages on which it displays a table, allowing unauthenticated attackers to export the complete contents of any publicly displayed table, including columns and rows withheld from the display shown to visitors.","display_title":"Security issue reported in Software component","display_summary":"The WP Data Access WordPress plugin before 5.5.84 does not restrict its database table export action to authorized users, gating it only with a token that the WP Data Access WordPress plugin before 5.5.84 itself prints…","display_reference":"CVE-2026-106099","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-106099","source_title":"The WP Data Access WordPress plugin before 5.5.84 does not restrict its database table export action to authorized users, gating it only with a token that the WP Data Access WordPress plugin before 5.5.84 itself prints into the public pages on which it displays a table, allowing unauthenticated attackers to export the complete contents of any publicly displayed table, including columns and rows withheld from the display shown to visitors.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-14T17:05:08.268Z","source_hash":"content-fingerprint:fnv1a-ace999f8","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-106099-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The WP Data Access WordPress plugin before 5.5.84 does not restrict its database table export action to authorized users, gating it only with a token that the WP Data Access WordPress plugin before 5.5.84 itself prints into the public pages on which it displays a table, allowing unauthenticated attackers to export the complete contents of any publicly displayed table, including columns and rows withheld from the display shown to visitors.","source_quote_or_pointer":"Security Advisory CVE-2026-106099","fact_id":"SEA-CVE-2026-106099-F1","document_citation":"Security Advisory CVE-2026-106099"},{"id":"SEA-CVE-2026-106099-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The WP Data Access WordPress plugin before 5.5.84 does not restrict its database table export action to authorized users, gating it only with a token that the WP Data Access WordPress plugin before 5.5.84 itself prints into the public pages on which it displays a table, allowing unauthenticated attackers to export the…","source_quote_or_pointer":"Advisory description (CVE-2026-106099)","fact_id":"SEA-CVE-2026-106099-F2","document_citation":"Advisory description (CVE-2026-106099)"}],"source_stated_contributors":["The WP Data Access WordPress plugin before 5.5.84 does not restrict its database table export action to authorized users, gating it only with a token that the WP Data Access WordPress plugin before 5.5.84 itself prints into the public pages on which it displays a table, allowing unauthenticated attackers to export the…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","auth.public_publication","data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-106099","reporting_entity":"CVE-2026-106099","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-106099-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-106099-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-106099"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-106098","title":"The WP Data Access WordPress plugin before 5.5.77 does not correctly check authorization on one of its application REST endpoints, verifying only read permission before performing a write, which allows unauthenticated attackers to modify data in an application exposed for anonymous read access even when update actions have been disabled by the administrator.","display_title":"Security issue reported in Software component","display_summary":"The WP Data Access WordPress plugin before 5.5.77 does not correctly check authorization on one of its application REST endpoints, verifying only read permission before performing a write, which allows unauthenticated…","display_reference":"CVE-2026-106098","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-106098","source_title":"The WP Data Access WordPress plugin before 5.5.77 does not correctly check authorization on one of its application REST endpoints, verifying only read permission before performing a write, which allows unauthenticated attackers to modify data in an application exposed for anonymous read access even when update actions have been disabled by the administrator.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-14T17:05:08.269Z","source_hash":"content-fingerprint:fnv1a-5f00c101","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-106098-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The WP Data Access WordPress plugin before 5.5.77 does not correctly check authorization on one of its application REST endpoints, verifying only read permission before performing a write, which allows unauthenticated attackers to modify data in an application exposed for anonymous read access even when update actions have been disabled by the administrator.","source_quote_or_pointer":"Security Advisory CVE-2026-106098","fact_id":"SEA-CVE-2026-106098-F1","document_citation":"Security Advisory CVE-2026-106098"},{"id":"SEA-CVE-2026-106098-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The WP Data Access WordPress plugin before 5.5.77 does not correctly check authorization on one of its application REST endpoints, verifying only read permission before performing a write, which allows unauthenticated attackers to modify data in an application exposed for anonymous read access even when update actions…","source_quote_or_pointer":"Advisory description (CVE-2026-106098)","fact_id":"SEA-CVE-2026-106098-F2","document_citation":"Advisory description (CVE-2026-106098)"}],"source_stated_contributors":["The WP Data Access WordPress plugin before 5.5.77 does not correctly check authorization on one of its application REST endpoints, verifying only read permission before performing a write, which allows unauthenticated attackers to modify data in an application exposed for anonymous read access even when update actions…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.write_action"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-106098","reporting_entity":"CVE-2026-106098","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-106098-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-106098-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-106098"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-105261","title":"The Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories WordPress plugin before 4.10.6 does not enforce a safe HTML-element allowlist on a shortcode attribute and does not neutralise attacker-controlled text placed inside the resulting element, allowing users with the Contributor role and above to store JavaScript that executes in the session of any higher-privileged user who views the content.","display_title":"Security issue reported in The Schedule Post Changes With PublishPress Future","display_summary":"The Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories WordPress plugin before 4.10.6 does not enforce a safe HTML-element allowlist on a shortcode attribute and…","display_reference":"CVE-2026-105261","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105261","source_title":"The Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories WordPress plugin before 4.10.6 does not enforce a safe HTML-element allowlist on a shortcode attribute and does not neutralise attacker-controlled text placed inside the resulting element, allowing users with the Contributor role and above to store JavaScript that executes in the session of any higher-privileged user who views the content.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-14T17:05:08.269Z","source_hash":"content-fingerprint:fnv1a-1c973544","affected_system":{"organization":"The Schedule Post Changes With PublishPress Future project","product":"The Schedule Post Changes With PublishPress Future","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-105261-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories WordPress plugin before 4.10.6 does not enforce a safe HTML-element allowlist on a shortcode attribute and does not neutralise attacker-controlled text placed inside the resulting element, allowing users with the Contributor role and above to store JavaScript that executes in the session of any higher-privileged user who views the content.","source_quote_or_pointer":"Security Advisory CVE-2026-105261","fact_id":"SEA-CVE-2026-105261-F1","document_citation":"Security Advisory CVE-2026-105261"},{"id":"SEA-CVE-2026-105261-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories WordPress plugin before 4.10.6 does not enforce a safe HTML-element allowlist on a shortcode attribute and does not neutralise attacker-controlled text placed inside the resulting element, allowing users with…","source_quote_or_pointer":"Advisory description (CVE-2026-105261)","fact_id":"SEA-CVE-2026-105261-F2","document_citation":"Advisory description (CVE-2026-105261)"}],"source_stated_contributors":["The Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories WordPress plugin before 4.10.6 does not enforce a safe HTML-element allowlist on a shortcode attribute and does not neutralise attacker-controlled text placed inside the resulting element, allowing users with…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.privileged_action","auth.write_action","data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-105261","reporting_entity":"CVE-2026-105261","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-105261-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-105261-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-105261"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-103307","title":"The Walletdoc Payment Gateway for WooCommerce WordPress plugin before 1.8.5 does not properly sanitize and escape user input before using it in a SQL statement, and verifies its payment webhook with a signing secret that is empty by default, allowing unauthenticated attackers to perform SQL injection attacks and to mark arbitrary orders as paid.","display_title":"Software component issue could expose or alter stored data","display_summary":"The Walletdoc Payment Gateway for WooCommerce WordPress plugin before 1.8.5 does not properly sanitize and escape user input before using it in a SQL statement, and verifies its payment webhook with a signing secret that…","display_reference":"CVE-2026-103307","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103307","source_title":"The Walletdoc Payment Gateway for WooCommerce WordPress plugin before 1.8.5 does not properly sanitize and escape user input before using it in a SQL statement, and verifies its payment webhook with a signing secret that is empty by default, allowing unauthenticated attackers to perform SQL injection attacks and to mark arbitrary orders as paid.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-14T17:05:08.270Z","source_hash":"content-fingerprint:fnv1a-2e013381","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-103307-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Walletdoc Payment Gateway for WooCommerce WordPress plugin before 1.8.5 does not properly sanitize and escape user input before using it in a SQL statement, and verifies its payment webhook with a signing secret that is empty by default, allowing unauthenticated attackers to perform SQL injection attacks and to mark arbitrary orders as paid.","source_quote_or_pointer":"Security Advisory CVE-2026-103307","fact_id":"SEA-CVE-2026-103307-F1","document_citation":"Security Advisory CVE-2026-103307"},{"id":"SEA-CVE-2026-103307-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Walletdoc Payment Gateway for WooCommerce WordPress plugin before 1.8.5 does not properly sanitize and escape user input before using it in a SQL statement, and verifies its payment webhook with a signing secret that is empty by default, allowing unauthenticated attackers to perform SQL injection attacks and to…","source_quote_or_pointer":"Advisory description (CVE-2026-103307)","fact_id":"SEA-CVE-2026-103307-F2","document_citation":"Advisory description (CVE-2026-103307)"}],"source_stated_contributors":["The Walletdoc Payment Gateway for WooCommerce WordPress plugin before 1.8.5 does not properly sanitize and escape user input before using it in a SQL statement, and verifies its payment webhook with a signing secret that is empty by default, allowing unauthenticated attackers to perform SQL injection attacks and to…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.financial_action","data.pii","data.untrusted_external_text","data.credentials_secrets","arch.external_api","arch.event_driven"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-103307","reporting_entity":"CVE-2026-103307","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-103307-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-103307-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-103307"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-110459","title":"A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to obtain information, make unauthorized changes, and execute a Denial of Service (DoS) attack on the device.","display_title":"Software component issue could allow unauthorized access","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-110459","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110459","source_title":"A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to obtain information, make unauthorized changes, and execute a Denial of Service (DoS) attack on the device.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-14T17:05:08.272Z","source_hash":"content-fingerprint:fnv1a-e0dd33b","affected_system":{"organization":"Software component project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-110459-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to obtain information, make unauthorized changes, and execute a Denial of Service (DoS) attack on the device.","source_quote_or_pointer":"Security Advisory CVE-2026-110459","fact_id":"SEA-CVE-2026-110459-F1","document_citation":"Security Advisory CVE-2026-110459"},{"id":"SEA-CVE-2026-110459-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to obtain information, make unauthorized changes, and execute a Denial of Service (DoS) attack on the device.","source_quote_or_pointer":"Advisory description (CVE-2026-110459)","fact_id":"SEA-CVE-2026-110459-F2","document_citation":"Advisory description (CVE-2026-110459)"}],"source_stated_contributors":["A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to obtain information, make unauthorized changes, and execute a Denial of Service (DoS) attack on the device."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-110459","reporting_entity":"CVE-2026-110459","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-110459-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-110459-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-110459"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-101926","title":"The Hyyan WooCommerce Polylang Integration plugin for WordPress is vulnerable to SQL Injection via the 'variation_ids' parameter of the 'woocommerce_remove_variations' AJAX action in versions up to, and including, 1.5.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.","display_title":"Software component issue could expose or alter stored data","display_summary":"The Hyyan WooCommerce Polylang Integration plugin for WordPress is vulnerable to SQL Injection via the 'variationids' parameter of the 'woocommerceremovevariations' AJAX action in versions up to, and including, 1.5.0 due…","display_reference":"CVE-2026-101926","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-101926","source_title":"The Hyyan WooCommerce Polylang Integration plugin for WordPress is vulnerable to SQL Injection via the 'variation_ids' parameter of the 'woocommerce_remove_variations' AJAX action in versions up to, and including, 1.5.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-14T17:05:08.273Z","source_hash":"content-fingerprint:fnv1a-86620ca4","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-101926-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Hyyan WooCommerce Polylang Integration plugin for WordPress is vulnerable to SQL Injection via the 'variation_ids' parameter of the 'woocommerce_remove_variations' AJAX action in versions up to, and including, 1.5.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.","source_quote_or_pointer":"Security Advisory CVE-2026-101926","fact_id":"SEA-CVE-2026-101926-F1","document_citation":"Security Advisory CVE-2026-101926"},{"id":"SEA-CVE-2026-101926-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Hyyan WooCommerce Polylang Integration plugin for WordPress is vulnerable to SQL Injection via the 'variationids' parameter of the 'woocommerceremovevariations' AJAX action in versions up to, and including, 1.5.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the…","source_quote_or_pointer":"Advisory description (CVE-2026-101926)","fact_id":"SEA-CVE-2026-101926-F2","document_citation":"Advisory description (CVE-2026-101926)"}],"source_stated_contributors":["The Hyyan WooCommerce Polylang Integration plugin for WordPress is vulnerable to SQL Injection via the 'variationids' parameter of the 'woocommerceremovevariations' AJAX action in versions up to, and including, 1.5.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-101926","reporting_entity":"CVE-2026-101926","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-101926-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-101926-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-101926"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-101924","title":"The NewStatPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.4.5 via the 'Last referrers' meta box on the plugin's Overview admin page. This is due to insufficient output escaping of the visitor-supplied query string that the plugin records in its statistics table: the newstatpress_generate_overview_lastreferrers() function concatenates the stored urlrequested value into a single-quoted href attribute after only FILTER_SANITIZE_URL, which does not encode the apostrophe. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a high-privileged user, such as an administrator, accesses the Overview page and hovers the injected link.","display_title":"Software component issue could run attacker-controlled scripts in a browser","display_summary":"The NewStatPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.4.5 via the 'Last referrers' meta box on the plugin's Overview admin page.","display_reference":"CVE-2026-101924","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-101924","source_title":"The NewStatPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.4.5 via the 'Last referrers' meta box on the plugin's Overview admin page. This is due to insufficient output escaping of the visitor-supplied query string that the plugin records in its statistics table: the newstatpress_generate_overview_lastreferrers() function concatenates the stored urlrequested value into a single-quoted href attribute after only FILTER_SANITIZE_URL, which does not encode the apostrophe. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a high-privileged user, such as an administrator, accesses the Overview page and hovers the injected link.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-14T17:05:08.274Z","source_hash":"content-fingerprint:fnv1a-f3e4e2dc","affected_system":{"organization":"The NewStatPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.4.5 via the 'Last referrers' meta box on the plugin's Overview admin page. This is due to insufficient output escaping of the visitor-supplied query string that the plugin records in its statistics table project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-101924-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The NewStatPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.4.5 via the 'Last referrers' meta box on the plugin's Overview admin page. This is due to insufficient output escaping of the visitor-supplied query string that the plugin records in its statistics table: the newstatpress_generate_overview_lastreferrers() function concatenates the stored urlrequested value into a single-quoted href attribute after only FILTER_SANITIZE_URL, which does not encode the apostrophe. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a high-privileged user, such as an administrator, accesses the Overview page and hovers the injected link.","source_quote_or_pointer":"Security Advisory CVE-2026-101924","fact_id":"SEA-CVE-2026-101924-F1","document_citation":"Security Advisory CVE-2026-101924"},{"id":"SEA-CVE-2026-101924-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The NewStatPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.4.5 via the 'Last referrers' meta box on the plugin's Overview admin page.","source_quote_or_pointer":"Advisory description (CVE-2026-101924)","fact_id":"SEA-CVE-2026-101924-F2","document_citation":"Advisory description (CVE-2026-101924)"}],"source_stated_contributors":["The NewStatPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.4.5 via the 'Last referrers' meta box on the plugin's Overview admin page."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-101924","reporting_entity":"CVE-2026-101924","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-101924-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-101924-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-101924"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-96661","title":"The Gmedia Photo Gallery plugin for WordPress is vulnerable to time-based SQL Injection via the 'gmedia__in' parameter in all versions up to, and including, 1.25.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. The unauthenticated mobile app endpoint dispatches the library action without validating the Mobile App feature flag, a nonce, or any WordPress authentication, meaning no account or session of any kind is required to exploit this vulnerability.","display_title":"Software component issue could expose or alter stored data","display_summary":"The Gmedia Photo Gallery plugin for WordPress is vulnerable to time-based SQL Injection via the 'gmediain' parameter in all versions up to, and including, 1.25.1 due to insufficient escaping on the user supplied…","display_reference":"CVE-2026-96661","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-96661","source_title":"The Gmedia Photo Gallery plugin for WordPress is vulnerable to time-based SQL Injection via the 'gmedia__in' parameter in all versions up to, and including, 1.25.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. The unauthenticated mobile app endpoint dispatches the library action without validating the Mobile App feature flag, a nonce, or any WordPress authentication, meaning no account or session of any kind is required to exploit this vulnerability.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-14T17:05:08.275Z","source_hash":"content-fingerprint:fnv1a-3e2505e1","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-96661-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Gmedia Photo Gallery plugin for WordPress is vulnerable to time-based SQL Injection via the 'gmedia__in' parameter in all versions up to, and including, 1.25.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. The unauthenticated mobile app endpoint dispatches the library action without validating the Mobile App feature flag, a nonce, or any WordPress authentication, meaning no account or session of any kind is required to exploit this vulnerability.","source_quote_or_pointer":"Security Advisory CVE-2026-96661","fact_id":"SEA-CVE-2026-96661-F1","document_citation":"Security Advisory CVE-2026-96661"},{"id":"SEA-CVE-2026-96661-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Gmedia Photo Gallery plugin for WordPress is vulnerable to time-based SQL Injection via the 'gmediain' parameter in all versions up to, and including, 1.25.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.","source_quote_or_pointer":"Advisory description (CVE-2026-96661)","fact_id":"SEA-CVE-2026-96661-F2","document_citation":"Advisory description (CVE-2026-96661)"}],"source_stated_contributors":["The Gmedia Photo Gallery plugin for WordPress is vulnerable to time-based SQL Injection via the 'gmediain' parameter in all versions up to, and including, 1.25.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-96661","reporting_entity":"CVE-2026-96661","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-96661-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-96661-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-96661"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-95808","title":"The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to blind SQL Injection via the 'inputs' parameter in all versions up to, and including, 1.15.48 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. The nonce required to reach the vulnerable handler is emitted to every public page that renders a form, making it trivially obtainable by an unauthenticated attacker from page source.","display_title":"Software component issue could expose or alter stored data","display_summary":"The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to blind SQL Injection via the 'inputs' parameter in all versions up to, and including, 1.15.48 due to…","display_reference":"CVE-2026-95808","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95808","source_title":"The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to blind SQL Injection via the 'inputs' parameter in all versions up to, and including, 1.15.48 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. The nonce required to reach the vulnerable handler is emitted to every public page that renders a form, making it trivially obtainable by an unauthenticated attacker from page source.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-14T17:05:08.277Z","source_hash":"content-fingerprint:fnv1a-52e137fb","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-95808-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to blind SQL Injection via the 'inputs' parameter in all versions up to, and including, 1.15.48 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. The nonce required to reach the vulnerable handler is emitted to every public page that renders a form, making it trivially obtainable by an unauthenticated attacker from page source.","source_quote_or_pointer":"Security Advisory CVE-2026-95808","fact_id":"SEA-CVE-2026-95808-F1","document_citation":"Security Advisory CVE-2026-95808"},{"id":"SEA-CVE-2026-95808-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to blind SQL Injection via the 'inputs' parameter in all versions up to, and including, 1.15.48 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing…","source_quote_or_pointer":"Advisory description (CVE-2026-95808)","fact_id":"SEA-CVE-2026-95808-F2","document_citation":"Advisory description (CVE-2026-95808)"}],"source_stated_contributors":["The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to blind SQL Injection via the 'inputs' parameter in all versions up to, and including, 1.15.48 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","auth.public_publication","data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-95808","reporting_entity":"CVE-2026-95808","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-95808-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-95808-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-95808"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-94377","title":"The Verified Reviews (Avis Vérifiés) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'moderation' parameter in all versions up to, and including, 2.4.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The authentication bypass is possible because ntav_check_data() uses loose != comparisons for signature verification, allowing a JSON body with boolean true values for idWebsite and sign to pass all checks on any configured installation.","display_title":"Software component issue could allow unauthorized access","display_summary":"The Verified Reviews (Avis Vérifiés) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'moderation' parameter in all versions up to, and including, 2.4.6 due to insufficient input sanitization and…","display_reference":"CVE-2026-94377","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-94377","source_title":"The Verified Reviews (Avis Vérifiés) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'moderation' parameter in all versions up to, and including, 2.4.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The authentication bypass is possible because ntav_check_data() uses loose != comparisons for signature verification, allowing a JSON body with boolean true values for idWebsite and sign to pass all checks on any configured installation.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-14T17:05:08.278Z","source_hash":"content-fingerprint:fnv1a-882ff9ef","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-94377-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Verified Reviews (Avis Vérifiés) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'moderation' parameter in all versions up to, and including, 2.4.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The authentication bypass is possible because ntav_check_data() uses loose != comparisons for signature verification, allowing a JSON body with boolean true values for idWebsite and sign to pass all checks on any configured installation.","source_quote_or_pointer":"Security Advisory CVE-2026-94377","fact_id":"SEA-CVE-2026-94377-F1","document_citation":"Security Advisory CVE-2026-94377"},{"id":"SEA-CVE-2026-94377-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Verified Reviews (Avis Vérifiés) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'moderation' parameter in all versions up to, and including, 2.4.6 due to insufficient input sanitization and output escaping.","source_quote_or_pointer":"Advisory description (CVE-2026-94377)","fact_id":"SEA-CVE-2026-94377-F2","document_citation":"Advisory description (CVE-2026-94377)"}],"source_stated_contributors":["The Verified Reviews (Avis Vérifiés) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'moderation' parameter in all versions up to, and including, 2.4.6 due to insufficient input sanitization and output escaping."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-94377","reporting_entity":"CVE-2026-94377","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-94377-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-94377-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-94377"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-87855","title":"The JTL-Connector for WooCommerce plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.4.3 via the saveImage() function. This is due to the startSession() function accepting an empty jtlauth parameter as a valid credential, combined with insufficient file type validation in handleImagePush(). This makes it possible for unauthenticated attackers to upload files that may be executable, which makes remote code execution possible.","display_title":"Software component issue could allow unintended commands to run","display_summary":"The JTL-Connector for WooCommerce plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.4.3 via the saveImage() function.","display_reference":"CVE-2026-87855","display_source_type":"Security advisory","incident_date":"2026-10-14","disclosure_date":"2026-10-14","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87855","source_title":"The JTL-Connector for WooCommerce plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.4.3 via the saveImage() function. This is due to the startSession() function accepting an empty jtlauth parameter as a valid credential, combined with insufficient file type validation in handleImagePush(). This makes it possible for unauthenticated attackers to upload files that may be executable, which makes remote code execution possible.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-14T17:05:08.280Z","source_hash":"content-fingerprint:fnv1a-2433a9a8","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-87855-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The JTL-Connector for WooCommerce plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.4.3 via the saveImage() function. This is due to the startSession() function accepting an empty jtlauth parameter as a valid credential, combined with insufficient file type validation in handleImagePush(). This makes it possible for unauthenticated attackers to upload files that may be executable, which makes remote code execution possible.","source_quote_or_pointer":"Security Advisory CVE-2026-87855","fact_id":"SEA-CVE-2026-87855-F1","document_citation":"Security Advisory CVE-2026-87855"},{"id":"SEA-CVE-2026-87855-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The JTL-Connector for WooCommerce plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.4.3 via the saveImage() function.","source_quote_or_pointer":"Advisory description (CVE-2026-87855)","fact_id":"SEA-CVE-2026-87855-F2","document_citation":"Advisory description (CVE-2026-87855)"}],"source_stated_contributors":["The JTL-Connector for WooCommerce plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.4.3 via the saveImage() function."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.uploaded_files"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-87855","reporting_entity":"CVE-2026-87855","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-87855-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-87855-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-87855"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-4j9v-h7pp-725h","title":"Microsoft Security Advisory CVE-2026-70035 - .NET and Visual Studio Remote Code Execution Vulnerability","display_title":"Microsoft.WindowsDesktop.App.Runtime.win-arm64 issue could allow unintended commands to run","display_summary":"Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.WindowsDesktop.App.Runtime (WPF).","display_reference":"CVE-2026-70035","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-4j9v-h7pp-725h","source_title":"Microsoft Security Advisory CVE-2026-70035 - .NET and Visual Studio Remote Code Execution Vulnerability","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T22:39:48.295Z","source_hash":"content-fingerprint:fnv1a-9486f8d","affected_system":{"organization":"Microsoft.WindowsDesktop.App.Runtime.win-arm64 project","product":"Microsoft.WindowsDesktop.App.Runtime.win-arm64","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"C# / .NET"},"documented_facts":[{"id":"SEA-GHSA-4j9v-h7pp-725h-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Microsoft Security Advisory CVE-2026-70035 - .NET and Visual Studio Remote Code Execution Vulnerability","source_quote_or_pointer":"Security Advisory GHSA-4j9v-h7pp-725h","fact_id":"SEA-GHSA-4j9v-h7pp-725h-F1","document_citation":"Security Advisory GHSA-4j9v-h7pp-725h"},{"id":"SEA-GHSA-4j9v-h7pp-725h-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.WindowsDesktop.App.Runtime (WPF). This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.","source_quote_or_pointer":"Advisory description (GHSA-4j9v-h7pp-725h)","fact_id":"SEA-GHSA-4j9v-h7pp-725h-F2","document_citation":"Advisory description (GHSA-4j9v-h7pp-725h)"}],"source_stated_contributors":["Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.WindowsDesktop.App.Runtime (WPF). This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.write_action"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-4j9v-h7pp-725h","reporting_entity":"CVE-2026-70035","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-4j9v-h7pp-725h-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-4j9v-h7pp-725h-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-70035"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-mf4x-w4gh-4656","title":"Microsoft Security Advisory CVE-2026-70186 - ASP.NET Core Denial of Service Vulnerability","display_title":"Microsoft.AspNetCore.App.Runtime.linux-arm issue could make the service unavailable","display_summary":"Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.AspNetCore.Server.Kestrel.Core.","display_reference":"CVE-2026-70186","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-mf4x-w4gh-4656","source_title":"Microsoft Security Advisory CVE-2026-70186 - ASP.NET Core Denial of Service Vulnerability","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T22:39:48.299Z","source_hash":"content-fingerprint:fnv1a-b171efb","affected_system":{"organization":"Microsoft.AspNetCore.App.Runtime.linux-arm project","product":"Microsoft.AspNetCore.App.Runtime.linux-arm","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"C# / .NET"},"documented_facts":[{"id":"SEA-GHSA-mf4x-w4gh-4656-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Microsoft Security Advisory CVE-2026-70186 - ASP.NET Core Denial of Service Vulnerability","source_quote_or_pointer":"Security Advisory GHSA-mf4x-w4gh-4656","fact_id":"SEA-GHSA-mf4x-w4gh-4656-F1","document_citation":"Security Advisory GHSA-mf4x-w4gh-4656"},{"id":"SEA-GHSA-mf4x-w4gh-4656-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.AspNetCore.Server.Kestrel.Core. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.","source_quote_or_pointer":"Advisory description (GHSA-mf4x-w4gh-4656)","fact_id":"SEA-GHSA-mf4x-w4gh-4656-F2","document_citation":"Advisory description (GHSA-mf4x-w4gh-4656)"}],"source_stated_contributors":["Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.AspNetCore.Server.Kestrel.Core. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.write_action"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-mf4x-w4gh-4656","reporting_entity":"CVE-2026-70186","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-mf4x-w4gh-4656-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-mf4x-w4gh-4656-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-70186"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-pfwj-2f93-rf42","title":"Microsoft Security Advisory CVE-2026-70007 - .NET and Visual Studio Remote Code Execution Vulnerability","display_title":"Microsoft.WindowsDesktop.App.Runtime.win-arm64 issue could allow unintended commands to run","display_summary":"Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.WindowsDesktop.App.Runtime (WPF).","display_reference":"CVE-2026-70007","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-pfwj-2f93-rf42","source_title":"Microsoft Security Advisory CVE-2026-70007 - .NET and Visual Studio Remote Code Execution Vulnerability","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T22:39:48.299Z","source_hash":"content-fingerprint:fnv1a-f05a1a94","affected_system":{"organization":"Microsoft.WindowsDesktop.App.Runtime.win-arm64 project","product":"Microsoft.WindowsDesktop.App.Runtime.win-arm64","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"C# / .NET"},"documented_facts":[{"id":"SEA-GHSA-pfwj-2f93-rf42-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Microsoft Security Advisory CVE-2026-70007 - .NET and Visual Studio Remote Code Execution Vulnerability","source_quote_or_pointer":"Security Advisory GHSA-pfwj-2f93-rf42","fact_id":"SEA-GHSA-pfwj-2f93-rf42-F1","document_citation":"Security Advisory GHSA-pfwj-2f93-rf42"},{"id":"SEA-GHSA-pfwj-2f93-rf42-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.WindowsDesktop.App.Runtime (WPF). This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.","source_quote_or_pointer":"Advisory description (GHSA-pfwj-2f93-rf42)","fact_id":"SEA-GHSA-pfwj-2f93-rf42-F2","document_citation":"Advisory description (GHSA-pfwj-2f93-rf42)"}],"source_stated_contributors":["Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.WindowsDesktop.App.Runtime (WPF). This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.write_action"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-pfwj-2f93-rf42","reporting_entity":"CVE-2026-70007","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-pfwj-2f93-rf42-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-pfwj-2f93-rf42-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-70007"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-c27m-942f-rcfh","title":"Microsoft Security Advisory CVE-2026-87697 - .NET and Visual Studio Remote Code Execution Vulnerability","display_title":"Microsoft.WindowsDesktop.App.Runtime.win-arm64 issue could allow unintended commands to run","display_summary":"Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.WindowsDesktop.App.Runtime (WPF).","display_reference":"CVE-2026-87697","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-c27m-942f-rcfh","source_title":"Microsoft Security Advisory CVE-2026-87697 - .NET and Visual Studio Remote Code Execution Vulnerability","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T22:39:48.300Z","source_hash":"content-fingerprint:fnv1a-4fad99a4","affected_system":{"organization":"Microsoft.WindowsDesktop.App.Runtime.win-arm64 project","product":"Microsoft.WindowsDesktop.App.Runtime.win-arm64","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"C# / .NET"},"documented_facts":[{"id":"SEA-GHSA-c27m-942f-rcfh-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Microsoft Security Advisory CVE-2026-87697 - .NET and Visual Studio Remote Code Execution Vulnerability","source_quote_or_pointer":"Security Advisory GHSA-c27m-942f-rcfh","fact_id":"SEA-GHSA-c27m-942f-rcfh-F1","document_citation":"Security Advisory GHSA-c27m-942f-rcfh"},{"id":"SEA-GHSA-c27m-942f-rcfh-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.WindowsDesktop.App.Runtime (WPF). This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.","source_quote_or_pointer":"Advisory description (GHSA-c27m-942f-rcfh)","fact_id":"SEA-GHSA-c27m-942f-rcfh-F2","document_citation":"Advisory description (GHSA-c27m-942f-rcfh)"}],"source_stated_contributors":["Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.WindowsDesktop.App.Runtime (WPF). This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.write_action"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-c27m-942f-rcfh","reporting_entity":"CVE-2026-87697","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-c27m-942f-rcfh-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-c27m-942f-rcfh-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-87697"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-w6wh-p4g7-mpj2","title":"Microsoft Security Advisory CVE-2026-96225 - .NET and Visual Studio Elevation of Privilege Vulnerability","display_title":"Microsoft.NETCore.App.Runtime.linux-arm issue could grant elevated privileges","display_summary":"Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.NETCore.App.Runtime; System.Private.CoreLib.","display_reference":"CVE-2026-96225","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-w6wh-p4g7-mpj2","source_title":"Microsoft Security Advisory CVE-2026-96225 - .NET and Visual Studio Elevation of Privilege Vulnerability","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T22:39:48.301Z","source_hash":"content-fingerprint:fnv1a-1cc39c3a","affected_system":{"organization":"Microsoft.NETCore.App.Runtime.linux-arm project","product":"Microsoft.NETCore.App.Runtime.linux-arm","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"C# / .NET"},"documented_facts":[{"id":"SEA-GHSA-w6wh-p4g7-mpj2-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Microsoft Security Advisory CVE-2026-96225 - .NET and Visual Studio Elevation of Privilege Vulnerability","source_quote_or_pointer":"Security Advisory GHSA-w6wh-p4g7-mpj2","fact_id":"SEA-GHSA-w6wh-p4g7-mpj2-F1","document_citation":"Security Advisory GHSA-w6wh-p4g7-mpj2"},{"id":"SEA-GHSA-w6wh-p4g7-mpj2-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.NETCore.App.Runtime; System.Private.CoreLib. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.","source_quote_or_pointer":"Advisory description (GHSA-w6wh-p4g7-mpj2)","fact_id":"SEA-GHSA-w6wh-p4g7-mpj2-F2","document_citation":"Advisory description (GHSA-w6wh-p4g7-mpj2)"}],"source_stated_contributors":["Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.NETCore.App.Runtime; System.Private.CoreLib. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.write_action"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Elevated privileges","Boundary bypass"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-w6wh-p4g7-mpj2","reporting_entity":"CVE-2026-96225","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-w6wh-p4g7-mpj2-SG1","label":"Enforce privilege boundaries in code","description":"Require explicit, server-verified authorization for privileged operations and isolate components with separate identities.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-w6wh-p4g7-mpj2-SG1","label":"Enforce privilege boundaries in code","description":"Require explicit, server-verified authorization for privileged operations and isolate components with separate identities.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A low-privilege actor reached a high-privilege capability. Enforce approval and privilege boundaries in deterministic code, not by convention.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-96225"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-qjpx-jqm5-h2c4","title":"Microsoft Security Advisory CVE-2026-96230 - ASP.NET Core Remote Code Execution Vulnerability","display_title":"Microsoft.AspNetCore.Components.WebAssembly.Server issue could allow unintended commands to run","display_summary":"Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.AspNetCore.Components.WebAssembly.Server.","display_reference":"CVE-2026-96230","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-qjpx-jqm5-h2c4","source_title":"Microsoft Security Advisory CVE-2026-96230 - ASP.NET Core Remote Code Execution Vulnerability","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T22:39:48.301Z","source_hash":"content-fingerprint:fnv1a-55443b36","affected_system":{"organization":"Microsoft.AspNetCore.Components.WebAssembly.Server project","product":"Microsoft.AspNetCore.Components.WebAssembly.Server","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"C# / .NET"},"documented_facts":[{"id":"SEA-GHSA-qjpx-jqm5-h2c4-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Microsoft Security Advisory CVE-2026-96230 - ASP.NET Core Remote Code Execution Vulnerability","source_quote_or_pointer":"Security Advisory GHSA-qjpx-jqm5-h2c4","fact_id":"SEA-GHSA-qjpx-jqm5-h2c4-F1","document_citation":"Security Advisory GHSA-qjpx-jqm5-h2c4"},{"id":"SEA-GHSA-qjpx-jqm5-h2c4-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.AspNetCore.Components.WebAssembly.Server. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.","source_quote_or_pointer":"Advisory description (GHSA-qjpx-jqm5-h2c4)","fact_id":"SEA-GHSA-qjpx-jqm5-h2c4-F2","document_citation":"Advisory description (GHSA-qjpx-jqm5-h2c4)"}],"source_stated_contributors":["Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.AspNetCore.Components.WebAssembly.Server. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.write_action"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-qjpx-jqm5-h2c4","reporting_entity":"CVE-2026-96230","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-qjpx-jqm5-h2c4-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-qjpx-jqm5-h2c4-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-96230"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-vrrp-6v32-2p8g","title":"Microsoft Security Advisory CVE-2026-70179 - ASP.NET Core Elevation of Privilege Vulnerability","display_title":"Microsoft.AspNetCore.Authentication.Negotiate issue could grant elevated privileges","display_summary":"Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.AspNetCore.Authentication.Negotiate.","display_reference":"CVE-2026-70179","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-vrrp-6v32-2p8g","source_title":"Microsoft Security Advisory CVE-2026-70179 - ASP.NET Core Elevation of Privilege Vulnerability","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T22:39:48.302Z","source_hash":"content-fingerprint:fnv1a-1bac8f69","affected_system":{"organization":"Microsoft.AspNetCore.Authentication.Negotiate project","product":"Microsoft.AspNetCore.Authentication.Negotiate","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"C# / .NET"},"documented_facts":[{"id":"SEA-GHSA-vrrp-6v32-2p8g-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Microsoft Security Advisory CVE-2026-70179 - ASP.NET Core Elevation of Privilege Vulnerability","source_quote_or_pointer":"Security Advisory GHSA-vrrp-6v32-2p8g","fact_id":"SEA-GHSA-vrrp-6v32-2p8g-F1","document_citation":"Security Advisory GHSA-vrrp-6v32-2p8g"},{"id":"SEA-GHSA-vrrp-6v32-2p8g-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.AspNetCore.Authentication.Negotiate. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.","source_quote_or_pointer":"Advisory description (GHSA-vrrp-6v32-2p8g)","fact_id":"SEA-GHSA-vrrp-6v32-2p8g-F2","document_citation":"Advisory description (GHSA-vrrp-6v32-2p8g)"}],"source_stated_contributors":["Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.AspNetCore.Authentication.Negotiate. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.write_action"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Elevated privileges","Boundary bypass"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-vrrp-6v32-2p8g","reporting_entity":"CVE-2026-70179","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-vrrp-6v32-2p8g-SG1","label":"Enforce privilege boundaries in code","description":"Require explicit, server-verified authorization for privileged operations and isolate components with separate identities.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-vrrp-6v32-2p8g-SG1","label":"Enforce privilege boundaries in code","description":"Require explicit, server-verified authorization for privileged operations and isolate components with separate identities.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A low-privilege actor reached a high-privilege capability. Enforce approval and privilege boundaries in deterministic code, not by convention.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-70179"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-xq57-crx4-g373","title":"Microsoft Security Advisory CVE-2026-96224 - .NET and Visual Studio Remote Code Execution Vulnerability","display_title":"Microsoft.WindowsDesktop.App.Runtime.win-arm64 issue could allow unintended commands to run","display_summary":"Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.WindowsDesktop.App.Runtime (WPF).","display_reference":"CVE-2026-96224","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-xq57-crx4-g373","source_title":"Microsoft Security Advisory CVE-2026-96224 - .NET and Visual Studio Remote Code Execution Vulnerability","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T22:39:48.302Z","source_hash":"content-fingerprint:fnv1a-8950bb17","affected_system":{"organization":"Microsoft.WindowsDesktop.App.Runtime.win-arm64 project","product":"Microsoft.WindowsDesktop.App.Runtime.win-arm64","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"C# / .NET"},"documented_facts":[{"id":"SEA-GHSA-xq57-crx4-g373-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Microsoft Security Advisory CVE-2026-96224 - .NET and Visual Studio Remote Code Execution Vulnerability","source_quote_or_pointer":"Security Advisory GHSA-xq57-crx4-g373","fact_id":"SEA-GHSA-xq57-crx4-g373-F1","document_citation":"Security Advisory GHSA-xq57-crx4-g373"},{"id":"SEA-GHSA-xq57-crx4-g373-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.WindowsDesktop.App.Runtime (WPF). This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.","source_quote_or_pointer":"Advisory description (GHSA-xq57-crx4-g373)","fact_id":"SEA-GHSA-xq57-crx4-g373-F2","document_citation":"Advisory description (GHSA-xq57-crx4-g373)"}],"source_stated_contributors":["Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.WindowsDesktop.App.Runtime (WPF). This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.write_action"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-xq57-crx4-g373","reporting_entity":"CVE-2026-96224","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-xq57-crx4-g373-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-xq57-crx4-g373-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-96224"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-f63g-mx39-3r38","title":"Microsoft Security Advisory CVE-2026-85363 - .NET and Visual Studio Remote Code Execution Vulnerability","display_title":"Microsoft.WindowsDesktop.App.Runtime.win-arm64 issue could allow unintended commands to run","display_summary":"Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.WindowsDesktop.App.Runtime (WPF).","display_reference":"CVE-2026-85363","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-f63g-mx39-3r38","source_title":"Microsoft Security Advisory CVE-2026-85363 - .NET and Visual Studio Remote Code Execution Vulnerability","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T22:39:48.303Z","source_hash":"content-fingerprint:fnv1a-eaca9e9c","affected_system":{"organization":"Microsoft.WindowsDesktop.App.Runtime.win-arm64 project","product":"Microsoft.WindowsDesktop.App.Runtime.win-arm64","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"C# / .NET"},"documented_facts":[{"id":"SEA-GHSA-f63g-mx39-3r38-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Microsoft Security Advisory CVE-2026-85363 - .NET and Visual Studio Remote Code Execution Vulnerability","source_quote_or_pointer":"Security Advisory GHSA-f63g-mx39-3r38","fact_id":"SEA-GHSA-f63g-mx39-3r38-F1","document_citation":"Security Advisory GHSA-f63g-mx39-3r38"},{"id":"SEA-GHSA-f63g-mx39-3r38-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.WindowsDesktop.App.Runtime (WPF). This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.","source_quote_or_pointer":"Advisory description (GHSA-f63g-mx39-3r38)","fact_id":"SEA-GHSA-f63g-mx39-3r38-F2","document_citation":"Advisory description (GHSA-f63g-mx39-3r38)"}],"source_stated_contributors":["Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.WindowsDesktop.App.Runtime (WPF). This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.write_action"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-f63g-mx39-3r38","reporting_entity":"CVE-2026-85363","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-f63g-mx39-3r38-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-f63g-mx39-3r38-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-85363"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-c399-9853-6jmj","title":"Microsoft Security Advisory CVE-2026-96959 - .NET and Visual Studio Denial of Service Vulnerability","display_title":"System.Security.Cryptography.Xml issue could make the service unavailable","display_summary":"Microsoft is releasing this security advisory to provide information about a vulnerability in System.Security.Cryptography.Xml; System.Private.Xml.","display_reference":"CVE-2026-96959","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-c399-9853-6jmj","source_title":"Microsoft Security Advisory CVE-2026-96959 - .NET and Visual Studio Denial of Service Vulnerability","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T22:39:48.303Z","source_hash":"content-fingerprint:fnv1a-b825eb4d","affected_system":{"organization":"System.Security.Cryptography.Xml project","product":"System.Security.Cryptography.Xml","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"C# / .NET"},"documented_facts":[{"id":"SEA-GHSA-c399-9853-6jmj-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Microsoft Security Advisory CVE-2026-96959 - .NET and Visual Studio Denial of Service Vulnerability","source_quote_or_pointer":"Security Advisory GHSA-c399-9853-6jmj","fact_id":"SEA-GHSA-c399-9853-6jmj-F1","document_citation":"Security Advisory GHSA-c399-9853-6jmj"},{"id":"SEA-GHSA-c399-9853-6jmj-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Microsoft is releasing this security advisory to provide information about a vulnerability in System.Security.Cryptography.Xml; System.Private.Xml. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.","source_quote_or_pointer":"Advisory description (GHSA-c399-9853-6jmj)","fact_id":"SEA-GHSA-c399-9853-6jmj-F2","document_citation":"Advisory description (GHSA-c399-9853-6jmj)"}],"source_stated_contributors":["Microsoft is releasing this security advisory to provide information about a vulnerability in System.Security.Cryptography.Xml; System.Private.Xml. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.write_action"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-c399-9853-6jmj","reporting_entity":"CVE-2026-96959","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-c399-9853-6jmj-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-c399-9853-6jmj-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-96959"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-4w5f-7jp2-w48g","title":"Microsoft Security Advisory CVE-2026-83520 - .NET and Visual Studio Remote Code Execution Vulnerability","display_title":"Microsoft.WindowsDesktop.App.Runtime.win-arm64 issue could allow unintended commands to run","display_summary":"Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.WindowsDesktop.App.Runtime (WPF).","display_reference":"CVE-2026-83520","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-4w5f-7jp2-w48g","source_title":"Microsoft Security Advisory CVE-2026-83520 - .NET and Visual Studio Remote Code Execution Vulnerability","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T22:39:48.304Z","source_hash":"content-fingerprint:fnv1a-5b5254a0","affected_system":{"organization":"Microsoft.WindowsDesktop.App.Runtime.win-arm64 project","product":"Microsoft.WindowsDesktop.App.Runtime.win-arm64","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"C# / .NET"},"documented_facts":[{"id":"SEA-GHSA-4w5f-7jp2-w48g-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Microsoft Security Advisory CVE-2026-83520 - .NET and Visual Studio Remote Code Execution Vulnerability","source_quote_or_pointer":"Security Advisory GHSA-4w5f-7jp2-w48g","fact_id":"SEA-GHSA-4w5f-7jp2-w48g-F1","document_citation":"Security Advisory GHSA-4w5f-7jp2-w48g"},{"id":"SEA-GHSA-4w5f-7jp2-w48g-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.WindowsDesktop.App.Runtime (WPF). This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.","source_quote_or_pointer":"Advisory description (GHSA-4w5f-7jp2-w48g)","fact_id":"SEA-GHSA-4w5f-7jp2-w48g-F2","document_citation":"Advisory description (GHSA-4w5f-7jp2-w48g)"}],"source_stated_contributors":["Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.WindowsDesktop.App.Runtime (WPF). This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.write_action"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-4w5f-7jp2-w48g","reporting_entity":"CVE-2026-83520","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-4w5f-7jp2-w48g-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-4w5f-7jp2-w48g-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-83520"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-f749-vhgx-39h6","title":"Microsoft Security Advisory CVE-2026-70174 - .NET and Visual Studio Remote Code Execution Vulnerability","display_title":"Microsoft.WindowsDesktop.App.Runtime.win-arm64 issue could allow unintended commands to run","display_summary":"Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.WindowsDesktop.App.Runtime (WPF).","display_reference":"CVE-2026-70174","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-f749-vhgx-39h6","source_title":"Microsoft Security Advisory CVE-2026-70174 - .NET and Visual Studio Remote Code Execution Vulnerability","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T22:39:48.304Z","source_hash":"content-fingerprint:fnv1a-9061df5e","affected_system":{"organization":"Microsoft.WindowsDesktop.App.Runtime.win-arm64 project","product":"Microsoft.WindowsDesktop.App.Runtime.win-arm64","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"C# / .NET"},"documented_facts":[{"id":"SEA-GHSA-f749-vhgx-39h6-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Microsoft Security Advisory CVE-2026-70174 - .NET and Visual Studio Remote Code Execution Vulnerability","source_quote_or_pointer":"Security Advisory GHSA-f749-vhgx-39h6","fact_id":"SEA-GHSA-f749-vhgx-39h6-F1","document_citation":"Security Advisory GHSA-f749-vhgx-39h6"},{"id":"SEA-GHSA-f749-vhgx-39h6-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.WindowsDesktop.App.Runtime (WPF). This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.","source_quote_or_pointer":"Advisory description (GHSA-f749-vhgx-39h6)","fact_id":"SEA-GHSA-f749-vhgx-39h6-F2","document_citation":"Advisory description (GHSA-f749-vhgx-39h6)"}],"source_stated_contributors":["Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.WindowsDesktop.App.Runtime (WPF). This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.write_action"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-f749-vhgx-39h6","reporting_entity":"CVE-2026-70174","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-f749-vhgx-39h6-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-f749-vhgx-39h6-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-70174"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-g44w-h65v-4cw9","title":"Microsoft Security Advisory CVE-2026-96235 - .NET and Visual Studio Remote Code Execution Vulnerability","display_title":"Microsoft.WindowsDesktop.App.Runtime.win-arm64 issue could allow unintended commands to run","display_summary":"Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.WindowsDesktop.App.Runtime (WPF).","display_reference":"CVE-2026-96235","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-g44w-h65v-4cw9","source_title":"Microsoft Security Advisory CVE-2026-96235 - .NET and Visual Studio Remote Code Execution Vulnerability","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T22:39:48.305Z","source_hash":"content-fingerprint:fnv1a-e2a9a13f","affected_system":{"organization":"Microsoft.WindowsDesktop.App.Runtime.win-arm64 project","product":"Microsoft.WindowsDesktop.App.Runtime.win-arm64","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"C# / .NET"},"documented_facts":[{"id":"SEA-GHSA-g44w-h65v-4cw9-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Microsoft Security Advisory CVE-2026-96235 - .NET and Visual Studio Remote Code Execution Vulnerability","source_quote_or_pointer":"Security Advisory GHSA-g44w-h65v-4cw9","fact_id":"SEA-GHSA-g44w-h65v-4cw9-F1","document_citation":"Security Advisory GHSA-g44w-h65v-4cw9"},{"id":"SEA-GHSA-g44w-h65v-4cw9-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.WindowsDesktop.App.Runtime (WPF). This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.","source_quote_or_pointer":"Advisory description (GHSA-g44w-h65v-4cw9)","fact_id":"SEA-GHSA-g44w-h65v-4cw9-F2","document_citation":"Advisory description (GHSA-g44w-h65v-4cw9)"}],"source_stated_contributors":["Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.WindowsDesktop.App.Runtime (WPF). This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.write_action"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-g44w-h65v-4cw9","reporting_entity":"CVE-2026-96235","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-g44w-h65v-4cw9-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-g44w-h65v-4cw9-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-96235"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-vrv5-2jg9-4mmr","title":"Microsoft Security Advisory CVE-2026-96222 - .NET Spoofing Vulnerability","display_title":"Security issue reported in System.Security.Cryptography.Xml","display_summary":"Microsoft is releasing this security advisory to provide information about a vulnerability in System.Security.Cryptography.Xml.","display_reference":"CVE-2026-96222","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-vrv5-2jg9-4mmr","source_title":"Microsoft Security Advisory CVE-2026-96222 - .NET Spoofing Vulnerability","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T22:39:48.305Z","source_hash":"content-fingerprint:fnv1a-47fbb3d6","affected_system":{"organization":"System.Security.Cryptography.Xml project","product":"System.Security.Cryptography.Xml","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"C# / .NET"},"documented_facts":[{"id":"SEA-GHSA-vrv5-2jg9-4mmr-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Microsoft Security Advisory CVE-2026-96222 - .NET Spoofing Vulnerability","source_quote_or_pointer":"Security Advisory GHSA-vrv5-2jg9-4mmr","fact_id":"SEA-GHSA-vrv5-2jg9-4mmr-F1","document_citation":"Security Advisory GHSA-vrv5-2jg9-4mmr"},{"id":"SEA-GHSA-vrv5-2jg9-4mmr-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Microsoft is releasing this security advisory to provide information about a vulnerability in System.Security.Cryptography.Xml. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.","source_quote_or_pointer":"Advisory description (GHSA-vrv5-2jg9-4mmr)","fact_id":"SEA-GHSA-vrv5-2jg9-4mmr-F2","document_citation":"Advisory description (GHSA-vrv5-2jg9-4mmr)"}],"source_stated_contributors":["Microsoft is releasing this security advisory to provide information about a vulnerability in System.Security.Cryptography.Xml. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.write_action"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-vrv5-2jg9-4mmr","reporting_entity":"CVE-2026-96222","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-vrv5-2jg9-4mmr-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-vrv5-2jg9-4mmr-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-96222"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-2j93-m82w-73j2","title":"Microsoft Security Advisory CVE-2026-96231 - .NET and Visual Studio Elevation of Privilege Vulnerability","display_title":"Microsoft.NETCore.App.Runtime.linux-arm issue could grant elevated privileges","display_summary":"Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.NETCore.App.Runtime; System.Private.CoreLib.","display_reference":"CVE-2026-96231","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-2j93-m82w-73j2","source_title":"Microsoft Security Advisory CVE-2026-96231 - .NET and Visual Studio Elevation of Privilege Vulnerability","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T22:39:48.309Z","source_hash":"content-fingerprint:fnv1a-854b4a33","affected_system":{"organization":"Microsoft.NETCore.App.Runtime.linux-arm project","product":"Microsoft.NETCore.App.Runtime.linux-arm","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"C# / .NET"},"documented_facts":[{"id":"SEA-GHSA-2j93-m82w-73j2-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Microsoft Security Advisory CVE-2026-96231 - .NET and Visual Studio Elevation of Privilege Vulnerability","source_quote_or_pointer":"Security Advisory GHSA-2j93-m82w-73j2","fact_id":"SEA-GHSA-2j93-m82w-73j2-F1","document_citation":"Security Advisory GHSA-2j93-m82w-73j2"},{"id":"SEA-GHSA-2j93-m82w-73j2-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.NETCore.App.Runtime; System.Private.CoreLib. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.","source_quote_or_pointer":"Advisory description (GHSA-2j93-m82w-73j2)","fact_id":"SEA-GHSA-2j93-m82w-73j2-F2","document_citation":"Advisory description (GHSA-2j93-m82w-73j2)"}],"source_stated_contributors":["Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.NETCore.App.Runtime; System.Private.CoreLib. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.write_action"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Elevated privileges","Boundary bypass"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-2j93-m82w-73j2","reporting_entity":"CVE-2026-96231","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-2j93-m82w-73j2-SG1","label":"Enforce privilege boundaries in code","description":"Require explicit, server-verified authorization for privileged operations and isolate components with separate identities.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-2j93-m82w-73j2-SG1","label":"Enforce privilege boundaries in code","description":"Require explicit, server-verified authorization for privileged operations and isolate components with separate identities.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A low-privilege actor reached a high-privilege capability. Enforce approval and privilege boundaries in deterministic code, not by convention.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-96231"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-wxxw-5cvc-53j7","title":"Microsoft Security Advisory CVE-2026-66822 - .NET and Visual Studio Information Disclosure Vulnerability","display_title":"Security issue reported in Microsoft.NETCore.App.Runtime.linux-arm","display_summary":"Microsoft is releasing this security advisory to provide information about a vulnerability in System.Net.Http. This advisory also provides guidance on what developers can do to update their applications to remove this…","display_reference":"CVE-2026-66822","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-wxxw-5cvc-53j7","source_title":"Microsoft Security Advisory CVE-2026-66822 - .NET and Visual Studio Information Disclosure Vulnerability","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T22:39:48.310Z","source_hash":"content-fingerprint:fnv1a-27d5c7c7","affected_system":{"organization":"Microsoft.NETCore.App.Runtime.linux-arm project","product":"Microsoft.NETCore.App.Runtime.linux-arm","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"C# / .NET"},"documented_facts":[{"id":"SEA-GHSA-wxxw-5cvc-53j7-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Microsoft Security Advisory CVE-2026-66822 - .NET and Visual Studio Information Disclosure Vulnerability","source_quote_or_pointer":"Security Advisory GHSA-wxxw-5cvc-53j7","fact_id":"SEA-GHSA-wxxw-5cvc-53j7-F1","document_citation":"Security Advisory GHSA-wxxw-5cvc-53j7"},{"id":"SEA-GHSA-wxxw-5cvc-53j7-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Microsoft is releasing this security advisory to provide information about a vulnerability in System.Net.Http. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.","source_quote_or_pointer":"Advisory description (GHSA-wxxw-5cvc-53j7)","fact_id":"SEA-GHSA-wxxw-5cvc-53j7-F2","document_citation":"Advisory description (GHSA-wxxw-5cvc-53j7)"}],"source_stated_contributors":["Microsoft is releasing this security advisory to provide information about a vulnerability in System.Net.Http. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.write_action"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-wxxw-5cvc-53j7","reporting_entity":"CVE-2026-66822","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-wxxw-5cvc-53j7-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-wxxw-5cvc-53j7-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-66822"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-f4g7-52wc-p8x7","title":"Microsoft Security Advisory CVE-2026-96236 - ASP.NET Core Denial of Service Vulnerability","display_title":"Microsoft.AspNetCore.App.Runtime.linux-arm issue could make the service unavailable","display_summary":"Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.AspNetCore.Localization.","display_reference":"CVE-2026-96236","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-f4g7-52wc-p8x7","source_title":"Microsoft Security Advisory CVE-2026-96236 - ASP.NET Core Denial of Service Vulnerability","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T22:39:48.310Z","source_hash":"content-fingerprint:fnv1a-ff22bd21","affected_system":{"organization":"Microsoft.AspNetCore.App.Runtime.linux-arm project","product":"Microsoft.AspNetCore.App.Runtime.linux-arm","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"C# / .NET"},"documented_facts":[{"id":"SEA-GHSA-f4g7-52wc-p8x7-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Microsoft Security Advisory CVE-2026-96236 - ASP.NET Core Denial of Service Vulnerability","source_quote_or_pointer":"Security Advisory GHSA-f4g7-52wc-p8x7","fact_id":"SEA-GHSA-f4g7-52wc-p8x7-F1","document_citation":"Security Advisory GHSA-f4g7-52wc-p8x7"},{"id":"SEA-GHSA-f4g7-52wc-p8x7-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.AspNetCore.Localization. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.","source_quote_or_pointer":"Advisory description (GHSA-f4g7-52wc-p8x7)","fact_id":"SEA-GHSA-f4g7-52wc-p8x7-F2","document_citation":"Advisory description (GHSA-f4g7-52wc-p8x7)"}],"source_stated_contributors":["Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.AspNetCore.Localization. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.write_action"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-f4g7-52wc-p8x7","reporting_entity":"CVE-2026-96236","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-f4g7-52wc-p8x7-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-f4g7-52wc-p8x7-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-96236"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-4mpw-cpwj-hxxj","title":"Microsoft Security Advisory CVE-2026-70197 - .NET and Visual Studio Remote Code Execution Vulnerability","display_title":"Microsoft.NETCore.App.Runtime.win-arm64 issue could allow unintended commands to run","display_summary":"Microsoft is releasing this security advisory to provide information about a vulnerability in System.Net.Sockets. This advisory also provides guidance on what developers can do to update their applications to remove this…","display_reference":"CVE-2026-70197","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-4mpw-cpwj-hxxj","source_title":"Microsoft Security Advisory CVE-2026-70197 - .NET and Visual Studio Remote Code Execution Vulnerability","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T22:39:48.311Z","source_hash":"content-fingerprint:fnv1a-22aaa837","affected_system":{"organization":"Microsoft.NETCore.App.Runtime.win-arm64 project","product":"Microsoft.NETCore.App.Runtime.win-arm64","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"C# / .NET"},"documented_facts":[{"id":"SEA-GHSA-4mpw-cpwj-hxxj-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Microsoft Security Advisory CVE-2026-70197 - .NET and Visual Studio Remote Code Execution Vulnerability","source_quote_or_pointer":"Security Advisory GHSA-4mpw-cpwj-hxxj","fact_id":"SEA-GHSA-4mpw-cpwj-hxxj-F1","document_citation":"Security Advisory GHSA-4mpw-cpwj-hxxj"},{"id":"SEA-GHSA-4mpw-cpwj-hxxj-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Microsoft is releasing this security advisory to provide information about a vulnerability in System.Net.Sockets. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.","source_quote_or_pointer":"Advisory description (GHSA-4mpw-cpwj-hxxj)","fact_id":"SEA-GHSA-4mpw-cpwj-hxxj-F2","document_citation":"Advisory description (GHSA-4mpw-cpwj-hxxj)"}],"source_stated_contributors":["Microsoft is releasing this security advisory to provide information about a vulnerability in System.Net.Sockets. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.write_action"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-4mpw-cpwj-hxxj","reporting_entity":"CVE-2026-70197","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-4mpw-cpwj-hxxj-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-4mpw-cpwj-hxxj-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-70197"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-3rxq-g8rj-r2cf","title":"Microsoft Security Advisory CVE-2026-69651 - .NET and Visual Studio Denial of Service Vulnerability","display_title":"Microsoft.NETCore.App.Runtime.linux-arm issue could make the service unavailable","display_summary":"Microsoft is releasing this security advisory to provide information about a vulnerability in System.Security.Cryptography.Xml; System.Private.Xml.","display_reference":"CVE-2026-69651","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-3rxq-g8rj-r2cf","source_title":"Microsoft Security Advisory CVE-2026-69651 - .NET and Visual Studio Denial of Service Vulnerability","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T22:39:48.311Z","source_hash":"content-fingerprint:fnv1a-58ea0c9","affected_system":{"organization":"Microsoft.NETCore.App.Runtime.linux-arm project","product":"Microsoft.NETCore.App.Runtime.linux-arm","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"C# / .NET"},"documented_facts":[{"id":"SEA-GHSA-3rxq-g8rj-r2cf-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Microsoft Security Advisory CVE-2026-69651 - .NET and Visual Studio Denial of Service Vulnerability","source_quote_or_pointer":"Security Advisory GHSA-3rxq-g8rj-r2cf","fact_id":"SEA-GHSA-3rxq-g8rj-r2cf-F1","document_citation":"Security Advisory GHSA-3rxq-g8rj-r2cf"},{"id":"SEA-GHSA-3rxq-g8rj-r2cf-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Microsoft is releasing this security advisory to provide information about a vulnerability in System.Security.Cryptography.Xml; System.Private.Xml. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.","source_quote_or_pointer":"Advisory description (GHSA-3rxq-g8rj-r2cf)","fact_id":"SEA-GHSA-3rxq-g8rj-r2cf-F2","document_citation":"Advisory description (GHSA-3rxq-g8rj-r2cf)"}],"source_stated_contributors":["Microsoft is releasing this security advisory to provide information about a vulnerability in System.Security.Cryptography.Xml; System.Private.Xml. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.write_action"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-3rxq-g8rj-r2cf","reporting_entity":"CVE-2026-69651","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-3rxq-g8rj-r2cf-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-3rxq-g8rj-r2cf-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-69651"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-g27p-qf6j-c96c","title":"Microsoft Security Advisory CVE-2026-102870 - ASP.NET Core Remote Code Execution Vulnerability","display_title":"Microsoft.AspNetCore.Components.WebAssembly.Server issue could allow unintended commands to run","display_summary":"Microsoft is releasing this security advisory to provide information about a vulnerability in the Blazor WebAssembly debugger included in Microsoft.AspNetCore.Components.WebAssembly.Server.","display_reference":"CVE-2026-102870","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-g27p-qf6j-c96c","source_title":"Microsoft Security Advisory CVE-2026-102870 - ASP.NET Core Remote Code Execution Vulnerability","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T22:39:48.312Z","source_hash":"content-fingerprint:fnv1a-43eb896f","affected_system":{"organization":"Microsoft.AspNetCore.Components.WebAssembly.Server project","product":"Microsoft.AspNetCore.Components.WebAssembly.Server","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"C# / .NET"},"documented_facts":[{"id":"SEA-GHSA-g27p-qf6j-c96c-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Microsoft Security Advisory CVE-2026-102870 - ASP.NET Core Remote Code Execution Vulnerability","source_quote_or_pointer":"Security Advisory GHSA-g27p-qf6j-c96c","fact_id":"SEA-GHSA-g27p-qf6j-c96c-F1","document_citation":"Security Advisory GHSA-g27p-qf6j-c96c"},{"id":"SEA-GHSA-g27p-qf6j-c96c-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Microsoft is releasing this security advisory to provide information about a vulnerability in the Blazor WebAssembly debugger included in Microsoft.AspNetCore.Components.WebAssembly.Server. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.","source_quote_or_pointer":"Advisory description (GHSA-g27p-qf6j-c96c)","fact_id":"SEA-GHSA-g27p-qf6j-c96c-F2","document_citation":"Advisory description (GHSA-g27p-qf6j-c96c)"}],"source_stated_contributors":["Microsoft is releasing this security advisory to provide information about a vulnerability in the Blazor WebAssembly debugger included in Microsoft.AspNetCore.Components.WebAssembly.Server. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.write_action"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-g27p-qf6j-c96c","reporting_entity":"CVE-2026-102870","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-g27p-qf6j-c96c-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-g27p-qf6j-c96c-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-102870"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-7hqp-7c5m-4vq6","title":"Microsoft Security Advisory CVE-2026-96960 - .NET and Visual Studio Denial of Service Vulnerability","display_title":"System.Security.Cryptography.Xml issue could make the service unavailable","display_summary":"Microsoft is releasing this security advisory to provide information about a vulnerability in System.Security.Cryptography.Xml; System.Private.Xml.","display_reference":"CVE-2026-96960","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-7hqp-7c5m-4vq6","source_title":"Microsoft Security Advisory CVE-2026-96960 - .NET and Visual Studio Denial of Service Vulnerability","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T22:39:48.312Z","source_hash":"content-fingerprint:fnv1a-dcd4637a","affected_system":{"organization":"System.Security.Cryptography.Xml project","product":"System.Security.Cryptography.Xml","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"C# / .NET"},"documented_facts":[{"id":"SEA-GHSA-7hqp-7c5m-4vq6-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Microsoft Security Advisory CVE-2026-96960 - .NET and Visual Studio Denial of Service Vulnerability","source_quote_or_pointer":"Security Advisory GHSA-7hqp-7c5m-4vq6","fact_id":"SEA-GHSA-7hqp-7c5m-4vq6-F1","document_citation":"Security Advisory GHSA-7hqp-7c5m-4vq6"},{"id":"SEA-GHSA-7hqp-7c5m-4vq6-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Microsoft is releasing this security advisory to provide information about a vulnerability in System.Security.Cryptography.Xml; System.Private.Xml. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.","source_quote_or_pointer":"Advisory description (GHSA-7hqp-7c5m-4vq6)","fact_id":"SEA-GHSA-7hqp-7c5m-4vq6-F2","document_citation":"Advisory description (GHSA-7hqp-7c5m-4vq6)"}],"source_stated_contributors":["Microsoft is releasing this security advisory to provide information about a vulnerability in System.Security.Cryptography.Xml; System.Private.Xml. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.write_action"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-7hqp-7c5m-4vq6","reporting_entity":"CVE-2026-96960","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-7hqp-7c5m-4vq6-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-7hqp-7c5m-4vq6-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-96960"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-87vj-4hqv-22p9","title":"Microsoft Security Advisory CVE-2026-96233 - .NET and Visual Studio Denial of Service Vulnerability","display_title":"Microsoft.NETCore.App.Runtime.linux-arm issue could make the service unavailable","display_summary":"Microsoft is releasing this security advisory to provide information about a vulnerability in System.Runtime. This advisory also provides guidance on what developers can do to update their applications to remove this…","display_reference":"CVE-2026-96233","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-87vj-4hqv-22p9","source_title":"Microsoft Security Advisory CVE-2026-96233 - .NET and Visual Studio Denial of Service Vulnerability","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T22:39:48.313Z","source_hash":"content-fingerprint:fnv1a-f55f9614","affected_system":{"organization":"Microsoft.NETCore.App.Runtime.linux-arm project","product":"Microsoft.NETCore.App.Runtime.linux-arm","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"C# / .NET"},"documented_facts":[{"id":"SEA-GHSA-87vj-4hqv-22p9-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Microsoft Security Advisory CVE-2026-96233 - .NET and Visual Studio Denial of Service Vulnerability","source_quote_or_pointer":"Security Advisory GHSA-87vj-4hqv-22p9","fact_id":"SEA-GHSA-87vj-4hqv-22p9-F1","document_citation":"Security Advisory GHSA-87vj-4hqv-22p9"},{"id":"SEA-GHSA-87vj-4hqv-22p9-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Microsoft is releasing this security advisory to provide information about a vulnerability in System.Runtime. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.","source_quote_or_pointer":"Advisory description (GHSA-87vj-4hqv-22p9)","fact_id":"SEA-GHSA-87vj-4hqv-22p9-F2","document_citation":"Advisory description (GHSA-87vj-4hqv-22p9)"}],"source_stated_contributors":["Microsoft is releasing this security advisory to provide information about a vulnerability in System.Runtime. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.write_action"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-87vj-4hqv-22p9","reporting_entity":"CVE-2026-96233","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-87vj-4hqv-22p9-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-87vj-4hqv-22p9-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-96233"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-86xp-94pg-8r6r","title":"Microsoft Security Advisory CVE-2026-92707 - ASP.NET Core Denial of Service Vulnerability","display_title":"Microsoft.AspNetCore.SignalR.Protocols.MessagePack issue could make the service unavailable","display_summary":"Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.AspNetCore.SignalR.Protocols.MessagePack; MessagePack; MessagePack.Annotations; MessagePackAnalyzer.","display_reference":"GHSA-86xp-94pg-8r6r","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-86xp-94pg-8r6r","source_title":"Microsoft Security Advisory CVE-2026-92707 - ASP.NET Core Denial of Service Vulnerability","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T22:39:48.313Z","source_hash":"content-fingerprint:fnv1a-44b31b1","affected_system":{"organization":"Microsoft.AspNetCore.SignalR.Protocols.MessagePack project","product":"Microsoft.AspNetCore.SignalR.Protocols.MessagePack","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"C# / .NET"},"documented_facts":[{"id":"SEA-GHSA-86xp-94pg-8r6r-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Microsoft Security Advisory CVE-2026-92707 - ASP.NET Core Denial of Service Vulnerability","source_quote_or_pointer":"Security Advisory GHSA-86xp-94pg-8r6r","fact_id":"SEA-GHSA-86xp-94pg-8r6r-F1","document_citation":"Security Advisory GHSA-86xp-94pg-8r6r"},{"id":"SEA-GHSA-86xp-94pg-8r6r-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.AspNetCore.SignalR.Protocols.MessagePack; MessagePack; MessagePack.Annotations; MessagePackAnalyzer.","source_quote_or_pointer":"Advisory description (GHSA-86xp-94pg-8r6r)","fact_id":"SEA-GHSA-86xp-94pg-8r6r-F2","document_citation":"Advisory description (GHSA-86xp-94pg-8r6r)"}],"source_stated_contributors":["Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.AspNetCore.SignalR.Protocols.MessagePack; MessagePack; MessagePack.Annotations; MessagePackAnalyzer."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-86xp-94pg-8r6r","reporting_entity":"GitHub Security Advisory Database","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-86xp-94pg-8r6r-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-86xp-94pg-8r6r-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":[],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-2fmv-rv2c-59x7","title":"Microsoft Security Advisory CVE-2026-70162 - .NET Denial of Service Vulnerability","display_title":"System.Security.Cryptography.Pkcs issue could make the service unavailable","display_summary":"Microsoft is releasing this security advisory to provide information about a vulnerability in System.Security.Cryptography.Pkcs.","display_reference":"CVE-2026-70162","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-2fmv-rv2c-59x7","source_title":"Microsoft Security Advisory CVE-2026-70162 - .NET Denial of Service Vulnerability","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T22:39:48.314Z","source_hash":"content-fingerprint:fnv1a-e0c279c6","affected_system":{"organization":"System.Security.Cryptography.Pkcs project","product":"System.Security.Cryptography.Pkcs","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"C# / .NET"},"documented_facts":[{"id":"SEA-GHSA-2fmv-rv2c-59x7-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Microsoft Security Advisory CVE-2026-70162 - .NET Denial of Service Vulnerability","source_quote_or_pointer":"Security Advisory GHSA-2fmv-rv2c-59x7","fact_id":"SEA-GHSA-2fmv-rv2c-59x7-F1","document_citation":"Security Advisory GHSA-2fmv-rv2c-59x7"},{"id":"SEA-GHSA-2fmv-rv2c-59x7-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Microsoft is releasing this security advisory to provide information about a vulnerability in System.Security.Cryptography.Pkcs. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.","source_quote_or_pointer":"Advisory description (GHSA-2fmv-rv2c-59x7)","fact_id":"SEA-GHSA-2fmv-rv2c-59x7-F2","document_citation":"Advisory description (GHSA-2fmv-rv2c-59x7)"}],"source_stated_contributors":["Microsoft is releasing this security advisory to provide information about a vulnerability in System.Security.Cryptography.Pkcs. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.write_action"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-2fmv-rv2c-59x7","reporting_entity":"CVE-2026-70162","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-2fmv-rv2c-59x7-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-2fmv-rv2c-59x7-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-70162"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-r955-8q5j-3h83","title":"Microsoft Security Advisory CVE-2026-96958 - .NET and Visual Studio Denial of Service Vulnerability","display_title":"System.Security.Cryptography.Xml issue could make the service unavailable","display_summary":"Microsoft is releasing this security advisory to provide information about a vulnerability in System.Security.Cryptography.Xml; System.Private.Xml.","display_reference":"CVE-2026-96958","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-r955-8q5j-3h83","source_title":"Microsoft Security Advisory CVE-2026-96958 - .NET and Visual Studio Denial of Service Vulnerability","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T22:39:48.314Z","source_hash":"content-fingerprint:fnv1a-b663af1a","affected_system":{"organization":"System.Security.Cryptography.Xml project","product":"System.Security.Cryptography.Xml","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"C# / .NET"},"documented_facts":[{"id":"SEA-GHSA-r955-8q5j-3h83-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Microsoft Security Advisory CVE-2026-96958 - .NET and Visual Studio Denial of Service Vulnerability","source_quote_or_pointer":"Security Advisory GHSA-r955-8q5j-3h83","fact_id":"SEA-GHSA-r955-8q5j-3h83-F1","document_citation":"Security Advisory GHSA-r955-8q5j-3h83"},{"id":"SEA-GHSA-r955-8q5j-3h83-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Microsoft is releasing this security advisory to provide information about a vulnerability in System.Security.Cryptography.Xml; System.Private.Xml. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.","source_quote_or_pointer":"Advisory description (GHSA-r955-8q5j-3h83)","fact_id":"SEA-GHSA-r955-8q5j-3h83-F2","document_citation":"Advisory description (GHSA-r955-8q5j-3h83)"}],"source_stated_contributors":["Microsoft is releasing this security advisory to provide information about a vulnerability in System.Security.Cryptography.Xml; System.Private.Xml. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.write_action"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-r955-8q5j-3h83","reporting_entity":"CVE-2026-96958","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-r955-8q5j-3h83-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-r955-8q5j-3h83-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-96958"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-846f-f764-76mx","title":"Microsoft Security Advisory CVE-2026-84008 - .NET Denial of Service Vulnerability","display_title":"System.Security.Cryptography.Pkcs issue could make the service unavailable","display_summary":"Microsoft is releasing this security advisory to provide information about a vulnerability in System.Security.Cryptography.Pkcs.","display_reference":"CVE-2026-84008","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-846f-f764-76mx","source_title":"Microsoft Security Advisory CVE-2026-84008 - .NET Denial of Service Vulnerability","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T22:39:48.315Z","source_hash":"content-fingerprint:fnv1a-3c1d154","affected_system":{"organization":"System.Security.Cryptography.Pkcs project","product":"System.Security.Cryptography.Pkcs","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"C# / .NET"},"documented_facts":[{"id":"SEA-GHSA-846f-f764-76mx-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Microsoft Security Advisory CVE-2026-84008 - .NET Denial of Service Vulnerability","source_quote_or_pointer":"Security Advisory GHSA-846f-f764-76mx","fact_id":"SEA-GHSA-846f-f764-76mx-F1","document_citation":"Security Advisory GHSA-846f-f764-76mx"},{"id":"SEA-GHSA-846f-f764-76mx-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Microsoft is releasing this security advisory to provide information about a vulnerability in System.Security.Cryptography.Pkcs. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.","source_quote_or_pointer":"Advisory description (GHSA-846f-f764-76mx)","fact_id":"SEA-GHSA-846f-f764-76mx-F2","document_citation":"Advisory description (GHSA-846f-f764-76mx)"}],"source_stated_contributors":["Microsoft is releasing this security advisory to provide information about a vulnerability in System.Security.Cryptography.Pkcs. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.write_action"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-846f-f764-76mx","reporting_entity":"CVE-2026-84008","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-846f-f764-76mx-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-846f-f764-76mx-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-84008"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-mc4q-93x5-f6hj","title":"Microsoft Security Advisory CVE-2026-58280 - .NET and Visual Studio Denial of Service Vulnerability","display_title":"Microsoft.NETCore.App.Runtime.linux-arm issue could make the service unavailable","display_summary":"Microsoft is releasing this security advisory to provide information about a vulnerability in System.Security.Cryptography.Xml and System.Private.Xml.","display_reference":"CVE-2026-58280","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-mc4q-93x5-f6hj","source_title":"Microsoft Security Advisory CVE-2026-58280 - .NET and Visual Studio Denial of Service Vulnerability","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T22:39:48.317Z","source_hash":"content-fingerprint:fnv1a-b6b8f513","affected_system":{"organization":"Microsoft.NETCore.App.Runtime.linux-arm project","product":"Microsoft.NETCore.App.Runtime.linux-arm","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"C# / .NET"},"documented_facts":[{"id":"SEA-GHSA-mc4q-93x5-f6hj-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Microsoft Security Advisory CVE-2026-58280 - .NET and Visual Studio Denial of Service Vulnerability","source_quote_or_pointer":"Security Advisory GHSA-mc4q-93x5-f6hj","fact_id":"SEA-GHSA-mc4q-93x5-f6hj-F1","document_citation":"Security Advisory GHSA-mc4q-93x5-f6hj"},{"id":"SEA-GHSA-mc4q-93x5-f6hj-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Microsoft is releasing this security advisory to provide information about a vulnerability in System.Security.Cryptography.Xml and System.Private.Xml. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.","source_quote_or_pointer":"Advisory description (GHSA-mc4q-93x5-f6hj)","fact_id":"SEA-GHSA-mc4q-93x5-f6hj-F2","document_citation":"Advisory description (GHSA-mc4q-93x5-f6hj)"}],"source_stated_contributors":["Microsoft is releasing this security advisory to provide information about a vulnerability in System.Security.Cryptography.Xml and System.Private.Xml. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.write_action"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-mc4q-93x5-f6hj","reporting_entity":"CVE-2026-58280","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-mc4q-93x5-f6hj-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-mc4q-93x5-f6hj-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-58280"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-fqpq-cx42-9jmm","title":"Microsoft Security Advisory CVE-2026-70194 - .NET and Visual Studio Security Feature Bypass Vulnerability","display_title":"Security issue reported in Microsoft.NETCore.App.Runtime.linux-arm","display_summary":"Microsoft is releasing this security advisory to provide information about a vulnerability in System.Net.Security. This advisory also provides guidance on what developers can do to update their applications to remove…","display_reference":"CVE-2026-70194","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-fqpq-cx42-9jmm","source_title":"Microsoft Security Advisory CVE-2026-70194 - .NET and Visual Studio Security Feature Bypass Vulnerability","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T22:39:48.317Z","source_hash":"content-fingerprint:fnv1a-1b1e9625","affected_system":{"organization":"Microsoft.NETCore.App.Runtime.linux-arm project","product":"Microsoft.NETCore.App.Runtime.linux-arm","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"C# / .NET"},"documented_facts":[{"id":"SEA-GHSA-fqpq-cx42-9jmm-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Microsoft Security Advisory CVE-2026-70194 - .NET and Visual Studio Security Feature Bypass Vulnerability","source_quote_or_pointer":"Security Advisory GHSA-fqpq-cx42-9jmm","fact_id":"SEA-GHSA-fqpq-cx42-9jmm-F1","document_citation":"Security Advisory GHSA-fqpq-cx42-9jmm"},{"id":"SEA-GHSA-fqpq-cx42-9jmm-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Microsoft is releasing this security advisory to provide information about a vulnerability in System.Net.Security. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.","source_quote_or_pointer":"Advisory description (GHSA-fqpq-cx42-9jmm)","fact_id":"SEA-GHSA-fqpq-cx42-9jmm-F2","document_citation":"Advisory description (GHSA-fqpq-cx42-9jmm)"}],"source_stated_contributors":["Microsoft is releasing this security advisory to provide information about a vulnerability in System.Net.Security. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.write_action"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-fqpq-cx42-9jmm","reporting_entity":"CVE-2026-70194","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-fqpq-cx42-9jmm-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-fqpq-cx42-9jmm-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-70194"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-494h-xx7x-5frh","title":"Microsoft Security Advisory CVE-2026-70183 - ASP.NET Core Security Feature Bypass Vulnerability","display_title":"Security issue reported in Microsoft.AspNetCore.App.Runtime.linux-arm","display_summary":"Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.AspNetCore.Components.Authorization.","display_reference":"CVE-2026-70183","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-494h-xx7x-5frh","source_title":"Microsoft Security Advisory CVE-2026-70183 - ASP.NET Core Security Feature Bypass Vulnerability","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T22:39:48.318Z","source_hash":"content-fingerprint:fnv1a-88428674","affected_system":{"organization":"Microsoft.AspNetCore.App.Runtime.linux-arm project","product":"Microsoft.AspNetCore.App.Runtime.linux-arm","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"C# / .NET"},"documented_facts":[{"id":"SEA-GHSA-494h-xx7x-5frh-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Microsoft Security Advisory CVE-2026-70183 - ASP.NET Core Security Feature Bypass Vulnerability","source_quote_or_pointer":"Security Advisory GHSA-494h-xx7x-5frh","fact_id":"SEA-GHSA-494h-xx7x-5frh-F1","document_citation":"Security Advisory GHSA-494h-xx7x-5frh"},{"id":"SEA-GHSA-494h-xx7x-5frh-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.AspNetCore.Components.Authorization. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.","source_quote_or_pointer":"Advisory description (GHSA-494h-xx7x-5frh)","fact_id":"SEA-GHSA-494h-xx7x-5frh-F2","document_citation":"Advisory description (GHSA-494h-xx7x-5frh)"}],"source_stated_contributors":["Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.AspNetCore.Components.Authorization. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.write_action"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-494h-xx7x-5frh","reporting_entity":"CVE-2026-70183","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-494h-xx7x-5frh-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-494h-xx7x-5frh-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-70183"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-57xr-hfxx-jw5x","title":"Microsoft Security Advisory CVE-2026-70196 - ASP.NET Core Denial of Service Vulnerability","display_title":"Microsoft.AspNetCore.App.Runtime.linux-arm issue could make the service unavailable","display_summary":"Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.AspNetCore.WebUtilities.","display_reference":"CVE-2026-70196","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-57xr-hfxx-jw5x","source_title":"Microsoft Security Advisory CVE-2026-70196 - ASP.NET Core Denial of Service Vulnerability","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T22:39:48.318Z","source_hash":"content-fingerprint:fnv1a-c5a04875","affected_system":{"organization":"Microsoft.AspNetCore.App.Runtime.linux-arm project","product":"Microsoft.AspNetCore.App.Runtime.linux-arm","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"C# / .NET"},"documented_facts":[{"id":"SEA-GHSA-57xr-hfxx-jw5x-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Microsoft Security Advisory CVE-2026-70196 - ASP.NET Core Denial of Service Vulnerability","source_quote_or_pointer":"Security Advisory GHSA-57xr-hfxx-jw5x","fact_id":"SEA-GHSA-57xr-hfxx-jw5x-F1","document_citation":"Security Advisory GHSA-57xr-hfxx-jw5x"},{"id":"SEA-GHSA-57xr-hfxx-jw5x-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.AspNetCore.WebUtilities. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.","source_quote_or_pointer":"Advisory description (GHSA-57xr-hfxx-jw5x)","fact_id":"SEA-GHSA-57xr-hfxx-jw5x-F2","document_citation":"Advisory description (GHSA-57xr-hfxx-jw5x)"}],"source_stated_contributors":["Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.AspNetCore.WebUtilities. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.write_action"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-57xr-hfxx-jw5x","reporting_entity":"CVE-2026-70196","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-57xr-hfxx-jw5x-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-57xr-hfxx-jw5x-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-70196"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-5gjq-3f94-rcf7","title":"Microsoft Security Advisory CVE-2026-105016 - Microsoft QUIC Remote Code Execution Vulnerability","display_title":"Microsoft.Native.Quic.MsQuic.Schannel issue could allow unintended commands to run","display_summary":"Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft QUIC as used by .NET 8.0, .NET 9.0, .NET 10.0, and .NET 11 RC2 on Windows.","display_reference":"CVE-2026-105016","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-5gjq-3f94-rcf7","source_title":"Microsoft Security Advisory CVE-2026-105016 - Microsoft QUIC Remote Code Execution Vulnerability","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T22:39:48.319Z","source_hash":"content-fingerprint:fnv1a-2ca90792","affected_system":{"organization":"Microsoft.Native.Quic.MsQuic.Schannel project","product":"Microsoft.Native.Quic.MsQuic.Schannel","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"C# / .NET"},"documented_facts":[{"id":"SEA-GHSA-5gjq-3f94-rcf7-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Microsoft Security Advisory CVE-2026-105016 - Microsoft QUIC Remote Code Execution Vulnerability","source_quote_or_pointer":"Security Advisory GHSA-5gjq-3f94-rcf7","fact_id":"SEA-GHSA-5gjq-3f94-rcf7-F1","document_citation":"Security Advisory GHSA-5gjq-3f94-rcf7"},{"id":"SEA-GHSA-5gjq-3f94-rcf7-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft QUIC as used by .NET 8.0, .NET 9.0, .NET 10.0, and .NET 11 RC2 on Windows. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.","source_quote_or_pointer":"Advisory description (GHSA-5gjq-3f94-rcf7)","fact_id":"SEA-GHSA-5gjq-3f94-rcf7-F2","document_citation":"Advisory description (GHSA-5gjq-3f94-rcf7)"}],"source_stated_contributors":["Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft QUIC as used by .NET 8.0, .NET 9.0, .NET 10.0, and .NET 11 RC2 on Windows. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.write_action"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-5gjq-3f94-rcf7","reporting_entity":"CVE-2026-105016","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-5gjq-3f94-rcf7-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-5gjq-3f94-rcf7-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-105016"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-w5qq-qrpp-rf4c","title":"Microsoft Security Advisory CVE-2026-70181 - ASP.NET Core Denial of Service Vulnerability","display_title":"Microsoft.AspNetCore.App.Runtime.linux-arm issue could make the service unavailable","display_summary":"Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.AspNetCore.WebUtilities.","display_reference":"CVE-2026-70181","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-w5qq-qrpp-rf4c","source_title":"Microsoft Security Advisory CVE-2026-70181 - ASP.NET Core Denial of Service Vulnerability","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T22:39:48.320Z","source_hash":"content-fingerprint:fnv1a-4d99fb41","affected_system":{"organization":"Microsoft.AspNetCore.App.Runtime.linux-arm project","product":"Microsoft.AspNetCore.App.Runtime.linux-arm","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"C# / .NET"},"documented_facts":[{"id":"SEA-GHSA-w5qq-qrpp-rf4c-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Microsoft Security Advisory CVE-2026-70181 - ASP.NET Core Denial of Service Vulnerability","source_quote_or_pointer":"Security Advisory GHSA-w5qq-qrpp-rf4c","fact_id":"SEA-GHSA-w5qq-qrpp-rf4c-F1","document_citation":"Security Advisory GHSA-w5qq-qrpp-rf4c"},{"id":"SEA-GHSA-w5qq-qrpp-rf4c-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.AspNetCore.WebUtilities. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.","source_quote_or_pointer":"Advisory description (GHSA-w5qq-qrpp-rf4c)","fact_id":"SEA-GHSA-w5qq-qrpp-rf4c-F2","document_citation":"Advisory description (GHSA-w5qq-qrpp-rf4c)"}],"source_stated_contributors":["Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.AspNetCore.WebUtilities. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.write_action"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-w5qq-qrpp-rf4c","reporting_entity":"CVE-2026-70181","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-w5qq-qrpp-rf4c-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-w5qq-qrpp-rf4c-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-70181"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-x3vp-85cm-q97r","title":"Microsoft Security Advisory CVE-2026-70175 - ASP.NET Core Elevation of Privilege Vulnerability","display_title":"Microsoft.AspNetCore.App.Runtime.linux-arm issue could grant elevated privileges","display_summary":"Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.AspNetCore.Identity and Microsoft.AspNetCore.Identity.UI.","display_reference":"CVE-2026-70175","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-x3vp-85cm-q97r","source_title":"Microsoft Security Advisory CVE-2026-70175 - ASP.NET Core Elevation of Privilege Vulnerability","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T22:39:48.320Z","source_hash":"content-fingerprint:fnv1a-333b5dba","affected_system":{"organization":"Microsoft.AspNetCore.App.Runtime.linux-arm project","product":"Microsoft.AspNetCore.App.Runtime.linux-arm","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"C# / .NET"},"documented_facts":[{"id":"SEA-GHSA-x3vp-85cm-q97r-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Microsoft Security Advisory CVE-2026-70175 - ASP.NET Core Elevation of Privilege Vulnerability","source_quote_or_pointer":"Security Advisory GHSA-x3vp-85cm-q97r","fact_id":"SEA-GHSA-x3vp-85cm-q97r-F1","document_citation":"Security Advisory GHSA-x3vp-85cm-q97r"},{"id":"SEA-GHSA-x3vp-85cm-q97r-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.AspNetCore.Identity and Microsoft.AspNetCore.Identity.UI. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.","source_quote_or_pointer":"Advisory description (GHSA-x3vp-85cm-q97r)","fact_id":"SEA-GHSA-x3vp-85cm-q97r-F2","document_citation":"Advisory description (GHSA-x3vp-85cm-q97r)"}],"source_stated_contributors":["Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.AspNetCore.Identity and Microsoft.AspNetCore.Identity.UI. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.write_action"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Elevated privileges","Boundary bypass"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-x3vp-85cm-q97r","reporting_entity":"CVE-2026-70175","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-x3vp-85cm-q97r-SG1","label":"Enforce privilege boundaries in code","description":"Require explicit, server-verified authorization for privileged operations and isolate components with separate identities.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-x3vp-85cm-q97r-SG1","label":"Enforce privilege boundaries in code","description":"Require explicit, server-verified authorization for privileged operations and isolate components with separate identities.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A low-privilege actor reached a high-privilege capability. Enforce approval and privilege boundaries in deterministic code, not by convention.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-70175"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-334f-vvp4-7g6p","title":"Microsoft Security Advisory CVE-2026-70159 - ASP.NET Core Denial of Service Vulnerability","display_title":"Microsoft.AspNetCore.SignalR.Common issue could make the service unavailable","display_summary":"Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.AspNetCore.SignalR.Common and Microsoft.AspNetCore.SignalR.Core.","display_reference":"CVE-2026-70159","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-334f-vvp4-7g6p","source_title":"Microsoft Security Advisory CVE-2026-70159 - ASP.NET Core Denial of Service Vulnerability","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T22:39:48.321Z","source_hash":"content-fingerprint:fnv1a-b25febf7","affected_system":{"organization":"Microsoft.AspNetCore.SignalR.Common project","product":"Microsoft.AspNetCore.SignalR.Common","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"C# / .NET"},"documented_facts":[{"id":"SEA-GHSA-334f-vvp4-7g6p-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Microsoft Security Advisory CVE-2026-70159 - ASP.NET Core Denial of Service Vulnerability","source_quote_or_pointer":"Security Advisory GHSA-334f-vvp4-7g6p","fact_id":"SEA-GHSA-334f-vvp4-7g6p-F1","document_citation":"Security Advisory GHSA-334f-vvp4-7g6p"},{"id":"SEA-GHSA-334f-vvp4-7g6p-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.AspNetCore.SignalR.Common and Microsoft.AspNetCore.SignalR.Core. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.","source_quote_or_pointer":"Advisory description (GHSA-334f-vvp4-7g6p)","fact_id":"SEA-GHSA-334f-vvp4-7g6p-F2","document_citation":"Advisory description (GHSA-334f-vvp4-7g6p)"}],"source_stated_contributors":["Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.AspNetCore.SignalR.Common and Microsoft.AspNetCore.SignalR.Core. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.write_action"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-334f-vvp4-7g6p","reporting_entity":"CVE-2026-70159","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-334f-vvp4-7g6p-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-334f-vvp4-7g6p-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-70159"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-105900","title":"ColdFusion is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user interaction.","display_title":"Security issue reported in coldfusion","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-105900","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105900","source_title":"ColdFusion is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user interaction.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-17T00:24:19.375Z","source_hash":"content-fingerprint:fnv1a-5cb3caf2","affected_system":{"organization":"coldfusion project","product":"coldfusion","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-105900-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"ColdFusion is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user interaction.","source_quote_or_pointer":"Security Advisory CVE-2026-105900","fact_id":"SEA-CVE-2026-105900-F1","document_citation":"Security Advisory CVE-2026-105900"},{"id":"SEA-CVE-2026-105900-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"ColdFusion is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user interaction.","source_quote_or_pointer":"Advisory description (CVE-2026-105900)","fact_id":"SEA-CVE-2026-105900-F2","document_citation":"Advisory description (CVE-2026-105900)"}],"source_stated_contributors":["ColdFusion is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user interaction."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-105900","reporting_entity":"CVE-2026-105900","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-105900-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-105900-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-105900"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-105897","title":"ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. Scope is changed.","display_title":"coldfusion issue could reach internal services","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-105897","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105897","source_title":"ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. Scope is changed.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-17T00:24:19.375Z","source_hash":"content-fingerprint:fnv1a-26b90433","affected_system":{"organization":"coldfusion project","product":"coldfusion","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-105897-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. Scope is changed.","source_quote_or_pointer":"Security Advisory CVE-2026-105897","fact_id":"SEA-CVE-2026-105897-F1","document_citation":"Security Advisory CVE-2026-105897"},{"id":"SEA-CVE-2026-105897-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. Scope is changed.","source_quote_or_pointer":"Advisory description (CVE-2026-105897)","fact_id":"SEA-CVE-2026-105897-F2","document_citation":"Advisory description (CVE-2026-105897)"}],"source_stated_contributors":["ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. Scope is changed."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Internal network access","Cloud metadata or credential exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-105897","reporting_entity":"CVE-2026-105897","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-105897-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-105897-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"The service fetched a URL chosen by the caller and could be steered at internal systems. Restrict outbound destinations and block internal address ranges.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-105897"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2024-34319","title":"A Server-Side Request Forgery (SSRF) in the serviceURL parameter of ProPhoenix Law RMS v2022.2403.3.101 allows attackers to force the application server to make unintended DNS and web requests via a crafted HTTP request.","display_title":"Software component issue could reach internal services","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2024-34319","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2024-34319","source_title":"A Server-Side Request Forgery (SSRF) in the serviceURL parameter of ProPhoenix Law RMS v2022.2403.3.101 allows attackers to force the application server to make unintended DNS and web requests via a crafted HTTP request.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T21:01:43.264Z","source_hash":"content-fingerprint:fnv1a-6b3e5345","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2024-34319-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A Server-Side Request Forgery (SSRF) in the serviceURL parameter of ProPhoenix Law RMS v2022.2403.3.101 allows attackers to force the application server to make unintended DNS and web requests via a crafted HTTP request.","source_quote_or_pointer":"Security Advisory CVE-2024-34319","fact_id":"SEA-CVE-2024-34319-F1","document_citation":"Security Advisory CVE-2024-34319"},{"id":"SEA-CVE-2024-34319-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A Server-Side Request Forgery (SSRF) in the serviceURL parameter of ProPhoenix Law RMS v2022.2403.3.101 allows attackers to force the application server to make unintended DNS and web requests via a crafted HTTP request.","source_quote_or_pointer":"Advisory description (CVE-2024-34319)","fact_id":"SEA-CVE-2024-34319-F2","document_citation":"Advisory description (CVE-2024-34319)"}],"source_stated_contributors":["A Server-Side Request Forgery (SSRF) in the serviceURL parameter of ProPhoenix Law RMS v2022.2403.3.101 allows attackers to force the application server to make unintended DNS and web requests via a crafted HTTP request."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Internal network access","Cloud metadata or credential exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2024-34319","reporting_entity":"CVE-2024-34319","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2024-34319-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2024-34319-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"The service fetched a URL chosen by the caller and could be steered at internal systems. Restrict outbound destinations and block internal address ranges.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2024-34319"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-12656","title":"A denial-of-service security issue exists in the affected product and version. The security issue stems from improper handling of network storm traffic, which can interrupt communication, cause device faults, and affect open TCP and UDP ports. A power cycle is required to recover the device to its normal state.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-12656","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-12656","source_title":"A denial-of-service security issue exists in the affected product and version. The security issue stems from improper handling of network storm traffic, which can interrupt communication, cause device faults, and affect open TCP and UDP ports. A power cycle is required to recover the device to its normal state.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T21:01:43.265Z","source_hash":"content-fingerprint:fnv1a-52805619","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-12656-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A denial-of-service security issue exists in the affected product and version. The security issue stems from improper handling of network storm traffic, which can interrupt communication, cause device faults, and affect open TCP and UDP ports. A power cycle is required to recover the device to its normal state.","source_quote_or_pointer":"Security Advisory CVE-2026-12656","fact_id":"SEA-CVE-2026-12656-F1","document_citation":"Security Advisory CVE-2026-12656"},{"id":"SEA-CVE-2026-12656-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A denial-of-service security issue exists in the affected product and version. The security issue stems from improper handling of network storm traffic, which can interrupt communication, cause device faults, and affect open TCP and UDP ports. A power cycle is required to recover the device to its normal state.","source_quote_or_pointer":"Advisory description (CVE-2026-12656)","fact_id":"SEA-CVE-2026-12656-F2","document_citation":"Advisory description (CVE-2026-12656)"}],"source_stated_contributors":["A denial-of-service security issue exists in the affected product and version. The security issue stems from improper handling of network storm traffic, which can interrupt communication, cause device faults, and affect open TCP and UDP ports. A power cycle is required to recover the device to its normal state."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-12656","reporting_entity":"CVE-2026-12656","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-12656-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-12656-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-12656"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-95114","title":"libwebsockets contains an out-of-bounds read vulnerability in the LEJP incremental parser in lib/misc/lejp.c. This allows a remote attacker to cause a denial of service","display_title":"Software component issue could make the service unavailable","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-95114","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95114","source_title":"libwebsockets contains an out-of-bounds read vulnerability in the LEJP incremental parser in lib/misc/lejp.c. This allows a remote attacker to cause a denial of service","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T21:01:43.265Z","source_hash":"content-fingerprint:fnv1a-ac2693fd","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-95114-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"libwebsockets contains an out-of-bounds read vulnerability in the LEJP incremental parser in lib/misc/lejp.c. This allows a remote attacker to cause a denial of service","source_quote_or_pointer":"Security Advisory CVE-2026-95114","fact_id":"SEA-CVE-2026-95114-F1","document_citation":"Security Advisory CVE-2026-95114"},{"id":"SEA-CVE-2026-95114-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"libwebsockets contains an out-of-bounds read vulnerability in the LEJP incremental parser in lib/misc/lejp.c. This allows a remote attacker to cause a denial of service","source_quote_or_pointer":"Advisory description (CVE-2026-95114)","fact_id":"SEA-CVE-2026-95114-F2","document_citation":"Advisory description (CVE-2026-95114)"}],"source_stated_contributors":["libwebsockets contains an out-of-bounds read vulnerability in the LEJP incremental parser in lib/misc/lejp.c. This allows a remote attacker to cause a denial of service"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-95114","reporting_entity":"CVE-2026-95114","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-95114-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-95114-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-95114"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-95115","title":"Buffer Overflow vulnerability in libwebsockets main 106d542c allows a remote attacker to cause a denial of service via the LEJP JSON parser","display_title":"Software component issue could make the service unavailable","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-95115","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95115","source_title":"Buffer Overflow vulnerability in libwebsockets main 106d542c allows a remote attacker to cause a denial of service via the LEJP JSON parser","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T21:01:43.266Z","source_hash":"content-fingerprint:fnv1a-cd67d1c2","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-95115-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Buffer Overflow vulnerability in libwebsockets main 106d542c allows a remote attacker to cause a denial of service via the LEJP JSON parser","source_quote_or_pointer":"Security Advisory CVE-2026-95115","fact_id":"SEA-CVE-2026-95115-F1","document_citation":"Security Advisory CVE-2026-95115"},{"id":"SEA-CVE-2026-95115-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Buffer Overflow vulnerability in libwebsockets main 106d542c allows a remote attacker to cause a denial of service via the LEJP JSON parser","source_quote_or_pointer":"Advisory description (CVE-2026-95115)","fact_id":"SEA-CVE-2026-95115-F2","document_citation":"Advisory description (CVE-2026-95115)"}],"source_stated_contributors":["Buffer Overflow vulnerability in libwebsockets main 106d542c allows a remote attacker to cause a denial of service via the LEJP JSON parser"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-95115","reporting_entity":"CVE-2026-95115","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-95115-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-95115-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-95115"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-95117","title":"Buffer Overflow vulnerability in zserge jsmn jsmn HEAD 25647e6 allows a remote attacker to cause a denial of service via the jsmn.h, jsmn_parse(), example/jsondump.c, dump() components","display_title":"Software component issue could make the service unavailable","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-95117","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95117","source_title":"Buffer Overflow vulnerability in zserge jsmn jsmn HEAD 25647e6 allows a remote attacker to cause a denial of service via the jsmn.h, jsmn_parse(), example/jsondump.c, dump() components","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T21:01:43.266Z","source_hash":"content-fingerprint:fnv1a-f9f45cc6","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-95117-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Buffer Overflow vulnerability in zserge jsmn jsmn HEAD 25647e6 allows a remote attacker to cause a denial of service via the jsmn.h, jsmn_parse(), example/jsondump.c, dump() components","source_quote_or_pointer":"Security Advisory CVE-2026-95117","fact_id":"SEA-CVE-2026-95117-F1","document_citation":"Security Advisory CVE-2026-95117"},{"id":"SEA-CVE-2026-95117-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Buffer Overflow vulnerability in zserge jsmn jsmn HEAD 25647e6 allows a remote attacker to cause a denial of service via the jsmn.h, jsmnparse(), example/jsondump.c, dump() components","source_quote_or_pointer":"Advisory description (CVE-2026-95117)","fact_id":"SEA-CVE-2026-95117-F2","document_citation":"Advisory description (CVE-2026-95117)"}],"source_stated_contributors":["Buffer Overflow vulnerability in zserge jsmn jsmn HEAD 25647e6 allows a remote attacker to cause a denial of service via the jsmn.h, jsmnparse(), example/jsondump.c, dump() components"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-95117","reporting_entity":"CVE-2026-95117","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-95117-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-95117-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-95117"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-95122","title":"mp4v2 2.0.0 contains a NULL pointer dereference vulnerability in MP4File::GenerateTracks() in src/mp4file.cpp. This allows a remote attacker to cause a denial of service","display_title":"Software component issue could make the service unavailable","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-95122","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95122","source_title":"mp4v2 2.0.0 contains a NULL pointer dereference vulnerability in MP4File::GenerateTracks() in src/mp4file.cpp. This allows a remote attacker to cause a denial of service","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T21:01:43.266Z","source_hash":"content-fingerprint:fnv1a-a9eeb0b8","affected_system":{"organization":"mp4v2 2.0.0 contains a NULL pointer dereference vulnerability in MP4File project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-95122-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"mp4v2 2.0.0 contains a NULL pointer dereference vulnerability in MP4File::GenerateTracks() in src/mp4file.cpp. This allows a remote attacker to cause a denial of service","source_quote_or_pointer":"Security Advisory CVE-2026-95122","fact_id":"SEA-CVE-2026-95122-F1","document_citation":"Security Advisory CVE-2026-95122"},{"id":"SEA-CVE-2026-95122-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"mp4v2 2.0.0 contains a NULL pointer dereference vulnerability in MP4File::GenerateTracks() in src/mp4file.cpp. This allows a remote attacker to cause a denial of service","source_quote_or_pointer":"Advisory description (CVE-2026-95122)","fact_id":"SEA-CVE-2026-95122-F2","document_citation":"Advisory description (CVE-2026-95122)"}],"source_stated_contributors":["mp4v2 2.0.0 contains a NULL pointer dereference vulnerability in MP4File::GenerateTracks() in src/mp4file.cpp. This allows a remote attacker to cause a denial of service"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-95122","reporting_entity":"CVE-2026-95122","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-95122-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-95122-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-95122"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-95124","title":"Buffer Overflow vulnerability in madmurphy libconfini v.1.16.4 allows a remote attacker to cause a denial of service via an allocation-size mismatch between its bundled load_ini_buffer utility and strip_ini_cache()","display_title":"Software component issue could make the service unavailable","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-95124","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95124","source_title":"Buffer Overflow vulnerability in madmurphy libconfini v.1.16.4 allows a remote attacker to cause a denial of service via an allocation-size mismatch between its bundled load_ini_buffer utility and strip_ini_cache()","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T21:01:43.267Z","source_hash":"content-fingerprint:fnv1a-ee9e8588","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-95124-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Buffer Overflow vulnerability in madmurphy libconfini v.1.16.4 allows a remote attacker to cause a denial of service via an allocation-size mismatch between its bundled load_ini_buffer utility and strip_ini_cache()","source_quote_or_pointer":"Security Advisory CVE-2026-95124","fact_id":"SEA-CVE-2026-95124-F1","document_citation":"Security Advisory CVE-2026-95124"},{"id":"SEA-CVE-2026-95124-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Buffer Overflow vulnerability in madmurphy libconfini v.1.16.4 allows a remote attacker to cause a denial of service via an allocation-size mismatch between its bundled loadinibuffer utility and stripinicache()","source_quote_or_pointer":"Advisory description (CVE-2026-95124)","fact_id":"SEA-CVE-2026-95124-F2","document_citation":"Advisory description (CVE-2026-95124)"}],"source_stated_contributors":["Buffer Overflow vulnerability in madmurphy libconfini v.1.16.4 allows a remote attacker to cause a denial of service via an allocation-size mismatch between its bundled loadinibuffer utility and stripinicache()"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-95124","reporting_entity":"CVE-2026-95124","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-95124-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-95124-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-95124"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-95127","title":"An issue in libass v.0.17.5 allows a remote attacker to cause a denial of service via the ass_outline_construct() in libass/ass_render.c","display_title":"Software component issue could make the service unavailable","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-95127","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95127","source_title":"An issue in libass v.0.17.5 allows a remote attacker to cause a denial of service via the ass_outline_construct() in libass/ass_render.c","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T21:01:43.267Z","source_hash":"content-fingerprint:fnv1a-b3683ae3","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-95127-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"An issue in libass v.0.17.5 allows a remote attacker to cause a denial of service via the ass_outline_construct() in libass/ass_render.c","source_quote_or_pointer":"Security Advisory CVE-2026-95127","fact_id":"SEA-CVE-2026-95127-F1","document_citation":"Security Advisory CVE-2026-95127"},{"id":"SEA-CVE-2026-95127-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"An issue in libass v.0.17.5 allows a remote attacker to cause a denial of service via the assoutlineconstruct() in libass/assrender.c","source_quote_or_pointer":"Advisory description (CVE-2026-95127)","fact_id":"SEA-CVE-2026-95127-F2","document_citation":"Advisory description (CVE-2026-95127)"}],"source_stated_contributors":["An issue in libass v.0.17.5 allows a remote attacker to cause a denial of service via the assoutlineconstruct() in libass/assrender.c"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-95127","reporting_entity":"CVE-2026-95127","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-95127-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-95127-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-95127"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2024-34320","title":"ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain an incorrect access control issue in sensitive API endpoints.","display_title":"Software component issue could allow unauthorized access","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2024-34320","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2024-34320","source_title":"ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain an incorrect access control issue in sensitive API endpoints.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T21:01:43.267Z","source_hash":"content-fingerprint:fnv1a-c164199b","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2024-34320-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain an incorrect access control issue in sensitive API endpoints.","source_quote_or_pointer":"Security Advisory CVE-2024-34320","fact_id":"SEA-CVE-2024-34320-F1","document_citation":"Security Advisory CVE-2024-34320"},{"id":"SEA-CVE-2024-34320-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain an incorrect access control issue in sensitive API endpoints.","source_quote_or_pointer":"Advisory description (CVE-2024-34320)","fact_id":"SEA-CVE-2024-34320-F2","document_citation":"Advisory description (CVE-2024-34320)"}],"source_stated_contributors":["ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain an incorrect access control issue in sensitive API endpoints."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2024-34320","reporting_entity":"CVE-2024-34320","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2024-34320-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2024-34320-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2024-34320"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2024-34324","title":"An issue in ProPhoenix Law RMS v2022.2403.3.101 allows attackers to execute a session hijacking attack via injecting a crafted 24-character string into the ASP.NET_SessionId cookie.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2024-34324","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2024-34324","source_title":"An issue in ProPhoenix Law RMS v2022.2403.3.101 allows attackers to execute a session hijacking attack via injecting a crafted 24-character string into the ASP.NET_SessionId cookie.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T21:01:43.268Z","source_hash":"content-fingerprint:fnv1a-b63ef097","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2024-34324-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"An issue in ProPhoenix Law RMS v2022.2403.3.101 allows attackers to execute a session hijacking attack via injecting a crafted 24-character string into the ASP.NET_SessionId cookie.","source_quote_or_pointer":"Security Advisory CVE-2024-34324","fact_id":"SEA-CVE-2024-34324-F1","document_citation":"Security Advisory CVE-2024-34324"},{"id":"SEA-CVE-2024-34324-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"An issue in ProPhoenix Law RMS v2022.2403.3.101 allows attackers to execute a session hijacking attack via injecting a crafted 24-character string into the ASP.NETSessionId cookie.","source_quote_or_pointer":"Advisory description (CVE-2024-34324)","fact_id":"SEA-CVE-2024-34324-F2","document_citation":"Advisory description (CVE-2024-34324)"}],"source_stated_contributors":["An issue in ProPhoenix Law RMS v2022.2403.3.101 allows attackers to execute a session hijacking attack via injecting a crafted 24-character string into the ASP.NETSessionId cookie."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2024-34324","reporting_entity":"CVE-2024-34324","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2024-34324-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2024-34324-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2024-34324"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-37107","title":"An issue in HTMLy v.3.1.1 allows a remote attacker to escalate privileges via the get_feed function in the admin.php component","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-37107","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-37107","source_title":"An issue in HTMLy v.3.1.1 allows a remote attacker to escalate privileges via the get_feed function in the admin.php component","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T21:01:43.268Z","source_hash":"content-fingerprint:fnv1a-7f1ddbe5","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-37107-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"An issue in HTMLy v.3.1.1 allows a remote attacker to escalate privileges via the get_feed function in the admin.php component","source_quote_or_pointer":"Security Advisory CVE-2026-37107","fact_id":"SEA-CVE-2026-37107-F1","document_citation":"Security Advisory CVE-2026-37107"},{"id":"SEA-CVE-2026-37107-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"An issue in HTMLy v.3.1.1 allows a remote attacker to escalate privileges via the getfeed function in the admin.php component","source_quote_or_pointer":"Advisory description (CVE-2026-37107)","fact_id":"SEA-CVE-2026-37107-F2","document_citation":"Advisory description (CVE-2026-37107)"}],"source_stated_contributors":["An issue in HTMLy v.3.1.1 allows a remote attacker to escalate privileges via the getfeed function in the admin.php component"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-37107","reporting_entity":"CVE-2026-37107","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-37107-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-37107-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-37107"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-104585","title":"Mobile Security Framework (MobSF) v4.5.2 is vulnerable to Command Injection in /download_data/, /api/v1/scan, Dynamic Analyzer ADB integration module.","display_title":"Software component issue could allow unintended commands to run","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-104585","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104585","source_title":"Mobile Security Framework (MobSF) v4.5.2 is vulnerable to Command Injection in /download_data/, /api/v1/scan, Dynamic Analyzer ADB integration module.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T21:01:43.269Z","source_hash":"content-fingerprint:fnv1a-f70770f4","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-104585-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Mobile Security Framework (MobSF) v4.5.2 is vulnerable to Command Injection in /download_data/, /api/v1/scan, Dynamic Analyzer ADB integration module.","source_quote_or_pointer":"Security Advisory CVE-2026-104585","fact_id":"SEA-CVE-2026-104585-F1","document_citation":"Security Advisory CVE-2026-104585"},{"id":"SEA-CVE-2026-104585-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Mobile Security Framework (MobSF) v4.5.2 is vulnerable to Command Injection in /downloaddata/, /api/v1/scan, Dynamic Analyzer ADB integration module.","source_quote_or_pointer":"Advisory description (CVE-2026-104585)","fact_id":"SEA-CVE-2026-104585-F2","document_citation":"Advisory description (CVE-2026-104585)"}],"source_stated_contributors":["Mobile Security Framework (MobSF) v4.5.2 is vulnerable to Command Injection in /downloaddata/, /api/v1/scan, Dynamic Analyzer ADB integration module."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-104585","reporting_entity":"CVE-2026-104585","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-104585-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-104585-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-104585"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-87689","title":"The Metasploit Framework Web Service REST API (msf-ws) exposes the credential store through Msf::WebServices::CredentialServlet. Every mutating and read route in this servlet calls warden.authenticate! before processing a request, except the update_credential (PUT) and delete_credentials (DELETE) handlers for /api/v1/credentials, which omit the authentication call entirely. Because these handlers call directly into lib/msf/core/db_manager/cred.rb, which performs no authorization check of its own, any client able to reach the web service on its default 0.0.0.0:8080 listener can read, modify, or permanently delete every stored credential record — including passwords, hashes, and private keys stored for a shared team engagement — without presenting any authentication. All published versions of Metasploit Framework through 6.5.4 are affected. The issue is fixed in 6.5.5 by adding warden.authenticate! as the first statement in both handlers, matching the pattern used by every other route in the API.","display_title":"Software component issue could expose accounts or credentials","display_summary":"The Metasploit Framework Web Service REST API (msf-ws) exposes the credential store through Msf::WebServices::CredentialServlet.","display_reference":"CVE-2026-87689","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87689","source_title":"The Metasploit Framework Web Service REST API (msf-ws) exposes the credential store through Msf::WebServices::CredentialServlet. Every mutating and read route in this servlet calls warden.authenticate! before processing a request, except the update_credential (PUT) and delete_credentials (DELETE) handlers for /api/v1/credentials, which omit the authentication call entirely. Because these handlers call directly into lib/msf/core/db_manager/cred.rb, which performs no authorization check of its own, any client able to reach the web service on its default 0.0.0.0:8080 listener can read, modify, or permanently delete every stored credential record — including passwords, hashes, and private keys stored for a shared team engagement — without presenting any authentication. All published versions of Metasploit Framework through 6.5.4 are affected. The issue is fixed in 6.5.5 by adding warden.authenticate! as the first statement in both handlers, matching the pattern used by every other route in the API.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T21:01:43.284Z","source_hash":"content-fingerprint:fnv1a-dfae24c5","affected_system":{"organization":"The Metasploit Framework Web Service REST API (msf-ws) exposes the credential store through Msf project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-87689-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Metasploit Framework Web Service REST API (msf-ws) exposes the credential store through Msf::WebServices::CredentialServlet. Every mutating and read route in this servlet calls warden.authenticate! before processing a request, except the update_credential (PUT) and delete_credentials (DELETE) handlers for /api/v1/credentials, which omit the authentication call entirely. Because these handlers call directly into lib/msf/core/db_manager/cred.rb, which performs no authorization check of its own, any client able to reach the web service on its default 0.0.0.0:8080 listener can read, modify, or permanently delete every stored credential record — including passwords, hashes, and private keys stored for a shared team engagement — without presenting any authentication. All published versions of Metasploit Framework through 6.5.4 are affected. The issue is fixed in 6.5.5 by adding warden.authenticate! as the first statement in both handlers, matching the pattern used by every other route in the API.","source_quote_or_pointer":"Security Advisory CVE-2026-87689","fact_id":"SEA-CVE-2026-87689-F1","document_citation":"Security Advisory CVE-2026-87689"},{"id":"SEA-CVE-2026-87689-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Metasploit Framework Web Service REST API (msf-ws) exposes the credential store through Msf::WebServices::CredentialServlet. Every mutating and read route in this servlet calls warden.authenticate! before processing a request, except the updatecredential (PUT) and deletecredentials (DELETE) handlers for…","source_quote_or_pointer":"Advisory description (CVE-2026-87689)","fact_id":"SEA-CVE-2026-87689-F2","document_citation":"Advisory description (CVE-2026-87689)"}],"source_stated_contributors":["The Metasploit Framework Web Service REST API (msf-ws) exposes the credential store through Msf::WebServices::CredentialServlet. Every mutating and read route in this servlet calls warden.authenticate! before processing a request, except the updatecredential (PUT) and deletecredentials (DELETE) handlers for…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.write_action","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-87689","reporting_entity":"CVE-2026-87689","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-87689-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-87689-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-87689"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109758","title":"Perforce Helix Authentication Service (HAS) deployments that retain the shipped default SCIM bearer token are vulnerable to unauthorized access when the SCIM endpoint is reachable by an attacker. In affected versions of HAS, the installation templates contain a default credential which the installer copies into the active configuration; the installer and configuration script do not automatically replace that value with a random token. An attacker who knows the default token can authenticate to the SCIM API and perform user and group operations allowed by the configured provisioning backend. This issue can be chained with CVE-2026-61834 in affected releases of the scim-patch dependency. This vulnerability exists in version 2022.1 - 2025.2 of HAS however the underlying defect was removed in version 2026.1 which was released July 17th 2026. The vulnerability was identified in older versions of HAS after version 2026.1 was released.","display_title":"Software component issue could allow unauthorized access","display_summary":"Perforce Helix Authentication Service (HAS) deployments that retain the shipped default SCIM bearer token are vulnerable to unauthorized access when the SCIM endpoint is reachable by an attacker.","display_reference":"CVE-2026-109758","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109758","source_title":"Perforce Helix Authentication Service (HAS) deployments that retain the shipped default SCIM bearer token are vulnerable to unauthorized access when the SCIM endpoint is reachable by an attacker. In affected versions of HAS, the installation templates contain a default credential which the installer copies into the active configuration; the installer and configuration script do not automatically replace that value with a random token. An attacker who knows the default token can authenticate to the SCIM API and perform user and group operations allowed by the configured provisioning backend. This issue can be chained with CVE-2026-61834 in affected releases of the scim-patch dependency. This vulnerability exists in version 2022.1 - 2025.2 of HAS however the underlying defect was removed in version 2026.1 which was released July 17th 2026. The vulnerability was identified in older versions of HAS after version 2026.1 was released.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T21:01:43.285Z","source_hash":"content-fingerprint:fnv1a-726b3437","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109758-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Perforce Helix Authentication Service (HAS) deployments that retain the shipped default SCIM bearer token are vulnerable to unauthorized access when the SCIM endpoint is reachable by an attacker. In affected versions of HAS, the installation templates contain a default credential which the installer copies into the active configuration; the installer and configuration script do not automatically replace that value with a random token. An attacker who knows the default token can authenticate to the SCIM API and perform user and group operations allowed by the configured provisioning backend. This issue can be chained with CVE-2026-61834 in affected releases of the scim-patch dependency. This vulnerability exists in version 2022.1 - 2025.2 of HAS however the underlying defect was removed in version 2026.1 which was released July 17th 2026. The vulnerability was identified in older versions of HAS after version 2026.1 was released.","source_quote_or_pointer":"Security Advisory CVE-2026-109758","fact_id":"SEA-CVE-2026-109758-F1","document_citation":"Security Advisory CVE-2026-109758"},{"id":"SEA-CVE-2026-109758-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Perforce Helix Authentication Service (HAS) deployments that retain the shipped default SCIM bearer token are vulnerable to unauthorized access when the SCIM endpoint is reachable by an attacker.","source_quote_or_pointer":"Advisory description (CVE-2026-109758)","fact_id":"SEA-CVE-2026-109758-F2","document_citation":"Advisory description (CVE-2026-109758)"}],"source_stated_contributors":["Perforce Helix Authentication Service (HAS) deployments that retain the shipped default SCIM bearer token are vulnerable to unauthorized access when the SCIM endpoint is reachable by an attacker."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109758","reporting_entity":"CVE-2026-109758","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109758-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109758-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-109758"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-19810","title":"Symantec Endpoint Detection and Response (SEDR) Console, prior to 4.13, may be susceptible to a Cross-Site Scripting (XSS) vulnerability, which is a type of issue whereby an attacker may attempt to inject malicious script that executes in the context of another user’s session, potentially resulting in unauthorized access to functionality or information normally restricted to that user.","display_title":"Software component issue could allow unauthorized access","display_summary":"Symantec Endpoint Detection and Response (SEDR) Console, prior to 4.13, may be susceptible to a Cross-Site Scripting (XSS) vulnerability, which is a type of issue whereby an attacker may attempt to inject malicious…","display_reference":"CVE-2026-19810","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-19810","source_title":"Symantec Endpoint Detection and Response (SEDR) Console, prior to 4.13, may be susceptible to a Cross-Site Scripting (XSS) vulnerability, which is a type of issue whereby an attacker may attempt to inject malicious script that executes in the context of another user’s session, potentially resulting in unauthorized access to functionality or information normally restricted to that user.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T21:01:43.285Z","source_hash":"content-fingerprint:fnv1a-7f187a76","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-19810-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Symantec Endpoint Detection and Response (SEDR) Console, prior to 4.13, may be susceptible to a Cross-Site Scripting (XSS) vulnerability, which is a type of issue whereby an attacker may attempt to inject malicious script that executes in the context of another user’s session, potentially resulting in unauthorized access to functionality or information normally restricted to that user.","source_quote_or_pointer":"Security Advisory CVE-2026-19810","fact_id":"SEA-CVE-2026-19810-F1","document_citation":"Security Advisory CVE-2026-19810"},{"id":"SEA-CVE-2026-19810-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Symantec Endpoint Detection and Response (SEDR) Console, prior to 4.13, may be susceptible to a Cross-Site Scripting (XSS) vulnerability, which is a type of issue whereby an attacker may attempt to inject malicious script that executes in the context of another user’s session, potentially resulting in unauthorized…","source_quote_or_pointer":"Advisory description (CVE-2026-19810)","fact_id":"SEA-CVE-2026-19810-F2","document_citation":"Advisory description (CVE-2026-19810)"}],"source_stated_contributors":["Symantec Endpoint Detection and Response (SEDR) Console, prior to 4.13, may be susceptible to a Cross-Site Scripting (XSS) vulnerability, which is a type of issue whereby an attacker may attempt to inject malicious script that executes in the context of another user’s session, potentially resulting in unauthorized…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-19810","reporting_entity":"CVE-2026-19810","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-19810-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-19810-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-19810"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-77206","title":"Libreswan's IKEv2 state machine has a null pointer dereference bug in the EAP handling code for authentication. As a result of inconsistency within the IKEv2 state machine code, this bug can be triggered by any IKEv2 connection, even if EAP is not configured at all. The error is caused by a fall-through where it incorrectly dereferences ike->sa.st_eap which is NULL. A malicious IKE_AUTH packet can trigger this bug, meaning the peer does not need to be authenticated. The bug results in a crash and restart of the pluto daemon. No remote code execution is possible. Continued exploitation can cause a denial of service.","display_title":"Software component issue could allow unintended commands to run","display_summary":"Libreswan's IKEv2 state machine has a null pointer dereference bug in the EAP handling code for authentication. As a result of inconsistency within the IKEv2 state machine code, this bug can be triggered by any IKEv2…","display_reference":"CVE-2026-77206","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-77206","source_title":"Libreswan's IKEv2 state machine has a null pointer dereference bug in the EAP handling code for authentication. As a result of inconsistency within the IKEv2 state machine code, this bug can be triggered by any IKEv2 connection, even if EAP is not configured at all. The error is caused by a fall-through where it incorrectly dereferences ike->sa.st_eap which is NULL. A malicious IKE_AUTH packet can trigger this bug, meaning the peer does not need to be authenticated. The bug results in a crash and restart of the pluto daemon. No remote code execution is possible. Continued exploitation can cause a denial of service.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T21:01:43.286Z","source_hash":"content-fingerprint:fnv1a-1743ac45","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-77206-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Libreswan's IKEv2 state machine has a null pointer dereference bug in the EAP handling code for authentication. As a result of inconsistency within the IKEv2 state machine code, this bug can be triggered by any IKEv2 connection, even if EAP is not configured at all. The error is caused by a fall-through where it incorrectly dereferences ike->sa.st_eap which is NULL. A malicious IKE_AUTH packet can trigger this bug, meaning the peer does not need to be authenticated. The bug results in a crash and restart of the pluto daemon. No remote code execution is possible. Continued exploitation can cause a denial of service.","source_quote_or_pointer":"Security Advisory CVE-2026-77206","fact_id":"SEA-CVE-2026-77206-F1","document_citation":"Security Advisory CVE-2026-77206"},{"id":"SEA-CVE-2026-77206-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Libreswan's IKEv2 state machine has a null pointer dereference bug in the EAP handling code for authentication. As a result of inconsistency within the IKEv2 state machine code, this bug can be triggered by any IKEv2 connection, even if EAP is not configured at all.","source_quote_or_pointer":"Advisory description (CVE-2026-77206)","fact_id":"SEA-CVE-2026-77206-F2","document_citation":"Advisory description (CVE-2026-77206)"}],"source_stated_contributors":["Libreswan's IKEv2 state machine has a null pointer dereference bug in the EAP handling code for authentication. As a result of inconsistency within the IKEv2 state machine code, this bug can be triggered by any IKEv2 connection, even if EAP is not configured at all."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-77206","reporting_entity":"CVE-2026-77206","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-77206-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-77206-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-77206"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-77207","title":"Libreswan has a null pointer dereference bug in the PKCS7 handling code for IKE certificate authentication. When libreswan decodes an IKE CERT payload of type CERT_PKCS7_WRAPPED_X509, it guards the PKCS7 blob with SEC_PKCS7ContainsCertsOrCrls() and then iterates the certificate list with SEC_PKCS7GetCertificateList(). The two NSS APIs disagree on a SignedData that carries a CRL but no certificates: ContainsCertsOrCrls() returns PR_TRUE (there is a CRL), so the guard passes, but GetCertificateList() returns NULL (there are no certificates). This causes libreswan to dereference a null pointer leading to a crash and restart. A malicious IKE_AUTH packet can trigger this bug, meaning the peer does not need to be authenticated. No remote code execution is possible. Continued exploitation can cause a denial of service.","display_title":"Software component issue could allow unintended commands to run","display_summary":"Libreswan has a null pointer dereference bug in the PKCS7 handling code for IKE certificate authentication. When libreswan decodes an IKE CERT payload of type CERTPKCS7WRAPPEDX509, it guards the PKCS7 blob with…","display_reference":"CVE-2026-77207","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-77207","source_title":"Libreswan has a null pointer dereference bug in the PKCS7 handling code for IKE certificate authentication. When libreswan decodes an IKE CERT payload of type CERT_PKCS7_WRAPPED_X509, it guards the PKCS7 blob with SEC_PKCS7ContainsCertsOrCrls() and then iterates the certificate list with SEC_PKCS7GetCertificateList(). The two NSS APIs disagree on a SignedData that carries a CRL but no certificates: ContainsCertsOrCrls() returns PR_TRUE (there is a CRL), so the guard passes, but GetCertificateList() returns NULL (there are no certificates). This causes libreswan to dereference a null pointer leading to a crash and restart. A malicious IKE_AUTH packet can trigger this bug, meaning the peer does not need to be authenticated. No remote code execution is possible. Continued exploitation can cause a denial of service.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T21:01:43.286Z","source_hash":"content-fingerprint:fnv1a-dc2b0fac","affected_system":{"organization":"Libreswan has a null pointer dereference bug in the PKCS7 handling code for IKE certificate authentication. When libreswan decodes an IKE CERT payload of type CERTPKCS7WRAPPEDX509, it guards the PKCS7 blob with SECPKCS7ContainsCertsOrCrls() and then iterates the certificate list with SECPKCS7GetCertificateList(). The two NSS APIs disagree on a SignedData that carries a CRL but no certificates project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-77207-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Libreswan has a null pointer dereference bug in the PKCS7 handling code for IKE certificate authentication. When libreswan decodes an IKE CERT payload of type CERT_PKCS7_WRAPPED_X509, it guards the PKCS7 blob with SEC_PKCS7ContainsCertsOrCrls() and then iterates the certificate list with SEC_PKCS7GetCertificateList(). The two NSS APIs disagree on a SignedData that carries a CRL but no certificates: ContainsCertsOrCrls() returns PR_TRUE (there is a CRL), so the guard passes, but GetCertificateList() returns NULL (there are no certificates). This causes libreswan to dereference a null pointer leading to a crash and restart. A malicious IKE_AUTH packet can trigger this bug, meaning the peer does not need to be authenticated. No remote code execution is possible. Continued exploitation can cause a denial of service.","source_quote_or_pointer":"Security Advisory CVE-2026-77207","fact_id":"SEA-CVE-2026-77207-F1","document_citation":"Security Advisory CVE-2026-77207"},{"id":"SEA-CVE-2026-77207-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Libreswan has a null pointer dereference bug in the PKCS7 handling code for IKE certificate authentication. When libreswan decodes an IKE CERT payload of type CERTPKCS7WRAPPEDX509, it guards the PKCS7 blob with SECPKCS7ContainsCertsOrCrls() and then iterates the certificate list with SECPKCS7GetCertificateList().","source_quote_or_pointer":"Advisory description (CVE-2026-77207)","fact_id":"SEA-CVE-2026-77207-F2","document_citation":"Advisory description (CVE-2026-77207)"}],"source_stated_contributors":["Libreswan has a null pointer dereference bug in the PKCS7 handling code for IKE certificate authentication. When libreswan decodes an IKE CERT payload of type CERTPKCS7WRAPPEDX509, it guards the PKCS7 blob with SECPKCS7ContainsCertsOrCrls() and then iterates the certificate list with SECPKCS7GetCertificateList()."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-77207","reporting_entity":"CVE-2026-77207","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-77207-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-77207-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-77207"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-96183","title":"Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to disclose information locally.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-96183","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-96183","source_title":"Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to disclose information locally.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T16:33:35.946Z","source_hash":"content-fingerprint:fnv1a-84bc174e","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-96183-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to disclose information locally.","source_quote_or_pointer":"Security Advisory CVE-2026-96183","fact_id":"SEA-CVE-2026-96183-F1","document_citation":"Security Advisory CVE-2026-96183"},{"id":"SEA-CVE-2026-96183-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to disclose information locally.","source_quote_or_pointer":"Advisory description (CVE-2026-96183)","fact_id":"SEA-CVE-2026-96183-F2","document_citation":"Advisory description (CVE-2026-96183)"}],"source_stated_contributors":["Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to disclose information locally."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-96183","reporting_entity":"CVE-2026-96183","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-96183-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-96183-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-96183"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-88072","title":"Improper access control in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally.","display_title":"Software component issue could allow unauthorized access","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-88072","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-88072","source_title":"Improper access control in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T16:33:35.948Z","source_hash":"content-fingerprint:fnv1a-2b123ee0","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-88072-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Improper access control in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Security Advisory CVE-2026-88072","fact_id":"SEA-CVE-2026-88072-F1","document_citation":"Security Advisory CVE-2026-88072"},{"id":"SEA-CVE-2026-88072-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Improper access control in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Advisory description (CVE-2026-88072)","fact_id":"SEA-CVE-2026-88072-F2","document_citation":"Advisory description (CVE-2026-88072)"}],"source_stated_contributors":["Improper access control in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-88072","reporting_entity":"CVE-2026-88072","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-88072-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-88072-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-88072"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-96316","title":"Improper access control in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to perform tampering locally.","display_title":"Software component issue could allow unauthorized access","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-96316","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-96316","source_title":"Improper access control in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to perform tampering locally.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T16:33:35.948Z","source_hash":"content-fingerprint:fnv1a-8d013dba","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-96316-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Improper access control in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to perform tampering locally.","source_quote_or_pointer":"Security Advisory CVE-2026-96316","fact_id":"SEA-CVE-2026-96316-F1","document_citation":"Security Advisory CVE-2026-96316"},{"id":"SEA-CVE-2026-96316-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Improper access control in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to perform tampering locally.","source_quote_or_pointer":"Advisory description (CVE-2026-96316)","fact_id":"SEA-CVE-2026-96316-F2","document_citation":"Advisory description (CVE-2026-96316)"}],"source_stated_contributors":["Improper access control in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to perform tampering locally."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-96316","reporting_entity":"CVE-2026-96316","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-96316-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-96316-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-96316"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-88075","title":"Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a network.","display_title":"configuration manager 2503 issue could expose or alter stored data","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-88075","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-88075","source_title":"Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a network.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T16:33:35.949Z","source_hash":"content-fingerprint:fnv1a-1b28f7b3","affected_system":{"organization":"configuration manager 2503 project","product":"configuration manager 2503","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-88075-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a network.","source_quote_or_pointer":"Security Advisory CVE-2026-88075","fact_id":"SEA-CVE-2026-88075-F1","document_citation":"Security Advisory CVE-2026-88075"},{"id":"SEA-CVE-2026-88075-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a network.","source_quote_or_pointer":"Advisory description (CVE-2026-88075)","fact_id":"SEA-CVE-2026-88075-F2","document_citation":"Advisory description (CVE-2026-88075)"}],"source_stated_contributors":["Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a network."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-88075","reporting_entity":"CVE-2026-88075","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-88075-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-88075-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-88075"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-88096","title":"Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DCOM Server allows an authorized attacker to elevate privileges locally.","display_title":"Software component issue could cause actions to run with inconsistent state","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-88096","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-88096","source_title":"Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DCOM Server allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T16:33:35.949Z","source_hash":"content-fingerprint:fnv1a-a43c17a","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-88096-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DCOM Server allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Security Advisory CVE-2026-88096","fact_id":"SEA-CVE-2026-88096-F1","document_citation":"Security Advisory CVE-2026-88096"},{"id":"SEA-CVE-2026-88096-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DCOM Server allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Advisory description (CVE-2026-88096)","fact_id":"SEA-CVE-2026-88096-F2","document_citation":"Advisory description (CVE-2026-88096)"}],"source_stated_contributors":["Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DCOM Server allows an authorized attacker to elevate privileges locally."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-001","SEA-FM-008"],"consequences":["Duplicate or inconsistent actions","State divergence"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-88096","reporting_entity":"CVE-2026-88096","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-88096-SG1","label":"Idempotency and re-validation at execution","description":"Attach idempotency keys to mutations and re-verify state and permissions atomically when the action runs.","target_failure_mode":"SEA-FM-001","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-88096-SG1","label":"Idempotency and re-validation at execution","description":"Attach idempotency keys to mutations and re-verify state and permissions atomically when the action runs.","target_failure_mode":"SEA-FM-001","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Concurrent or repeated requests produced inconsistent state. Make state-changing operations idempotent and re-check authorization and state at execution time.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-88096"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-69227","title":"A flaw in Portal for ArcGIS allows unauthenticated access to certain Portal Administrator API endpoints under specific conditions. This could enable an attacker to access administrative functionality that should require authentication.","display_title":"Security issue reported in Software component","display_summary":"A flaw in Portal for ArcGIS allows unauthenticated access to","display_reference":"CVE-2026-69227","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-69227","source_title":"A flaw in Portal for ArcGIS allows unauthenticated access to certain Portal Administrator API endpoints under specific conditions. This could enable an attacker to access administrative functionality that should require authentication.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T16:33:35.950Z","source_hash":"content-fingerprint:fnv1a-f8ba7711","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-69227-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A flaw in Portal for ArcGIS allows unauthenticated access to certain Portal Administrator API endpoints under specific conditions. This could enable an attacker to access administrative functionality that should require authentication.","source_quote_or_pointer":"Security Advisory CVE-2026-69227","fact_id":"SEA-CVE-2026-69227-F1","document_citation":"Security Advisory CVE-2026-69227"},{"id":"SEA-CVE-2026-69227-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A flaw in Portal for ArcGIS allows unauthenticated access to","source_quote_or_pointer":"Advisory description (CVE-2026-69227)","fact_id":"SEA-CVE-2026-69227-F2","document_citation":"Advisory description (CVE-2026-69227)"}],"source_stated_contributors":["A flaw in Portal for ArcGIS allows unauthenticated access to"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-69227","reporting_entity":"CVE-2026-69227","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-69227-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-69227-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-69227"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-107460","title":"Server-Side Request Forgery (SSRF) protection in the UrlImageConverter component of Apache Fesod (Incubating) fesod-sheet 2.0.2-incubating can be bypassed through DNS rebinding. When an application accepts an attacker-controlled image URL for spreadsheet writing, the converter checks the hostname's resolved IP addresses and then opens a separate connection that can resolve the hostname again. An attacker who controls DNS responses for the URL hostname may cause the connection to reach a restricted address after validation. CVE-2026-49328 covers SSRF in releases before 2.0.2-incubating; this issue is a DNS rebinding bypass of the protection in 2.0.2-incubating. Apache Fesod (Incubating) 2.1.0-incubating addresses the reported default-fetch scenario by disabling remote URL image fetching by default and requiring an explicit exact-host allowlist when the feature is enabled. Users should upgrade to 2.1.0-incubating. Applications enabling remote URL image fetching should allowlist only hostnames whose DNS and HTTP services are trusted.","display_title":"Software component issue could reach internal services","display_summary":"Server-Side Request Forgery (SSRF) protection in the UrlImageConverter component of Apache Fesod (Incubating) fesod-sheet 2.0.2-incubating can be bypassed through DNS rebinding.","display_reference":"CVE-2026-107460","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107460","source_title":"Server-Side Request Forgery (SSRF) protection in the UrlImageConverter component of Apache Fesod (Incubating) fesod-sheet 2.0.2-incubating can be bypassed through DNS rebinding. When an application accepts an attacker-controlled image URL for spreadsheet writing, the converter checks the hostname's resolved IP addresses and then opens a separate connection that can resolve the hostname again. An attacker who controls DNS responses for the URL hostname may cause the connection to reach a restricted address after validation. CVE-2026-49328 covers SSRF in releases before 2.0.2-incubating; this issue is a DNS rebinding bypass of the protection in 2.0.2-incubating. Apache Fesod (Incubating) 2.1.0-incubating addresses the reported default-fetch scenario by disabling remote URL image fetching by default and requiring an explicit exact-host allowlist when the feature is enabled. Users should upgrade to 2.1.0-incubating. Applications enabling remote URL image fetching should allowlist only hostnames whose DNS and HTTP services are trusted.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T16:33:35.960Z","source_hash":"content-fingerprint:fnv1a-c7fe1251","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-107460-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Server-Side Request Forgery (SSRF) protection in the UrlImageConverter component of Apache Fesod (Incubating) fesod-sheet 2.0.2-incubating can be bypassed through DNS rebinding. When an application accepts an attacker-controlled image URL for spreadsheet writing, the converter checks the hostname's resolved IP addresses and then opens a separate connection that can resolve the hostname again. An attacker who controls DNS responses for the URL hostname may cause the connection to reach a restricted address after validation. CVE-2026-49328 covers SSRF in releases before 2.0.2-incubating; this issue is a DNS rebinding bypass of the protection in 2.0.2-incubating. Apache Fesod (Incubating) 2.1.0-incubating addresses the reported default-fetch scenario by disabling remote URL image fetching by default and requiring an explicit exact-host allowlist when the feature is enabled. Users should upgrade to 2.1.0-incubating. Applications enabling remote URL image fetching should allowlist only hostnames whose DNS and HTTP services are trusted.","source_quote_or_pointer":"Security Advisory CVE-2026-107460","fact_id":"SEA-CVE-2026-107460-F1","document_citation":"Security Advisory CVE-2026-107460"},{"id":"SEA-CVE-2026-107460-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Server-Side Request Forgery (SSRF) protection in the UrlImageConverter component of Apache Fesod (Incubating) fesod-sheet 2.0.2-incubating can be bypassed through DNS rebinding.","source_quote_or_pointer":"Advisory description (CVE-2026-107460)","fact_id":"SEA-CVE-2026-107460-F2","document_citation":"Advisory description (CVE-2026-107460)"}],"source_stated_contributors":["Server-Side Request Forgery (SSRF) protection in the UrlImageConverter component of Apache Fesod (Incubating) fesod-sheet 2.0.2-incubating can be bypassed through DNS rebinding."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Internal network access","Cloud metadata or credential exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-107460","reporting_entity":"CVE-2026-107460","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-107460-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-107460-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"The service fetched a URL chosen by the caller and could be steered at internal systems. Restrict outbound destinations and block internal address ranges.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-107460"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-49950","title":"Xorbits Xoscar through 0.11.2 contains an unauthenticated deserialization vulnerability that allows remote attackers to execute arbitrary code by sending crafted data over the actor-pool TCP channel. Attackers can exploit SocketChannel.recv() passing unvalidated data to cloudpickle.loads(), which triggers pickle __reduce__ gadget execution before message type validation, achieving remote code execution as the server process which commonly runs as root on GPU nodes.","display_title":"Software component issue could allow unintended commands to run","display_summary":"Xorbits Xoscar through 0.11.2 contains an unauthenticated deserialization vulnerability that allows remote attackers to execute arbitrary code by sending crafted data over the actor-pool TCP channel.","display_reference":"CVE-2026-49950","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-49950","source_title":"Xorbits Xoscar through 0.11.2 contains an unauthenticated deserialization vulnerability that allows remote attackers to execute arbitrary code by sending crafted data over the actor-pool TCP channel. Attackers can exploit SocketChannel.recv() passing unvalidated data to cloudpickle.loads(), which triggers pickle __reduce__ gadget execution before message type validation, achieving remote code execution as the server process which commonly runs as root on GPU nodes.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T16:33:35.981Z","source_hash":"content-fingerprint:fnv1a-545c6f92","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-49950-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Xorbits Xoscar through 0.11.2 contains an unauthenticated deserialization vulnerability that allows remote attackers to execute arbitrary code by sending crafted data over the actor-pool TCP channel. Attackers can exploit SocketChannel.recv() passing unvalidated data to cloudpickle.loads(), which triggers pickle __reduce__ gadget execution before message type validation, achieving remote code execution as the server process which commonly runs as root on GPU nodes.","source_quote_or_pointer":"Security Advisory CVE-2026-49950","fact_id":"SEA-CVE-2026-49950-F1","document_citation":"Security Advisory CVE-2026-49950"},{"id":"SEA-CVE-2026-49950-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Xorbits Xoscar through 0.11.2 contains an unauthenticated deserialization vulnerability that allows remote attackers to execute arbitrary code by sending crafted data over the actor-pool TCP channel.","source_quote_or_pointer":"Advisory description (CVE-2026-49950)","fact_id":"SEA-CVE-2026-49950-F2","document_citation":"Advisory description (CVE-2026-49950)"}],"source_stated_contributors":["Xorbits Xoscar through 0.11.2 contains an unauthenticated deserialization vulnerability that allows remote attackers to execute arbitrary code by sending crafted data over the actor-pool TCP channel."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.infrastructure_modification"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-49950","reporting_entity":"CVE-2026-49950","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-49950-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-49950-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-49950"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-65674","title":"Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network.","display_title":"Software component issue could make the application process unsafe input","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-65674","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-65674","source_title":"Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:45.575Z","source_hash":"content-fingerprint:fnv1a-6c826649","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-65674-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network.","source_quote_or_pointer":"Security Advisory CVE-2026-65674","fact_id":"SEA-CVE-2026-65674-F1","document_citation":"Security Advisory CVE-2026-65674"},{"id":"SEA-CVE-2026-65674-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network.","source_quote_or_pointer":"Advisory description (CVE-2026-65674)","fact_id":"SEA-CVE-2026-65674-F2","document_citation":"Advisory description (CVE-2026-65674)"}],"source_stated_contributors":["Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.code_execution"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unsafe object construction","Possible code execution"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-65674","reporting_entity":"CVE-2026-65674","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-65674-SG1","label":"Use schema-validated data formats","description":"Parse untrusted input into plain data with an explicit schema; never deserialize into arbitrary types.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-65674-SG1","label":"Use schema-validated data formats","description":"Parse untrusted input into plain data with an explicit schema; never deserialize into arbitrary types.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"The application rebuilt objects from untrusted data. Use data-only formats with schema validation instead of native object deserialization.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-65674"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-85876","title":"Use after free in SQL Server allows an authorized attacker to elevate privileges locally.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-85876","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85876","source_title":"Use after free in SQL Server allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:45.575Z","source_hash":"content-fingerprint:fnv1a-96141fd3","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-85876-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Use after free in SQL Server allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Security Advisory CVE-2026-85876","fact_id":"SEA-CVE-2026-85876-F1","document_citation":"Security Advisory CVE-2026-85876"},{"id":"SEA-CVE-2026-85876-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Use after free in SQL Server allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Advisory description (CVE-2026-85876)","fact_id":"SEA-CVE-2026-85876-F2","document_citation":"Advisory description (CVE-2026-85876)"}],"source_stated_contributors":["Use after free in SQL Server allows an authorized attacker to elevate privileges locally."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-85876","reporting_entity":"CVE-2026-85876","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-85876-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-85876-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-85876"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-58242","title":"SAP Cloud Connector contains an improper authorization check, which could be exploited by a low-privileged attacker through specially crafted requests. Exploitation requires the attacker to be on an adjacent network. Successful exploitation could allow the attacker to obtain limited information about internal systems, resulting in low impact on confidentiality. There is no impact on integrity and availability.","display_title":"Software component issue could allow unauthorized access","display_summary":"SAP Cloud Connector contains an improper authorization check, which could be exploited by a low-privileged attacker through specially crafted requests. Exploitation requires the attacker to be on an adjacent network.","display_reference":"CVE-2026-58242","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-58242","source_title":"SAP Cloud Connector contains an improper authorization check, which could be exploited by a low-privileged attacker through specially crafted requests. Exploitation requires the attacker to be on an adjacent network. Successful exploitation could allow the attacker to obtain limited information about internal systems, resulting in low impact on confidentiality. There is no impact on integrity and availability.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:45.578Z","source_hash":"content-fingerprint:fnv1a-613a8392","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Cloud & container infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-58242-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"SAP Cloud Connector contains an improper authorization check, which could be exploited by a low-privileged attacker through specially crafted requests. Exploitation requires the attacker to be on an adjacent network. Successful exploitation could allow the attacker to obtain limited information about internal systems, resulting in low impact on confidentiality. There is no impact on integrity and availability.","source_quote_or_pointer":"Security Advisory CVE-2026-58242","fact_id":"SEA-CVE-2026-58242-F1","document_citation":"Security Advisory CVE-2026-58242"},{"id":"SEA-CVE-2026-58242-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"SAP Cloud Connector contains an improper authorization check, which could be exploited by a low-privileged attacker through specially crafted requests. Exploitation requires the attacker to be on an adjacent network.","source_quote_or_pointer":"Advisory description (CVE-2026-58242)","fact_id":"SEA-CVE-2026-58242-F2","document_citation":"Advisory description (CVE-2026-58242)"}],"source_stated_contributors":["SAP Cloud Connector contains an improper authorization check, which could be exploited by a low-privileged attacker through specially crafted requests. Exploitation requires the attacker to be on an adjacent network."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-58242","reporting_entity":"CVE-2026-58242","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-58242-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-58242-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-58242"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-76972","title":"Due to a Cross-Site Scripting (XSS) vulnerability in SAP Manufacturing Integration and Intelligence, an attacker could store malicious content that is later rendered by the application. If an authenticated victim accesses a page that displays this stored content, the injected input is processed during web page generation, resulting in the execution of malicious content in the victim�s browser context. This could allow the attacker to access or modify information within the victim�s browser scope. Successful exploitation could allow the attacker to access session information, modify rendered page content and disrupt the victim's use of the application, resulting in a low impact on confidentiality, integrity and availability.","display_title":"Software component issue could run attacker-controlled scripts in a browser","display_summary":"Due to a Cross-Site Scripting (XSS) vulnerability in SAP Manufacturing Integration and Intelligence, an attacker could store malicious content that is later rendered by the application.","display_reference":"CVE-2026-76972","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-76972","source_title":"Due to a Cross-Site Scripting (XSS) vulnerability in SAP Manufacturing Integration and Intelligence, an attacker could store malicious content that is later rendered by the application. If an authenticated victim accesses a page that displays this stored content, the injected input is processed during web page generation, resulting in the execution of malicious content in the victim�s browser context. This could allow the attacker to access or modify information within the victim�s browser scope. Successful exploitation could allow the attacker to access session information, modify rendered page content and disrupt the victim's use of the application, resulting in a low impact on confidentiality, integrity and availability.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:45.578Z","source_hash":"content-fingerprint:fnv1a-d44559ec","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-76972-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Due to a Cross-Site Scripting (XSS) vulnerability in SAP Manufacturing Integration and Intelligence, an attacker could store malicious content that is later rendered by the application. If an authenticated victim accesses a page that displays this stored content, the injected input is processed during web page generation, resulting in the execution of malicious content in the victim�s browser context. This could allow the attacker to access or modify information within the victim�s browser scope. Successful exploitation could allow the attacker to access session information, modify rendered page content and disrupt the victim's use of the application, resulting in a low impact on confidentiality, integrity and availability.","source_quote_or_pointer":"Security Advisory CVE-2026-76972","fact_id":"SEA-CVE-2026-76972-F1","document_citation":"Security Advisory CVE-2026-76972"},{"id":"SEA-CVE-2026-76972-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Due to a Cross-Site Scripting (XSS) vulnerability in SAP Manufacturing Integration and Intelligence, an attacker could store malicious content that is later rendered by the application.","source_quote_or_pointer":"Advisory description (CVE-2026-76972)","fact_id":"SEA-CVE-2026-76972-F2","document_citation":"Advisory description (CVE-2026-76972)"}],"source_stated_contributors":["Due to a Cross-Site Scripting (XSS) vulnerability in SAP Manufacturing Integration and Intelligence, an attacker could store malicious content that is later rendered by the application."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-76972","reporting_entity":"CVE-2026-76972","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-76972-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-76972-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-76972"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-89105","title":"The HybridTokenAuthenticator component of the SAP/cloud-security-services-integration-library accepts tokens from unintended ambient IAS/XSUAA bindings, potentially allowing unauthorized access. This vulnerability allows an attacker to gain unauthorized access to the system by using tokens that should not be accepted, leading to a breach of security.","display_title":"Software component issue could allow unauthorized access","display_summary":"The HybridTokenAuthenticator component of the SAP/cloud-security-services-integration-library accepts tokens from unintended ambient IAS/XSUAA bindings, potentially allowing unauthorized access.","display_reference":"CVE-2026-89105","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89105","source_title":"The HybridTokenAuthenticator component of the SAP/cloud-security-services-integration-library accepts tokens from unintended ambient IAS/XSUAA bindings, potentially allowing unauthorized access. This vulnerability allows an attacker to gain unauthorized access to the system by using tokens that should not be accepted, leading to a breach of security.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:45.578Z","source_hash":"content-fingerprint:fnv1a-fcce2178","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Cloud & container infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-89105-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The HybridTokenAuthenticator component of the SAP/cloud-security-services-integration-library accepts tokens from unintended ambient IAS/XSUAA bindings, potentially allowing unauthorized access. This vulnerability allows an attacker to gain unauthorized access to the system by using tokens that should not be accepted, leading to a breach of security.","source_quote_or_pointer":"Security Advisory CVE-2026-89105","fact_id":"SEA-CVE-2026-89105-F1","document_citation":"Security Advisory CVE-2026-89105"},{"id":"SEA-CVE-2026-89105-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The HybridTokenAuthenticator component of the SAP/cloud-security-services-integration-library accepts tokens from unintended ambient IAS/XSUAA bindings, potentially allowing unauthorized access.","source_quote_or_pointer":"Advisory description (CVE-2026-89105)","fact_id":"SEA-CVE-2026-89105-F2","document_citation":"Advisory description (CVE-2026-89105)"}],"source_stated_contributors":["The HybridTokenAuthenticator component of the SAP/cloud-security-services-integration-library accepts tokens from unintended ambient IAS/XSUAA bindings, potentially allowing unauthorized access."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-89105","reporting_entity":"CVE-2026-89105","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-89105-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-89105-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-89105"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-89108","title":"SAP Manufacturing Integration and Intelligence does not sufficiently enforce authorization boundaries within certain administrative functionality. An attacker with MII administrator privileges could submit a specially crafted request to provision an account with elevated privileges on the underlying Java application server. Successful exploitation could allow the attacker to gain administrative control over the underlying system, extending the impact beyond the vulnerable application. This results in a high impact on confidentiality, integrity and availability.","display_title":"Security issue reported in Software component","display_summary":"SAP Manufacturing Integration and Intelligence does not sufficiently enforce authorization boundaries within certain administrative functionality.","display_reference":"CVE-2026-89108","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89108","source_title":"SAP Manufacturing Integration and Intelligence does not sufficiently enforce authorization boundaries within certain administrative functionality. An attacker with MII administrator privileges could submit a specially crafted request to provision an account with elevated privileges on the underlying Java application server. Successful exploitation could allow the attacker to gain administrative control over the underlying system, extending the impact beyond the vulnerable application. This results in a high impact on confidentiality, integrity and availability.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:45.579Z","source_hash":"content-fingerprint:fnv1a-de6d6851","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-89108-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"SAP Manufacturing Integration and Intelligence does not sufficiently enforce authorization boundaries within certain administrative functionality. An attacker with MII administrator privileges could submit a specially crafted request to provision an account with elevated privileges on the underlying Java application server. Successful exploitation could allow the attacker to gain administrative control over the underlying system, extending the impact beyond the vulnerable application. This results in a high impact on confidentiality, integrity and availability.","source_quote_or_pointer":"Security Advisory CVE-2026-89108","fact_id":"SEA-CVE-2026-89108-F1","document_citation":"Security Advisory CVE-2026-89108"},{"id":"SEA-CVE-2026-89108-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"SAP Manufacturing Integration and Intelligence does not sufficiently enforce authorization boundaries within certain administrative functionality. An attacker with MII administrator privileges could submit a specially crafted request to provision an account with elevated privileges on the underlying Java application…","source_quote_or_pointer":"Advisory description (CVE-2026-89108)","fact_id":"SEA-CVE-2026-89108-F2","document_citation":"Advisory description (CVE-2026-89108)"}],"source_stated_contributors":["SAP Manufacturing Integration and Intelligence does not sufficiently enforce authorization boundaries within certain administrative functionality. An attacker with MII administrator privileges could submit a specially crafted request to provision an account with elevated privileges on the underlying Java application…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-89108","reporting_entity":"CVE-2026-89108","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-89108-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-89108-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-89108"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-89111","title":"The SAP Cloud SDK for Python contains an OAuth2 SSRF vulnerability affecting multi-tenant BTP applications. An attacker who controls the tenant_subdomain parameter can redirect OAuth2 token requests to an attacker-controlled server, causing client credentials to be exfiltrated.","display_title":"Software component issue could reach internal services","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-89111","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89111","source_title":"The SAP Cloud SDK for Python contains an OAuth2 SSRF vulnerability affecting multi-tenant BTP applications. An attacker who controls the tenant_subdomain parameter can redirect OAuth2 token requests to an attacker-controlled server, causing client credentials to be exfiltrated.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:45.579Z","source_hash":"content-fingerprint:fnv1a-c99aadf1","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Cloud & container infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-89111-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The SAP Cloud SDK for Python contains an OAuth2 SSRF vulnerability affecting multi-tenant BTP applications. An attacker who controls the tenant_subdomain parameter can redirect OAuth2 token requests to an attacker-controlled server, causing client credentials to be exfiltrated.","source_quote_or_pointer":"Security Advisory CVE-2026-89111","fact_id":"SEA-CVE-2026-89111-F1","document_citation":"Security Advisory CVE-2026-89111"},{"id":"SEA-CVE-2026-89111-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The SAP Cloud SDK for Python contains an OAuth2 SSRF vulnerability affecting multi-tenant BTP applications. An attacker who controls the tenantsubdomain parameter can redirect OAuth2 token requests to an attacker-controlled server, causing client credentials to be exfiltrated.","source_quote_or_pointer":"Advisory description (CVE-2026-89111)","fact_id":"SEA-CVE-2026-89111-F2","document_citation":"Advisory description (CVE-2026-89111)"}],"source_stated_contributors":["The SAP Cloud SDK for Python contains an OAuth2 SSRF vulnerability affecting multi-tenant BTP applications. An attacker who controls the tenantsubdomain parameter can redirect OAuth2 token requests to an attacker-controlled server, causing client credentials to be exfiltrated."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.credentials_secrets","data.cross_tenant_data","arch.multi_tenant"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Internal network access","Cloud metadata or credential exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-89111","reporting_entity":"CVE-2026-89111","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-89111-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-89111-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"The service fetched a URL chosen by the caller and could be steered at internal systems. Restrict outbound destinations and block internal address ranges.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-89111"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-89112","title":"The admin API endpoint used to retrieve CLA signature records does not consistently enforce the required authorization checks when the target organisation is specified using an organisation ID.An authenticated user with limited privileges could potentially access CLA signature records containing contributor information belonging to an organisation they are not authorized to administer.","display_title":"Security issue reported in Software component","display_summary":"The admin API endpoint used to retrieve CLA signature records does not consistently enforce the required authorization checks when the target organisation is specified using an organisation ID.An authenticated user with…","display_reference":"CVE-2026-89112","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89112","source_title":"The admin API endpoint used to retrieve CLA signature records does not consistently enforce the required authorization checks when the target organisation is specified using an organisation ID.An authenticated user with limited privileges could potentially access CLA signature records containing contributor information belonging to an organisation they are not authorized to administer.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:45.579Z","source_hash":"content-fingerprint:fnv1a-15c471c4","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-89112-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The admin API endpoint used to retrieve CLA signature records does not consistently enforce the required authorization checks when the target organisation is specified using an organisation ID.An authenticated user with limited privileges could potentially access CLA signature records containing contributor information belonging to an organisation they are not authorized to administer.","source_quote_or_pointer":"Security Advisory CVE-2026-89112","fact_id":"SEA-CVE-2026-89112-F1","document_citation":"Security Advisory CVE-2026-89112"},{"id":"SEA-CVE-2026-89112-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The admin API endpoint used to retrieve CLA signature records does not consistently enforce the required authorization checks when the target organisation is specified using an organisation ID.An authenticated user with limited privileges could potentially access CLA signature records containing contributor…","source_quote_or_pointer":"Advisory description (CVE-2026-89112)","fact_id":"SEA-CVE-2026-89112-F2","document_citation":"Advisory description (CVE-2026-89112)"}],"source_stated_contributors":["The admin API endpoint used to retrieve CLA signature records does not consistently enforce the required authorization checks when the target organisation is specified using an organisation ID.An authenticated user with limited privileges could potentially access CLA signature records containing contributor…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-89112","reporting_entity":"CVE-2026-89112","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-89112-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-89112-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-89112"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-89117","title":"SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to inject malicious scripts into a URL parameter. The scripts are reflected in the server response and executed in a user's browser when the crafted URL is visited, leading to theft of session information, manipulation of portal content, or user redirection. This results in a low impact on confidentiality and integrity. There is no impact on availability.","display_title":"Security issue reported in Software component","display_summary":"SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to inject malicious scripts into a URL parameter. The scripts are reflected in the server response and executed in a user's browser when the crafted URL…","display_reference":"CVE-2026-89117","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89117","source_title":"SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to inject malicious scripts into a URL parameter. The scripts are reflected in the server response and executed in a user's browser when the crafted URL is visited, leading to theft of session information, manipulation of portal content, or user redirection. This results in a low impact on confidentiality and integrity. There is no impact on availability.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:45.580Z","source_hash":"content-fingerprint:fnv1a-ff48034d","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-89117-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to inject malicious scripts into a URL parameter. The scripts are reflected in the server response and executed in a user's browser when the crafted URL is visited, leading to theft of session information, manipulation of portal content, or user redirection. This results in a low impact on confidentiality and integrity. There is no impact on availability.","source_quote_or_pointer":"Security Advisory CVE-2026-89117","fact_id":"SEA-CVE-2026-89117-F1","document_citation":"Security Advisory CVE-2026-89117"},{"id":"SEA-CVE-2026-89117-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to inject malicious scripts into a URL parameter. The scripts are reflected in the server response and executed in a user's browser when the crafted URL is visited, leading to theft of session information, manipulation of portal content, or user…","source_quote_or_pointer":"Advisory description (CVE-2026-89117)","fact_id":"SEA-CVE-2026-89117-F2","document_citation":"Advisory description (CVE-2026-89117)"}],"source_stated_contributors":["SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to inject malicious scripts into a URL parameter. The scripts are reflected in the server response and executed in a user's browser when the crafted URL is visited, leading to theft of session information, manipulation of portal content, or user…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-89117","reporting_entity":"CVE-2026-89117","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-89117-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-89117-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-89117"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-89120","title":"A regression caused by an API change in SAP ABAP Platform reintroduces a previously fixed authorization weakness. The session manager can be opened in single transaction mode, including from FLP. A low-privileged attacker could exploit this to bypass restrictions via specially crafted requests, resulting in high impact on integrity and low impact on confidentiality. There is no impact on availability.","display_title":"Security issue reported in Software component","display_summary":"A regression caused by an API change in SAP ABAP Platform reintroduces a previously fixed authorization weakness. The session manager can be opened in single transaction mode, including from FLP.","display_reference":"CVE-2026-89120","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89120","source_title":"A regression caused by an API change in SAP ABAP Platform reintroduces a previously fixed authorization weakness. The session manager can be opened in single transaction mode, including from FLP. A low-privileged attacker could exploit this to bypass restrictions via specially crafted requests, resulting in high impact on integrity and low impact on confidentiality. There is no impact on availability.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:45.580Z","source_hash":"content-fingerprint:fnv1a-b97a9533","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-89120-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A regression caused by an API change in SAP ABAP Platform reintroduces a previously fixed authorization weakness. The session manager can be opened in single transaction mode, including from FLP. A low-privileged attacker could exploit this to bypass restrictions via specially crafted requests, resulting in high impact on integrity and low impact on confidentiality. There is no impact on availability.","source_quote_or_pointer":"Security Advisory CVE-2026-89120","fact_id":"SEA-CVE-2026-89120-F1","document_citation":"Security Advisory CVE-2026-89120"},{"id":"SEA-CVE-2026-89120-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A regression caused by an API change in SAP ABAP Platform reintroduces a previously fixed authorization weakness. The session manager can be opened in single transaction mode, including from FLP.","source_quote_or_pointer":"Advisory description (CVE-2026-89120)","fact_id":"SEA-CVE-2026-89120-F2","document_citation":"Advisory description (CVE-2026-89120)"}],"source_stated_contributors":["A regression caused by an API change in SAP ABAP Platform reintroduces a previously fixed authorization weakness. The session manager can be opened in single transaction mode, including from FLP."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-89120","reporting_entity":"CVE-2026-89120","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-89120-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-89120-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-89120"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-102073","title":"A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APOGEE PXC Compact (BACnet) (All versions < V3.5.7), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.21), APOGEE PXC Modular (BACnet) (All versions < V3.5.7), APOGEE PXC Modular (P2 Ethernet) (All versions < V2.8.21), TALON TC Compact (BACnet) (All versions < V3.5.7), TALON TC Modular (BACnet) (All versions < V3.5.7). The affected product web service does not properly validate the length of user-controllable input. This could allow an unauthenticated remote attacker to read portions of device memory or to cause a denial-of-service condition.","display_title":"Security issue reported in Software component","display_summary":"A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions),…","display_reference":"CVE-2026-102073","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-102073","source_title":"A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APOGEE PXC Compact (BACnet) (All versions < V3.5.7), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.21), APOGEE PXC Modular (BACnet) (All versions < V3.5.7), APOGEE PXC Modular (P2 Ethernet) (All versions < V2.8.21), TALON TC Compact (BACnet) (All versions < V3.5.7), TALON TC Modular (BACnet) (All versions < V3.5.7). The affected product web service does not properly validate the length of user-controllable input. This could allow an unauthenticated remote attacker to read portions of device memory or to cause a denial-of-service condition.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:45.580Z","source_hash":"content-fingerprint:fnv1a-2b43f12a","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-102073-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APOGEE PXC Compact (BACnet) (All versions < V3.5.7), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.21), APOGEE PXC Modular (BACnet) (All versions < V3.5.7), APOGEE PXC Modular (P2 Ethernet) (All versions < V2.8.21), TALON TC Compact (BACnet) (All versions < V3.5.7), TALON TC Modular (BACnet) (All versions < V3.5.7). The affected product web service does not properly validate the length of user-controllable input. This could allow an unauthenticated remote attacker to read portions of device memory or to cause a denial-of-service condition.","source_quote_or_pointer":"Security Advisory CVE-2026-102073","fact_id":"SEA-CVE-2026-102073-F1","document_citation":"Security Advisory CVE-2026-102073"},{"id":"SEA-CVE-2026-102073-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APOGEE PXC Compact (BACnet) (All versions < V3.5.7), APOGEE PXC Compact (P2 Ethernet) (All versions <…","source_quote_or_pointer":"Advisory description (CVE-2026-102073)","fact_id":"SEA-CVE-2026-102073-F2","document_citation":"Advisory description (CVE-2026-102073)"}],"source_stated_contributors":["A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APOGEE PXC Compact (BACnet) (All versions < V3.5.7), APOGEE PXC Compact (P2 Ethernet) (All versions <…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-102073","reporting_entity":"CVE-2026-102073","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-102073-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-102073-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-102073"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-102074","title":"A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APOGEE PXC Compact (BACnet) (All versions < V3.5.7), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.21), APOGEE PXC Modular (BACnet) (All versions < V3.5.7), APOGEE PXC Modular (P2 Ethernet) (All versions < V2.8.21), TALON TC Compact (BACnet) (All versions < V3.5.7), TALON TC Modular (BACnet) (All versions < V3.5.7). The affected product FTP service does not properly validate the length of user-controllable input. This could allow an unauthenticated remote attacker to cause a denial of service.","display_title":"Software component issue could make the service unavailable","display_summary":"A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions),…","display_reference":"CVE-2026-102074","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-102074","source_title":"A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APOGEE PXC Compact (BACnet) (All versions < V3.5.7), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.21), APOGEE PXC Modular (BACnet) (All versions < V3.5.7), APOGEE PXC Modular (P2 Ethernet) (All versions < V2.8.21), TALON TC Compact (BACnet) (All versions < V3.5.7), TALON TC Modular (BACnet) (All versions < V3.5.7). The affected product FTP service does not properly validate the length of user-controllable input. This could allow an unauthenticated remote attacker to cause a denial of service.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:45.581Z","source_hash":"content-fingerprint:fnv1a-b9943eb3","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-102074-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APOGEE PXC Compact (BACnet) (All versions < V3.5.7), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.21), APOGEE PXC Modular (BACnet) (All versions < V3.5.7), APOGEE PXC Modular (P2 Ethernet) (All versions < V2.8.21), TALON TC Compact (BACnet) (All versions < V3.5.7), TALON TC Modular (BACnet) (All versions < V3.5.7). The affected product FTP service does not properly validate the length of user-controllable input. This could allow an unauthenticated remote attacker to cause a denial of service.","source_quote_or_pointer":"Security Advisory CVE-2026-102074","fact_id":"SEA-CVE-2026-102074-F1","document_citation":"Security Advisory CVE-2026-102074"},{"id":"SEA-CVE-2026-102074-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APOGEE PXC Compact (BACnet) (All versions < V3.5.7), APOGEE PXC Compact (P2 Ethernet) (All versions <…","source_quote_or_pointer":"Advisory description (CVE-2026-102074)","fact_id":"SEA-CVE-2026-102074-F2","document_citation":"Advisory description (CVE-2026-102074)"}],"source_stated_contributors":["A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APOGEE PXC Compact (BACnet) (All versions < V3.5.7), APOGEE PXC Compact (P2 Ethernet) (All versions <…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-102074","reporting_entity":"CVE-2026-102074","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-102074-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-102074-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-102074"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-102075","title":"A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APOGEE PXC Compact (BACnet) (All versions < V3.5.7), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.21), APOGEE PXC Modular (BACnet) (All versions < V3.5.7), APOGEE PXC Modular (P2 Ethernet) (All versions < V2.8.21), TALON TC Compact (BACnet) (All versions < V3.5.7), TALON TC Modular (BACnet) (All versions < V3.5.7). The affected product web service does not properly validate user input in multipart handling. This could allow an unauthenticated remote attacker to cause a denial of service.","display_title":"Software component issue could make the service unavailable","display_summary":"A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions),…","display_reference":"CVE-2026-102075","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-102075","source_title":"A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APOGEE PXC Compact (BACnet) (All versions < V3.5.7), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.21), APOGEE PXC Modular (BACnet) (All versions < V3.5.7), APOGEE PXC Modular (P2 Ethernet) (All versions < V2.8.21), TALON TC Compact (BACnet) (All versions < V3.5.7), TALON TC Modular (BACnet) (All versions < V3.5.7). The affected product web service does not properly validate user input in multipart handling. This could allow an unauthenticated remote attacker to cause a denial of service.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:45.582Z","source_hash":"content-fingerprint:fnv1a-d70bbb66","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-102075-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APOGEE PXC Compact (BACnet) (All versions < V3.5.7), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.21), APOGEE PXC Modular (BACnet) (All versions < V3.5.7), APOGEE PXC Modular (P2 Ethernet) (All versions < V2.8.21), TALON TC Compact (BACnet) (All versions < V3.5.7), TALON TC Modular (BACnet) (All versions < V3.5.7). The affected product web service does not properly validate user input in multipart handling. This could allow an unauthenticated remote attacker to cause a denial of service.","source_quote_or_pointer":"Security Advisory CVE-2026-102075","fact_id":"SEA-CVE-2026-102075-F1","document_citation":"Security Advisory CVE-2026-102075"},{"id":"SEA-CVE-2026-102075-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APOGEE PXC Compact (BACnet) (All versions < V3.5.7), APOGEE PXC Compact (P2 Ethernet) (All versions <…","source_quote_or_pointer":"Advisory description (CVE-2026-102075)","fact_id":"SEA-CVE-2026-102075-F2","document_citation":"Advisory description (CVE-2026-102075)"}],"source_stated_contributors":["A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APOGEE PXC Compact (BACnet) (All versions < V3.5.7), APOGEE PXC Compact (P2 Ethernet) (All versions <…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-102075","reporting_entity":"CVE-2026-102075","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-102075-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-102075-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-102075"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-102076","title":"A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APOGEE PXC Compact (BACnet) (All versions < V3.5.7), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.21), APOGEE PXC Modular (BACnet) (All versions < V3.5.7), APOGEE PXC Modular (P2 Ethernet) (All versions < V2.8.21), TALON TC Compact (BACnet) (All versions < V3.5.7), TALON TC Modular (BACnet) (All versions < V3.5.7). The affected product web service does not properly validate user-supplied input in upload code. This could allow an unauthenticated remote attacker to cause a denial of service.","display_title":"Software component issue could make the service unavailable","display_summary":"A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions),…","display_reference":"CVE-2026-102076","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-102076","source_title":"A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APOGEE PXC Compact (BACnet) (All versions < V3.5.7), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.21), APOGEE PXC Modular (BACnet) (All versions < V3.5.7), APOGEE PXC Modular (P2 Ethernet) (All versions < V2.8.21), TALON TC Compact (BACnet) (All versions < V3.5.7), TALON TC Modular (BACnet) (All versions < V3.5.7). The affected product web service does not properly validate user-supplied input in upload code. This could allow an unauthenticated remote attacker to cause a denial of service.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:45.582Z","source_hash":"content-fingerprint:fnv1a-83d7bf07","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-102076-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APOGEE PXC Compact (BACnet) (All versions < V3.5.7), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.21), APOGEE PXC Modular (BACnet) (All versions < V3.5.7), APOGEE PXC Modular (P2 Ethernet) (All versions < V2.8.21), TALON TC Compact (BACnet) (All versions < V3.5.7), TALON TC Modular (BACnet) (All versions < V3.5.7). The affected product web service does not properly validate user-supplied input in upload code. This could allow an unauthenticated remote attacker to cause a denial of service.","source_quote_or_pointer":"Security Advisory CVE-2026-102076","fact_id":"SEA-CVE-2026-102076-F1","document_citation":"Security Advisory CVE-2026-102076"},{"id":"SEA-CVE-2026-102076-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APOGEE PXC Compact (BACnet) (All versions < V3.5.7), APOGEE PXC Compact (P2 Ethernet) (All versions <…","source_quote_or_pointer":"Advisory description (CVE-2026-102076)","fact_id":"SEA-CVE-2026-102076-F2","document_citation":"Advisory description (CVE-2026-102076)"}],"source_stated_contributors":["A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APOGEE PXC Compact (BACnet) (All versions < V3.5.7), APOGEE PXC Compact (P2 Ethernet) (All versions <…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","data.uploaded_files"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-102076","reporting_entity":"CVE-2026-102076","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-102076-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-102076-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-102076"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-63355","title":"Affected devices do not properly sanitize signal names contained in imported CSV trace files before rendering them in selection menus on the Trace page. This could allow an attacker to social engineer an authorized user who holds the function right “Read diagnostics” into importing a specially crafted trace file. Attacker-controlled JavaScript could be executed in the user’s browser session when the user subsequently interacts with an affected selection menu.","display_title":"Security issue reported in Software component","display_summary":"Affected devices do not properly sanitize signal names contained in imported CSV trace files before rendering them in selection menus on the Trace page.","display_reference":"CVE-2026-63355","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63355","source_title":"Affected devices do not properly sanitize signal names contained in imported CSV trace files before rendering them in selection menus on the Trace page. This could allow an attacker to social engineer an authorized user who holds the function right “Read diagnostics” into importing a specially crafted trace file. Attacker-controlled JavaScript could be executed in the user’s browser session when the user subsequently interacts with an affected selection menu.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:45.582Z","source_hash":"content-fingerprint:fnv1a-55ad5239","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-63355-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Affected devices do not properly sanitize signal names contained in imported CSV trace files before rendering them in selection menus on the Trace page. This could allow an attacker to social engineer an authorized user who holds the function right “Read diagnostics” into importing a specially crafted trace file. Attacker-controlled JavaScript could be executed in the user’s browser session when the user subsequently interacts with an affected selection menu.","source_quote_or_pointer":"Security Advisory CVE-2026-63355","fact_id":"SEA-CVE-2026-63355-F1","document_citation":"Security Advisory CVE-2026-63355"},{"id":"SEA-CVE-2026-63355-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Affected devices do not properly sanitize signal names contained in imported CSV trace files before rendering them in selection menus on the Trace page.","source_quote_or_pointer":"Advisory description (CVE-2026-63355)","fact_id":"SEA-CVE-2026-63355-F2","document_citation":"Advisory description (CVE-2026-63355)"}],"source_stated_contributors":["Affected devices do not properly sanitize signal names contained in imported CSV trace files before rendering them in selection menus on the Trace page."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-63355","reporting_entity":"CVE-2026-63355","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-63355-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-63355-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-63355"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-63356","title":"Affected devices do not properly sanitize calculated signal names contained in imported CSV trace files before including them in error messages on the Trace page. This could allow an attacker to social engineer an authorized user who holds the function right “Read diagnostics” into importing a specially crafted trace file. Attacker-controlled JavaScript could be executed in the user’s browser session when the resulting error message is displayed.","display_title":"Security issue reported in Software component","display_summary":"Affected devices do not properly sanitize calculated signal names contained in imported CSV trace files before including them in error messages on the Trace page.","display_reference":"CVE-2026-63356","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63356","source_title":"Affected devices do not properly sanitize calculated signal names contained in imported CSV trace files before including them in error messages on the Trace page. This could allow an attacker to social engineer an authorized user who holds the function right “Read diagnostics” into importing a specially crafted trace file. Attacker-controlled JavaScript could be executed in the user’s browser session when the resulting error message is displayed.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:45.583Z","source_hash":"content-fingerprint:fnv1a-a0fbd87e","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-63356-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Affected devices do not properly sanitize calculated signal names contained in imported CSV trace files before including them in error messages on the Trace page. This could allow an attacker to social engineer an authorized user who holds the function right “Read diagnostics” into importing a specially crafted trace file. Attacker-controlled JavaScript could be executed in the user’s browser session when the resulting error message is displayed.","source_quote_or_pointer":"Security Advisory CVE-2026-63356","fact_id":"SEA-CVE-2026-63356-F1","document_citation":"Security Advisory CVE-2026-63356"},{"id":"SEA-CVE-2026-63356-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Affected devices do not properly sanitize calculated signal names contained in imported CSV trace files before including them in error messages on the Trace page.","source_quote_or_pointer":"Advisory description (CVE-2026-63356)","fact_id":"SEA-CVE-2026-63356-F2","document_citation":"Advisory description (CVE-2026-63356)"}],"source_stated_contributors":["Affected devices do not properly sanitize calculated signal names contained in imported CSV trace files before including them in error messages on the Trace page."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-63356","reporting_entity":"CVE-2026-63356","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-63356-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-63356-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-63356"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-78557","title":"A vulnerability has been identified in Industrial Edge App Publisher (All versions < V1.27.9). The application fails to properly sanitize or escape data received from the backend before rendering it in the user interface. Because the front end is integrated with Node.js, this vulnerability allows for the execution of arbitrary JavaScript, which can be leveraged to achieve remote code execution (RCE) on the victim's machine","display_title":"Software component issue could allow unintended commands to run","display_summary":"A vulnerability has been identified in Industrial Edge App Publisher (All versions < V1.27.9). The application fails to properly sanitize or escape data received from the backend before rendering it in the user…","display_reference":"CVE-2026-78557","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-78557","source_title":"A vulnerability has been identified in Industrial Edge App Publisher (All versions < V1.27.9). The application fails to properly sanitize or escape data received from the backend before rendering it in the user interface. Because the front end is integrated with Node.js, this vulnerability allows for the execution of arbitrary JavaScript, which can be leveraged to achieve remote code execution (RCE) on the victim's machine","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:45.583Z","source_hash":"content-fingerprint:fnv1a-a7b9c941","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-78557-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability has been identified in Industrial Edge App Publisher (All versions < V1.27.9). The application fails to properly sanitize or escape data received from the backend before rendering it in the user interface. Because the front end is integrated with Node.js, this vulnerability allows for the execution of arbitrary JavaScript, which can be leveraged to achieve remote code execution (RCE) on the victim's machine","source_quote_or_pointer":"Security Advisory CVE-2026-78557","fact_id":"SEA-CVE-2026-78557-F1","document_citation":"Security Advisory CVE-2026-78557"},{"id":"SEA-CVE-2026-78557-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability has been identified in Industrial Edge App Publisher (All versions < V1.27.9). The application fails to properly sanitize or escape data received from the backend before rendering it in the user interface.","source_quote_or_pointer":"Advisory description (CVE-2026-78557)","fact_id":"SEA-CVE-2026-78557-F2","document_citation":"Advisory description (CVE-2026-78557)"}],"source_stated_contributors":["A vulnerability has been identified in Industrial Edge App Publisher (All versions < V1.27.9). The application fails to properly sanitize or escape data received from the backend before rendering it in the user interface."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-78557","reporting_entity":"CVE-2026-78557","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-78557-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-78557-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-78557"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-89196","title":"A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in facility names processed during the Bulk Import/Export workflow. This could allow an authenticated attacker with specific privileges to execute arbitrary SQL commands on the underlying database.","display_title":"Security issue reported in Software component","display_summary":"A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in facility names processed during the Bulk Import/Export workflow.","display_reference":"CVE-2026-89196","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89196","source_title":"A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in facility names processed during the Bulk Import/Export workflow. This could allow an authenticated attacker with specific privileges to execute arbitrary SQL commands on the underlying database.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:45.583Z","source_hash":"content-fingerprint:fnv1a-947e2578","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-89196-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in facility names processed during the Bulk Import/Export workflow. This could allow an authenticated attacker with specific privileges to execute arbitrary SQL commands on the underlying database.","source_quote_or_pointer":"Security Advisory CVE-2026-89196","fact_id":"SEA-CVE-2026-89196-F1","document_citation":"Security Advisory CVE-2026-89196"},{"id":"SEA-CVE-2026-89196-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in facility names processed during the Bulk Import/Export workflow.","source_quote_or_pointer":"Advisory description (CVE-2026-89196)","fact_id":"SEA-CVE-2026-89196-F2","document_citation":"Advisory description (CVE-2026-89196)"}],"source_stated_contributors":["A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in facility names processed during the Bulk Import/Export workflow."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-89196","reporting_entity":"CVE-2026-89196","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-89196-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-89196-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-89196"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-89197","title":"A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in the Value field of notification conditions processed during the Notification Profile configuration. This could allow an authenticated attacker with specific privileges to execute arbitrary SQL commands on the underlying database.","display_title":"Security issue reported in Software component","display_summary":"A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in the Value field of notification conditions processed during the Notification…","display_reference":"CVE-2026-89197","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89197","source_title":"A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in the Value field of notification conditions processed during the Notification Profile configuration. This could allow an authenticated attacker with specific privileges to execute arbitrary SQL commands on the underlying database.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:45.583Z","source_hash":"content-fingerprint:fnv1a-9857dc4d","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-89197-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in the Value field of notification conditions processed during the Notification Profile configuration. This could allow an authenticated attacker with specific privileges to execute arbitrary SQL commands on the underlying database.","source_quote_or_pointer":"Security Advisory CVE-2026-89197","fact_id":"SEA-CVE-2026-89197-F1","document_citation":"Security Advisory CVE-2026-89197"},{"id":"SEA-CVE-2026-89197-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in the Value field of notification conditions processed during the Notification Profile configuration.","source_quote_or_pointer":"Advisory description (CVE-2026-89197)","fact_id":"SEA-CVE-2026-89197-F2","document_citation":"Advisory description (CVE-2026-89197)"}],"source_stated_contributors":["A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in the Value field of notification conditions processed during the Notification Profile configuration."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-89197","reporting_entity":"CVE-2026-89197","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-89197-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-89197-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-89197"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-89199","title":"A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restrict access to sensitive configuration items via specific database queries. This could allow an authenticated attacker to retrieve administrative credentials for various internal systems, leading to unauthorized information disclosure and privilege escalation.","display_title":"Software component issue could expose accounts or credentials","display_summary":"A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restrict access to sensitive configuration items via specific database queries.","display_reference":"CVE-2026-89199","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89199","source_title":"A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restrict access to sensitive configuration items via specific database queries. This could allow an authenticated attacker to retrieve administrative credentials for various internal systems, leading to unauthorized information disclosure and privilege escalation.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:45.583Z","source_hash":"content-fingerprint:fnv1a-2c80f8f1","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-89199-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restrict access to sensitive configuration items via specific database queries. This could allow an authenticated attacker to retrieve administrative credentials for various internal systems, leading to unauthorized information disclosure and privilege escalation.","source_quote_or_pointer":"Security Advisory CVE-2026-89199","fact_id":"SEA-CVE-2026-89199-F1","document_citation":"Security Advisory CVE-2026-89199"},{"id":"SEA-CVE-2026-89199-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restrict access to sensitive configuration items via specific database queries.","source_quote_or_pointer":"Advisory description (CVE-2026-89199)","fact_id":"SEA-CVE-2026-89199-F2","document_citation":"Advisory description (CVE-2026-89199)"}],"source_stated_contributors":["A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restrict access to sensitive configuration items via specific database queries."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-89199","reporting_entity":"CVE-2026-89199","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-89199-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-89199-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-89199"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-89200","title":"A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in the Name and Value fields for custom file labels. This could allow an authenticated attacker with administrative privileges to execute arbitrary SQL commands on the underlying database.","display_title":"Security issue reported in Software component","display_summary":"A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in the Name and Value fields for custom file labels.","display_reference":"CVE-2026-89200","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89200","source_title":"A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in the Name and Value fields for custom file labels. This could allow an authenticated attacker with administrative privileges to execute arbitrary SQL commands on the underlying database.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:45.583Z","source_hash":"content-fingerprint:fnv1a-1f2852e2","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-89200-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in the Name and Value fields for custom file labels. This could allow an authenticated attacker with administrative privileges to execute arbitrary SQL commands on the underlying database.","source_quote_or_pointer":"Security Advisory CVE-2026-89200","fact_id":"SEA-CVE-2026-89200-F1","document_citation":"Security Advisory CVE-2026-89200"},{"id":"SEA-CVE-2026-89200-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in the Name and Value fields for custom file labels.","source_quote_or_pointer":"Advisory description (CVE-2026-89200)","fact_id":"SEA-CVE-2026-89200-F2","document_citation":"Advisory description (CVE-2026-89200)"}],"source_stated_contributors":["A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in the Name and Value fields for custom file labels."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-89200","reporting_entity":"CVE-2026-89200","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-89200-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-89200-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-89200"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-89201","title":"A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in device group or facility names processed during the Bulk Export workflow. This could allow an authenticated attacker with specific privileges to execute arbitrary SQL commands on the underlying database.","display_title":"Security issue reported in Software component","display_summary":"A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in device group or facility names processed during the Bulk Export workflow.","display_reference":"CVE-2026-89201","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89201","source_title":"A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in device group or facility names processed during the Bulk Export workflow. This could allow an authenticated attacker with specific privileges to execute arbitrary SQL commands on the underlying database.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:45.583Z","source_hash":"content-fingerprint:fnv1a-5a279eaf","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-89201-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in device group or facility names processed during the Bulk Export workflow. This could allow an authenticated attacker with specific privileges to execute arbitrary SQL commands on the underlying database.","source_quote_or_pointer":"Security Advisory CVE-2026-89201","fact_id":"SEA-CVE-2026-89201-F1","document_citation":"Security Advisory CVE-2026-89201"},{"id":"SEA-CVE-2026-89201-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in device group or facility names processed during the Bulk Export workflow.","source_quote_or_pointer":"Advisory description (CVE-2026-89201)","fact_id":"SEA-CVE-2026-89201-F2","document_citation":"Advisory description (CVE-2026-89201)"}],"source_stated_contributors":["A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in device group or facility names processed during the Bulk Export workflow."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-89201","reporting_entity":"CVE-2026-89201","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-89201-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-89201-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-89201"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-89202","title":"A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform authorization checks for device disconnection requests. This could allow an authenticated attacker with minimal privileges to disconnect active sessions of other users, including administrators, leading to a denial of service.","display_title":"Software component issue could make the service unavailable","display_summary":"A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform authorization checks for device disconnection requests.","display_reference":"CVE-2026-89202","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89202","source_title":"A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform authorization checks for device disconnection requests. This could allow an authenticated attacker with minimal privileges to disconnect active sessions of other users, including administrators, leading to a denial of service.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:45.584Z","source_hash":"content-fingerprint:fnv1a-42f42c90","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-89202-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform authorization checks for device disconnection requests. This could allow an authenticated attacker with minimal privileges to disconnect active sessions of other users, including administrators, leading to a denial of service.","source_quote_or_pointer":"Security Advisory CVE-2026-89202","fact_id":"SEA-CVE-2026-89202-F1","document_citation":"Security Advisory CVE-2026-89202"},{"id":"SEA-CVE-2026-89202-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform authorization checks for device disconnection requests.","source_quote_or_pointer":"Advisory description (CVE-2026-89202)","fact_id":"SEA-CVE-2026-89202-F2","document_citation":"Advisory description (CVE-2026-89202)"}],"source_stated_contributors":["A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform authorization checks for device disconnection requests."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-89202","reporting_entity":"CVE-2026-89202","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-89202-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-89202-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-89202"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-89203","title":"A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restrict access to various database queries, allowing users to retrieve system-wide information that is not intended for their privilege level. This could allow an authenticated attacker to gather sensitive information about the system's infrastructure, including details on all devices, substations, users, and scheduled activities.","display_title":"Security issue reported in Software component","display_summary":"A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restrict access to various database queries, allowing users to retrieve system-wide information that is…","display_reference":"CVE-2026-89203","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89203","source_title":"A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restrict access to various database queries, allowing users to retrieve system-wide information that is not intended for their privilege level. This could allow an authenticated attacker to gather sensitive information about the system's infrastructure, including details on all devices, substations, users, and scheduled activities.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:45.584Z","source_hash":"content-fingerprint:fnv1a-fcb79d4d","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-89203-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restrict access to various database queries, allowing users to retrieve system-wide information that is not intended for their privilege level. This could allow an authenticated attacker to gather sensitive information about the system's infrastructure, including details on all devices, substations, users, and scheduled activities.","source_quote_or_pointer":"Security Advisory CVE-2026-89203","fact_id":"SEA-CVE-2026-89203-F1","document_citation":"Security Advisory CVE-2026-89203"},{"id":"SEA-CVE-2026-89203-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restrict access to various database queries, allowing users to retrieve system-wide information that is not intended for their privilege level.","source_quote_or_pointer":"Advisory description (CVE-2026-89203)","fact_id":"SEA-CVE-2026-89203-F2","document_citation":"Advisory description (CVE-2026-89203)"}],"source_stated_contributors":["A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restrict access to various database queries, allowing users to retrieve system-wide information that is not intended for their privilege level."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-89203","reporting_entity":"CVE-2026-89203","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-89203-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-89203-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-89203"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-89205","title":"A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform server-side authorization checks for requests to schedule special operations. This could allow an authenticated attacker with minimal privileges to schedule unauthorized operations on devices.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-89205","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89205","source_title":"A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform server-side authorization checks for requests to schedule special operations. This could allow an authenticated attacker with minimal privileges to schedule unauthorized operations on devices.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:45.584Z","source_hash":"content-fingerprint:fnv1a-551231e9","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-89205-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform server-side authorization checks for requests to schedule special operations. This could allow an authenticated attacker with minimal privileges to schedule unauthorized operations on devices.","source_quote_or_pointer":"Security Advisory CVE-2026-89205","fact_id":"SEA-CVE-2026-89205-F1","document_citation":"Security Advisory CVE-2026-89205"},{"id":"SEA-CVE-2026-89205-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform server-side authorization checks for requests to schedule special operations. This could allow an authenticated attacker with minimal privileges to schedule unauthorized operations on devices.","source_quote_or_pointer":"Advisory description (CVE-2026-89205)","fact_id":"SEA-CVE-2026-89205-F2","document_citation":"Advisory description (CVE-2026-89205)"}],"source_stated_contributors":["A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform server-side authorization checks for requests to schedule special operations. This could allow an authenticated attacker with minimal privileges to schedule unauthorized operations on devices."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-89205","reporting_entity":"CVE-2026-89205","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-89205-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-89205-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-89205"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-89206","title":"A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform server-side authorization checks for requests to modify the state of scheduled actions. This could allow an authenticated attacker with minimal privileges to retry, stop, or delete scheduled tasks without proper authorization.","display_title":"Security issue reported in Software component","display_summary":"A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform server-side authorization checks for requests to modify the state of scheduled actions.","display_reference":"CVE-2026-89206","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89206","source_title":"A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform server-side authorization checks for requests to modify the state of scheduled actions. This could allow an authenticated attacker with minimal privileges to retry, stop, or delete scheduled tasks without proper authorization.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:45.584Z","source_hash":"content-fingerprint:fnv1a-6200f2de","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-89206-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform server-side authorization checks for requests to modify the state of scheduled actions. This could allow an authenticated attacker with minimal privileges to retry, stop, or delete scheduled tasks without proper authorization.","source_quote_or_pointer":"Security Advisory CVE-2026-89206","fact_id":"SEA-CVE-2026-89206-F1","document_citation":"Security Advisory CVE-2026-89206"},{"id":"SEA-CVE-2026-89206-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform server-side authorization checks for requests to modify the state of scheduled actions.","source_quote_or_pointer":"Advisory description (CVE-2026-89206)","fact_id":"SEA-CVE-2026-89206-F2","document_citation":"Advisory description (CVE-2026-89206)"}],"source_stated_contributors":["A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform server-side authorization checks for requests to modify the state of scheduled actions."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.write_action","arch.async_job"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-89206","reporting_entity":"CVE-2026-89206","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-89206-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-89206-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-89206"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-89097","title":"The Ad Inserter – Ad Manager & AdSense Ads plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.8.18 via the ai_wp_footer_hook. This makes it possible for authenticated attackers, with subscriber-level access and above, to extract sensitive data including the server's internal IP address, PHP configuration, WordPress and theme versions, hardening constants, the plugin's full block matrix, and all post meta values including underscore-prefixed protected keys such as API tokens and private integration state written by other plugins.","display_title":"Security issue reported in Software component","display_summary":"The Ad Inserter – Ad Manager & AdSense Ads plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.8.18 via the aiwpfooterhook.","display_reference":"CVE-2026-89097","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89097","source_title":"The Ad Inserter – Ad Manager & AdSense Ads plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.8.18 via the ai_wp_footer_hook. This makes it possible for authenticated attackers, with subscriber-level access and above, to extract sensitive data including the server's internal IP address, PHP configuration, WordPress and theme versions, hardening constants, the plugin's full block matrix, and all post meta values including underscore-prefixed protected keys such as API tokens and private integration state written by other plugins.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T18:14:27.091Z","source_hash":"content-fingerprint:fnv1a-2bfe69ae","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-89097-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Ad Inserter – Ad Manager & AdSense Ads plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.8.18 via the ai_wp_footer_hook. This makes it possible for authenticated attackers, with subscriber-level access and above, to extract sensitive data including the server's internal IP address, PHP configuration, WordPress and theme versions, hardening constants, the plugin's full block matrix, and all post meta values including underscore-prefixed protected keys such as API tokens and private integration state written by other plugins.","source_quote_or_pointer":"Security Advisory CVE-2026-89097","fact_id":"SEA-CVE-2026-89097-F1","document_citation":"Security Advisory CVE-2026-89097"},{"id":"SEA-CVE-2026-89097-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Ad Inserter – Ad Manager & AdSense Ads plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.8.18 via the aiwpfooterhook.","source_quote_or_pointer":"Advisory description (CVE-2026-89097)","fact_id":"SEA-CVE-2026-89097-F2","document_citation":"Advisory description (CVE-2026-89097)"}],"source_stated_contributors":["The Ad Inserter – Ad Manager & AdSense Ads plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.8.18 via the aiwpfooterhook."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-89097","reporting_entity":"CVE-2026-89097","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-89097-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-89097-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-89097"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-76001","title":"ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain elevated access to internal resources. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue does not require user interaction. Scope is changed.","display_title":"Software component issue could reach internal services","display_summary":"ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain elevated access to internal…","display_reference":"CVE-2026-76001","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-76001","source_title":"ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain elevated access to internal resources. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue does not require user interaction. Scope is changed.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T07:22:13.582Z","source_hash":"content-fingerprint:fnv1a-3d08e65","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-76001-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain elevated access to internal resources. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue does not require user interaction. Scope is changed.","source_quote_or_pointer":"Security Advisory CVE-2026-76001","fact_id":"SEA-CVE-2026-76001-F1","document_citation":"Security Advisory CVE-2026-76001"},{"id":"SEA-CVE-2026-76001-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain elevated access to internal resources. Exploit depends on conditions beyond the attacker's control.","source_quote_or_pointer":"Advisory description (CVE-2026-76001)","fact_id":"SEA-CVE-2026-76001-F2","document_citation":"Advisory description (CVE-2026-76001)"}],"source_stated_contributors":["ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain elevated access to internal resources. Exploit depends on conditions beyond the attacker's control."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Internal network access","Cloud metadata or credential exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-76001","reporting_entity":"CVE-2026-76001","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-76001-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-76001-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"The service fetched a URL chosen by the caller and could be steered at internal systems. Restrict outbound destinations and block internal address ranges.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-76001"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-75748","title":"ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. An attacker with high privileges could exploit this vulnerability to gain elevated access to internal resources. Exploitation of this issue does not require user interaction. Scope is changed.","display_title":"Software component issue could reach internal services","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-75748","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-75748","source_title":"ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. An attacker with high privileges could exploit this vulnerability to gain elevated access to internal resources. Exploitation of this issue does not require user interaction. Scope is changed.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T07:22:13.583Z","source_hash":"content-fingerprint:fnv1a-fc8135f6","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-75748-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. An attacker with high privileges could exploit this vulnerability to gain elevated access to internal resources. Exploitation of this issue does not require user interaction. Scope is changed.","source_quote_or_pointer":"Security Advisory CVE-2026-75748","fact_id":"SEA-CVE-2026-75748-F1","document_citation":"Security Advisory CVE-2026-75748"},{"id":"SEA-CVE-2026-75748-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. An attacker with high privileges could exploit this vulnerability to gain elevated access to internal resources. Exploitation of this issue does not require user interaction. Scope is changed.","source_quote_or_pointer":"Advisory description (CVE-2026-75748)","fact_id":"SEA-CVE-2026-75748-F2","document_citation":"Advisory description (CVE-2026-75748)"}],"source_stated_contributors":["ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. An attacker with high privileges could exploit this vulnerability to gain elevated access to internal resources. Exploitation of this issue does not require user interaction. Scope is changed."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Internal network access","Cloud metadata or credential exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-75748","reporting_entity":"CVE-2026-75748","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-75748-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-75748-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"The service fetched a URL chosen by the caller and could be steered at internal systems. Restrict outbound destinations and block internal address ranges.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-75748"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-48383","title":"Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require user interaction. Scope is changed.","display_title":"Software component issue could allow unintended commands to run","display_summary":"Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the…","display_reference":"CVE-2026-48383","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-48383","source_title":"Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require user interaction. Scope is changed.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T07:22:13.584Z","source_hash":"content-fingerprint:fnv1a-ea8ac667","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-48383-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require user interaction. Scope is changed.","source_quote_or_pointer":"Security Advisory CVE-2026-48383","fact_id":"SEA-CVE-2026-48383-F1","document_citation":"Security Advisory CVE-2026-48383"},{"id":"SEA-CVE-2026-48383-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require user interaction.","source_quote_or_pointer":"Advisory description (CVE-2026-48383)","fact_id":"SEA-CVE-2026-48383-F2","document_citation":"Advisory description (CVE-2026-48383)"}],"source_stated_contributors":["Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require user interaction."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-48383","reporting_entity":"CVE-2026-48383","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-48383-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-48383-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-48383"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-48382","title":"Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require user interaction. Scope is changed.","display_title":"Software component issue could allow unintended commands to run","display_summary":"Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the…","display_reference":"CVE-2026-48382","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-48382","source_title":"Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require user interaction. Scope is changed.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T07:22:13.585Z","source_hash":"content-fingerprint:fnv1a-efa468fa","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-48382-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require user interaction. Scope is changed.","source_quote_or_pointer":"Security Advisory CVE-2026-48382","fact_id":"SEA-CVE-2026-48382-F1","document_citation":"Security Advisory CVE-2026-48382"},{"id":"SEA-CVE-2026-48382-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require user interaction.","source_quote_or_pointer":"Advisory description (CVE-2026-48382)","fact_id":"SEA-CVE-2026-48382-F2","document_citation":"Advisory description (CVE-2026-48382)"}],"source_stated_contributors":["Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require user interaction."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-48382","reporting_entity":"CVE-2026-48382","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-48382-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-48382-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-48382"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-34633","title":"ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain elevated access to internal resources. Exploitation of this issue does not require user interaction. Scope is changed.","display_title":"Software component issue could reach internal services","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-34633","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-34633","source_title":"ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain elevated access to internal resources. Exploitation of this issue does not require user interaction. Scope is changed.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T07:22:13.585Z","source_hash":"content-fingerprint:fnv1a-dcf21fa4","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-34633-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain elevated access to internal resources. Exploitation of this issue does not require user interaction. Scope is changed.","source_quote_or_pointer":"Security Advisory CVE-2026-34633","fact_id":"SEA-CVE-2026-34633-F1","document_citation":"Security Advisory CVE-2026-34633"},{"id":"SEA-CVE-2026-34633-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain elevated access to internal resources. Exploitation of this issue does not require user interaction. Scope is changed.","source_quote_or_pointer":"Advisory description (CVE-2026-34633)","fact_id":"SEA-CVE-2026-34633-F2","document_citation":"Advisory description (CVE-2026-34633)"}],"source_stated_contributors":["ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain elevated access to internal resources. Exploitation of this issue does not require user interaction. Scope is changed."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Internal network access","Cloud metadata or credential exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-34633","reporting_entity":"CVE-2026-34633","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-34633-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-34633-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"The service fetched a URL chosen by the caller and could be steered at internal systems. Restrict outbound destinations and block internal address ranges.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-34633"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109832","title":"A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. In the VNC TLS I/O handlers, retryable GnuTLS results (GNUTLS_E_AGAIN and GNUTLS_E_INTERRUPTED) are handled with an unbounded busy loop instead of yielding to the event loop. A remote attacker who can reach an enabled VNC TLS listener can cause the event-loop thread to spin at high CPU with no forward progress, resulting in denial of service.","display_title":"Software component issue could make the service unavailable","display_summary":"A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. In the VNC TLS I/O handlers, retryable GnuTLS results (GNUTLSEAGAIN and GNUTLSEINTERRUPTED) are handled with an unbounded busy loop instead…","display_reference":"CVE-2026-109832","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109832","source_title":"A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. In the VNC TLS I/O handlers, retryable GnuTLS results (GNUTLS_E_AGAIN and GNUTLS_E_INTERRUPTED) are handled with an unbounded busy loop instead of yielding to the event loop. A remote attacker who can reach an enabled VNC TLS listener can cause the event-loop thread to spin at high CPU with no forward progress, resulting in denial of service.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T07:22:13.589Z","source_hash":"content-fingerprint:fnv1a-9f1a81c2","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109832-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. In the VNC TLS I/O handlers, retryable GnuTLS results (GNUTLS_E_AGAIN and GNUTLS_E_INTERRUPTED) are handled with an unbounded busy loop instead of yielding to the event loop. A remote attacker who can reach an enabled VNC TLS listener can cause the event-loop thread to spin at high CPU with no forward progress, resulting in denial of service.","source_quote_or_pointer":"Security Advisory CVE-2026-109832","fact_id":"SEA-CVE-2026-109832-F1","document_citation":"Security Advisory CVE-2026-109832"},{"id":"SEA-CVE-2026-109832-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. In the VNC TLS I/O handlers, retryable GnuTLS results (GNUTLSEAGAIN and GNUTLSEINTERRUPTED) are handled with an unbounded busy loop instead of yielding to the event loop.","source_quote_or_pointer":"Advisory description (CVE-2026-109832)","fact_id":"SEA-CVE-2026-109832-F2","document_citation":"Advisory description (CVE-2026-109832)"}],"source_stated_contributors":["A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. In the VNC TLS I/O handlers, retryable GnuTLS results (GNUTLSEAGAIN and GNUTLSEINTERRUPTED) are handled with an unbounded busy loop instead of yielding to the event loop."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["arch.event_driven"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109832","reporting_entity":"CVE-2026-109832","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109832-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109832-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-109832"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-103849","title":"Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require user interaction. Scope is changed.","display_title":"Software component issue could allow unintended commands to run","display_summary":"Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining…","display_reference":"CVE-2026-103849","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103849","source_title":"Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require user interaction. Scope is changed.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T07:22:13.590Z","source_hash":"content-fingerprint:fnv1a-8c7fbd52","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-103849-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require user interaction. Scope is changed.","source_quote_or_pointer":"Security Advisory CVE-2026-103849","fact_id":"SEA-CVE-2026-103849-F1","document_citation":"Security Advisory CVE-2026-103849"},{"id":"SEA-CVE-2026-103849-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session.","source_quote_or_pointer":"Advisory description (CVE-2026-103849)","fact_id":"SEA-CVE-2026-103849-F2","document_citation":"Advisory description (CVE-2026-103849)"}],"source_stated_contributors":["Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-103849","reporting_entity":"CVE-2026-103849","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-103849-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-103849-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-103849"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-17484","title":"IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to cause a denial of service due to improper access control.","display_title":"Software component issue could allow unauthorized access","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-17484","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-17484","source_title":"IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to cause a denial of service due to improper access control.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T01:57:40.307Z","source_hash":"content-fingerprint:fnv1a-2e7b94c1","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-17484-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to cause a denial of service due to improper access control.","source_quote_or_pointer":"Security Advisory CVE-2026-17484","fact_id":"SEA-CVE-2026-17484-F1","document_citation":"Security Advisory CVE-2026-17484"},{"id":"SEA-CVE-2026-17484-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to cause a denial of service due to improper access control.","source_quote_or_pointer":"Advisory description (CVE-2026-17484)","fact_id":"SEA-CVE-2026-17484-F2","document_citation":"Advisory description (CVE-2026-17484)"}],"source_stated_contributors":["IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to cause a denial of service due to improper access control."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-17484","reporting_entity":"CVE-2026-17484","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-17484-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-17484-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-17484"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-81858","title":"IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to cause a denial of service and obtain information due to an out-of-bounds read in the File Server.","display_title":"Software component issue could make the service unavailable","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-81858","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-81858","source_title":"IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to cause a denial of service and obtain information due to an out-of-bounds read in the File Server.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T01:57:40.307Z","source_hash":"content-fingerprint:fnv1a-af64884f","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-81858-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to cause a denial of service and obtain information due to an out-of-bounds read in the File Server.","source_quote_or_pointer":"Security Advisory CVE-2026-81858","fact_id":"SEA-CVE-2026-81858-F1","document_citation":"Security Advisory CVE-2026-81858"},{"id":"SEA-CVE-2026-81858-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to cause a denial of service and obtain information due to an out-of-bounds read in the File Server.","source_quote_or_pointer":"Advisory description (CVE-2026-81858)","fact_id":"SEA-CVE-2026-81858-F2","document_citation":"Advisory description (CVE-2026-81858)"}],"source_stated_contributors":["IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to cause a denial of service and obtain information due to an out-of-bounds read in the File Server."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-81858","reporting_entity":"CVE-2026-81858","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-81858-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-81858-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-81858"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-89309","title":"The authorization middleware of the WMS MobileServer fails to require authentication in two distinct cases. First, it only requires an Authorization header for GET and HEAD requests; requests using any other HTTP method are processed without an authentication check. Second, for any HTTP method including GET and HEAD, a request carrying a malformed or non-bearer Authorization header is passed through without a valid token being required. The middleware does validate a token whenever a well-formed one is present, but in these two cases it does not require one. A remote attacker with network access to the service can therefore invoke API functionality without valid credentials.","display_title":"Software component issue could expose accounts or credentials","display_summary":"The authorization middleware of the WMS MobileServer","display_reference":"CVE-2026-89309","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89309","source_title":"The authorization middleware of the WMS MobileServer fails to require authentication in two distinct cases. First, it only requires an Authorization header for GET and HEAD requests; requests using any other HTTP method are processed without an authentication check. Second, for any HTTP method including GET and HEAD, a request carrying a malformed or non-bearer Authorization header is passed through without a valid token being required. The middleware does validate a token whenever a well-formed one is present, but in these two cases it does not require one. A remote attacker with network access to the service can therefore invoke API functionality without valid credentials.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-14T17:05:08.260Z","source_hash":"content-fingerprint:fnv1a-d1abb850","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-89309-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The authorization middleware of the WMS MobileServer fails to require authentication in two distinct cases. First, it only requires an Authorization header for GET and HEAD requests; requests using any other HTTP method are processed without an authentication check. Second, for any HTTP method including GET and HEAD, a request carrying a malformed or non-bearer Authorization header is passed through without a valid token being required. The middleware does validate a token whenever a well-formed one is present, but in these two cases it does not require one. A remote attacker with network access to the service can therefore invoke API functionality without valid credentials.","source_quote_or_pointer":"Security Advisory CVE-2026-89309","fact_id":"SEA-CVE-2026-89309-F1","document_citation":"Security Advisory CVE-2026-89309"},{"id":"SEA-CVE-2026-89309-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The authorization middleware of the WMS MobileServer","source_quote_or_pointer":"Advisory description (CVE-2026-89309)","fact_id":"SEA-CVE-2026-89309-F2","document_citation":"Advisory description (CVE-2026-89309)"}],"source_stated_contributors":["The authorization middleware of the WMS MobileServer"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-89309","reporting_entity":"CVE-2026-89309","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-89309-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-89309-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-89309"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-96893","title":"GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user to inject specially crafted content into AI agent instructions, potentially causing unintended command execution attributed to other users, due to improper neutralization of special elements in AI conversation context construction.","display_title":"Security issue reported in Software component","display_summary":"GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user to inject…","display_reference":"CVE-2026-96893","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-96893","source_title":"GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user to inject specially crafted content into AI agent instructions, potentially causing unintended command execution attributed to other users, due to improper neutralization of special elements in AI conversation context construction.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-14T17:05:08.275Z","source_hash":"content-fingerprint:fnv1a-4e09d5ac","affected_system":{"organization":"Software component project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-96893-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user to inject specially crafted content into AI agent instructions, potentially causing unintended command execution attributed to other users, due to improper neutralization of special elements in AI conversation context construction.","source_quote_or_pointer":"Security Advisory CVE-2026-96893","fact_id":"SEA-CVE-2026-96893-F1","document_citation":"Security Advisory CVE-2026-96893"},{"id":"SEA-CVE-2026-96893-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user to inject specially crafted content into AI agent instructions, potentially causing unintended command…","source_quote_or_pointer":"Advisory description (CVE-2026-96893)","fact_id":"SEA-CVE-2026-96893-F2","document_citation":"Advisory description (CVE-2026-96893)"}],"source_stated_contributors":["GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user to inject specially crafted content into AI agent instructions, potentially causing unintended command…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-010"],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-96893","reporting_entity":"CVE-2026-96893","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-96893-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-96893-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-96893"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-95943","title":"Double free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-95943","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95943","source_title":"Double free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-14T17:05:08.276Z","source_hash":"content-fingerprint:fnv1a-b716da47","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-95943-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Double free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Security Advisory CVE-2026-95943","fact_id":"SEA-CVE-2026-95943-F1","document_citation":"Security Advisory CVE-2026-95943"},{"id":"SEA-CVE-2026-95943-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Double free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Advisory description (CVE-2026-95943)","fact_id":"SEA-CVE-2026-95943-F2","document_citation":"Advisory description (CVE-2026-95943)"}],"source_stated_contributors":["Double free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-95943","reporting_entity":"CVE-2026-95943","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-95943-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-95943-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-95943"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-95680","title":"IBM WebSphere Application Server 8.5, and 9.0 could allow an authenticated attacker to bypass authorization leading to administrative impersonation across the cell.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-95680","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95680","source_title":"IBM WebSphere Application Server 8.5, and 9.0 could allow an authenticated attacker to bypass authorization leading to administrative impersonation across the cell.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-14T17:05:08.277Z","source_hash":"content-fingerprint:fnv1a-ec659931","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-95680-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM WebSphere Application Server 8.5, and 9.0 could allow an authenticated attacker to bypass authorization leading to administrative impersonation across the cell.","source_quote_or_pointer":"Security Advisory CVE-2026-95680","fact_id":"SEA-CVE-2026-95680-F1","document_citation":"Security Advisory CVE-2026-95680"},{"id":"SEA-CVE-2026-95680-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM WebSphere Application Server 8.5, and 9.0 could allow an authenticated attacker to bypass authorization leading to administrative impersonation across the cell.","source_quote_or_pointer":"Advisory description (CVE-2026-95680)","fact_id":"SEA-CVE-2026-95680-F2","document_citation":"Advisory description (CVE-2026-95680)"}],"source_stated_contributors":["IBM WebSphere Application Server 8.5, and 9.0 could allow an authenticated attacker to bypass authorization leading to administrative impersonation across the cell."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-95680","reporting_entity":"CVE-2026-95680","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-95680-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-95680-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-95680"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-93907","title":"IBM WebSphere Application Server 8.5, and 9.0 could allow a remote attacker to bypass authentication by exploiting a flaw in the CSIv2 inbound propagation handler.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-93907","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93907","source_title":"IBM WebSphere Application Server 8.5, and 9.0 could allow a remote attacker to bypass authentication by exploiting a flaw in the CSIv2 inbound propagation handler.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-14T17:05:08.278Z","source_hash":"content-fingerprint:fnv1a-1d725715","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-93907-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM WebSphere Application Server 8.5, and 9.0 could allow a remote attacker to bypass authentication by exploiting a flaw in the CSIv2 inbound propagation handler.","source_quote_or_pointer":"Security Advisory CVE-2026-93907","fact_id":"SEA-CVE-2026-93907-F1","document_citation":"Security Advisory CVE-2026-93907"},{"id":"SEA-CVE-2026-93907-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM WebSphere Application Server 8.5, and 9.0 could allow a remote attacker to bypass authentication by exploiting a flaw in the CSIv2 inbound propagation handler.","source_quote_or_pointer":"Advisory description (CVE-2026-93907)","fact_id":"SEA-CVE-2026-93907-F2","document_citation":"Advisory description (CVE-2026-93907)"}],"source_stated_contributors":["IBM WebSphere Application Server 8.5, and 9.0 could allow a remote attacker to bypass authentication by exploiting a flaw in the CSIv2 inbound propagation handler."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-93907","reporting_entity":"CVE-2026-93907","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-93907-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-93907-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-93907"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-90532","title":"Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require user interaction. Scope is changed.","display_title":"Software component issue could allow unintended commands to run","display_summary":"Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the…","display_reference":"CVE-2026-90532","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90532","source_title":"Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require user interaction. Scope is changed.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-14T17:05:08.280Z","source_hash":"content-fingerprint:fnv1a-df1e2fb0","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-90532-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require user interaction. Scope is changed.","source_quote_or_pointer":"Security Advisory CVE-2026-90532","fact_id":"SEA-CVE-2026-90532-F1","document_citation":"Security Advisory CVE-2026-90532"},{"id":"SEA-CVE-2026-90532-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require user interaction.","source_quote_or_pointer":"Advisory description (CVE-2026-90532)","fact_id":"SEA-CVE-2026-90532-F2","document_citation":"Advisory description (CVE-2026-90532)"}],"source_stated_contributors":["Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require user interaction."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-90532","reporting_entity":"CVE-2026-90532","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-90532-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-90532-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-90532"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-87696","title":"Improper verification of cryptographic signature in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-87696","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87696","source_title":"Improper verification of cryptographic signature in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-14T17:05:08.281Z","source_hash":"content-fingerprint:fnv1a-97a5c9dd","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-87696-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Improper verification of cryptographic signature in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.","source_quote_or_pointer":"Security Advisory CVE-2026-87696","fact_id":"SEA-CVE-2026-87696-F1","document_citation":"Security Advisory CVE-2026-87696"},{"id":"SEA-CVE-2026-87696-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Improper verification of cryptographic signature in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.","source_quote_or_pointer":"Advisory description (CVE-2026-87696)","fact_id":"SEA-CVE-2026-87696-F2","document_citation":"Advisory description (CVE-2026-87696)"}],"source_stated_contributors":["Improper verification of cryptographic signature in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-87696","reporting_entity":"CVE-2026-87696","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-87696-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-87696-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-87696"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-87695","title":"Inclusion of functionality from untrusted control sphere in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-87695","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87695","source_title":"Inclusion of functionality from untrusted control sphere in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-14T17:05:08.281Z","source_hash":"content-fingerprint:fnv1a-5d7c021c","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-87695-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Inclusion of functionality from untrusted control sphere in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Security Advisory CVE-2026-87695","fact_id":"SEA-CVE-2026-87695-F1","document_citation":"Security Advisory CVE-2026-87695"},{"id":"SEA-CVE-2026-87695-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Inclusion of functionality from untrusted control sphere in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Advisory description (CVE-2026-87695)","fact_id":"SEA-CVE-2026-87695-F2","document_citation":"Advisory description (CVE-2026-87695)"}],"source_stated_contributors":["Inclusion of functionality from untrusted control sphere in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-87695","reporting_entity":"CVE-2026-87695","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-87695-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-87695-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-87695"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-97812","title":"Double free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-97812","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97812","source_title":"Double free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-14T04:47:11.470Z","source_hash":"content-fingerprint:fnv1a-364e7c36","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-97812-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Double free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Security Advisory CVE-2026-97812","fact_id":"SEA-CVE-2026-97812-F1","document_citation":"Security Advisory CVE-2026-97812"},{"id":"SEA-CVE-2026-97812-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Double free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Advisory description (CVE-2026-97812)","fact_id":"SEA-CVE-2026-97812-F2","document_citation":"Advisory description (CVE-2026-97812)"}],"source_stated_contributors":["Double free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-97812","reporting_entity":"CVE-2026-97812","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-97812-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-97812-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-97812"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-97799","title":"Improper verification of cryptographic signature in Windows Audio Service allows an authorized attacker to elevate privileges locally.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-97799","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97799","source_title":"Improper verification of cryptographic signature in Windows Audio Service allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-14T04:47:11.472Z","source_hash":"content-fingerprint:fnv1a-4d752b18","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-97799-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Improper verification of cryptographic signature in Windows Audio Service allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Security Advisory CVE-2026-97799","fact_id":"SEA-CVE-2026-97799-F1","document_citation":"Security Advisory CVE-2026-97799"},{"id":"SEA-CVE-2026-97799-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Improper verification of cryptographic signature in Windows Audio Service allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Advisory description (CVE-2026-97799)","fact_id":"SEA-CVE-2026-97799-F2","document_citation":"Advisory description (CVE-2026-97799)"}],"source_stated_contributors":["Improper verification of cryptographic signature in Windows Audio Service allows an authorized attacker to elevate privileges locally."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-97799","reporting_entity":"CVE-2026-97799","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-97799-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-97799-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-97799"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-88964","title":"An integer underflow in OpenVPN version 2.7_alpha3 through 2.7.7 on Windows and Android allows remote authenticated servers to cause a denial of service or memory disclosure via crafted domain search options","display_title":"Software component issue could make the service unavailable","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-88964","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-88964","source_title":"An integer underflow in OpenVPN version 2.7_alpha3 through 2.7.7 on Windows and Android allows remote authenticated servers to cause a denial of service or memory disclosure via crafted domain search options","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-14T04:47:11.473Z","source_hash":"content-fingerprint:fnv1a-c125289e","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-88964-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"An integer underflow in OpenVPN version 2.7_alpha3 through 2.7.7 on Windows and Android allows remote authenticated servers to cause a denial of service or memory disclosure via crafted domain search options","source_quote_or_pointer":"Security Advisory CVE-2026-88964","fact_id":"SEA-CVE-2026-88964-F1","document_citation":"Security Advisory CVE-2026-88964"},{"id":"SEA-CVE-2026-88964-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"An integer underflow in OpenVPN version 2.7alpha3 through 2.7.7 on Windows and Android allows remote authenticated servers to cause a denial of service or memory disclosure via crafted domain search options","source_quote_or_pointer":"Advisory description (CVE-2026-88964)","fact_id":"SEA-CVE-2026-88964-F2","document_citation":"Advisory description (CVE-2026-88964)"}],"source_stated_contributors":["An integer underflow in OpenVPN version 2.7alpha3 through 2.7.7 on Windows and Android allows remote authenticated servers to cause a denial of service or memory disclosure via crafted domain search options"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-88964","reporting_entity":"CVE-2026-88964","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-88964-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-88964-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-88964"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-85884","title":"Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to elevate privileges locally.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-85884","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85884","source_title":"Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-14T04:47:11.473Z","source_hash":"content-fingerprint:fnv1a-7b1ce528","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-85884-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Security Advisory CVE-2026-85884","fact_id":"SEA-CVE-2026-85884-F1","document_citation":"Security Advisory CVE-2026-85884"},{"id":"SEA-CVE-2026-85884-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Advisory description (CVE-2026-85884)","fact_id":"SEA-CVE-2026-85884-F2","document_citation":"Advisory description (CVE-2026-85884)"}],"source_stated_contributors":["Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to elevate privileges locally."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-85884","reporting_entity":"CVE-2026-85884","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-85884-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-85884-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-85884"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-85865","title":"Improper authentication in Windows DHCP Server allows an authorized attacker to bypass a security feature locally.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-85865","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85865","source_title":"Improper authentication in Windows DHCP Server allows an authorized attacker to bypass a security feature locally.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-14T04:47:11.473Z","source_hash":"content-fingerprint:fnv1a-314c870d","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-85865-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Improper authentication in Windows DHCP Server allows an authorized attacker to bypass a security feature locally.","source_quote_or_pointer":"Security Advisory CVE-2026-85865","fact_id":"SEA-CVE-2026-85865-F1","document_citation":"Security Advisory CVE-2026-85865"},{"id":"SEA-CVE-2026-85865-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Improper authentication in Windows DHCP Server allows an authorized attacker to bypass a security feature locally.","source_quote_or_pointer":"Advisory description (CVE-2026-85865)","fact_id":"SEA-CVE-2026-85865-F2","document_citation":"Advisory description (CVE-2026-85865)"}],"source_stated_contributors":["Improper authentication in Windows DHCP Server allows an authorized attacker to bypass a security feature locally."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-85865","reporting_entity":"CVE-2026-85865","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-85865-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-85865-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-85865"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-85323","title":"Weak authentication in Network Device Enrollment Service (NDES) allows an authorized attacker to perform spoofing over a network.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-85323","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85323","source_title":"Weak authentication in Network Device Enrollment Service (NDES) allows an authorized attacker to perform spoofing over a network.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-14T04:47:11.474Z","source_hash":"content-fingerprint:fnv1a-c84d8946","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-85323-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Weak authentication in Network Device Enrollment Service (NDES) allows an authorized attacker to perform spoofing over a network.","source_quote_or_pointer":"Security Advisory CVE-2026-85323","fact_id":"SEA-CVE-2026-85323-F1","document_citation":"Security Advisory CVE-2026-85323"},{"id":"SEA-CVE-2026-85323-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Weak authentication in Network Device Enrollment Service (NDES) allows an authorized attacker to perform spoofing over a network.","source_quote_or_pointer":"Advisory description (CVE-2026-85323)","fact_id":"SEA-CVE-2026-85323-F2","document_citation":"Advisory description (CVE-2026-85323)"}],"source_stated_contributors":["Weak authentication in Network Device Enrollment Service (NDES) allows an authorized attacker to perform spoofing over a network."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-85323","reporting_entity":"CVE-2026-85323","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-85323-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-85323-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-85323"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-70087","title":"Incorrect authorization in DNS Server allows an authorized attacker to bypass a security feature locally.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-70087","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-70087","source_title":"Incorrect authorization in DNS Server allows an authorized attacker to bypass a security feature locally.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-14T04:47:11.474Z","source_hash":"content-fingerprint:fnv1a-324abae3","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-70087-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Incorrect authorization in DNS Server allows an authorized attacker to bypass a security feature locally.","source_quote_or_pointer":"Security Advisory CVE-2026-70087","fact_id":"SEA-CVE-2026-70087-F1","document_citation":"Security Advisory CVE-2026-70087"},{"id":"SEA-CVE-2026-70087-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Incorrect authorization in DNS Server allows an authorized attacker to bypass a security feature locally.","source_quote_or_pointer":"Advisory description (CVE-2026-70087)","fact_id":"SEA-CVE-2026-70087-F2","document_citation":"Advisory description (CVE-2026-70087)"}],"source_stated_contributors":["Incorrect authorization in DNS Server allows an authorized attacker to bypass a security feature locally."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-70087","reporting_entity":"CVE-2026-70087","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-70087-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-70087-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-70087"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-70085","title":"Missing authorization in DNS Server allows an authorized attacker to perform tampering locally.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-70085","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-70085","source_title":"Missing authorization in DNS Server allows an authorized attacker to perform tampering locally.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-14T04:47:11.475Z","source_hash":"content-fingerprint:fnv1a-87e034dd","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-70085-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Missing authorization in DNS Server allows an authorized attacker to perform tampering locally.","source_quote_or_pointer":"Security Advisory CVE-2026-70085","fact_id":"SEA-CVE-2026-70085-F1","document_citation":"Security Advisory CVE-2026-70085"},{"id":"SEA-CVE-2026-70085-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Missing authorization in DNS Server allows an authorized attacker to perform tampering locally.","source_quote_or_pointer":"Advisory description (CVE-2026-70085)","fact_id":"SEA-CVE-2026-70085-F2","document_citation":"Advisory description (CVE-2026-70085)"}],"source_stated_contributors":["Missing authorization in DNS Server allows an authorized attacker to perform tampering locally."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-70085","reporting_entity":"CVE-2026-70085","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-70085-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-70085-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-70085"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-70083","title":"Incorrect authorization in DNS Server allows an authorized attacker to perform tampering locally.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-70083","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-70083","source_title":"Incorrect authorization in DNS Server allows an authorized attacker to perform tampering locally.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-14T04:47:11.475Z","source_hash":"content-fingerprint:fnv1a-3115e92b","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-70083-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Incorrect authorization in DNS Server allows an authorized attacker to perform tampering locally.","source_quote_or_pointer":"Security Advisory CVE-2026-70083","fact_id":"SEA-CVE-2026-70083-F1","document_citation":"Security Advisory CVE-2026-70083"},{"id":"SEA-CVE-2026-70083-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Incorrect authorization in DNS Server allows an authorized attacker to perform tampering locally.","source_quote_or_pointer":"Advisory description (CVE-2026-70083)","fact_id":"SEA-CVE-2026-70083-F2","document_citation":"Advisory description (CVE-2026-70083)"}],"source_stated_contributors":["Incorrect authorization in DNS Server allows an authorized attacker to perform tampering locally."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-70083","reporting_entity":"CVE-2026-70083","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-70083-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-70083-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-70083"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-70057","title":"Incorrect authorization in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to bypass a security feature locally.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-70057","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-70057","source_title":"Incorrect authorization in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to bypass a security feature locally.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-14T04:47:11.475Z","source_hash":"content-fingerprint:fnv1a-5853fab0","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-70057-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Incorrect authorization in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to bypass a security feature locally.","source_quote_or_pointer":"Security Advisory CVE-2026-70057","fact_id":"SEA-CVE-2026-70057-F1","document_citation":"Security Advisory CVE-2026-70057"},{"id":"SEA-CVE-2026-70057-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Incorrect authorization in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to bypass a security feature locally.","source_quote_or_pointer":"Advisory description (CVE-2026-70057)","fact_id":"SEA-CVE-2026-70057-F2","document_citation":"Advisory description (CVE-2026-70057)"}],"source_stated_contributors":["Incorrect authorization in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to bypass a security feature locally."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-70057","reporting_entity":"CVE-2026-70057","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-70057-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-70057-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-70057"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-95634","title":"CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. Scope is changed.","display_title":"Software component issue could reach internal services","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-95634","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95634","source_title":"CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. Scope is changed.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-14T04:47:11.475Z","source_hash":"content-fingerprint:fnv1a-d592441c","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-95634-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. Scope is changed.","source_quote_or_pointer":"Security Advisory CVE-2026-95634","fact_id":"SEA-CVE-2026-95634-F1","document_citation":"Security Advisory CVE-2026-95634"},{"id":"SEA-CVE-2026-95634-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. Scope is changed.","source_quote_or_pointer":"Advisory description (CVE-2026-95634)","fact_id":"SEA-CVE-2026-95634-F2","document_citation":"Advisory description (CVE-2026-95634)"}],"source_stated_contributors":["CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. Scope is changed."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Internal network access","Cloud metadata or credential exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-95634","reporting_entity":"CVE-2026-95634","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-95634-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-95634-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"The service fetched a URL chosen by the caller and could be steered at internal systems. Restrict outbound destinations and block internal address ranges.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-95634"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-70158","title":"Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine","display_title":"Software component issue could allow unintended commands to run","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-70158","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-70158","source_title":"Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-14T04:47:11.476Z","source_hash":"content-fingerprint:fnv1a-16c9f304","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-70158-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine","source_quote_or_pointer":"Security Advisory CVE-2026-70158","fact_id":"SEA-CVE-2026-70158-F1","document_citation":"Security Advisory CVE-2026-70158"},{"id":"SEA-CVE-2026-70158-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine","source_quote_or_pointer":"Advisory description (CVE-2026-70158)","fact_id":"SEA-CVE-2026-70158-F2","document_citation":"Advisory description (CVE-2026-70158)"}],"source_stated_contributors":["Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-70158","reporting_entity":"CVE-2026-70158","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-70158-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-70158-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-70158"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-70142","title":"Untrusted search path in Windows Update Service allows an authorized attacker to elevate privileges locally.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-70142","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-70142","source_title":"Untrusted search path in Windows Update Service allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-14T04:47:11.477Z","source_hash":"content-fingerprint:fnv1a-50c26461","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-70142-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Untrusted search path in Windows Update Service allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Security Advisory CVE-2026-70142","fact_id":"SEA-CVE-2026-70142-F1","document_citation":"Security Advisory CVE-2026-70142"},{"id":"SEA-CVE-2026-70142-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Untrusted search path in Windows Update Service allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Advisory description (CVE-2026-70142)","fact_id":"SEA-CVE-2026-70142-F2","document_citation":"Advisory description (CVE-2026-70142)"}],"source_stated_contributors":["Untrusted search path in Windows Update Service allows an authorized attacker to elevate privileges locally."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-70142","reporting_entity":"CVE-2026-70142","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-70142-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-70142-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-70142"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-70140","title":"Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-70140","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-70140","source_title":"Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-14T04:47:11.477Z","source_hash":"content-fingerprint:fnv1a-4c8742e7","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-70140-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Security Advisory CVE-2026-70140","fact_id":"SEA-CVE-2026-70140-F1","document_citation":"Security Advisory CVE-2026-70140"},{"id":"SEA-CVE-2026-70140-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Advisory description (CVE-2026-70140)","fact_id":"SEA-CVE-2026-70140-F2","document_citation":"Advisory description (CVE-2026-70140)"}],"source_stated_contributors":["Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-70140","reporting_entity":"CVE-2026-70140","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-70140-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-70140-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-70140"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-70118","title":"Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-70118","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-70118","source_title":"Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-14T04:47:11.477Z","source_hash":"content-fingerprint:fnv1a-886f7a24","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-70118-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Security Advisory CVE-2026-70118","fact_id":"SEA-CVE-2026-70118-F1","document_citation":"Security Advisory CVE-2026-70118"},{"id":"SEA-CVE-2026-70118-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Advisory description (CVE-2026-70118)","fact_id":"SEA-CVE-2026-70118-F2","document_citation":"Advisory description (CVE-2026-70118)"}],"source_stated_contributors":["Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-70118","reporting_entity":"CVE-2026-70118","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-70118-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-70118-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-70118"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-70066","title":"Use after free in Windows DHCP Server allows an authorized attacker to elevate privileges locally.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-70066","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-70066","source_title":"Use after free in Windows DHCP Server allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-14T04:47:11.477Z","source_hash":"content-fingerprint:fnv1a-ab8016da","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-70066-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Use after free in Windows DHCP Server allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Security Advisory CVE-2026-70066","fact_id":"SEA-CVE-2026-70066-F1","document_citation":"Security Advisory CVE-2026-70066"},{"id":"SEA-CVE-2026-70066-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Use after free in Windows DHCP Server allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Advisory description (CVE-2026-70066)","fact_id":"SEA-CVE-2026-70066-F2","document_citation":"Advisory description (CVE-2026-70066)"}],"source_stated_contributors":["Use after free in Windows DHCP Server allows an authorized attacker to elevate privileges locally."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-70066","reporting_entity":"CVE-2026-70066","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-70066-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-70066-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-70066"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-70056","title":"Use after free in Windows Update Service allows an authorized attacker to elevate privileges locally.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-70056","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-70056","source_title":"Use after free in Windows Update Service allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-14T04:47:11.478Z","source_hash":"content-fingerprint:fnv1a-9fb2ca15","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-70056-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Use after free in Windows Update Service allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Security Advisory CVE-2026-70056","fact_id":"SEA-CVE-2026-70056-F1","document_citation":"Security Advisory CVE-2026-70056"},{"id":"SEA-CVE-2026-70056-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Use after free in Windows Update Service allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Advisory description (CVE-2026-70056)","fact_id":"SEA-CVE-2026-70056-F2","document_citation":"Advisory description (CVE-2026-70056)"}],"source_stated_contributors":["Use after free in Windows Update Service allows an authorized attacker to elevate privileges locally."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-70056","reporting_entity":"CVE-2026-70056","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-70056-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-70056-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-70056"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-70049","title":"Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over an adjacent network.","display_title":"Software component issue could expose or alter stored data","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-70049","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-70049","source_title":"Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over an adjacent network.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-14T04:47:11.478Z","source_hash":"content-fingerprint:fnv1a-a5bba70d","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-70049-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over an adjacent network.","source_quote_or_pointer":"Security Advisory CVE-2026-70049","fact_id":"SEA-CVE-2026-70049-F1","document_citation":"Security Advisory CVE-2026-70049"},{"id":"SEA-CVE-2026-70049-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over an adjacent network.","source_quote_or_pointer":"Advisory description (CVE-2026-70049)","fact_id":"SEA-CVE-2026-70049-F2","document_citation":"Advisory description (CVE-2026-70049)"}],"source_stated_contributors":["Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over an adjacent network."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-70049","reporting_entity":"CVE-2026-70049","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-70049-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-70049-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-70049"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-70015","title":"Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-70015","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-70015","source_title":"Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-14T04:47:11.479Z","source_hash":"content-fingerprint:fnv1a-ddc585ee","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-70015-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Security Advisory CVE-2026-70015","fact_id":"SEA-CVE-2026-70015-F1","document_citation":"Security Advisory CVE-2026-70015"},{"id":"SEA-CVE-2026-70015-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Advisory description (CVE-2026-70015)","fact_id":"SEA-CVE-2026-70015-F2","document_citation":"Advisory description (CVE-2026-70015)"}],"source_stated_contributors":["Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-70015","reporting_entity":"CVE-2026-70015","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-70015-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-70015-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-70015"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-69977","title":"Use after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attacker to elevate privileges locally.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-69977","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-69977","source_title":"Use after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-14T04:47:11.479Z","source_hash":"content-fingerprint:fnv1a-972e889","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-69977-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Use after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Security Advisory CVE-2026-69977","fact_id":"SEA-CVE-2026-69977-F1","document_citation":"Security Advisory CVE-2026-69977"},{"id":"SEA-CVE-2026-69977-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Use after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Advisory description (CVE-2026-69977)","fact_id":"SEA-CVE-2026-69977-F2","document_citation":"Advisory description (CVE-2026-69977)"}],"source_stated_contributors":["Use after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attacker to elevate privileges locally."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-69977","reporting_entity":"CVE-2026-69977","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-69977-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-69977-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-69977"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-69964","title":"Use after free in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-69964","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-69964","source_title":"Use after free in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-14T04:47:11.480Z","source_hash":"content-fingerprint:fnv1a-13cfbfa7","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-69964-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Use after free in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Security Advisory CVE-2026-69964","fact_id":"SEA-CVE-2026-69964-F1","document_citation":"Security Advisory CVE-2026-69964"},{"id":"SEA-CVE-2026-69964-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Use after free in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Advisory description (CVE-2026-69964)","fact_id":"SEA-CVE-2026-69964-F2","document_citation":"Advisory description (CVE-2026-69964)"}],"source_stated_contributors":["Use after free in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["arch.event_driven"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-69964","reporting_entity":"CVE-2026-69964","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-69964-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-69964-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-69964"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-69905","title":"Missing authorization in Windows AppX Deployment Service allows an authorized attacker to perform tampering locally.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-69905","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-69905","source_title":"Missing authorization in Windows AppX Deployment Service allows an authorized attacker to perform tampering locally.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-14T04:47:11.480Z","source_hash":"content-fingerprint:fnv1a-b4e43104","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-69905-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Missing authorization in Windows AppX Deployment Service allows an authorized attacker to perform tampering locally.","source_quote_or_pointer":"Security Advisory CVE-2026-69905","fact_id":"SEA-CVE-2026-69905-F1","document_citation":"Security Advisory CVE-2026-69905"},{"id":"SEA-CVE-2026-69905-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Missing authorization in Windows AppX Deployment Service allows an authorized attacker to perform tampering locally.","source_quote_or_pointer":"Advisory description (CVE-2026-69905)","fact_id":"SEA-CVE-2026-69905-F2","document_citation":"Advisory description (CVE-2026-69905)"}],"source_stated_contributors":["Missing authorization in Windows AppX Deployment Service allows an authorized attacker to perform tampering locally."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-69905","reporting_entity":"CVE-2026-69905","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-69905-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-69905-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-69905"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-69830","title":"Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DHCP Server allows an unauthorized attacker to execute code over a network.","display_title":"Software component issue could cause actions to run with inconsistent state","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-69830","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-69830","source_title":"Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DHCP Server allows an unauthorized attacker to execute code over a network.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-14T04:47:11.480Z","source_hash":"content-fingerprint:fnv1a-339657d","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-69830-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DHCP Server allows an unauthorized attacker to execute code over a network.","source_quote_or_pointer":"Security Advisory CVE-2026-69830","fact_id":"SEA-CVE-2026-69830-F1","document_citation":"Security Advisory CVE-2026-69830"},{"id":"SEA-CVE-2026-69830-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DHCP Server allows an unauthorized attacker to execute code over a network.","source_quote_or_pointer":"Advisory description (CVE-2026-69830)","fact_id":"SEA-CVE-2026-69830-F2","document_citation":"Advisory description (CVE-2026-69830)"}],"source_stated_contributors":["Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DHCP Server allows an unauthorized attacker to execute code over a network."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.code_execution"],"failure_mechanisms":["SEA-FM-001","SEA-FM-008"],"consequences":["Duplicate or inconsistent actions","State divergence"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-69830","reporting_entity":"CVE-2026-69830","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-69830-SG1","label":"Idempotency and re-validation at execution","description":"Attach idempotency keys to mutations and re-verify state and permissions atomically when the action runs.","target_failure_mode":"SEA-FM-001","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-69830-SG1","label":"Idempotency and re-validation at execution","description":"Attach idempotency keys to mutations and re-verify state and permissions atomically when the action runs.","target_failure_mode":"SEA-FM-001","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Concurrent or repeated requests produced inconsistent state. Make state-changing operations idempotent and re-check authorization and state at execution time.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-69830"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-69802","title":"Weak authentication in Network Device Enrollment Service (NDES) allows an unauthorized attacker to execute code over a network.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-69802","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-69802","source_title":"Weak authentication in Network Device Enrollment Service (NDES) allows an unauthorized attacker to execute code over a network.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-14T04:47:11.481Z","source_hash":"content-fingerprint:fnv1a-73701680","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-69802-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Weak authentication in Network Device Enrollment Service (NDES) allows an unauthorized attacker to execute code over a network.","source_quote_or_pointer":"Security Advisory CVE-2026-69802","fact_id":"SEA-CVE-2026-69802-F1","document_citation":"Security Advisory CVE-2026-69802"},{"id":"SEA-CVE-2026-69802-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Weak authentication in Network Device Enrollment Service (NDES) allows an unauthorized attacker to execute code over a network.","source_quote_or_pointer":"Advisory description (CVE-2026-69802)","fact_id":"SEA-CVE-2026-69802-F2","document_citation":"Advisory description (CVE-2026-69802)"}],"source_stated_contributors":["Weak authentication in Network Device Enrollment Service (NDES) allows an unauthorized attacker to execute code over a network."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.code_execution"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-69802","reporting_entity":"CVE-2026-69802","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-69802-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-69802-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-69802"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-69798","title":"Use after free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-69798","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-69798","source_title":"Use after free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-14T04:47:11.481Z","source_hash":"content-fingerprint:fnv1a-b9042066","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-69798-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Use after free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Security Advisory CVE-2026-69798","fact_id":"SEA-CVE-2026-69798-F1","document_citation":"Security Advisory CVE-2026-69798"},{"id":"SEA-CVE-2026-69798-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Use after free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Advisory description (CVE-2026-69798)","fact_id":"SEA-CVE-2026-69798-F2","document_citation":"Advisory description (CVE-2026-69798)"}],"source_stated_contributors":["Use after free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-69798","reporting_entity":"CVE-2026-69798","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-69798-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-69798-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-69798"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-69743","title":"Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-69743","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-69743","source_title":"Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-14T04:47:11.481Z","source_hash":"content-fingerprint:fnv1a-bf522c40","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-69743-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Security Advisory CVE-2026-69743","fact_id":"SEA-CVE-2026-69743-F1","document_citation":"Security Advisory CVE-2026-69743"},{"id":"SEA-CVE-2026-69743-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Advisory description (CVE-2026-69743)","fact_id":"SEA-CVE-2026-69743-F2","document_citation":"Advisory description (CVE-2026-69743)"}],"source_stated_contributors":["Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-69743","reporting_entity":"CVE-2026-69743","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-69743-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-69743-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-69743"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-69596","title":"Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-69596","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-69596","source_title":"Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-14T04:47:11.482Z","source_hash":"content-fingerprint:fnv1a-41733d38","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-69596-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Security Advisory CVE-2026-69596","fact_id":"SEA-CVE-2026-69596-F1","document_citation":"Security Advisory CVE-2026-69596"},{"id":"SEA-CVE-2026-69596-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Advisory description (CVE-2026-69596)","fact_id":"SEA-CVE-2026-69596-F2","document_citation":"Advisory description (CVE-2026-69596)"}],"source_stated_contributors":["Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-69596","reporting_entity":"CVE-2026-69596","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-69596-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-69596-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-69596"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-61931","title":"Use after free in Windows Perception Simulation Service allows an authorized attacker to elevate privileges locally.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-61931","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-61931","source_title":"Use after free in Windows Perception Simulation Service allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-14T04:47:11.482Z","source_hash":"content-fingerprint:fnv1a-9f7057a9","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-61931-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Use after free in Windows Perception Simulation Service allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Security Advisory CVE-2026-61931","fact_id":"SEA-CVE-2026-61931-F1","document_citation":"Security Advisory CVE-2026-61931"},{"id":"SEA-CVE-2026-61931-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Use after free in Windows Perception Simulation Service allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Advisory description (CVE-2026-61931)","fact_id":"SEA-CVE-2026-61931-F2","document_citation":"Advisory description (CVE-2026-61931)"}],"source_stated_contributors":["Use after free in Windows Perception Simulation Service allows an authorized attacker to elevate privileges locally."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-61931","reporting_entity":"CVE-2026-61931","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-61931-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-61931-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-61931"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-106627","title":"CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction.","display_title":"Software component issue could expose accounts or credentials","display_summary":"CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service.","display_reference":"CVE-2026-106627","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-106627","source_title":"CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-14T04:47:11.483Z","source_hash":"content-fingerprint:fnv1a-7435720f","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-106627-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction.","source_quote_or_pointer":"Security Advisory CVE-2026-106627","fact_id":"SEA-CVE-2026-106627-F1","document_citation":"Security Advisory CVE-2026-106627"},{"id":"SEA-CVE-2026-106627-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition.","source_quote_or_pointer":"Advisory description (CVE-2026-106627)","fact_id":"SEA-CVE-2026-106627-F2","document_citation":"Advisory description (CVE-2026-106627)"}],"source_stated_contributors":["CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-106627","reporting_entity":"CVE-2026-106627","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-106627-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-106627-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-106627"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-105902","title":"CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction.","display_title":"Software component issue could expose accounts or credentials","display_summary":"CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service.","display_reference":"CVE-2026-105902","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105902","source_title":"CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-14T04:47:11.483Z","source_hash":"content-fingerprint:fnv1a-4123f0c0","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-105902-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction.","source_quote_or_pointer":"Security Advisory CVE-2026-105902","fact_id":"SEA-CVE-2026-105902-F1","document_citation":"Security Advisory CVE-2026-105902"},{"id":"SEA-CVE-2026-105902-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition.","source_quote_or_pointer":"Advisory description (CVE-2026-105902)","fact_id":"SEA-CVE-2026-105902-F2","document_citation":"Advisory description (CVE-2026-105902)"}],"source_stated_contributors":["CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-105902","reporting_entity":"CVE-2026-105902","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-105902-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-105902-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-105902"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-105713","title":"Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over an adjacent network.","display_title":"Software component issue could reach internal services","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-105713","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105713","source_title":"Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over an adjacent network.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-14T04:47:11.483Z","source_hash":"content-fingerprint:fnv1a-eab8a4e","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-105713-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over an adjacent network.","source_quote_or_pointer":"Security Advisory CVE-2026-105713","fact_id":"SEA-CVE-2026-105713-F1","document_citation":"Security Advisory CVE-2026-105713"},{"id":"SEA-CVE-2026-105713-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over an adjacent network.","source_quote_or_pointer":"Advisory description (CVE-2026-105713)","fact_id":"SEA-CVE-2026-105713-F2","document_citation":"Advisory description (CVE-2026-105713)"}],"source_stated_contributors":["Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over an adjacent network."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Internal network access","Cloud metadata or credential exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-105713","reporting_entity":"CVE-2026-105713","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-105713-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-105713-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"The service fetched a URL chosen by the caller and could be steered at internal systems. Restrict outbound destinations and block internal address ranges.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-105713"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-105009","title":"Incorrect default permissions in Windows Server Update Service allows an authorized attacker to elevate privileges locally.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-105009","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105009","source_title":"Incorrect default permissions in Windows Server Update Service allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-14T04:47:11.483Z","source_hash":"content-fingerprint:fnv1a-debfc2ec","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-105009-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Incorrect default permissions in Windows Server Update Service allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Security Advisory CVE-2026-105009","fact_id":"SEA-CVE-2026-105009-F1","document_citation":"Security Advisory CVE-2026-105009"},{"id":"SEA-CVE-2026-105009-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Incorrect default permissions in Windows Server Update Service allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Advisory description (CVE-2026-105009)","fact_id":"SEA-CVE-2026-105009-F2","document_citation":"Advisory description (CVE-2026-105009)"}],"source_stated_contributors":["Incorrect default permissions in Windows Server Update Service allows an authorized attacker to elevate privileges locally."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-105009","reporting_entity":"CVE-2026-105009","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-105009-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-105009-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-105009"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-103572","title":"Improper control of generation of code ('code injection') in Visual Studio Tools for Applications and SQL Server Management Studio allows an unauthorized attacker to execute code over a network.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-103572","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103572","source_title":"Improper control of generation of code ('code injection') in Visual Studio Tools for Applications and SQL Server Management Studio allows an unauthorized attacker to execute code over a network.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-14T04:47:11.483Z","source_hash":"content-fingerprint:fnv1a-59d102d1","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-103572-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Improper control of generation of code ('code injection') in Visual Studio Tools for Applications and SQL Server Management Studio allows an unauthorized attacker to execute code over a network.","source_quote_or_pointer":"Security Advisory CVE-2026-103572","fact_id":"SEA-CVE-2026-103572-F1","document_citation":"Security Advisory CVE-2026-103572"},{"id":"SEA-CVE-2026-103572-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Improper control of generation of code ('code injection') in Visual Studio Tools for Applications and SQL Server Management Studio allows an unauthorized attacker to execute code over a network.","source_quote_or_pointer":"Advisory description (CVE-2026-103572)","fact_id":"SEA-CVE-2026-103572-F2","document_citation":"Advisory description (CVE-2026-103572)"}],"source_stated_contributors":["Improper control of generation of code ('code injection') in Visual Studio Tools for Applications and SQL Server Management Studio allows an unauthorized attacker to execute code over a network."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.code_execution"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-103572","reporting_entity":"CVE-2026-103572","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-103572-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-103572-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-103572"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-103560","title":"Improper authorization in DNS Server allows an authorized attacker to perform tampering locally.","display_title":"Software component issue could allow unauthorized access","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-103560","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103560","source_title":"Improper authorization in DNS Server allows an authorized attacker to perform tampering locally.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-14T04:47:11.484Z","source_hash":"content-fingerprint:fnv1a-d17a880e","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-103560-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Improper authorization in DNS Server allows an authorized attacker to perform tampering locally.","source_quote_or_pointer":"Security Advisory CVE-2026-103560","fact_id":"SEA-CVE-2026-103560-F1","document_citation":"Security Advisory CVE-2026-103560"},{"id":"SEA-CVE-2026-103560-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Improper authorization in DNS Server allows an authorized attacker to perform tampering locally.","source_quote_or_pointer":"Advisory description (CVE-2026-103560)","fact_id":"SEA-CVE-2026-103560-F2","document_citation":"Advisory description (CVE-2026-103560)"}],"source_stated_contributors":["Improper authorization in DNS Server allows an authorized attacker to perform tampering locally."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-103560","reporting_entity":"CVE-2026-103560","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-103560-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-103560-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-103560"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-102216","title":"Access of resource using incompatible type ('type confusion') in Windows StateRepository API allows an authorized attacker to elevate privileges locally.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-102216","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-102216","source_title":"Access of resource using incompatible type ('type confusion') in Windows StateRepository API allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-14T04:47:11.484Z","source_hash":"content-fingerprint:fnv1a-2354d0f5","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-102216-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Access of resource using incompatible type ('type confusion') in Windows StateRepository API allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Security Advisory CVE-2026-102216","fact_id":"SEA-CVE-2026-102216-F1","document_citation":"Security Advisory CVE-2026-102216"},{"id":"SEA-CVE-2026-102216-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Access of resource using incompatible type ('type confusion') in Windows StateRepository API allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Advisory description (CVE-2026-102216)","fact_id":"SEA-CVE-2026-102216-F2","document_citation":"Advisory description (CVE-2026-102216)"}],"source_stated_contributors":["Access of resource using incompatible type ('type confusion') in Windows StateRepository API allows an authorized attacker to elevate privileges locally."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-102216","reporting_entity":"CVE-2026-102216","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-102216-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-102216-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-102216"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-102202","title":"Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.","display_title":"Software component issue could allow unauthorized access","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-102202","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-102202","source_title":"Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-14T04:47:11.484Z","source_hash":"content-fingerprint:fnv1a-cc3758b6","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Cloud & container infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-102202-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Security Advisory CVE-2026-102202","fact_id":"SEA-CVE-2026-102202-F1","document_citation":"Security Advisory CVE-2026-102202"},{"id":"SEA-CVE-2026-102202-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Advisory description (CVE-2026-102202)","fact_id":"SEA-CVE-2026-102202-F2","document_citation":"Advisory description (CVE-2026-102202)"}],"source_stated_contributors":["Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-102202","reporting_entity":"CVE-2026-102202","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-102202-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-102202-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-102202"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-100200","title":"Use after free in Windows Update Service allows an authorized attacker to elevate privileges locally.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-100200","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100200","source_title":"Use after free in Windows Update Service allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-14T04:47:11.485Z","source_hash":"content-fingerprint:fnv1a-d1843dd0","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-100200-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Use after free in Windows Update Service allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Security Advisory CVE-2026-100200","fact_id":"SEA-CVE-2026-100200-F1","document_citation":"Security Advisory CVE-2026-100200"},{"id":"SEA-CVE-2026-100200-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Use after free in Windows Update Service allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Advisory description (CVE-2026-100200)","fact_id":"SEA-CVE-2026-100200-F2","document_citation":"Advisory description (CVE-2026-100200)"}],"source_stated_contributors":["Use after free in Windows Update Service allows an authorized attacker to elevate privileges locally."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-100200","reporting_entity":"CVE-2026-100200","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-100200-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-100200-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-100200"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-100139","title":"CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction.","display_title":"Software component issue could expose accounts or credentials","display_summary":"CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service.","display_reference":"CVE-2026-100139","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100139","source_title":"CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-14T04:47:11.485Z","source_hash":"content-fingerprint:fnv1a-ef3f419f","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-100139-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction.","source_quote_or_pointer":"Security Advisory CVE-2026-100139","fact_id":"SEA-CVE-2026-100139-F1","document_citation":"Security Advisory CVE-2026-100139"},{"id":"SEA-CVE-2026-100139-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition.","source_quote_or_pointer":"Advisory description (CVE-2026-100139)","fact_id":"SEA-CVE-2026-100139-F2","document_citation":"Advisory description (CVE-2026-100139)"}],"source_stated_contributors":["CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-100139","reporting_entity":"CVE-2026-100139","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-100139-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-100139-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-100139"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-100138","title":"CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction.","display_title":"Software component issue could expose accounts or credentials","display_summary":"CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service.","display_reference":"CVE-2026-100138","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100138","source_title":"CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-14T04:47:11.485Z","source_hash":"content-fingerprint:fnv1a-a4f2631c","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-100138-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction.","source_quote_or_pointer":"Security Advisory CVE-2026-100138","fact_id":"SEA-CVE-2026-100138-F1","document_citation":"Security Advisory CVE-2026-100138"},{"id":"SEA-CVE-2026-100138-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition.","source_quote_or_pointer":"Advisory description (CVE-2026-100138)","fact_id":"SEA-CVE-2026-100138-F2","document_citation":"Advisory description (CVE-2026-100138)"}],"source_stated_contributors":["CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-100138","reporting_entity":"CVE-2026-100138","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-100138-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-100138-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-100138"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-100137","title":"CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction.","display_title":"Software component issue could expose accounts or credentials","display_summary":"CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service.","display_reference":"CVE-2026-100137","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100137","source_title":"CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-14T04:47:11.485Z","source_hash":"content-fingerprint:fnv1a-7fc17779","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-100137-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction.","source_quote_or_pointer":"Security Advisory CVE-2026-100137","fact_id":"SEA-CVE-2026-100137-F1","document_citation":"Security Advisory CVE-2026-100137"},{"id":"SEA-CVE-2026-100137-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition.","source_quote_or_pointer":"Advisory description (CVE-2026-100137)","fact_id":"SEA-CVE-2026-100137-F2","document_citation":"Advisory description (CVE-2026-100137)"}],"source_stated_contributors":["CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-100137","reporting_entity":"CVE-2026-100137","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-100137-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-100137-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-100137"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-100136","title":"CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user interaction.","display_title":"Software component issue could expose accounts or credentials","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-100136","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100136","source_title":"CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user interaction.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-14T04:47:11.486Z","source_hash":"content-fingerprint:fnv1a-4570edf6","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-100136-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user interaction.","source_quote_or_pointer":"Security Advisory CVE-2026-100136","fact_id":"SEA-CVE-2026-100136-F1","document_citation":"Security Advisory CVE-2026-100136"},{"id":"SEA-CVE-2026-100136-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user interaction.","source_quote_or_pointer":"Advisory description (CVE-2026-100136)","fact_id":"SEA-CVE-2026-100136-F2","document_citation":"Advisory description (CVE-2026-100136)"}],"source_stated_contributors":["CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user interaction."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-100136","reporting_entity":"CVE-2026-100136","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-100136-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-100136-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-100136"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-95696","title":"IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow a remote attacker to cause a denial of service due to an uncaught exception.","display_title":"Software component issue could make the service unavailable","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-95696","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95696","source_title":"IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow a remote attacker to cause a denial of service due to an uncaught exception.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T22:39:49.566Z","source_hash":"content-fingerprint:fnv1a-34e6d8d2","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-95696-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow a remote attacker to cause a denial of service due to an uncaught exception.","source_quote_or_pointer":"Security Advisory CVE-2026-95696","fact_id":"SEA-CVE-2026-95696-F1","document_citation":"Security Advisory CVE-2026-95696"},{"id":"SEA-CVE-2026-95696-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow a remote attacker to cause a denial of service due to an uncaught exception.","source_quote_or_pointer":"Advisory description (CVE-2026-95696)","fact_id":"SEA-CVE-2026-95696-F2","document_citation":"Advisory description (CVE-2026-95696)"}],"source_stated_contributors":["IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow a remote attacker to cause a denial of service due to an uncaught exception."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-95696","reporting_entity":"CVE-2026-95696","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-95696-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-95696-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-95696"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-95695","title":"IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow a remote attacker to bypass security restrictions due to incorrect authorization.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-95695","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95695","source_title":"IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow a remote attacker to bypass security restrictions due to incorrect authorization.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T22:39:49.567Z","source_hash":"content-fingerprint:fnv1a-b41a77af","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-95695-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow a remote attacker to bypass security restrictions due to incorrect authorization.","source_quote_or_pointer":"Security Advisory CVE-2026-95695","fact_id":"SEA-CVE-2026-95695-F1","document_citation":"Security Advisory CVE-2026-95695"},{"id":"SEA-CVE-2026-95695-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow a remote attacker to bypass security restrictions due to incorrect authorization.","source_quote_or_pointer":"Advisory description (CVE-2026-95695)","fact_id":"SEA-CVE-2026-95695-F2","document_citation":"Advisory description (CVE-2026-95695)"}],"source_stated_contributors":["IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow a remote attacker to bypass security restrictions due to incorrect authorization."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-95695","reporting_entity":"CVE-2026-95695","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-95695-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-95695-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-95695"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-95640","title":"Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","display_title":"Security issue reported in Software component","display_summary":"Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service.","display_reference":"CVE-2026-95640","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95640","source_title":"Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T22:39:49.567Z","source_hash":"content-fingerprint:fnv1a-cb4500f7","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-95640-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","source_quote_or_pointer":"Security Advisory CVE-2026-95640","fact_id":"SEA-CVE-2026-95640-F1","document_citation":"Security Advisory CVE-2026-95640"},{"id":"SEA-CVE-2026-95640-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition.","source_quote_or_pointer":"Advisory description (CVE-2026-95640)","fact_id":"SEA-CVE-2026-95640-F2","document_citation":"Advisory description (CVE-2026-95640)"}],"source_stated_contributors":["Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-95640","reporting_entity":"CVE-2026-95640","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-95640-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-95640-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-95640"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-93909","title":"IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 is vulnerable by an authentication bypass vulnerability when samlWeb-2.0 feature is enabled.","display_title":"Software component issue could allow unauthorized access","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-93909","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93909","source_title":"IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 is vulnerable by an authentication bypass vulnerability when samlWeb-2.0 feature is enabled.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T22:39:49.570Z","source_hash":"content-fingerprint:fnv1a-de236345","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-93909-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 is vulnerable by an authentication bypass vulnerability when samlWeb-2.0 feature is enabled.","source_quote_or_pointer":"Security Advisory CVE-2026-93909","fact_id":"SEA-CVE-2026-93909-F1","document_citation":"Security Advisory CVE-2026-93909"},{"id":"SEA-CVE-2026-93909-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 is vulnerable by an authentication bypass vulnerability when samlWeb-2.0 feature is enabled.","source_quote_or_pointer":"Advisory description (CVE-2026-93909)","fact_id":"SEA-CVE-2026-93909-F2","document_citation":"Advisory description (CVE-2026-93909)"}],"source_stated_contributors":["IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 is vulnerable by an authentication bypass vulnerability when samlWeb-2.0 feature is enabled."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-93909","reporting_entity":"CVE-2026-93909","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-93909-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-93909-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-93909"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-93895","title":"IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow an unauthenticated remote attacker to bypass access controls configured on gRPC service methods.","display_title":"Software component issue could allow unauthorized access","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-93895","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93895","source_title":"IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow an unauthenticated remote attacker to bypass access controls configured on gRPC service methods.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T22:39:49.570Z","source_hash":"content-fingerprint:fnv1a-8f0a7df9","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-93895-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow an unauthenticated remote attacker to bypass access controls configured on gRPC service methods.","source_quote_or_pointer":"Security Advisory CVE-2026-93895","fact_id":"SEA-CVE-2026-93895-F1","document_citation":"Security Advisory CVE-2026-93895"},{"id":"SEA-CVE-2026-93895-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow an unauthenticated remote attacker to bypass access controls configured on gRPC service methods.","source_quote_or_pointer":"Advisory description (CVE-2026-93895)","fact_id":"SEA-CVE-2026-93895-F2","document_citation":"Advisory description (CVE-2026-93895)"}],"source_stated_contributors":["IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow an unauthenticated remote attacker to bypass access controls configured on gRPC service methods."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-93895","reporting_entity":"CVE-2026-93895","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-93895-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-93895-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-93895"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-90530","title":"ColdFusion RDS is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue does not require user interaction. Scope is changed. RDS is purely a development feature meant for debugging purposes, and switching ColdFusion to Production Secure Profile automatically disables RDS. The Lockdown Guide outlines the specific step to disable RDS if a ColdFusion server is not being used in Production Secure Profile.","display_title":"Software component issue could expose restricted files","display_summary":"ColdFusion RDS is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read.","display_reference":"CVE-2026-90530","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90530","source_title":"ColdFusion RDS is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue does not require user interaction. Scope is changed. RDS is purely a development feature meant for debugging purposes, and switching ColdFusion to Production Secure Profile automatically disables RDS. The Lockdown Guide outlines the specific step to disable RDS if a ColdFusion server is not being used in Production Secure Profile.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T22:39:49.571Z","source_hash":"content-fingerprint:fnv1a-9d165212","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-90530-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"ColdFusion RDS is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue does not require user interaction. Scope is changed. RDS is purely a development feature meant for debugging purposes, and switching ColdFusion to Production Secure Profile automatically disables RDS. The Lockdown Guide outlines the specific step to disable RDS if a ColdFusion server is not being used in Production Secure Profile.","source_quote_or_pointer":"Security Advisory CVE-2026-90530","fact_id":"SEA-CVE-2026-90530-F1","document_citation":"Security Advisory CVE-2026-90530"},{"id":"SEA-CVE-2026-90530-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"ColdFusion RDS is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope.","source_quote_or_pointer":"Advisory description (CVE-2026-90530)","fact_id":"SEA-CVE-2026-90530-F2","document_citation":"Advisory description (CVE-2026-90530)"}],"source_stated_contributors":["ColdFusion RDS is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Restricted file exposure","File overwrite"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-90530","reporting_entity":"CVE-2026-90530","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-90530-SG1","label":"Confine file access to a fixed root","description":"Resolve paths to canonical form and reject anything outside the intended directory before opening files.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-90530-SG1","label":"Confine file access to a fixed root","description":"Resolve paths to canonical form and reject anything outside the intended directory before opening files.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"File paths supplied by a caller escaped the intended directory. Canonicalise paths and confine file access to a fixed root.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-90530"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-88152","title":"Use after free in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-88152","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-88152","source_title":"Use after free in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T22:39:49.572Z","source_hash":"content-fingerprint:fnv1a-9c0a9d77","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-88152-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Use after free in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Security Advisory CVE-2026-88152","fact_id":"SEA-CVE-2026-88152-F1","document_citation":"Security Advisory CVE-2026-88152"},{"id":"SEA-CVE-2026-88152-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Use after free in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Advisory description (CVE-2026-88152)","fact_id":"SEA-CVE-2026-88152-F2","document_citation":"Advisory description (CVE-2026-88152)"}],"source_stated_contributors":["Use after free in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-88152","reporting_entity":"CVE-2026-88152","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-88152-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-88152-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-88152"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-88146","title":"Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.","display_title":"Software component issue could cause actions to run with inconsistent state","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-88146","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-88146","source_title":"Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T22:39:49.572Z","source_hash":"content-fingerprint:fnv1a-3941a6e2","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-88146-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Security Advisory CVE-2026-88146","fact_id":"SEA-CVE-2026-88146-F1","document_citation":"Security Advisory CVE-2026-88146"},{"id":"SEA-CVE-2026-88146-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Advisory description (CVE-2026-88146)","fact_id":"SEA-CVE-2026-88146-F2","document_citation":"Advisory description (CVE-2026-88146)"}],"source_stated_contributors":["Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-001","SEA-FM-008"],"consequences":["Duplicate or inconsistent actions","State divergence"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-88146","reporting_entity":"CVE-2026-88146","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-88146-SG1","label":"Idempotency and re-validation at execution","description":"Attach idempotency keys to mutations and re-verify state and permissions atomically when the action runs.","target_failure_mode":"SEA-FM-001","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-88146-SG1","label":"Idempotency and re-validation at execution","description":"Attach idempotency keys to mutations and re-verify state and permissions atomically when the action runs.","target_failure_mode":"SEA-FM-001","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Concurrent or repeated requests produced inconsistent state. Make state-changing operations idempotent and re-check authorization and state at execution time.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-88146"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-88133","title":"Improper authorization in Windows Portable Device Enumerator Service allows an authorized attacker to elevate privileges locally.","display_title":"Software component issue could allow unauthorized access","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-88133","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-88133","source_title":"Improper authorization in Windows Portable Device Enumerator Service allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T22:39:49.573Z","source_hash":"content-fingerprint:fnv1a-c03e9048","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-88133-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Improper authorization in Windows Portable Device Enumerator Service allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Security Advisory CVE-2026-88133","fact_id":"SEA-CVE-2026-88133-F1","document_citation":"Security Advisory CVE-2026-88133"},{"id":"SEA-CVE-2026-88133-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Improper authorization in Windows Portable Device Enumerator Service allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Advisory description (CVE-2026-88133)","fact_id":"SEA-CVE-2026-88133-F2","document_citation":"Advisory description (CVE-2026-88133)"}],"source_stated_contributors":["Improper authorization in Windows Portable Device Enumerator Service allows an authorized attacker to elevate privileges locally."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-88133","reporting_entity":"CVE-2026-88133","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-88133-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-88133-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-88133"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-88127","title":"Use after free in Windows SMB Server allows an authorized attacker to elevate privileges locally.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-88127","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-88127","source_title":"Use after free in Windows SMB Server allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T22:39:49.573Z","source_hash":"content-fingerprint:fnv1a-31035a53","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-88127-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Use after free in Windows SMB Server allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Security Advisory CVE-2026-88127","fact_id":"SEA-CVE-2026-88127-F1","document_citation":"Security Advisory CVE-2026-88127"},{"id":"SEA-CVE-2026-88127-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Use after free in Windows SMB Server allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Advisory description (CVE-2026-88127)","fact_id":"SEA-CVE-2026-88127-F2","document_citation":"Advisory description (CVE-2026-88127)"}],"source_stated_contributors":["Use after free in Windows SMB Server allows an authorized attacker to elevate privileges locally."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-88127","reporting_entity":"CVE-2026-88127","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-88127-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-88127-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-88127"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-88107","title":"Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-88107","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-88107","source_title":"Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T22:39:49.573Z","source_hash":"content-fingerprint:fnv1a-ea973059","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Cloud & container infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-88107-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Security Advisory CVE-2026-88107","fact_id":"SEA-CVE-2026-88107-F1","document_citation":"Security Advisory CVE-2026-88107"},{"id":"SEA-CVE-2026-88107-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Advisory description (CVE-2026-88107)","fact_id":"SEA-CVE-2026-88107-F2","document_citation":"Advisory description (CVE-2026-88107)"}],"source_stated_contributors":["Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-88107","reporting_entity":"CVE-2026-88107","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-88107-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-88107-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-88107"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-88106","title":"Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-88106","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-88106","source_title":"Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T22:39:49.574Z","source_hash":"content-fingerprint:fnv1a-ff98a97c","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Cloud & container infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-88106-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Security Advisory CVE-2026-88106","fact_id":"SEA-CVE-2026-88106-F1","document_citation":"Security Advisory CVE-2026-88106"},{"id":"SEA-CVE-2026-88106-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Advisory description (CVE-2026-88106)","fact_id":"SEA-CVE-2026-88106-F2","document_citation":"Advisory description (CVE-2026-88106)"}],"source_stated_contributors":["Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-88106","reporting_entity":"CVE-2026-88106","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-88106-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-88106-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-88106"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-88094","title":"Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Storage Library allows an authorized attacker to elevate privileges over a network.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-88094","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-88094","source_title":"Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Storage Library allows an authorized attacker to elevate privileges over a network.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T22:39:49.574Z","source_hash":"content-fingerprint:fnv1a-4c3646a0","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-88094-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Storage Library allows an authorized attacker to elevate privileges over a network.","source_quote_or_pointer":"Security Advisory CVE-2026-88094","fact_id":"SEA-CVE-2026-88094-F1","document_citation":"Security Advisory CVE-2026-88094"},{"id":"SEA-CVE-2026-88094-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Storage Library allows an authorized attacker to elevate privileges over a network.","source_quote_or_pointer":"Advisory description (CVE-2026-88094)","fact_id":"SEA-CVE-2026-88094-F2","document_citation":"Advisory description (CVE-2026-88094)"}],"source_stated_contributors":["Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Storage Library allows an authorized attacker to elevate privileges over a network."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.infrastructure_modification"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-88094","reporting_entity":"CVE-2026-88094","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-88094-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-88094-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-88094"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-87712","title":"Use after free in Windows Quality of Service (QoS) Packet Scheduler allows an authorized attacker to elevate privileges locally.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-87712","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87712","source_title":"Use after free in Windows Quality of Service (QoS) Packet Scheduler allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T22:39:49.575Z","source_hash":"content-fingerprint:fnv1a-fa5bfad2","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-87712-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Use after free in Windows Quality of Service (QoS) Packet Scheduler allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Security Advisory CVE-2026-87712","fact_id":"SEA-CVE-2026-87712-F1","document_citation":"Security Advisory CVE-2026-87712"},{"id":"SEA-CVE-2026-87712-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Use after free in Windows Quality of Service (QoS) Packet Scheduler allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Advisory description (CVE-2026-87712)","fact_id":"SEA-CVE-2026-87712-F2","document_citation":"Advisory description (CVE-2026-87712)"}],"source_stated_contributors":["Use after free in Windows Quality of Service (QoS) Packet Scheduler allows an authorized attacker to elevate privileges locally."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["arch.async_job"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-87712","reporting_entity":"CVE-2026-87712","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-87712-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-87712-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-87712"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-87710","title":"Improper access control in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.","display_title":"Software component issue could allow unauthorized access","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-87710","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87710","source_title":"Improper access control in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T22:39:49.576Z","source_hash":"content-fingerprint:fnv1a-6e29a72c","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-87710-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Improper access control in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Security Advisory CVE-2026-87710","fact_id":"SEA-CVE-2026-87710-F1","document_citation":"Security Advisory CVE-2026-87710"},{"id":"SEA-CVE-2026-87710-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Improper access control in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Advisory description (CVE-2026-87710)","fact_id":"SEA-CVE-2026-87710-F2","document_citation":"Advisory description (CVE-2026-87710)"}],"source_stated_contributors":["Improper access control in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-87710","reporting_entity":"CVE-2026-87710","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-87710-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-87710-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-87710"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-87709","title":"Improper access control in Windows Host Guardian Service allows an authorized attacker to perform tampering locally.","display_title":"Software component issue could allow unauthorized access","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-87709","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87709","source_title":"Improper access control in Windows Host Guardian Service allows an authorized attacker to perform tampering locally.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T22:39:49.576Z","source_hash":"content-fingerprint:fnv1a-5fdbee3e","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-87709-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Improper access control in Windows Host Guardian Service allows an authorized attacker to perform tampering locally.","source_quote_or_pointer":"Security Advisory CVE-2026-87709","fact_id":"SEA-CVE-2026-87709-F1","document_citation":"Security Advisory CVE-2026-87709"},{"id":"SEA-CVE-2026-87709-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Improper access control in Windows Host Guardian Service allows an authorized attacker to perform tampering locally.","source_quote_or_pointer":"Advisory description (CVE-2026-87709)","fact_id":"SEA-CVE-2026-87709-F2","document_citation":"Advisory description (CVE-2026-87709)"}],"source_stated_contributors":["Improper access control in Windows Host Guardian Service allows an authorized attacker to perform tampering locally."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-87709","reporting_entity":"CVE-2026-87709","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-87709-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-87709-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-87709"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-87692","title":"Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.","display_title":"Software component issue could make the application process unsafe input","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-87692","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87692","source_title":"Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T22:39:49.576Z","source_hash":"content-fingerprint:fnv1a-f8fc29f1","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-87692-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Security Advisory CVE-2026-87692","fact_id":"SEA-CVE-2026-87692-F1","document_citation":"Security Advisory CVE-2026-87692"},{"id":"SEA-CVE-2026-87692-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Advisory description (CVE-2026-87692)","fact_id":"SEA-CVE-2026-87692-F2","document_citation":"Advisory description (CVE-2026-87692)"}],"source_stated_contributors":["Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unsafe object construction","Possible code execution"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-87692","reporting_entity":"CVE-2026-87692","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-87692-SG1","label":"Use schema-validated data formats","description":"Parse untrusted input into plain data with an explicit schema; never deserialize into arbitrary types.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-87692-SG1","label":"Use schema-validated data formats","description":"Parse untrusted input into plain data with an explicit schema; never deserialize into arbitrary types.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"The application rebuilt objects from untrusted data. Use data-only formats with schema validation instead of native object deserialization.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-87692"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-86063","title":"Claude Code is an agentic coding tool. Prior to 2.1.179, the Claude Code and Claude Desktop plugin installation flow runs git checkout for a marketplace-pinned commit without verifying that the resulting HEAD equals the pinned 40-character SHA. An attacker who controls a plugin repository on a Git host that permits SHA-shaped branch names can create a branch named after the reviewed commit, causing checkout to select the branch tip and install attacker-controlled plugin code. Exploitation requires a user to install the malicious plugin and pin it to the ostensibly safe hash. This issue is fixed in version 2.1.179.","display_title":"Security issue reported in Software component","display_summary":"Claude Code is an agentic coding tool. Prior to 2.1.179, the Claude Code and Claude Desktop plugin installation flow runs git checkout for a marketplace-pinned commit without verifying that the resulting HEAD equals the…","display_reference":"CVE-2026-86063","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-86063","source_title":"Claude Code is an agentic coding tool. Prior to 2.1.179, the Claude Code and Claude Desktop plugin installation flow runs git checkout for a marketplace-pinned commit without verifying that the resulting HEAD equals the pinned 40-character SHA. An attacker who controls a plugin repository on a Git host that permits SHA-shaped branch names can create a branch named after the reviewed commit, causing checkout to select the branch tip and install attacker-controlled plugin code. Exploitation requires a user to install the malicious plugin and pin it to the ostensibly safe hash. This issue is fixed in version 2.1.179.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T22:39:49.578Z","source_hash":"content-fingerprint:fnv1a-ff989ecc","affected_system":{"organization":"Software component project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-86063-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Claude Code is an agentic coding tool. Prior to 2.1.179, the Claude Code and Claude Desktop plugin installation flow runs git checkout for a marketplace-pinned commit without verifying that the resulting HEAD equals the pinned 40-character SHA. An attacker who controls a plugin repository on a Git host that permits SHA-shaped branch names can create a branch named after the reviewed commit, causing checkout to select the branch tip and install attacker-controlled plugin code. Exploitation requires a user to install the malicious plugin and pin it to the ostensibly safe hash. This issue is fixed in version 2.1.179.","source_quote_or_pointer":"Security Advisory CVE-2026-86063","fact_id":"SEA-CVE-2026-86063-F1","document_citation":"Security Advisory CVE-2026-86063"},{"id":"SEA-CVE-2026-86063-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Claude Code is an agentic coding tool. Prior to 2.1.179, the Claude Code and Claude Desktop plugin installation flow runs git checkout for a marketplace-pinned commit without verifying that the resulting HEAD equals the pinned 40-character SHA.","source_quote_or_pointer":"Advisory description (CVE-2026-86063)","fact_id":"SEA-CVE-2026-86063-F2","document_citation":"Advisory description (CVE-2026-86063)"}],"source_stated_contributors":["Claude Code is an agentic coding tool. Prior to 2.1.179, the Claude Code and Claude Desktop plugin installation flow runs git checkout for a marketplace-pinned commit without verifying that the resulting HEAD equals the pinned 40-character SHA."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.financial_action","data.pii"],"failure_mechanisms":["SEA-FM-010"],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-86063","reporting_entity":"CVE-2026-86063","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-86063-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-86063-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-86063"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-85934","title":"Use after free in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-85934","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85934","source_title":"Use after free in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T22:39:49.578Z","source_hash":"content-fingerprint:fnv1a-a2d13a8a","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-85934-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Use after free in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Security Advisory CVE-2026-85934","fact_id":"SEA-CVE-2026-85934-F1","document_citation":"Security Advisory CVE-2026-85934"},{"id":"SEA-CVE-2026-85934-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Use after free in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Advisory description (CVE-2026-85934)","fact_id":"SEA-CVE-2026-85934-F2","document_citation":"Advisory description (CVE-2026-85934)"}],"source_stated_contributors":["Use after free in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-85934","reporting_entity":"CVE-2026-85934","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-85934-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-85934-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-85934"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-85914","title":"Use after free in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-85914","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85914","source_title":"Use after free in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T22:39:49.578Z","source_hash":"content-fingerprint:fnv1a-9f3aa228","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-85914-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Use after free in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Security Advisory CVE-2026-85914","fact_id":"SEA-CVE-2026-85914-F1","document_citation":"Security Advisory CVE-2026-85914"},{"id":"SEA-CVE-2026-85914-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Use after free in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Advisory description (CVE-2026-85914)","fact_id":"SEA-CVE-2026-85914-F2","document_citation":"Advisory description (CVE-2026-85914)"}],"source_stated_contributors":["Use after free in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-85914","reporting_entity":"CVE-2026-85914","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-85914-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-85914-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-85914"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-85912","title":"Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.","display_title":"Software component issue could cause actions to run with inconsistent state","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-85912","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85912","source_title":"Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T22:39:49.579Z","source_hash":"content-fingerprint:fnv1a-1877d4ca","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-85912-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Security Advisory CVE-2026-85912","fact_id":"SEA-CVE-2026-85912-F1","document_citation":"Security Advisory CVE-2026-85912"},{"id":"SEA-CVE-2026-85912-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Advisory description (CVE-2026-85912)","fact_id":"SEA-CVE-2026-85912-F2","document_citation":"Advisory description (CVE-2026-85912)"}],"source_stated_contributors":["Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":["SEA-FM-001","SEA-FM-008"],"consequences":["Duplicate or inconsistent actions","State divergence"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-85912","reporting_entity":"CVE-2026-85912","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-85912-SG1","label":"Idempotency and re-validation at execution","description":"Attach idempotency keys to mutations and re-verify state and permissions atomically when the action runs.","target_failure_mode":"SEA-FM-001","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-85912-SG1","label":"Idempotency and re-validation at execution","description":"Attach idempotency keys to mutations and re-verify state and permissions atomically when the action runs.","target_failure_mode":"SEA-FM-001","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Concurrent or repeated requests produced inconsistent state. Make state-changing operations idempotent and re-check authorization and state at execution time.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-85912"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-85911","title":"Use after free in Windows StateRepository API allows an authorized attacker to elevate privileges locally.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-85911","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85911","source_title":"Use after free in Windows StateRepository API allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T22:39:49.579Z","source_hash":"content-fingerprint:fnv1a-e2fa6675","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-85911-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Use after free in Windows StateRepository API allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Security Advisory CVE-2026-85911","fact_id":"SEA-CVE-2026-85911-F1","document_citation":"Security Advisory CVE-2026-85911"},{"id":"SEA-CVE-2026-85911-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Use after free in Windows StateRepository API allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Advisory description (CVE-2026-85911)","fact_id":"SEA-CVE-2026-85911-F2","document_citation":"Advisory description (CVE-2026-85911)"}],"source_stated_contributors":["Use after free in Windows StateRepository API allows an authorized attacker to elevate privileges locally."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-85911","reporting_entity":"CVE-2026-85911","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-85911-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-85911-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-85911"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-85904","title":"Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Device Association Service allows an authorized attacker to elevate privileges locally.","display_title":"Software component issue could cause actions to run with inconsistent state","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-85904","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85904","source_title":"Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Device Association Service allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T22:39:49.580Z","source_hash":"content-fingerprint:fnv1a-421e2af3","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-85904-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Device Association Service allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Security Advisory CVE-2026-85904","fact_id":"SEA-CVE-2026-85904-F1","document_citation":"Security Advisory CVE-2026-85904"},{"id":"SEA-CVE-2026-85904-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Device Association Service allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Advisory description (CVE-2026-85904)","fact_id":"SEA-CVE-2026-85904-F2","document_citation":"Advisory description (CVE-2026-85904)"}],"source_stated_contributors":["Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Device Association Service allows an authorized attacker to elevate privileges locally."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-001","SEA-FM-008"],"consequences":["Duplicate or inconsistent actions","State divergence"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-85904","reporting_entity":"CVE-2026-85904","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-85904-SG1","label":"Idempotency and re-validation at execution","description":"Attach idempotency keys to mutations and re-verify state and permissions atomically when the action runs.","target_failure_mode":"SEA-FM-001","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-85904-SG1","label":"Idempotency and re-validation at execution","description":"Attach idempotency keys to mutations and re-verify state and permissions atomically when the action runs.","target_failure_mode":"SEA-FM-001","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Concurrent or repeated requests produced inconsistent state. Make state-changing operations idempotent and re-check authorization and state at execution time.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-85904"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-85864","title":"Improper privilege management in Python allows an authorized attacker to elevate privileges locally.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-85864","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85864","source_title":"Improper privilege management in Python allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T22:39:49.580Z","source_hash":"content-fingerprint:fnv1a-163e3214","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-85864-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Improper privilege management in Python allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Security Advisory CVE-2026-85864","fact_id":"SEA-CVE-2026-85864-F1","document_citation":"Security Advisory CVE-2026-85864"},{"id":"SEA-CVE-2026-85864-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Improper privilege management in Python allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Advisory description (CVE-2026-85864)","fact_id":"SEA-CVE-2026-85864-F2","document_citation":"Advisory description (CVE-2026-85864)"}],"source_stated_contributors":["Improper privilege management in Python allows an authorized attacker to elevate privileges locally."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-85864","reporting_entity":"CVE-2026-85864","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-85864-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-85864-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-85864"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-85863","title":"Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-85863","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85863","source_title":"Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T22:39:49.580Z","source_hash":"content-fingerprint:fnv1a-6fd242f9","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-85863-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Security Advisory CVE-2026-85863","fact_id":"SEA-CVE-2026-85863-F1","document_citation":"Security Advisory CVE-2026-85863"},{"id":"SEA-CVE-2026-85863-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Advisory description (CVE-2026-85863)","fact_id":"SEA-CVE-2026-85863-F2","document_citation":"Advisory description (CVE-2026-85863)"}],"source_stated_contributors":["Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-85863","reporting_entity":"CVE-2026-85863","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-85863-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-85863-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-85863"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-85861","title":"Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-85861","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85861","source_title":"Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T22:39:49.581Z","source_hash":"content-fingerprint:fnv1a-c0feb7ef","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-85861-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Security Advisory CVE-2026-85861","fact_id":"SEA-CVE-2026-85861-F1","document_citation":"Security Advisory CVE-2026-85861"},{"id":"SEA-CVE-2026-85861-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Advisory description (CVE-2026-85861)","fact_id":"SEA-CVE-2026-85861-F2","document_citation":"Advisory description (CVE-2026-85861)"}],"source_stated_contributors":["Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-85861","reporting_entity":"CVE-2026-85861","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-85861-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-85861-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-85861"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-85860","title":"Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to elevate privileges locally.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-85860","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85860","source_title":"Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T22:39:49.581Z","source_hash":"content-fingerprint:fnv1a-58f06034","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-85860-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Security Advisory CVE-2026-85860","fact_id":"SEA-CVE-2026-85860-F1","document_citation":"Security Advisory CVE-2026-85860"},{"id":"SEA-CVE-2026-85860-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Advisory description (CVE-2026-85860)","fact_id":"SEA-CVE-2026-85860-F2","document_citation":"Advisory description (CVE-2026-85860)"}],"source_stated_contributors":["Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to elevate privileges locally."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["arch.async_job"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-85860","reporting_entity":"CVE-2026-85860","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-85860-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-85860-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-85860"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-85855","title":"Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-85855","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85855","source_title":"Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T22:39:49.581Z","source_hash":"content-fingerprint:fnv1a-7f14d812","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-85855-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Security Advisory CVE-2026-85855","fact_id":"SEA-CVE-2026-85855-F1","document_citation":"Security Advisory CVE-2026-85855"},{"id":"SEA-CVE-2026-85855-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Advisory description (CVE-2026-85855)","fact_id":"SEA-CVE-2026-85855-F2","document_citation":"Advisory description (CVE-2026-85855)"}],"source_stated_contributors":["Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-85855","reporting_entity":"CVE-2026-85855","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-85855-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-85855-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-85855"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-85854","title":"Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-85854","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85854","source_title":"Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T22:39:49.581Z","source_hash":"content-fingerprint:fnv1a-1a56497f","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-85854-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Security Advisory CVE-2026-85854","fact_id":"SEA-CVE-2026-85854-F1","document_citation":"Security Advisory CVE-2026-85854"},{"id":"SEA-CVE-2026-85854-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Advisory description (CVE-2026-85854)","fact_id":"SEA-CVE-2026-85854-F2","document_citation":"Advisory description (CVE-2026-85854)"}],"source_stated_contributors":["Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-85854","reporting_entity":"CVE-2026-85854","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-85854-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-85854-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-85854"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-85849","title":"Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-85849","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85849","source_title":"Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T22:39:49.582Z","source_hash":"content-fingerprint:fnv1a-2aa19b3","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-85849-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Security Advisory CVE-2026-85849","fact_id":"SEA-CVE-2026-85849-F1","document_citation":"Security Advisory CVE-2026-85849"},{"id":"SEA-CVE-2026-85849-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Advisory description (CVE-2026-85849)","fact_id":"SEA-CVE-2026-85849-F2","document_citation":"Advisory description (CVE-2026-85849)"}],"source_stated_contributors":["Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-85849","reporting_entity":"CVE-2026-85849","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-85849-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-85849-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-85849"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-85843","title":"Use of uninitialized resource in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-85843","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85843","source_title":"Use of uninitialized resource in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T22:39:49.582Z","source_hash":"content-fingerprint:fnv1a-40b1e5b5","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-85843-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Use of uninitialized resource in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Security Advisory CVE-2026-85843","fact_id":"SEA-CVE-2026-85843-F1","document_citation":"Security Advisory CVE-2026-85843"},{"id":"SEA-CVE-2026-85843-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Use of uninitialized resource in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Advisory description (CVE-2026-85843)","fact_id":"SEA-CVE-2026-85843-F2","document_citation":"Advisory description (CVE-2026-85843)"}],"source_stated_contributors":["Use of uninitialized resource in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-85843","reporting_entity":"CVE-2026-85843","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-85843-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-85843-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-85843"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-85829","title":"Double free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-85829","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85829","source_title":"Double free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T22:39:49.582Z","source_hash":"content-fingerprint:fnv1a-ae212991","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-85829-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Double free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Security Advisory CVE-2026-85829","fact_id":"SEA-CVE-2026-85829-F1","document_citation":"Security Advisory CVE-2026-85829"},{"id":"SEA-CVE-2026-85829-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Double free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Advisory description (CVE-2026-85829)","fact_id":"SEA-CVE-2026-85829-F2","document_citation":"Advisory description (CVE-2026-85829)"}],"source_stated_contributors":["Double free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-85829","reporting_entity":"CVE-2026-85829","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-85829-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-85829-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-85829"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-85810","title":"Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-85810","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85810","source_title":"Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T22:39:49.582Z","source_hash":"content-fingerprint:fnv1a-5b25c0cb","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-85810-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Security Advisory CVE-2026-85810","fact_id":"SEA-CVE-2026-85810-F1","document_citation":"Security Advisory CVE-2026-85810"},{"id":"SEA-CVE-2026-85810-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Advisory description (CVE-2026-85810)","fact_id":"SEA-CVE-2026-85810-F2","document_citation":"Advisory description (CVE-2026-85810)"}],"source_stated_contributors":["Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-85810","reporting_entity":"CVE-2026-85810","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-85810-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-85810-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-85810"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-85809","title":"Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine","display_title":"Software component issue could allow unintended commands to run","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-85809","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85809","source_title":"Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T22:39:49.583Z","source_hash":"content-fingerprint:fnv1a-c715eb43","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-85809-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine","source_quote_or_pointer":"Security Advisory CVE-2026-85809","fact_id":"SEA-CVE-2026-85809-F1","document_citation":"Security Advisory CVE-2026-85809"},{"id":"SEA-CVE-2026-85809-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine","source_quote_or_pointer":"Advisory description (CVE-2026-85809)","fact_id":"SEA-CVE-2026-85809-F2","document_citation":"Advisory description (CVE-2026-85809)"}],"source_stated_contributors":["Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-85809","reporting_entity":"CVE-2026-85809","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-85809-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-85809-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-85809"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-85795","title":"Use after free in Windows Text Services Framework allows an authorized attacker to elevate privileges locally.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-85795","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85795","source_title":"Use after free in Windows Text Services Framework allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T22:39:49.583Z","source_hash":"content-fingerprint:fnv1a-2389c777","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-85795-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Use after free in Windows Text Services Framework allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Security Advisory CVE-2026-85795","fact_id":"SEA-CVE-2026-85795-F1","document_citation":"Security Advisory CVE-2026-85795"},{"id":"SEA-CVE-2026-85795-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Use after free in Windows Text Services Framework allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Advisory description (CVE-2026-85795)","fact_id":"SEA-CVE-2026-85795-F2","document_citation":"Advisory description (CVE-2026-85795)"}],"source_stated_contributors":["Use after free in Windows Text Services Framework allows an authorized attacker to elevate privileges locally."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-85795","reporting_entity":"CVE-2026-85795","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-85795-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-85795-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-85795"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-85792","title":"Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine","display_title":"Software component issue could allow unintended commands to run","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-85792","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85792","source_title":"Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T22:39:49.583Z","source_hash":"content-fingerprint:fnv1a-3ca76e78","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-85792-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine","source_quote_or_pointer":"Security Advisory CVE-2026-85792","fact_id":"SEA-CVE-2026-85792-F1","document_citation":"Security Advisory CVE-2026-85792"},{"id":"SEA-CVE-2026-85792-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine","source_quote_or_pointer":"Advisory description (CVE-2026-85792)","fact_id":"SEA-CVE-2026-85792-F2","document_citation":"Advisory description (CVE-2026-85792)"}],"source_stated_contributors":["Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-85792","reporting_entity":"CVE-2026-85792","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-85792-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-85792-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-85792"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-85473","title":"The auth0/java-jwt library may terminate a thread if it receives a JWT with a timestamp claim (exp, nbf, iat) containing an out-of-range value. The condition occurs during token parsing, prior to signature verification. Repeated requests of this nature may lead to degraded availability of the affected service.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-85473","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85473","source_title":"The auth0/java-jwt library may terminate a thread if it receives a JWT with a timestamp claim (exp, nbf, iat) containing an out-of-range value. The condition occurs during token parsing, prior to signature verification. Repeated requests of this nature may lead to degraded availability of the affected service.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T22:39:49.584Z","source_hash":"content-fingerprint:fnv1a-bd3c95ba","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-85473-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The auth0/java-jwt library may terminate a thread if it receives a JWT with a timestamp claim (exp, nbf, iat) containing an out-of-range value. The condition occurs during token parsing, prior to signature verification. Repeated requests of this nature may lead to degraded availability of the affected service.","source_quote_or_pointer":"Security Advisory CVE-2026-85473","fact_id":"SEA-CVE-2026-85473-F1","document_citation":"Security Advisory CVE-2026-85473"},{"id":"SEA-CVE-2026-85473-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The auth0/java-jwt library may terminate a thread if it receives a JWT with a timestamp claim (exp, nbf, iat) containing an out-of-range value. The condition occurs during token parsing, prior to signature verification. Repeated requests of this nature may lead to degraded availability of the affected service.","source_quote_or_pointer":"Advisory description (CVE-2026-85473)","fact_id":"SEA-CVE-2026-85473-F2","document_citation":"Advisory description (CVE-2026-85473)"}],"source_stated_contributors":["The auth0/java-jwt library may terminate a thread if it receives a JWT with a timestamp claim (exp, nbf, iat) containing an out-of-range value. The condition occurs during token parsing, prior to signature verification. Repeated requests of this nature may lead to degraded availability of the affected service."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","data.credentials_secrets"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-85473","reporting_entity":"CVE-2026-85473","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-85473-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-85473-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-85473"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-85357","title":"Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Phone Service allows an authorized attacker to elevate privileges locally.","display_title":"Software component issue could cause actions to run with inconsistent state","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-85357","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85357","source_title":"Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Phone Service allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T22:39:49.584Z","source_hash":"content-fingerprint:fnv1a-765eafeb","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-85357-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Phone Service allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Security Advisory CVE-2026-85357","fact_id":"SEA-CVE-2026-85357-F1","document_citation":"Security Advisory CVE-2026-85357"},{"id":"SEA-CVE-2026-85357-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Phone Service allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Advisory description (CVE-2026-85357)","fact_id":"SEA-CVE-2026-85357-F2","document_citation":"Advisory description (CVE-2026-85357)"}],"source_stated_contributors":["Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Phone Service allows an authorized attacker to elevate privileges locally."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-001","SEA-FM-008"],"consequences":["Duplicate or inconsistent actions","State divergence"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-85357","reporting_entity":"CVE-2026-85357","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-85357-SG1","label":"Idempotency and re-validation at execution","description":"Attach idempotency keys to mutations and re-verify state and permissions atomically when the action runs.","target_failure_mode":"SEA-FM-001","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-85357-SG1","label":"Idempotency and re-validation at execution","description":"Attach idempotency keys to mutations and re-verify state and permissions atomically when the action runs.","target_failure_mode":"SEA-FM-001","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Concurrent or repeated requests produced inconsistent state. Make state-changing operations idempotent and re-check authorization and state at execution time.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-85357"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-85352","title":"Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-85352","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85352","source_title":"Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T22:39:49.584Z","source_hash":"content-fingerprint:fnv1a-a7c28ca","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-85352-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Security Advisory CVE-2026-85352","fact_id":"SEA-CVE-2026-85352-F1","document_citation":"Security Advisory CVE-2026-85352"},{"id":"SEA-CVE-2026-85352-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Advisory description (CVE-2026-85352)","fact_id":"SEA-CVE-2026-85352-F2","document_citation":"Advisory description (CVE-2026-85352)"}],"source_stated_contributors":["Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-85352","reporting_entity":"CVE-2026-85352","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-85352-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-85352-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-85352"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-85342","title":"Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-85342","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85342","source_title":"Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T22:39:49.585Z","source_hash":"content-fingerprint:fnv1a-54fc678d","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-85342-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Security Advisory CVE-2026-85342","fact_id":"SEA-CVE-2026-85342-F1","document_citation":"Security Advisory CVE-2026-85342"},{"id":"SEA-CVE-2026-85342-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Advisory description (CVE-2026-85342)","fact_id":"SEA-CVE-2026-85342-F2","document_citation":"Advisory description (CVE-2026-85342)"}],"source_stated_contributors":["Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-85342","reporting_entity":"CVE-2026-85342","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-85342-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-85342-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-85342"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-85339","title":"Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine","display_title":"Software component issue could allow unintended commands to run","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-85339","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85339","source_title":"Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T22:39:49.585Z","source_hash":"content-fingerprint:fnv1a-2b26e40d","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-85339-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine","source_quote_or_pointer":"Security Advisory CVE-2026-85339","fact_id":"SEA-CVE-2026-85339-F1","document_citation":"Security Advisory CVE-2026-85339"},{"id":"SEA-CVE-2026-85339-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine","source_quote_or_pointer":"Advisory description (CVE-2026-85339)","fact_id":"SEA-CVE-2026-85339-F2","document_citation":"Advisory description (CVE-2026-85339)"}],"source_stated_contributors":["Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-85339","reporting_entity":"CVE-2026-85339","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-85339-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-85339-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-85339"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-85332","title":"Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-85332","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85332","source_title":"Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T22:39:49.585Z","source_hash":"content-fingerprint:fnv1a-9498a230","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-85332-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Security Advisory CVE-2026-85332","fact_id":"SEA-CVE-2026-85332-F1","document_citation":"Security Advisory CVE-2026-85332"},{"id":"SEA-CVE-2026-85332-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Advisory description (CVE-2026-85332)","fact_id":"SEA-CVE-2026-85332-F2","document_citation":"Advisory description (CVE-2026-85332)"}],"source_stated_contributors":["Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-85332","reporting_entity":"CVE-2026-85332","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-85332-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-85332-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-85332"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-84020","title":"Use after free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-84020","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84020","source_title":"Use after free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T22:39:49.587Z","source_hash":"content-fingerprint:fnv1a-f637c8bd","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-84020-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Use after free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Security Advisory CVE-2026-84020","fact_id":"SEA-CVE-2026-84020-F1","document_citation":"Security Advisory CVE-2026-84020"},{"id":"SEA-CVE-2026-84020-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Use after free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Advisory description (CVE-2026-84020)","fact_id":"SEA-CVE-2026-84020-F2","document_citation":"Advisory description (CVE-2026-84020)"}],"source_stated_contributors":["Use after free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-84020","reporting_entity":"CVE-2026-84020","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-84020-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-84020-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-84020"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-84013","title":"Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-84013","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84013","source_title":"Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T22:39:49.587Z","source_hash":"content-fingerprint:fnv1a-6956d0e7","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-84013-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Security Advisory CVE-2026-84013","fact_id":"SEA-CVE-2026-84013-F1","document_citation":"Security Advisory CVE-2026-84013"},{"id":"SEA-CVE-2026-84013-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Advisory description (CVE-2026-84013)","fact_id":"SEA-CVE-2026-84013-F2","document_citation":"Advisory description (CVE-2026-84013)"}],"source_stated_contributors":["Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-84013","reporting_entity":"CVE-2026-84013","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-84013-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-84013-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-84013"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-83930","title":"Use after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-83930","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-83930","source_title":"Use after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T22:39:49.587Z","source_hash":"content-fingerprint:fnv1a-6e7c9bb0","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-83930-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Use after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Security Advisory CVE-2026-83930","fact_id":"SEA-CVE-2026-83930-F1","document_citation":"Security Advisory CVE-2026-83930"},{"id":"SEA-CVE-2026-83930-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Use after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Advisory description (CVE-2026-83930)","fact_id":"SEA-CVE-2026-83930-F2","document_citation":"Advisory description (CVE-2026-83930)"}],"source_stated_contributors":["Use after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-83930","reporting_entity":"CVE-2026-83930","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-83930-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-83930-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-83930"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-83915","title":"Use after free in Windows Diagnostic Policy Service allows an authorized attacker to elevate privileges locally.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-83915","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-83915","source_title":"Use after free in Windows Diagnostic Policy Service allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T22:39:49.588Z","source_hash":"content-fingerprint:fnv1a-558713ab","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-83915-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Use after free in Windows Diagnostic Policy Service allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Security Advisory CVE-2026-83915","fact_id":"SEA-CVE-2026-83915-F1","document_citation":"Security Advisory CVE-2026-83915"},{"id":"SEA-CVE-2026-83915-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Use after free in Windows Diagnostic Policy Service allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Advisory description (CVE-2026-83915)","fact_id":"SEA-CVE-2026-83915-F2","document_citation":"Advisory description (CVE-2026-83915)"}],"source_stated_contributors":["Use after free in Windows Diagnostic Policy Service allows an authorized attacker to elevate privileges locally."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-83915","reporting_entity":"CVE-2026-83915","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-83915-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-83915-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-83915"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-83908","title":"Release of invalid pointer or reference in RPC Runtime allows an authorized attacker to elevate privileges locally.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-83908","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-83908","source_title":"Release of invalid pointer or reference in RPC Runtime allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T22:39:49.588Z","source_hash":"content-fingerprint:fnv1a-d9feedeb","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-83908-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Release of invalid pointer or reference in RPC Runtime allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Security Advisory CVE-2026-83908","fact_id":"SEA-CVE-2026-83908-F1","document_citation":"Security Advisory CVE-2026-83908"},{"id":"SEA-CVE-2026-83908-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Release of invalid pointer or reference in RPC Runtime allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Advisory description (CVE-2026-83908)","fact_id":"SEA-CVE-2026-83908-F2","document_citation":"Advisory description (CVE-2026-83908)"}],"source_stated_contributors":["Release of invalid pointer or reference in RPC Runtime allows an authorized attacker to elevate privileges locally."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-83908","reporting_entity":"CVE-2026-83908","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-83908-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-83908-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-83908"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-83886","title":"Use after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-83886","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-83886","source_title":"Use after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T22:39:49.588Z","source_hash":"content-fingerprint:fnv1a-50e88d5a","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-83886-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Use after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Security Advisory CVE-2026-83886","fact_id":"SEA-CVE-2026-83886-F1","document_citation":"Security Advisory CVE-2026-83886"},{"id":"SEA-CVE-2026-83886-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Use after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Advisory description (CVE-2026-83886)","fact_id":"SEA-CVE-2026-83886-F2","document_citation":"Advisory description (CVE-2026-83886)"}],"source_stated_contributors":["Use after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-83886","reporting_entity":"CVE-2026-83886","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-83886-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-83886-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-83886"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-83848","title":"Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-83848","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-83848","source_title":"Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T22:39:49.589Z","source_hash":"content-fingerprint:fnv1a-cf9dee2","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-83848-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Security Advisory CVE-2026-83848","fact_id":"SEA-CVE-2026-83848-F1","document_citation":"Security Advisory CVE-2026-83848"},{"id":"SEA-CVE-2026-83848-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Advisory description (CVE-2026-83848)","fact_id":"SEA-CVE-2026-83848-F2","document_citation":"Advisory description (CVE-2026-83848)"}],"source_stated_contributors":["Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["arch.event_driven"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-83848","reporting_entity":"CVE-2026-83848","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-83848-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-83848-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-83848"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-83846","title":"Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-83846","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-83846","source_title":"Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T22:39:49.589Z","source_hash":"content-fingerprint:fnv1a-56ee5952","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-83846-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Security Advisory CVE-2026-83846","fact_id":"SEA-CVE-2026-83846-F1","document_citation":"Security Advisory CVE-2026-83846"},{"id":"SEA-CVE-2026-83846-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.","source_quote_or_pointer":"Advisory description (CVE-2026-83846)","fact_id":"SEA-CVE-2026-83846-F2","document_citation":"Advisory description (CVE-2026-83846)"}],"source_stated_contributors":["Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-83846","reporting_entity":"CVE-2026-83846","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-83846-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-83846-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-83846"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-97334","title":"The network messaging layer contained improper handling of highly compressed data affecting service availability. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including CommServe server, Web Server, Command Center, MediaAgents, clients, and HyperScale.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-97334","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97334","source_title":"The network messaging layer contained improper handling of highly compressed data affecting service availability. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including CommServe server, Web Server, Command Center, MediaAgents, clients, and HyperScale.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T17:34:01.277Z","source_hash":"content-fingerprint:fnv1a-c2d70705","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-97334-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The network messaging layer contained improper handling of highly compressed data affecting service availability. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including CommServe server, Web Server, Command Center, MediaAgents, clients, and HyperScale.","source_quote_or_pointer":"Security Advisory CVE-2026-97334","fact_id":"SEA-CVE-2026-97334-F1","document_citation":"Security Advisory CVE-2026-97334"},{"id":"SEA-CVE-2026-97334-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The network messaging layer contained improper handling of highly compressed data affecting service availability. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including CommServe server, Web Server, Command Center, MediaAgents, clients, and HyperScale.","source_quote_or_pointer":"Advisory description (CVE-2026-97334)","fact_id":"SEA-CVE-2026-97334-F2","document_citation":"Advisory description (CVE-2026-97334)"}],"source_stated_contributors":["The network messaging layer contained improper handling of highly compressed data affecting service availability. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including CommServe server, Web Server, Command Center, MediaAgents, clients, and HyperScale."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-97334","reporting_entity":"CVE-2026-97334","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-97334-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-97334-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-97334"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-77362","title":"obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, bridge tools do not consistently apply the read access-control list (ACL) to every returned field. The tasks_filter tool exposes group counts derived from denied notes, makemd_query passes unfiltered sibling result fields through, and list_templates exposes template paths and parsed user-function bodies without a read-whitelist check. An authenticated caller can consequently infer or read data from notes outside the caller's read ACL. Version 1.3.1 fixes the vulnerability by filtering path-attributable fields and applying the read whitelist to list_templates.","display_title":"Software component issue could allow unauthorized access","display_summary":"obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, bridge tools do not consistently apply the read access-control list (ACL) to every returned field.","display_reference":"CVE-2026-77362","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-77362","source_title":"obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, bridge tools do not consistently apply the read access-control list (ACL) to every returned field. The tasks_filter tool exposes group counts derived from denied notes, makemd_query passes unfiltered sibling result fields through, and list_templates exposes template paths and parsed user-function bodies without a read-whitelist check. An authenticated caller can consequently infer or read data from notes outside the caller's read ACL. Version 1.3.1 fixes the vulnerability by filtering path-attributable fields and applying the read whitelist to list_templates.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T17:34:01.284Z","source_hash":"content-fingerprint:fnv1a-d54d194a","affected_system":{"organization":"Software component project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-77362-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, bridge tools do not consistently apply the read access-control list (ACL) to every returned field. The tasks_filter tool exposes group counts derived from denied notes, makemd_query passes unfiltered sibling result fields through, and list_templates exposes template paths and parsed user-function bodies without a read-whitelist check. An authenticated caller can consequently infer or read data from notes outside the caller's read ACL. Version 1.3.1 fixes the vulnerability by filtering path-attributable fields and applying the read whitelist to list_templates.","source_quote_or_pointer":"Security Advisory CVE-2026-77362","fact_id":"SEA-CVE-2026-77362-F1","document_citation":"Security Advisory CVE-2026-77362"},{"id":"SEA-CVE-2026-77362-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, bridge tools do not consistently apply the read access-control list (ACL) to every returned field.","source_quote_or_pointer":"Advisory description (CVE-2026-77362)","fact_id":"SEA-CVE-2026-77362-F2","document_citation":"Advisory description (CVE-2026-77362)"}],"source_stated_contributors":["obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, bridge tools do not consistently apply the read access-control list (ACL) to every returned field."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-003","SEA-FM-010"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-77362","reporting_entity":"CVE-2026-77362","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-77362-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-77362-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-77362"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-67456","title":"NVIDIA Warp contains a vulnerability where an attacker could cause a heap-based buffer overflow. A successful exploit of this vulnerability might lead to denial of service.","display_title":"Software component issue could make the service unavailable","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-67456","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-67456","source_title":"NVIDIA Warp contains a vulnerability where an attacker could cause a heap-based buffer overflow. A successful exploit of this vulnerability might lead to denial of service.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T17:34:01.284Z","source_hash":"content-fingerprint:fnv1a-d4e4186b","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-67456-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"NVIDIA Warp contains a vulnerability where an attacker could cause a heap-based buffer overflow. A successful exploit of this vulnerability might lead to denial of service.","source_quote_or_pointer":"Security Advisory CVE-2026-67456","fact_id":"SEA-CVE-2026-67456-F1","document_citation":"Security Advisory CVE-2026-67456"},{"id":"SEA-CVE-2026-67456-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"NVIDIA Warp contains a vulnerability where an attacker could cause a heap-based buffer overflow. A successful exploit of this vulnerability might lead to denial of service.","source_quote_or_pointer":"Advisory description (CVE-2026-67456)","fact_id":"SEA-CVE-2026-67456-F2","document_citation":"Advisory description (CVE-2026-67456)"}],"source_stated_contributors":["NVIDIA Warp contains a vulnerability where an attacker could cause a heap-based buffer overflow. A successful exploit of this vulnerability might lead to denial of service."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-67456","reporting_entity":"CVE-2026-67456","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-67456-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-67456-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-67456"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-65173","title":"NVIDIA AIStore for Linux contains a missing authentication vulnerability in the token-revocation endpoint where an unauthenticated remote attacker may submit crafted token-revocation lists. A successful exploit may lead to data tampering and denial of service.","display_title":"Software component issue could make the service unavailable","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-65173","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-65173","source_title":"NVIDIA AIStore for Linux contains a missing authentication vulnerability in the token-revocation endpoint where an unauthenticated remote attacker may submit crafted token-revocation lists. A successful exploit may lead to data tampering and denial of service.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T17:34:01.285Z","source_hash":"content-fingerprint:fnv1a-5735571b","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-65173-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"NVIDIA AIStore for Linux contains a missing authentication vulnerability in the token-revocation endpoint where an unauthenticated remote attacker may submit crafted token-revocation lists. A successful exploit may lead to data tampering and denial of service.","source_quote_or_pointer":"Security Advisory CVE-2026-65173","fact_id":"SEA-CVE-2026-65173-F1","document_citation":"Security Advisory CVE-2026-65173"},{"id":"SEA-CVE-2026-65173-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"NVIDIA AIStore for Linux contains a missing authentication vulnerability in the token-revocation endpoint where an unauthenticated remote attacker may submit crafted token-revocation lists. A successful exploit may lead to data tampering and denial of service.","source_quote_or_pointer":"Advisory description (CVE-2026-65173)","fact_id":"SEA-CVE-2026-65173-F2","document_citation":"Advisory description (CVE-2026-65173)"}],"source_stated_contributors":["NVIDIA AIStore for Linux contains a missing authentication vulnerability in the token-revocation endpoint where an unauthenticated remote attacker may submit crafted token-revocation lists. A successful exploit may lead to data tampering and denial of service."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-65173","reporting_entity":"CVE-2026-65173","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-65173-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-65173-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-65173"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-65172","title":"NVIDIA AIStore for Linux and Kubernetes contains a missing authorization vulnerability in the ETL management API where an unauthenticated remote attacker may access ETL information or control existing ETL jobs by sending crafted GET or POST requests to an AIStore proxy. A successful exploit may lead to information disclosure and unauthorized start or stop operations that affect the integrity and availability of ETL data-processing pipelines.","display_title":"Security issue reported in Software component","display_summary":"NVIDIA AIStore for Linux and Kubernetes contains a missing authorization vulnerability in the ETL management API where an unauthenticated remote attacker may access ETL information or control existing ETL jobs by sending…","display_reference":"CVE-2026-65172","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-65172","source_title":"NVIDIA AIStore for Linux and Kubernetes contains a missing authorization vulnerability in the ETL management API where an unauthenticated remote attacker may access ETL information or control existing ETL jobs by sending crafted GET or POST requests to an AIStore proxy. A successful exploit may lead to information disclosure and unauthorized start or stop operations that affect the integrity and availability of ETL data-processing pipelines.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T17:34:01.285Z","source_hash":"content-fingerprint:fnv1a-407ceeb6","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Cloud & container infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-65172-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"NVIDIA AIStore for Linux and Kubernetes contains a missing authorization vulnerability in the ETL management API where an unauthenticated remote attacker may access ETL information or control existing ETL jobs by sending crafted GET or POST requests to an AIStore proxy. A successful exploit may lead to information disclosure and unauthorized start or stop operations that affect the integrity and availability of ETL data-processing pipelines.","source_quote_or_pointer":"Security Advisory CVE-2026-65172","fact_id":"SEA-CVE-2026-65172-F1","document_citation":"Security Advisory CVE-2026-65172"},{"id":"SEA-CVE-2026-65172-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"NVIDIA AIStore for Linux and Kubernetes contains a missing authorization vulnerability in the ETL management API where an unauthenticated remote attacker may access ETL information or control existing ETL jobs by sending crafted GET or POST requests to an AIStore proxy.","source_quote_or_pointer":"Advisory description (CVE-2026-65172)","fact_id":"SEA-CVE-2026-65172-F2","document_citation":"Advisory description (CVE-2026-65172)"}],"source_stated_contributors":["NVIDIA AIStore for Linux and Kubernetes contains a missing authorization vulnerability in the ETL management API where an unauthenticated remote attacker may access ETL information or control existing ETL jobs by sending crafted GET or POST requests to an AIStore proxy."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.infrastructure_modification"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-65172","reporting_entity":"CVE-2026-65172","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-65172-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-65172-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-65172"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-65170","title":"NVIDIA AIStore for Linux contains a vulnerability in the experimental HT backend where an unauthenticated remote attacker may cause server-side request forgery by supplying a crafted original URL. A successful exploit of this vulnerability may lead to information disclosure.","display_title":"Software component issue could reach internal services","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-65170","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-65170","source_title":"NVIDIA AIStore for Linux contains a vulnerability in the experimental HT backend where an unauthenticated remote attacker may cause server-side request forgery by supplying a crafted original URL. A successful exploit of this vulnerability may lead to information disclosure.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T17:34:01.286Z","source_hash":"content-fingerprint:fnv1a-f692beea","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-65170-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"NVIDIA AIStore for Linux contains a vulnerability in the experimental HT backend where an unauthenticated remote attacker may cause server-side request forgery by supplying a crafted original URL. A successful exploit of this vulnerability may lead to information disclosure.","source_quote_or_pointer":"Security Advisory CVE-2026-65170","fact_id":"SEA-CVE-2026-65170-F1","document_citation":"Security Advisory CVE-2026-65170"},{"id":"SEA-CVE-2026-65170-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"NVIDIA AIStore for Linux contains a vulnerability in the experimental HT backend where an unauthenticated remote attacker may cause server-side request forgery by supplying a crafted original URL. A successful exploit of this vulnerability may lead to information disclosure.","source_quote_or_pointer":"Advisory description (CVE-2026-65170)","fact_id":"SEA-CVE-2026-65170-F2","document_citation":"Advisory description (CVE-2026-65170)"}],"source_stated_contributors":["NVIDIA AIStore for Linux contains a vulnerability in the experimental HT backend where an unauthenticated remote attacker may cause server-side request forgery by supplying a crafted original URL. A successful exploit of this vulnerability may lead to information disclosure."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Internal network access","Cloud metadata or credential exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-65170","reporting_entity":"CVE-2026-65170","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-65170-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-65170-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"The service fetched a URL chosen by the caller and could be steered at internal systems. Restrict outbound destinations and block internal address ranges.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-65170"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-65164","title":"NVIDIA AIStore for Linux contains a path traversal vulnerability in the dSort archive extraction component where a remote attacker may cause an improper limitation of a pathname to a restricted directory by supplying crafted archive member names to a dSort job. A successful exploit may lead to arbitrary file creation or overwrite, code execution, information disclosure, data tampering, and denial of service.","display_title":"Software component issue could allow unintended commands to run","display_summary":"NVIDIA AIStore for Linux contains a path traversal vulnerability in the dSort archive extraction component where a remote attacker may cause an improper limitation of a pathname to a restricted directory by supplying…","display_reference":"CVE-2026-65164","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-65164","source_title":"NVIDIA AIStore for Linux contains a path traversal vulnerability in the dSort archive extraction component where a remote attacker may cause an improper limitation of a pathname to a restricted directory by supplying crafted archive member names to a dSort job. A successful exploit may lead to arbitrary file creation or overwrite, code execution, information disclosure, data tampering, and denial of service.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T17:34:01.286Z","source_hash":"content-fingerprint:fnv1a-3683f1c9","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-65164-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"NVIDIA AIStore for Linux contains a path traversal vulnerability in the dSort archive extraction component where a remote attacker may cause an improper limitation of a pathname to a restricted directory by supplying crafted archive member names to a dSort job. A successful exploit may lead to arbitrary file creation or overwrite, code execution, information disclosure, data tampering, and denial of service.","source_quote_or_pointer":"Security Advisory CVE-2026-65164","fact_id":"SEA-CVE-2026-65164-F1","document_citation":"Security Advisory CVE-2026-65164"},{"id":"SEA-CVE-2026-65164-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"NVIDIA AIStore for Linux contains a path traversal vulnerability in the dSort archive extraction component where a remote attacker may cause an improper limitation of a pathname to a restricted directory by supplying crafted archive member names to a dSort job.","source_quote_or_pointer":"Advisory description (CVE-2026-65164)","fact_id":"SEA-CVE-2026-65164-F2","document_citation":"Advisory description (CVE-2026-65164)"}],"source_stated_contributors":["NVIDIA AIStore for Linux contains a path traversal vulnerability in the dSort archive extraction component where a remote attacker may cause an improper limitation of a pathname to a restricted directory by supplying crafted archive member names to a dSort job."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-65164","reporting_entity":"CVE-2026-65164","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-65164-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-65164-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-65164"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-65162","title":"NVIDIA AIStore for Linux contains a vulnerability in the legacy ETL Kubernetes PodSpec initialization API where a remote attacker may supply Kubernetes host-namespace and container-security settings. A successful exploit may lead to code execution, privilege escalation, information disclosure, data tampering, and denial of service.","display_title":"Software component issue could allow unintended commands to run","display_summary":"NVIDIA AIStore for Linux contains a vulnerability in the legacy ETL Kubernetes PodSpec initialization API where a remote attacker may supply Kubernetes host-namespace and container-security settings.","display_reference":"CVE-2026-65162","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-65162","source_title":"NVIDIA AIStore for Linux contains a vulnerability in the legacy ETL Kubernetes PodSpec initialization API where a remote attacker may supply Kubernetes host-namespace and container-security settings. A successful exploit may lead to code execution, privilege escalation, information disclosure, data tampering, and denial of service.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T17:34:01.286Z","source_hash":"content-fingerprint:fnv1a-e0dd5363","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Cloud & container infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-65162-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"NVIDIA AIStore for Linux contains a vulnerability in the legacy ETL Kubernetes PodSpec initialization API where a remote attacker may supply Kubernetes host-namespace and container-security settings. A successful exploit may lead to code execution, privilege escalation, information disclosure, data tampering, and denial of service.","source_quote_or_pointer":"Security Advisory CVE-2026-65162","fact_id":"SEA-CVE-2026-65162-F1","document_citation":"Security Advisory CVE-2026-65162"},{"id":"SEA-CVE-2026-65162-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"NVIDIA AIStore for Linux contains a vulnerability in the legacy ETL Kubernetes PodSpec initialization API where a remote attacker may supply Kubernetes host-namespace and container-security settings.","source_quote_or_pointer":"Advisory description (CVE-2026-65162)","fact_id":"SEA-CVE-2026-65162-F2","document_citation":"Advisory description (CVE-2026-65162)"}],"source_stated_contributors":["NVIDIA AIStore for Linux contains a vulnerability in the legacy ETL Kubernetes PodSpec initialization API where a remote attacker may supply Kubernetes host-namespace and container-security settings."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.infrastructure_modification"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-65162","reporting_entity":"CVE-2026-65162","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-65162-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-65162-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-65162"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-65148","title":"NVIDIA DALI contains a vulnerability where an attacker could cause a stack-based buffer overflow. A successful exploit of this vulnerability might lead to code execution, information disclosure, data tampering, and denial of service.","display_title":"Software component issue could allow unintended commands to run","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-65148","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-65148","source_title":"NVIDIA DALI contains a vulnerability where an attacker could cause a stack-based buffer overflow. A successful exploit of this vulnerability might lead to code execution, information disclosure, data tampering, and denial of service.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T17:34:01.287Z","source_hash":"content-fingerprint:fnv1a-6ee66403","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-65148-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"NVIDIA DALI contains a vulnerability where an attacker could cause a stack-based buffer overflow. A successful exploit of this vulnerability might lead to code execution, information disclosure, data tampering, and denial of service.","source_quote_or_pointer":"Security Advisory CVE-2026-65148","fact_id":"SEA-CVE-2026-65148-F1","document_citation":"Security Advisory CVE-2026-65148"},{"id":"SEA-CVE-2026-65148-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"NVIDIA DALI contains a vulnerability where an attacker could cause a stack-based buffer overflow. A successful exploit of this vulnerability might lead to code execution, information disclosure, data tampering, and denial of service.","source_quote_or_pointer":"Advisory description (CVE-2026-65148)","fact_id":"SEA-CVE-2026-65148-F2","document_citation":"Advisory description (CVE-2026-65148)"}],"source_stated_contributors":["NVIDIA DALI contains a vulnerability where an attacker could cause a stack-based buffer overflow. A successful exploit of this vulnerability might lead to code execution, information disclosure, data tampering, and denial of service."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-65148","reporting_entity":"CVE-2026-65148","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-65148-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-65148-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-65148"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-65141","title":"NVIDIA Isaac Lab contains a vulnerability where an attacker could cause an eval injection. A successful exploit of this vulnerability might lead to code execution, information disclosure, data tampering, and denial of service.","display_title":"Software component issue could allow unintended commands to run","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-65141","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-65141","source_title":"NVIDIA Isaac Lab contains a vulnerability where an attacker could cause an eval injection. A successful exploit of this vulnerability might lead to code execution, information disclosure, data tampering, and denial of service.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T17:34:01.287Z","source_hash":"content-fingerprint:fnv1a-fba01818","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-65141-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"NVIDIA Isaac Lab contains a vulnerability where an attacker could cause an eval injection. A successful exploit of this vulnerability might lead to code execution, information disclosure, data tampering, and denial of service.","source_quote_or_pointer":"Security Advisory CVE-2026-65141","fact_id":"SEA-CVE-2026-65141-F1","document_citation":"Security Advisory CVE-2026-65141"},{"id":"SEA-CVE-2026-65141-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"NVIDIA Isaac Lab contains a vulnerability where an attacker could cause an eval injection. A successful exploit of this vulnerability might lead to code execution, information disclosure, data tampering, and denial of service.","source_quote_or_pointer":"Advisory description (CVE-2026-65141)","fact_id":"SEA-CVE-2026-65141-F2","document_citation":"Advisory description (CVE-2026-65141)"}],"source_stated_contributors":["NVIDIA Isaac Lab contains a vulnerability where an attacker could cause an eval injection. A successful exploit of this vulnerability might lead to code execution, information disclosure, data tampering, and denial of service."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.code_execution"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-65141","reporting_entity":"CVE-2026-65141","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-65141-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-65141-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-65141"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-65131","title":"NVIDIA NVSentinel for Linux contains a vulnerability in the platform-connectors component, where the gRPC health-event interface, exposed over a world-writable Unix domain socket, lacks authentication. A successful exploit of this vulnerability might lead to denial of service.","display_title":"Software component issue could make the service unavailable","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-65131","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-65131","source_title":"NVIDIA NVSentinel for Linux contains a vulnerability in the platform-connectors component, where the gRPC health-event interface, exposed over a world-writable Unix domain socket, lacks authentication. A successful exploit of this vulnerability might lead to denial of service.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T17:34:01.287Z","source_hash":"content-fingerprint:fnv1a-f8fff82b","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-65131-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"NVIDIA NVSentinel for Linux contains a vulnerability in the platform-connectors component, where the gRPC health-event interface, exposed over a world-writable Unix domain socket, lacks authentication. A successful exploit of this vulnerability might lead to denial of service.","source_quote_or_pointer":"Security Advisory CVE-2026-65131","fact_id":"SEA-CVE-2026-65131-F1","document_citation":"Security Advisory CVE-2026-65131"},{"id":"SEA-CVE-2026-65131-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"NVIDIA NVSentinel for Linux contains a vulnerability in the platform-connectors component, where the gRPC health-event interface, exposed over a world-writable Unix domain socket, lacks authentication. A successful exploit of this vulnerability might lead to denial of service.","source_quote_or_pointer":"Advisory description (CVE-2026-65131)","fact_id":"SEA-CVE-2026-65131-F2","document_citation":"Advisory description (CVE-2026-65131)"}],"source_stated_contributors":["NVIDIA NVSentinel for Linux contains a vulnerability in the platform-connectors component, where the gRPC health-event interface, exposed over a world-writable Unix domain socket, lacks authentication. A successful exploit of this vulnerability might lead to denial of service."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["arch.event_driven"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-65131","reporting_entity":"CVE-2026-65131","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-65131-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-65131-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-65131"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-65103","title":"NVIDIA AIStore for Linux contains a path traversal vulnerability in the target-side object rename handler, where an unauthenticated remote attacker could cause an improper limitation of a pathname to a restricted directory by submitting a crafted rename destination directly to an AIStore target, resulting in the arbitrary creation or overwrite of a file. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, data tampering, and denial of service.","display_title":"Software component issue could allow unintended commands to run","display_summary":"NVIDIA AIStore for Linux contains a path traversal vulnerability in the target-side object rename handler, where an unauthenticated remote attacker could cause an improper limitation of a pathname to a restricted…","display_reference":"CVE-2026-65103","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-65103","source_title":"NVIDIA AIStore for Linux contains a path traversal vulnerability in the target-side object rename handler, where an unauthenticated remote attacker could cause an improper limitation of a pathname to a restricted directory by submitting a crafted rename destination directly to an AIStore target, resulting in the arbitrary creation or overwrite of a file. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, data tampering, and denial of service.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T17:34:01.292Z","source_hash":"content-fingerprint:fnv1a-575334c4","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-65103-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"NVIDIA AIStore for Linux contains a path traversal vulnerability in the target-side object rename handler, where an unauthenticated remote attacker could cause an improper limitation of a pathname to a restricted directory by submitting a crafted rename destination directly to an AIStore target, resulting in the arbitrary creation or overwrite of a file. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, data tampering, and denial of service.","source_quote_or_pointer":"Security Advisory CVE-2026-65103","fact_id":"SEA-CVE-2026-65103-F1","document_citation":"Security Advisory CVE-2026-65103"},{"id":"SEA-CVE-2026-65103-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"NVIDIA AIStore for Linux contains a path traversal vulnerability in the target-side object rename handler, where an unauthenticated remote attacker could cause an improper limitation of a pathname to a restricted directory by submitting a crafted rename destination directly to an AIStore target, resulting in the…","source_quote_or_pointer":"Advisory description (CVE-2026-65103)","fact_id":"SEA-CVE-2026-65103-F2","document_citation":"Advisory description (CVE-2026-65103)"}],"source_stated_contributors":["NVIDIA AIStore for Linux contains a path traversal vulnerability in the target-side object rename handler, where an unauthenticated remote attacker could cause an improper limitation of a pathname to a restricted directory by submitting a crafted rename destination directly to an AIStore target, resulting in the…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-65103","reporting_entity":"CVE-2026-65103","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-65103-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-65103-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-65103"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-65101","title":"NVIDIA AIStore for Linux contains a vulnerability in the distributed sort component where an attacker could cause server-side request forgery by supplying a crafted external key map URL. A successful exploit of this vulnerability might lead to information disclosure.","display_title":"Software component issue could reach internal services","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-65101","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-65101","source_title":"NVIDIA AIStore for Linux contains a vulnerability in the distributed sort component where an attacker could cause server-side request forgery by supplying a crafted external key map URL. A successful exploit of this vulnerability might lead to information disclosure.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T17:34:01.293Z","source_hash":"content-fingerprint:fnv1a-4c08269a","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-65101-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"NVIDIA AIStore for Linux contains a vulnerability in the distributed sort component where an attacker could cause server-side request forgery by supplying a crafted external key map URL. A successful exploit of this vulnerability might lead to information disclosure.","source_quote_or_pointer":"Security Advisory CVE-2026-65101","fact_id":"SEA-CVE-2026-65101-F1","document_citation":"Security Advisory CVE-2026-65101"},{"id":"SEA-CVE-2026-65101-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"NVIDIA AIStore for Linux contains a vulnerability in the distributed sort component where an attacker could cause server-side request forgery by supplying a crafted external key map URL. A successful exploit of this vulnerability might lead to information disclosure.","source_quote_or_pointer":"Advisory description (CVE-2026-65101)","fact_id":"SEA-CVE-2026-65101-F2","document_citation":"Advisory description (CVE-2026-65101)"}],"source_stated_contributors":["NVIDIA AIStore for Linux contains a vulnerability in the distributed sort component where an attacker could cause server-side request forgery by supplying a crafted external key map URL. A successful exploit of this vulnerability might lead to information disclosure."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["arch.distributed_tx"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Internal network access","Cloud metadata or credential exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-65101","reporting_entity":"CVE-2026-65101","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-65101-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-65101-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"The service fetched a URL chosen by the caller and could be steered at internal systems. Restrict outbound destinations and block internal address ranges.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-65101"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-53711","title":"MCP Context Forge provides an MCP Admin UI for managing gateway resources. From 0.2.0 until 0.3.1, the Global Prompts feature stores a prompt template without sufficient output encoding before the MCP Admin UI renders it. An authenticated attacker can save markup containing script-capable event handlers, and the code executes when another user views the saved prompt. The stored cross-site scripting can alter the interface, present phishing content, observe keystrokes available to the page, and act with the viewer's browser session. This issue is fixed in version 0.3.1.","display_title":"Software component issue could run attacker-controlled scripts in a browser","display_summary":"MCP Context Forge provides an MCP Admin UI for managing gateway resources. From 0.2.0 until 0.3.1, the Global Prompts feature stores a prompt template without sufficient output encoding before the MCP Admin UI renders…","display_reference":"CVE-2026-53711","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53711","source_title":"MCP Context Forge provides an MCP Admin UI for managing gateway resources. From 0.2.0 until 0.3.1, the Global Prompts feature stores a prompt template without sufficient output encoding before the MCP Admin UI renders it. An authenticated attacker can save markup containing script-capable event handlers, and the code executes when another user views the saved prompt. The stored cross-site scripting can alter the interface, present phishing content, observe keystrokes available to the page, and act with the viewer's browser session. This issue is fixed in version 0.3.1.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T17:34:01.294Z","source_hash":"content-fingerprint:fnv1a-d8dec396","affected_system":{"organization":"Software component project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-53711-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"MCP Context Forge provides an MCP Admin UI for managing gateway resources. From 0.2.0 until 0.3.1, the Global Prompts feature stores a prompt template without sufficient output encoding before the MCP Admin UI renders it. An authenticated attacker can save markup containing script-capable event handlers, and the code executes when another user views the saved prompt. The stored cross-site scripting can alter the interface, present phishing content, observe keystrokes available to the page, and act with the viewer's browser session. This issue is fixed in version 0.3.1.","source_quote_or_pointer":"Security Advisory CVE-2026-53711","fact_id":"SEA-CVE-2026-53711-F1","document_citation":"Security Advisory CVE-2026-53711"},{"id":"SEA-CVE-2026-53711-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"MCP Context Forge provides an MCP Admin UI for managing gateway resources. From 0.2.0 until 0.3.1, the Global Prompts feature stores a prompt template without sufficient output encoding before the MCP Admin UI renders it.","source_quote_or_pointer":"Advisory description (CVE-2026-53711)","fact_id":"SEA-CVE-2026-53711-F2","document_citation":"Advisory description (CVE-2026-53711)"}],"source_stated_contributors":["MCP Context Forge provides an MCP Admin UI for managing gateway resources. From 0.2.0 until 0.3.1, the Global Prompts feature stores a prompt template without sufficient output encoding before the MCP Admin UI renders it."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.write_action","data.pii","data.untrusted_external_text","arch.event_driven","arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-010"],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-53711","reporting_entity":"CVE-2026-53711","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-53711-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-53711-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-53711"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-53709","title":"MCP Context Forge is an MCP gateway and administrative platform. Prior to 1.0.2, mcpgateway/config.py and .env.example ship a known JWT_SECRET_KEY, while verify_jwt_token() accepts HS256 tokens signed with that key and get_current_user() creates a platform administrator when the token subject matches PLATFORM_ADMIN_EMAIL and REQUIRE_USER_IN_DB is false. A remote unauthenticated attacker can therefore mint accepted administrator tokens without a database account. While the vulnerable signing key remains configured and the platform-admin bootstrap remains enabled, forged access survives password rotation, account deletion, and session revocation, allowing administrative disclosure, modification, and service disruption. This issue is fixed in version 1.0.2.","display_title":"Software component issue could expose accounts or credentials","display_summary":"MCP Context Forge is an MCP gateway and administrative platform. Prior to 1.0.2, mcpgateway/config.py and .env.example ship a known JWTSECRETKEY, while verifyjwttoken() accepts HS256 tokens signed with that key and…","display_reference":"CVE-2026-53709","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53709","source_title":"MCP Context Forge is an MCP gateway and administrative platform. Prior to 1.0.2, mcpgateway/config.py and .env.example ship a known JWT_SECRET_KEY, while verify_jwt_token() accepts HS256 tokens signed with that key and get_current_user() creates a platform administrator when the token subject matches PLATFORM_ADMIN_EMAIL and REQUIRE_USER_IN_DB is false. A remote unauthenticated attacker can therefore mint accepted administrator tokens without a database account. While the vulnerable signing key remains configured and the platform-admin bootstrap remains enabled, forged access survives password rotation, account deletion, and session revocation, allowing administrative disclosure, modification, and service disruption. This issue is fixed in version 1.0.2.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T17:34:01.295Z","source_hash":"content-fingerprint:fnv1a-6deaeaf1","affected_system":{"organization":"Software component project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-53709-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"MCP Context Forge is an MCP gateway and administrative platform. Prior to 1.0.2, mcpgateway/config.py and .env.example ship a known JWT_SECRET_KEY, while verify_jwt_token() accepts HS256 tokens signed with that key and get_current_user() creates a platform administrator when the token subject matches PLATFORM_ADMIN_EMAIL and REQUIRE_USER_IN_DB is false. A remote unauthenticated attacker can therefore mint accepted administrator tokens without a database account. While the vulnerable signing key remains configured and the platform-admin bootstrap remains enabled, forged access survives password rotation, account deletion, and session revocation, allowing administrative disclosure, modification, and service disruption. This issue is fixed in version 1.0.2.","source_quote_or_pointer":"Security Advisory CVE-2026-53709","fact_id":"SEA-CVE-2026-53709-F1","document_citation":"Security Advisory CVE-2026-53709"},{"id":"SEA-CVE-2026-53709-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"MCP Context Forge is an MCP gateway and administrative platform. Prior to 1.0.2, mcpgateway/config.py and .env.example ship a known JWTSECRETKEY, while verifyjwttoken() accepts HS256 tokens signed with that key and getcurrentuser() creates a platform administrator when the token subject matches PLATFORMADMINEMAIL and…","source_quote_or_pointer":"Advisory description (CVE-2026-53709)","fact_id":"SEA-CVE-2026-53709-F2","document_citation":"Advisory description (CVE-2026-53709)"}],"source_stated_contributors":["MCP Context Forge is an MCP gateway and administrative platform. Prior to 1.0.2, mcpgateway/config.py and .env.example ship a known JWTSECRETKEY, while verifyjwttoken() accepts HS256 tokens signed with that key and getcurrentuser() creates a platform administrator when the token subject matches PLATFORMADMINEMAIL and…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.privileged_action","auth.write_action","data.credentials_secrets","arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-012","SEA-FM-010"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-53709","reporting_entity":"CVE-2026-53709","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-53709-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-53709-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-53709"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-11731","title":"An authentication bypass vulnerability in the listed NETGEAR RAX series models allows an unauthenticated attacker with adjacent access to the affected device’s management service to access certain device information or modify administrative settings. This vulnerability may impact the confidentiality and integrity of management data and the availability of device-management functions.","display_title":"Software component issue could allow unauthorized access","display_summary":"An authentication bypass vulnerability in the listed NETGEAR RAX series models allows an unauthenticated attacker with adjacent access to the affected device’s management service to access certain device information or…","display_reference":"CVE-2026-11731","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-11731","source_title":"An authentication bypass vulnerability in the listed NETGEAR RAX series models allows an unauthenticated attacker with adjacent access to the affected device’s management service to access certain device information or modify administrative settings. This vulnerability may impact the confidentiality and integrity of management data and the availability of device-management functions.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T17:34:01.296Z","source_hash":"content-fingerprint:fnv1a-643c118a","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-11731-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"An authentication bypass vulnerability in the listed NETGEAR RAX series models allows an unauthenticated attacker with adjacent access to the affected device’s management service to access certain device information or modify administrative settings. This vulnerability may impact the confidentiality and integrity of management data and the availability of device-management functions.","source_quote_or_pointer":"Security Advisory CVE-2026-11731","fact_id":"SEA-CVE-2026-11731-F1","document_citation":"Security Advisory CVE-2026-11731"},{"id":"SEA-CVE-2026-11731-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"An authentication bypass vulnerability in the listed NETGEAR RAX series models allows an unauthenticated attacker with adjacent access to the affected device’s management service to access certain device information or modify administrative settings.","source_quote_or_pointer":"Advisory description (CVE-2026-11731)","fact_id":"SEA-CVE-2026-11731-F2","document_citation":"Advisory description (CVE-2026-11731)"}],"source_stated_contributors":["An authentication bypass vulnerability in the listed NETGEAR RAX series models allows an unauthenticated attacker with adjacent access to the affected device’s management service to access certain device information or modify administrative settings."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-11731","reporting_entity":"CVE-2026-11731","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-11731-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-11731-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-11731"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-11730","title":"Insufficient session randomness vulnerability in the listed NETGEAR Extender models allows a network-adjacent attacker having network access (such as WiFi credentials) to predict valid session identifiers and hijack an authenticated administrator session on the web management portal.","display_title":"Software component issue could expose accounts or credentials","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-11730","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-11730","source_title":"Insufficient session randomness vulnerability in the listed NETGEAR Extender models allows a network-adjacent attacker having network access (such as WiFi credentials) to predict valid session identifiers and hijack an authenticated administrator session on the web management portal.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T17:34:01.296Z","source_hash":"content-fingerprint:fnv1a-42685005","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-11730-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Insufficient session randomness vulnerability in the listed NETGEAR Extender models allows a network-adjacent attacker having network access (such as WiFi credentials) to predict valid session identifiers and hijack an authenticated administrator session on the web management portal.","source_quote_or_pointer":"Security Advisory CVE-2026-11730","fact_id":"SEA-CVE-2026-11730-F1","document_citation":"Security Advisory CVE-2026-11730"},{"id":"SEA-CVE-2026-11730-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Insufficient session randomness vulnerability in the listed NETGEAR Extender models allows a network-adjacent attacker having network access (such as WiFi credentials) to predict valid session identifiers and hijack an authenticated administrator session on the web management portal.","source_quote_or_pointer":"Advisory description (CVE-2026-11730)","fact_id":"SEA-CVE-2026-11730-F2","document_citation":"Advisory description (CVE-2026-11730)"}],"source_stated_contributors":["Insufficient session randomness vulnerability in the listed NETGEAR Extender models allows a network-adjacent attacker having network access (such as WiFi credentials) to predict valid session identifiers and hijack an authenticated administrator session on the web management portal."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-11730","reporting_entity":"CVE-2026-11730","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-11730-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-11730-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-11730"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109781","title":"Denial-of-service in the Printing: Output component. This vulnerability was fixed in Firefox 158 and Firefox ESR 153.5.","display_title":"Security issue reported in Denial-of-service in the Printing","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-109781","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109781","source_title":"Denial-of-service in the Printing: Output component. This vulnerability was fixed in Firefox 158 and Firefox ESR 153.5.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T17:34:01.297Z","source_hash":"content-fingerprint:fnv1a-c7b132b5","affected_system":{"organization":"Denial-of-service in the Printing project","product":"Denial-of-service in the Printing","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109781-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Denial-of-service in the Printing: Output component. This vulnerability was fixed in Firefox 158 and Firefox ESR 153.5.","source_quote_or_pointer":"Security Advisory CVE-2026-109781","fact_id":"SEA-CVE-2026-109781-F1","document_citation":"Security Advisory CVE-2026-109781"},{"id":"SEA-CVE-2026-109781-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Denial-of-service in the Printing: Output component. This vulnerability was fixed in Firefox 158 and Firefox ESR 153.5.","source_quote_or_pointer":"Advisory description (CVE-2026-109781)","fact_id":"SEA-CVE-2026-109781-F2","document_citation":"Advisory description (CVE-2026-109781)"}],"source_stated_contributors":["Denial-of-service in the Printing: Output component. This vulnerability was fixed in Firefox 158 and Firefox ESR 153.5."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109781","reporting_entity":"CVE-2026-109781","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109781-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109781-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-109781"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109775","title":"Denial-of-service in the WebRTC component. This vulnerability was fixed in Firefox 158 and Firefox ESR 153.5.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-109775","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109775","source_title":"Denial-of-service in the WebRTC component. This vulnerability was fixed in Firefox 158 and Firefox ESR 153.5.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T17:34:01.297Z","source_hash":"content-fingerprint:fnv1a-5f73ee92","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109775-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Denial-of-service in the WebRTC component. This vulnerability was fixed in Firefox 158 and Firefox ESR 153.5.","source_quote_or_pointer":"Security Advisory CVE-2026-109775","fact_id":"SEA-CVE-2026-109775-F1","document_citation":"Security Advisory CVE-2026-109775"},{"id":"SEA-CVE-2026-109775-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Denial-of-service in the WebRTC component. This vulnerability was fixed in Firefox 158 and Firefox ESR 153.5.","source_quote_or_pointer":"Advisory description (CVE-2026-109775)","fact_id":"SEA-CVE-2026-109775-F2","document_citation":"Advisory description (CVE-2026-109775)"}],"source_stated_contributors":["Denial-of-service in the WebRTC component. This vulnerability was fixed in Firefox 158 and Firefox ESR 153.5."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109775","reporting_entity":"CVE-2026-109775","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109775-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109775-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-109775"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109773","title":"Denial-of-service in the Sync component. This vulnerability was fixed in Firefox 158.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-109773","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109773","source_title":"Denial-of-service in the Sync component. This vulnerability was fixed in Firefox 158.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T17:34:01.297Z","source_hash":"content-fingerprint:fnv1a-b87947c8","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109773-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Denial-of-service in the Sync component. This vulnerability was fixed in Firefox 158.","source_quote_or_pointer":"Security Advisory CVE-2026-109773","fact_id":"SEA-CVE-2026-109773-F1","document_citation":"Security Advisory CVE-2026-109773"},{"id":"SEA-CVE-2026-109773-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Denial-of-service in the Sync component. This vulnerability was fixed in Firefox 158.","source_quote_or_pointer":"Advisory description (CVE-2026-109773)","fact_id":"SEA-CVE-2026-109773-F2","document_citation":"Advisory description (CVE-2026-109773)"}],"source_stated_contributors":["Denial-of-service in the Sync component. This vulnerability was fixed in Firefox 158."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109773","reporting_entity":"CVE-2026-109773","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109773-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109773-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-109773"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109768","title":"Denial-of-service in the Site Reports component. This vulnerability was fixed in Firefox 158.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-109768","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109768","source_title":"Denial-of-service in the Site Reports component. This vulnerability was fixed in Firefox 158.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T17:34:01.297Z","source_hash":"content-fingerprint:fnv1a-cacfe4","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109768-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Denial-of-service in the Site Reports component. This vulnerability was fixed in Firefox 158.","source_quote_or_pointer":"Security Advisory CVE-2026-109768","fact_id":"SEA-CVE-2026-109768-F1","document_citation":"Security Advisory CVE-2026-109768"},{"id":"SEA-CVE-2026-109768-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Denial-of-service in the Site Reports component. This vulnerability was fixed in Firefox 158.","source_quote_or_pointer":"Advisory description (CVE-2026-109768)","fact_id":"SEA-CVE-2026-109768-F2","document_citation":"Advisory description (CVE-2026-109768)"}],"source_stated_contributors":["Denial-of-service in the Site Reports component. This vulnerability was fixed in Firefox 158."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109768","reporting_entity":"CVE-2026-109768","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109768-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109768-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-109768"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109523","title":"A vulnerability was found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. Affected by this vulnerability is an unknown functionality of the file Admin/getclinic.php of the component AJAX Endpoint. The manipulation of the argument city/cid results in sql injection. The attack can be executed remotely. The exploit has been made public and could be used. This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable. The project was informed of the problem early through an issue report but has not responded yet.","display_title":"Software component issue could expose or alter stored data","display_summary":"A vulnerability was found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5.","display_reference":"CVE-2026-109523","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109523","source_title":"A vulnerability was found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. Affected by this vulnerability is an unknown functionality of the file Admin/getclinic.php of the component AJAX Endpoint. The manipulation of the argument city/cid results in sql injection. The attack can be executed remotely. The exploit has been made public and could be used. This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable. The project was informed of the problem early through an issue report but has not responded yet.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T17:34:01.298Z","source_hash":"content-fingerprint:fnv1a-4950196d","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109523-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability was found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. Affected by this vulnerability is an unknown functionality of the file Admin/getclinic.php of the component AJAX Endpoint. The manipulation of the argument city/cid results in sql injection. The attack can be executed remotely. The exploit has been made public and could be used. This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable. The project was informed of the problem early through an issue report but has not responded yet.","source_quote_or_pointer":"Security Advisory CVE-2026-109523","fact_id":"SEA-CVE-2026-109523-F1","document_citation":"Security Advisory CVE-2026-109523"},{"id":"SEA-CVE-2026-109523-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability was found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. Affected by this vulnerability is an unknown functionality of the file Admin/getclinic.php of the component AJAX Endpoint. The manipulation of the argument city/cid results in sql injection.","source_quote_or_pointer":"Advisory description (CVE-2026-109523)","fact_id":"SEA-CVE-2026-109523-F2","document_citation":"Advisory description (CVE-2026-109523)"}],"source_stated_contributors":["A vulnerability was found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. Affected by this vulnerability is an unknown functionality of the file Admin/getclinic.php of the component AJAX Endpoint. The manipulation of the argument city/cid results in sql injection."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.public_publication"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109523","reporting_entity":"CVE-2026-109523","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109523-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109523-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-109523"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109522","title":"A vulnerability has been found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. Affected is an unknown function of the file Admin/deleteclinic.php of the component Admin CRUD Endpoint. The manipulation of the argument cid/did leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided. The project was informed of the problem early through an issue report but has not responded yet.","display_title":"Software component issue could expose or alter stored data","display_summary":"A vulnerability has been found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5.","display_reference":"CVE-2026-109522","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109522","source_title":"A vulnerability has been found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. Affected is an unknown function of the file Admin/deleteclinic.php of the component Admin CRUD Endpoint. The manipulation of the argument cid/did leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided. The project was informed of the problem early through an issue report but has not responded yet.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T17:34:01.299Z","source_hash":"content-fingerprint:fnv1a-e67776f8","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109522-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability has been found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. Affected is an unknown function of the file Admin/deleteclinic.php of the component Admin CRUD Endpoint. The manipulation of the argument cid/did leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided. The project was informed of the problem early through an issue report but has not responded yet.","source_quote_or_pointer":"Security Advisory CVE-2026-109522","fact_id":"SEA-CVE-2026-109522-F1","document_citation":"Security Advisory CVE-2026-109522"},{"id":"SEA-CVE-2026-109522-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability has been found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. Affected is an unknown function of the file Admin/deleteclinic.php of the component Admin CRUD Endpoint. The manipulation of the argument cid/did leads to sql injection.","source_quote_or_pointer":"Advisory description (CVE-2026-109522)","fact_id":"SEA-CVE-2026-109522-F2","document_citation":"Advisory description (CVE-2026-109522)"}],"source_stated_contributors":["A vulnerability has been found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. Affected is an unknown function of the file Admin/deleteclinic.php of the component Admin CRUD Endpoint. The manipulation of the argument cid/did leads to sql injection."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.public_publication","data.pii","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109522","reporting_entity":"CVE-2026-109522","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109522-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109522-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-109522"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109521","title":"A vulnerability was detected in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This affects an unknown function of the file changebookingstatus.php. Performing a manipulation of the argument dateselected results in sql injection. The attack may be initiated remotely. The exploit is now public and may be used. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available. The project was informed of the problem early through an issue report but has not responded yet.","display_title":"Software component issue could expose or alter stored data","display_summary":"A vulnerability was detected in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This affects an unknown function of the file changebookingstatus.php.","display_reference":"CVE-2026-109521","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109521","source_title":"A vulnerability was detected in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This affects an unknown function of the file changebookingstatus.php. Performing a manipulation of the argument dateselected results in sql injection. The attack may be initiated remotely. The exploit is now public and may be used. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available. The project was informed of the problem early through an issue report but has not responded yet.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T17:34:01.299Z","source_hash":"content-fingerprint:fnv1a-5672b097","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109521-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability was detected in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This affects an unknown function of the file changebookingstatus.php. Performing a manipulation of the argument dateselected results in sql injection. The attack may be initiated remotely. The exploit is now public and may be used. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available. The project was informed of the problem early through an issue report but has not responded yet.","source_quote_or_pointer":"Security Advisory CVE-2026-109521","fact_id":"SEA-CVE-2026-109521-F1","document_citation":"Security Advisory CVE-2026-109521"},{"id":"SEA-CVE-2026-109521-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability was detected in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This affects an unknown function of the file changebookingstatus.php. Performing a manipulation of the argument dateselected results in sql injection. The attack may be initiated remotely.","source_quote_or_pointer":"Advisory description (CVE-2026-109521)","fact_id":"SEA-CVE-2026-109521-F2","document_citation":"Advisory description (CVE-2026-109521)"}],"source_stated_contributors":["A vulnerability was detected in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This affects an unknown function of the file changebookingstatus.php. Performing a manipulation of the argument dateselected results in sql injection. The attack may be initiated remotely."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","auth.public_publication"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109521","reporting_entity":"CVE-2026-109521","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109521-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109521-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-109521"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108965","title":"A vulnerability was determined in SourceCodester Performance Indicator System 1.0. This vulnerability affects unknown code of the file /opils/staff/edit_quantity.php. Executing a manipulation of the argument pqty can lead to sql injection. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.","display_title":"Software component issue could expose or alter stored data","display_summary":"A vulnerability was determined in SourceCodester Performance Indicator System 1.0. This vulnerability affects unknown code of the file /opils/staff/editquantity.php.","display_reference":"CVE-2026-108965","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108965","source_title":"A vulnerability was determined in SourceCodester Performance Indicator System 1.0. This vulnerability affects unknown code of the file /opils/staff/edit_quantity.php. Executing a manipulation of the argument pqty can lead to sql injection. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T09:20:33.880Z","source_hash":"content-fingerprint:fnv1a-b249be48","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108965-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability was determined in SourceCodester Performance Indicator System 1.0. This vulnerability affects unknown code of the file /opils/staff/edit_quantity.php. Executing a manipulation of the argument pqty can lead to sql injection. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.","source_quote_or_pointer":"Security Advisory CVE-2026-108965","fact_id":"SEA-CVE-2026-108965-F1","document_citation":"Security Advisory CVE-2026-108965"},{"id":"SEA-CVE-2026-108965-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability was determined in SourceCodester Performance Indicator System 1.0. This vulnerability affects unknown code of the file /opils/staff/editquantity.php. Executing a manipulation of the argument pqty can lead to sql injection. The attack can be launched remotely.","source_quote_or_pointer":"Advisory description (CVE-2026-108965)","fact_id":"SEA-CVE-2026-108965-F2","document_citation":"Advisory description (CVE-2026-108965)"}],"source_stated_contributors":["A vulnerability was determined in SourceCodester Performance Indicator System 1.0. This vulnerability affects unknown code of the file /opils/staff/editquantity.php. Executing a manipulation of the argument pqty can lead to sql injection. The attack can be launched remotely."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108965","reporting_entity":"CVE-2026-108965","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108965-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108965-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108965"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108964","title":"A vulnerability was found in SourceCodester Performance Indicator System 1.0. This affects an unknown part of the file /opils/admin/addproduct.php. Performing a manipulation of the argument prodcategory results in sql injection. The attack can be initiated remotely. The exploit has been made public and could be used.","display_title":"Software component issue could expose or alter stored data","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-108964","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108964","source_title":"A vulnerability was found in SourceCodester Performance Indicator System 1.0. This affects an unknown part of the file /opils/admin/addproduct.php. Performing a manipulation of the argument prodcategory results in sql injection. The attack can be initiated remotely. The exploit has been made public and could be used.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T09:20:33.880Z","source_hash":"content-fingerprint:fnv1a-92527dd9","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108964-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability was found in SourceCodester Performance Indicator System 1.0. This affects an unknown part of the file /opils/admin/addproduct.php. Performing a manipulation of the argument prodcategory results in sql injection. The attack can be initiated remotely. The exploit has been made public and could be used.","source_quote_or_pointer":"Security Advisory CVE-2026-108964","fact_id":"SEA-CVE-2026-108964-F1","document_citation":"Security Advisory CVE-2026-108964"},{"id":"SEA-CVE-2026-108964-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability was found in SourceCodester Performance Indicator System 1.0. This affects an unknown part of the file /opils/admin/addproduct.php. Performing a manipulation of the argument prodcategory results in sql injection. The attack can be initiated remotely. The exploit has been made public and could be used.","source_quote_or_pointer":"Advisory description (CVE-2026-108964)","fact_id":"SEA-CVE-2026-108964-F2","document_citation":"Advisory description (CVE-2026-108964)"}],"source_stated_contributors":["A vulnerability was found in SourceCodester Performance Indicator System 1.0. This affects an unknown part of the file /opils/admin/addproduct.php. Performing a manipulation of the argument prodcategory results in sql injection. The attack can be initiated remotely. The exploit has been made public and could be used."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.public_publication"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108964","reporting_entity":"CVE-2026-108964","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108964-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108964-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108964"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108959","title":"A security vulnerability has been detected in itsourcecode Online Cake Ordering System 1.0. This impacts an unknown function of the file /addtransacdetail.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used.","display_title":"Software component issue could expose or alter stored data","display_summary":"A security vulnerability has been detected in itsourcecode Online Cake Ordering System 1.0. This impacts an unknown function of the file /addtransacdetail.php. The manipulation of the argument ID leads to sql injection.","display_reference":"CVE-2026-108959","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108959","source_title":"A security vulnerability has been detected in itsourcecode Online Cake Ordering System 1.0. This impacts an unknown function of the file /addtransacdetail.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T09:20:33.887Z","source_hash":"content-fingerprint:fnv1a-61c162ff","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108959-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A security vulnerability has been detected in itsourcecode Online Cake Ordering System 1.0. This impacts an unknown function of the file /addtransacdetail.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used.","source_quote_or_pointer":"Security Advisory CVE-2026-108959","fact_id":"SEA-CVE-2026-108959-F1","document_citation":"Security Advisory CVE-2026-108959"},{"id":"SEA-CVE-2026-108959-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A security vulnerability has been detected in itsourcecode Online Cake Ordering System 1.0. This impacts an unknown function of the file /addtransacdetail.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely.","source_quote_or_pointer":"Advisory description (CVE-2026-108959)","fact_id":"SEA-CVE-2026-108959-F2","document_citation":"Advisory description (CVE-2026-108959)"}],"source_stated_contributors":["A security vulnerability has been detected in itsourcecode Online Cake Ordering System 1.0. This impacts an unknown function of the file /addtransacdetail.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108959","reporting_entity":"CVE-2026-108959","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108959-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108959-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108959"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-85529","title":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to read internal notes and confidential system notes on public projects due to improper authorization in the GraphQL API.","display_title":"Software component issue could allow unauthorized access","display_summary":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to read…","display_reference":"CVE-2026-85529","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85529","source_title":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to read internal notes and confidential system notes on public projects due to improper authorization in the GraphQL API.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T09:20:33.889Z","source_hash":"content-fingerprint:fnv1a-5c33168","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-85529-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to read internal notes and confidential system notes on public projects due to improper authorization in the GraphQL API.","source_quote_or_pointer":"Security Advisory CVE-2026-85529","fact_id":"SEA-CVE-2026-85529-F1","document_citation":"Security Advisory CVE-2026-85529"},{"id":"SEA-CVE-2026-85529-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to read internal notes and confidential system notes on public projects due to improper authorization in…","source_quote_or_pointer":"Advisory description (CVE-2026-85529)","fact_id":"SEA-CVE-2026-85529-F2","document_citation":"Advisory description (CVE-2026-85529)"}],"source_stated_contributors":["GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to read internal notes and confidential system notes on public projects due to improper authorization in…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.public_publication","data.pii"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-85529","reporting_entity":"CVE-2026-85529","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-85529-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-85529-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-85529"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-7767","title":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.11 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user controlling a Kubernetes agent to cause sensitive authentication tokens to be sent to an unintended server due to improper redirect validation in the Kubernetes proxy.","display_title":"Security issue reported in Software component","display_summary":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.11 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user…","display_reference":"CVE-2026-7767","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-7767","source_title":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.11 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user controlling a Kubernetes agent to cause sensitive authentication tokens to be sent to an unintended server due to improper redirect validation in the Kubernetes proxy.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T09:20:33.891Z","source_hash":"content-fingerprint:fnv1a-a4e35092","affected_system":{"organization":"Software component project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-7767-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.11 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user controlling a Kubernetes agent to cause sensitive authentication tokens to be sent to an unintended server due to improper redirect validation in the Kubernetes proxy.","source_quote_or_pointer":"Security Advisory CVE-2026-7767","fact_id":"SEA-CVE-2026-7767-F1","document_citation":"Security Advisory CVE-2026-7767"},{"id":"SEA-CVE-2026-7767-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.11 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user controlling a Kubernetes agent to cause sensitive authentication tokens to be sent to an unintended server…","source_quote_or_pointer":"Advisory description (CVE-2026-7767)","fact_id":"SEA-CVE-2026-7767-F2","document_citation":"Advisory description (CVE-2026-7767)"}],"source_stated_contributors":["GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.11 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user controlling a Kubernetes agent to cause sensitive authentication tokens to be sent to an unintended server…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.infrastructure_modification","data.pii","arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-010"],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-7767","reporting_entity":"CVE-2026-7767","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-7767-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-7767-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-7767"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-5954","title":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed a user to download package files from a public project due to improper authorization checks.","display_title":"Software component issue could allow unauthorized access","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-5954","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-5954","source_title":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed a user to download package files from a public project due to improper authorization checks.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T09:20:33.891Z","source_hash":"content-fingerprint:fnv1a-27f65e38","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-5954-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed a user to download package files from a public project due to improper authorization checks.","source_quote_or_pointer":"Security Advisory CVE-2026-5954","fact_id":"SEA-CVE-2026-5954-F1","document_citation":"Security Advisory CVE-2026-5954"},{"id":"SEA-CVE-2026-5954-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed a user to download package files from a public project due to improper authorization checks.","source_quote_or_pointer":"Advisory description (CVE-2026-5954)","fact_id":"SEA-CVE-2026-5954-F2","document_citation":"Advisory description (CVE-2026-5954)"}],"source_stated_contributors":["GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed a user to download package files from a public project due to improper authorization checks."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.public_publication","data.pii"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-5954","reporting_entity":"CVE-2026-5954","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-5954-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-5954-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-5954"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-16301","title":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with Developer role to execute CI/CD pipelines on protected branches without authorization due to improper authorization checks in the downstream pipeline creation service.","display_title":"Software component issue could allow unauthorized access","display_summary":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with…","display_reference":"CVE-2026-16301","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-16301","source_title":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with Developer role to execute CI/CD pipelines on protected branches without authorization due to improper authorization checks in the downstream pipeline creation service.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T09:20:33.892Z","source_hash":"content-fingerprint:fnv1a-156e850a","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-16301-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with Developer role to execute CI/CD pipelines on protected branches without authorization due to improper authorization checks in the downstream pipeline creation service.","source_quote_or_pointer":"Security Advisory CVE-2026-16301","fact_id":"SEA-CVE-2026-16301-F1","document_citation":"Security Advisory CVE-2026-16301"},{"id":"SEA-CVE-2026-16301-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with Developer role to execute CI/CD pipelines on protected branches without authorization due to improper…","source_quote_or_pointer":"Advisory description (CVE-2026-16301)","fact_id":"SEA-CVE-2026-16301-F2","document_citation":"Advisory description (CVE-2026-16301)"}],"source_stated_contributors":["GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with Developer role to execute CI/CD pipelines on protected branches without authorization due to improper…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.code_execution","auth.privileged_action","data.pii"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-16301","reporting_entity":"CVE-2026-16301","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-16301-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-16301-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-16301"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108956","title":"A vulnerability was identified in code-projects Online Reviewer System 1.0. The affected element is an unknown function of the file /reviewer/system/system/admins/manage/users/btn_functions.php of the component User Update Handler. Such manipulation leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might be used.","display_title":"Software component issue could expose or alter stored data","display_summary":"A vulnerability was identified in code-projects Online Reviewer System 1.0. The affected element is an unknown function of the file /reviewer/system/system/admins/manage/users/btnfunctions.php of the component User…","display_reference":"CVE-2026-108956","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108956","source_title":"A vulnerability was identified in code-projects Online Reviewer System 1.0. The affected element is an unknown function of the file /reviewer/system/system/admins/manage/users/btn_functions.php of the component User Update Handler. Such manipulation leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might be used.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T09:20:33.893Z","source_hash":"content-fingerprint:fnv1a-efe87e12","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108956-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability was identified in code-projects Online Reviewer System 1.0. The affected element is an unknown function of the file /reviewer/system/system/admins/manage/users/btn_functions.php of the component User Update Handler. Such manipulation leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might be used.","source_quote_or_pointer":"Security Advisory CVE-2026-108956","fact_id":"SEA-CVE-2026-108956-F1","document_citation":"Security Advisory CVE-2026-108956"},{"id":"SEA-CVE-2026-108956-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability was identified in code-projects Online Reviewer System 1.0. The affected element is an unknown function of the file /reviewer/system/system/admins/manage/users/btnfunctions.php of the component User Update Handler. Such manipulation leads to sql injection. The attack may be launched remotely.","source_quote_or_pointer":"Advisory description (CVE-2026-108956)","fact_id":"SEA-CVE-2026-108956-F2","document_citation":"Advisory description (CVE-2026-108956)"}],"source_stated_contributors":["A vulnerability was identified in code-projects Online Reviewer System 1.0. The affected element is an unknown function of the file /reviewer/system/system/admins/manage/users/btnfunctions.php of the component User Update Handler. Such manipulation leads to sql injection. The attack may be launched remotely."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.pii","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108956","reporting_entity":"CVE-2026-108956","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108956-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108956-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108956"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-105458","title":"GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user holding a specific granular permission to obtain a GitLab Duo Agent Platform token that bypasses governance controls, due to reliance on untrusted input in a security decision.","display_title":"Security issue reported in Software component","display_summary":"GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user holding a…","display_reference":"CVE-2026-105458","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105458","source_title":"GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user holding a specific granular permission to obtain a GitLab Duo Agent Platform token that bypasses governance controls, due to reliance on untrusted input in a security decision.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T09:20:33.907Z","source_hash":"content-fingerprint:fnv1a-b789a72","affected_system":{"organization":"Software component project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-105458-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user holding a specific granular permission to obtain a GitLab Duo Agent Platform token that bypasses governance controls, due to reliance on untrusted input in a security decision.","source_quote_or_pointer":"Security Advisory CVE-2026-105458","fact_id":"SEA-CVE-2026-105458-F1","document_citation":"Security Advisory CVE-2026-105458"},{"id":"SEA-CVE-2026-105458-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user holding a specific granular permission to obtain a GitLab Duo Agent Platform token that bypasses governance…","source_quote_or_pointer":"Advisory description (CVE-2026-105458)","fact_id":"SEA-CVE-2026-105458-F2","document_citation":"Advisory description (CVE-2026-105458)"}],"source_stated_contributors":["GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user holding a specific granular permission to obtain a GitLab Duo Agent Platform token that bypasses governance…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii","arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-010"],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-105458","reporting_entity":"CVE-2026-105458","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-105458-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-105458-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-105458"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-104661","title":"GitLab has remediated an issue in GitLab EE affecting all versions from 17.0 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user holding a custom role with compliance framework administration permissions to configure and execute a specially crafted compliance pipeline across group projects due to improper privilege assignment.","display_title":"Security issue reported in Software component","display_summary":"GitLab has remediated an issue in GitLab EE affecting all versions from 17.0 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user holding a…","display_reference":"CVE-2026-104661","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104661","source_title":"GitLab has remediated an issue in GitLab EE affecting all versions from 17.0 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user holding a custom role with compliance framework administration permissions to configure and execute a specially crafted compliance pipeline across group projects due to improper privilege assignment.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T09:20:33.909Z","source_hash":"content-fingerprint:fnv1a-f12cec33","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-104661-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"GitLab has remediated an issue in GitLab EE affecting all versions from 17.0 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user holding a custom role with compliance framework administration permissions to configure and execute a specially crafted compliance pipeline across group projects due to improper privilege assignment.","source_quote_or_pointer":"Security Advisory CVE-2026-104661","fact_id":"SEA-CVE-2026-104661-F1","document_citation":"Security Advisory CVE-2026-104661"},{"id":"SEA-CVE-2026-104661-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"GitLab has remediated an issue in GitLab EE affecting all versions from 17.0 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user holding a custom role with compliance framework administration permissions to configure and execute a specially…","source_quote_or_pointer":"Advisory description (CVE-2026-104661)","fact_id":"SEA-CVE-2026-104661-F2","document_citation":"Advisory description (CVE-2026-104661)"}],"source_stated_contributors":["GitLab has remediated an issue in GitLab EE affecting all versions from 17.0 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user holding a custom role with compliance framework administration permissions to configure and execute a specially…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.code_execution","data.pii","data.regulated_records"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-104661","reporting_entity":"CVE-2026-104661","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-104661-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-104661-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-104661"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-103549","title":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.6 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with maintainer-role permissions to remove certain package registry metadata that package protection rules restrict to higher roles, due to improper authorization checks.","display_title":"Software component issue could allow unauthorized access","display_summary":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.6 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with…","display_reference":"CVE-2026-103549","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103549","source_title":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.6 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with maintainer-role permissions to remove certain package registry metadata that package protection rules restrict to higher roles, due to improper authorization checks.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T09:20:33.910Z","source_hash":"content-fingerprint:fnv1a-b2142b93","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-103549-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.6 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with maintainer-role permissions to remove certain package registry metadata that package protection rules restrict to higher roles, due to improper authorization checks.","source_quote_or_pointer":"Security Advisory CVE-2026-103549","fact_id":"SEA-CVE-2026-103549-F1","document_citation":"Security Advisory CVE-2026-103549"},{"id":"SEA-CVE-2026-103549-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.6 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with maintainer-role permissions to remove certain package registry metadata that package protection rules…","source_quote_or_pointer":"Advisory description (CVE-2026-103549)","fact_id":"SEA-CVE-2026-103549-F2","document_citation":"Advisory description (CVE-2026-103549)"}],"source_stated_contributors":["GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.6 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with maintainer-role permissions to remove certain package registry metadata that package protection rules…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","data.pii"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-103549","reporting_entity":"CVE-2026-103549","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-103549-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-103549-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-103549"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-100104","title":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.3 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user to perform server-side request forgery and reach internal network resources due to a time-of-check to time-of-use race condition in URL validation during repository import operations.","display_title":"Software component issue could reach internal services","display_summary":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.3 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user to…","display_reference":"CVE-2026-100104","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100104","source_title":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.3 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user to perform server-side request forgery and reach internal network resources due to a time-of-check to time-of-use race condition in URL validation during repository import operations.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T09:20:33.911Z","source_hash":"content-fingerprint:fnv1a-bc5cf809","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-100104-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.3 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user to perform server-side request forgery and reach internal network resources due to a time-of-check to time-of-use race condition in URL validation during repository import operations.","source_quote_or_pointer":"Security Advisory CVE-2026-100104","fact_id":"SEA-CVE-2026-100104-F1","document_citation":"Security Advisory CVE-2026-100104"},{"id":"SEA-CVE-2026-100104-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.3 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user to perform server-side request forgery and reach internal network resources due to a time-of-check to…","source_quote_or_pointer":"Advisory description (CVE-2026-100104)","fact_id":"SEA-CVE-2026-100104-F2","document_citation":"Advisory description (CVE-2026-100104)"}],"source_stated_contributors":["GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.3 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user to perform server-side request forgery and reach internal network resources due to a time-of-check to…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Internal network access","Cloud metadata or credential exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-100104","reporting_entity":"CVE-2026-100104","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-100104-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-100104-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"The service fetched a URL chosen by the caller and could be steered at internal systems. Restrict outbound destinations and block internal address ranges.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-100104"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-19937","title":"The Bluetooth Mesh Access layer delayable-message machinery in subsys/bluetooth/mesh/delayable_msg.c manages a static pool of CONFIG_BT_MESH_ACCESS_DELAYABLE_MSG_COUNT message contexts (default 4) threaded onto a free_ctx or busy_ctx list. release_delayable_msg_ctx() returned a context to free_ctx only when sys_slist_find_and_remove() found it on busy_ctx. The chunk-exhaustion error path in bt_mesh_delayable_msg_manage() releases a context that was already popped off free_ctx but not yet inserted on busy_ctx, so the context was appended to neither list and was permanently lost from the pool. Because bt_mesh_delayable_msg_init() runs only once from bt_mesh_init(), and node reset/suspend only drain busy_ctx, the loss survives unprovision, re-provision and suspend/resume — it is cleared only by a reboot. The error path is reached when the chunk pool (CONFIG_BT_MESH_ACCESS_DELAYABLE_MSG_CHUNK_COUNT, default 40 chunks) is short of the chunks a new delayed message needs and the oldest pending message cannot be flushed because bt_mesh_access_send() returns -EBUSY or -ENOBUFS (all segmented-TX contexts busy, or advertising/segment buffers exhausted). A peer that is provisioned into the mesh network — holding a valid NetKey plus an AppKey or DevKey bound to a server model — can drive both conditions by flooding the victim with requests that elicit segmented responses while withholding the Segment Acknowledgment, which keeps the transmit contexts occupied while queued responses hold the chunk pool. Each further request that arrives in that window leaks one context. Once the pool is drained, bt_mesh_delayable_msg_manage() returns -ENOMEM for every subsequent send and bt_mesh_model_send() propagates that error with no fallback to an immediate transmit. Since CONFIG_BT_MESH_ACCESS_DELAYABLE_MSG and CONFIG_BT_MESH_ACCESS_DELAYABLE_MSG_CTX_ENABLED are both enabled by default, ctx->rnd_delay is set for every received access message, so all replies from Configuration Server, Health Server and application server models are silently dropped. The node keeps receiving and processing traffic but never answers, a persistent denial of service until the device is restarted. There is no memory corruption, information disclosure or integrity impact; releases before the fix compute the chunk count from the transmit buffer capacity rather than its payload length, making chunk-pool starvation — and therefore the leak — considerably easier to provoke.","display_title":"Software component issue could make the service unavailable","display_summary":"The Bluetooth Mesh Access layer delayable-message machinery in subsys/bluetooth/mesh/delayablemsg.c manages a static pool of CONFIGBTMESHACCESSDELAYABLEMSGCOUNT message contexts (default 4) threaded onto a freectx or…","display_reference":"CVE-2026-19937","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-19937","source_title":"The Bluetooth Mesh Access layer delayable-message machinery in subsys/bluetooth/mesh/delayable_msg.c manages a static pool of CONFIG_BT_MESH_ACCESS_DELAYABLE_MSG_COUNT message contexts (default 4) threaded onto a free_ctx or busy_ctx list. release_delayable_msg_ctx() returned a context to free_ctx only when sys_slist_find_and_remove() found it on busy_ctx. The chunk-exhaustion error path in bt_mesh_delayable_msg_manage() releases a context that was already popped off free_ctx but not yet inserted on busy_ctx, so the context was appended to neither list and was permanently lost from the pool. Because bt_mesh_delayable_msg_init() runs only once from bt_mesh_init(), and node reset/suspend only drain busy_ctx, the loss survives unprovision, re-provision and suspend/resume — it is cleared only by a reboot. The error path is reached when the chunk pool (CONFIG_BT_MESH_ACCESS_DELAYABLE_MSG_CHUNK_COUNT, default 40 chunks) is short of the chunks a new delayed message needs and the oldest pending message cannot be flushed because bt_mesh_access_send() returns -EBUSY or -ENOBUFS (all segmented-TX contexts busy, or advertising/segment buffers exhausted). A peer that is provisioned into the mesh network — holding a valid NetKey plus an AppKey or DevKey bound to a server model — can drive both conditions by flooding the victim with requests that elicit segmented responses while withholding the Segment Acknowledgment, which keeps the transmit contexts occupied while queued responses hold the chunk pool. Each further request that arrives in that window leaks one context. Once the pool is drained, bt_mesh_delayable_msg_manage() returns -ENOMEM for every subsequent send and bt_mesh_model_send() propagates that error with no fallback to an immediate transmit. Since CONFIG_BT_MESH_ACCESS_DELAYABLE_MSG and CONFIG_BT_MESH_ACCESS_DELAYABLE_MSG_CTX_ENABLED are both enabled by default, ctx->rnd_delay is set for every received access message, so all replies from Configuration Server, Health Server and application server models are silently dropped. The node keeps receiving and processing traffic but never answers, a persistent denial of service until the device is restarted. There is no memory corruption, information disclosure or integrity impact; releases before the fix compute the chunk count from the transmit buffer capacity rather than its payload length, making chunk-pool starvation — and therefore the leak — considerably easier to provoke.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T09:20:33.918Z","source_hash":"content-fingerprint:fnv1a-4ef5255a","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-19937-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Bluetooth Mesh Access layer delayable-message machinery in subsys/bluetooth/mesh/delayable_msg.c manages a static pool of CONFIG_BT_MESH_ACCESS_DELAYABLE_MSG_COUNT message contexts (default 4) threaded onto a free_ctx or busy_ctx list. release_delayable_msg_ctx() returned a context to free_ctx only when sys_slist_find_and_remove() found it on busy_ctx. The chunk-exhaustion error path in bt_mesh_delayable_msg_manage() releases a context that was already popped off free_ctx but not yet inserted on busy_ctx, so the context was appended to neither list and was permanently lost from the pool. Because bt_mesh_delayable_msg_init() runs only once from bt_mesh_init(), and node reset/suspend only drain busy_ctx, the loss survives unprovision, re-provision and suspend/resume — it is cleared only by a reboot. The error path is reached when the chunk pool (CONFIG_BT_MESH_ACCESS_DELAYABLE_MSG_CHUNK_COUNT, default 40 chunks) is short of the chunks a new delayed message needs and the oldest pending message cannot be flushed because bt_mesh_access_send() returns -EBUSY or -ENOBUFS (all segmented-TX contexts busy, or advertising/segment buffers exhausted). A peer that is provisioned into the mesh network — holding a valid NetKey plus an AppKey or DevKey bound to a server model — can drive both conditions by flooding the victim with requests that elicit segmented responses while withholding the Segment Acknowledgment, which keeps the transmit contexts occupied while queued responses hold the chunk pool. Each further request that arrives in that window leaks one context. Once the pool is drained, bt_mesh_delayable_msg_manage() returns -ENOMEM for every subsequent send and bt_mesh_model_send() propagates that error with no fallback to an immediate transmit. Since CONFIG_BT_MESH_ACCESS_DELAYABLE_MSG and CONFIG_BT_MESH_ACCESS_DELAYABLE_MSG_CTX_ENABLED are both enabled by default, ctx->rnd_delay is set for every received access message, so all replies from Configuration Server, Health Server and application server models are silently dropped. The node keeps receiving and processing traffic but never answers, a persistent denial of service until the device is restarted. There is no memory corruption, information disclosure or integrity impact; releases before the fix compute the chunk count from the transmit buffer capacity rather than its payload length, making chunk-pool starvation — and therefore the leak — considerably easier to provoke.","source_quote_or_pointer":"Security Advisory CVE-2026-19937","fact_id":"SEA-CVE-2026-19937-F1","document_citation":"Security Advisory CVE-2026-19937"},{"id":"SEA-CVE-2026-19937-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Bluetooth Mesh Access layer delayable-message machinery in subsys/bluetooth/mesh/delayablemsg.c manages a static pool of CONFIGBTMESHACCESSDELAYABLEMSGCOUNT message contexts (default 4) threaded onto a freectx or busyctx list.","source_quote_or_pointer":"Advisory description (CVE-2026-19937)","fact_id":"SEA-CVE-2026-19937-F2","document_citation":"Advisory description (CVE-2026-19937)"}],"source_stated_contributors":["The Bluetooth Mesh Access layer delayable-message machinery in subsys/bluetooth/mesh/delayablemsg.c manages a static pool of CONFIGBTMESHACCESSDELAYABLEMSGCOUNT message contexts (default 4) threaded onto a freectx or busyctx list."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-19937","reporting_entity":"CVE-2026-19937","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-19937-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-19937-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-19937"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-19936","title":"The Bluetooth Mesh Access-layer delayable message queue in subsys/bluetooth/mesh/delayable_msg.c shares three intrusive lists (busy_ctx, free_ctx, free_chunks) and one k_work_delayable between two cooperative threads with no synchronization: bt_mesh_delayable_msg_manage() runs on the Bluetooth host RX thread, while delayable_msg_handler() runs on the system workqueue. Both block while the lists are in an intermediate state — the enqueuer in bt_rand(), both in bt_mesh_access_send() — which lets the other context observe torn state. delayable_msg_handler() used the result of sys_slist_get() on busy_ctx without a NULL check, and allocate_delayable_msg_ctx() tested sys_slist_is_empty() and then assumed a separate sys_slist_get() would succeed. Because CONFIG_BT_MESH_ACCESS_DELAYABLE_MSG and CONFIG_BT_MESH_ACCESS_DELAYABLE_MSG_CTX_ENABLED default to y, every model response to a received mesh message is parked on this queue, so the enqueuer runs as a direct consequence of inbound traffic. A peer that can get access-layer messages accepted by a model (it must hold the NetKey and a bound AppKey, so a legitimate or compromised network member) controls the arrival rate, the size of the elicited responses and the destination address, and thereby controls occupancy of the 4-entry context pool and the 40-entry chunk pool. Exhausting the chunk pool forces bt_mesh_delayable_msg_manage() down the purge path, which sends and releases the only queued message and leaves busy_ctx empty while the delayable work item is still armed; if the enqueuer then yields, the handler runs against the empty list. The result is a read-modify-write through a NULL-based pointer (pending_msg->fired_time += 10) at a fixed low address on the system workqueue thread. On typical targets that faults, aborting the system workqueue thread — which stops all workqueue-driven functionality, including the mesh timing machinery — or resetting the node, so the impact is loss of availability of the affected node. The write value and address are fixed and no attacker-controlled length or index is involved, so this is not exploitable for memory corruption or code execution. The same unsynchronized window also allowed one message context to be selected and released by two contexts at once, producing duplicated transmissions, duplicated send-completion callbacks and crossed chunk ownership. The fix serializes every list mutation with a k_spinlock that is never held across a blocking call, makes push_msg_from_delayable_msgs() detach the queue head atomically so a message being sent is on no list, removes the unchecked sys_slist_get() from delayable_msg_handler(), and drops any message that reaches the front of the queue while the stack is suspended or reset.","display_title":"Software component issue could allow unintended commands to run","display_summary":"The Bluetooth Mesh Access-layer delayable message queue in subsys/bluetooth/mesh/delayablemsg.c shares three intrusive lists (busyctx, freectx, freechunks) and one kworkdelayable between two cooperative threads with no…","display_reference":"CVE-2026-19936","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-19936","source_title":"The Bluetooth Mesh Access-layer delayable message queue in subsys/bluetooth/mesh/delayable_msg.c shares three intrusive lists (busy_ctx, free_ctx, free_chunks) and one k_work_delayable between two cooperative threads with no synchronization: bt_mesh_delayable_msg_manage() runs on the Bluetooth host RX thread, while delayable_msg_handler() runs on the system workqueue. Both block while the lists are in an intermediate state — the enqueuer in bt_rand(), both in bt_mesh_access_send() — which lets the other context observe torn state. delayable_msg_handler() used the result of sys_slist_get() on busy_ctx without a NULL check, and allocate_delayable_msg_ctx() tested sys_slist_is_empty() and then assumed a separate sys_slist_get() would succeed. Because CONFIG_BT_MESH_ACCESS_DELAYABLE_MSG and CONFIG_BT_MESH_ACCESS_DELAYABLE_MSG_CTX_ENABLED default to y, every model response to a received mesh message is parked on this queue, so the enqueuer runs as a direct consequence of inbound traffic. A peer that can get access-layer messages accepted by a model (it must hold the NetKey and a bound AppKey, so a legitimate or compromised network member) controls the arrival rate, the size of the elicited responses and the destination address, and thereby controls occupancy of the 4-entry context pool and the 40-entry chunk pool. Exhausting the chunk pool forces bt_mesh_delayable_msg_manage() down the purge path, which sends and releases the only queued message and leaves busy_ctx empty while the delayable work item is still armed; if the enqueuer then yields, the handler runs against the empty list. The result is a read-modify-write through a NULL-based pointer (pending_msg->fired_time += 10) at a fixed low address on the system workqueue thread. On typical targets that faults, aborting the system workqueue thread — which stops all workqueue-driven functionality, including the mesh timing machinery — or resetting the node, so the impact is loss of availability of the affected node. The write value and address are fixed and no attacker-controlled length or index is involved, so this is not exploitable for memory corruption or code execution. The same unsynchronized window also allowed one message context to be selected and released by two contexts at once, producing duplicated transmissions, duplicated send-completion callbacks and crossed chunk ownership. The fix serializes every list mutation with a k_spinlock that is never held across a blocking call, makes push_msg_from_delayable_msgs() detach the queue head atomically so a message being sent is on no list, removes the unchecked sys_slist_get() from delayable_msg_handler(), and drops any message that reaches the front of the queue while the stack is suspended or reset.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T09:20:33.932Z","source_hash":"content-fingerprint:fnv1a-f3521af","affected_system":{"organization":"The Bluetooth Mesh Access-layer delayable message queue in subsys/bluetooth/mesh/delayablemsg.c shares three intrusive lists (busyctx, freectx, freechunks) and one kworkdelayable between two cooperative threads with no synchronization project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-19936-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Bluetooth Mesh Access-layer delayable message queue in subsys/bluetooth/mesh/delayable_msg.c shares three intrusive lists (busy_ctx, free_ctx, free_chunks) and one k_work_delayable between two cooperative threads with no synchronization: bt_mesh_delayable_msg_manage() runs on the Bluetooth host RX thread, while delayable_msg_handler() runs on the system workqueue. Both block while the lists are in an intermediate state — the enqueuer in bt_rand(), both in bt_mesh_access_send() — which lets the other context observe torn state. delayable_msg_handler() used the result of sys_slist_get() on busy_ctx without a NULL check, and allocate_delayable_msg_ctx() tested sys_slist_is_empty() and then assumed a separate sys_slist_get() would succeed. Because CONFIG_BT_MESH_ACCESS_DELAYABLE_MSG and CONFIG_BT_MESH_ACCESS_DELAYABLE_MSG_CTX_ENABLED default to y, every model response to a received mesh message is parked on this queue, so the enqueuer runs as a direct consequence of inbound traffic. A peer that can get access-layer messages accepted by a model (it must hold the NetKey and a bound AppKey, so a legitimate or compromised network member) controls the arrival rate, the size of the elicited responses and the destination address, and thereby controls occupancy of the 4-entry context pool and the 40-entry chunk pool. Exhausting the chunk pool forces bt_mesh_delayable_msg_manage() down the purge path, which sends and releases the only queued message and leaves busy_ctx empty while the delayable work item is still armed; if the enqueuer then yields, the handler runs against the empty list. The result is a read-modify-write through a NULL-based pointer (pending_msg->fired_time += 10) at a fixed low address on the system workqueue thread. On typical targets that faults, aborting the system workqueue thread — which stops all workqueue-driven functionality, including the mesh timing machinery — or resetting the node, so the impact is loss of availability of the affected node. The write value and address are fixed and no attacker-controlled length or index is involved, so this is not exploitable for memory corruption or code execution. The same unsynchronized window also allowed one message context to be selected and released by two contexts at once, producing duplicated transmissions, duplicated send-completion callbacks and crossed chunk ownership. The fix serializes every list mutation with a k_spinlock that is never held across a blocking call, makes push_msg_from_delayable_msgs() detach the queue head atomically so a message being sent is on no list, removes the unchecked sys_slist_get() from delayable_msg_handler(), and drops any message that reaches the front of the queue while the stack is suspended or reset.","source_quote_or_pointer":"Security Advisory CVE-2026-19936","fact_id":"SEA-CVE-2026-19936-F1","document_citation":"Security Advisory CVE-2026-19936"},{"id":"SEA-CVE-2026-19936-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Bluetooth Mesh Access-layer delayable message queue in subsys/bluetooth/mesh/delayablemsg.c shares three intrusive lists (busyctx, freectx, freechunks) and one kworkdelayable between two cooperative threads with no synchronization: btmeshdelayablemsgmanage() runs on the Bluetooth host RX thread, while…","source_quote_or_pointer":"Advisory description (CVE-2026-19936)","fact_id":"SEA-CVE-2026-19936-F2","document_citation":"Advisory description (CVE-2026-19936)"}],"source_stated_contributors":["The Bluetooth Mesh Access-layer delayable message queue in subsys/bluetooth/mesh/delayablemsg.c shares three intrusive lists (busyctx, freectx, freechunks) and one kworkdelayable between two cooperative threads with no synchronization: btmeshdelayablemsgmanage() runs on the Bluetooth host RX thread, while…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.write_action","arch.async_job"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-19936","reporting_entity":"CVE-2026-19936","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-19936-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-19936-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-19936"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108940","title":"A vulnerability was found in EricLBuehler Mistral.rs up to 0.9.3. The affected element is the function calibration_apply of the file mistralrs-server-core/src/handlers.rs. Performing a manipulation of the argument save_cimatrix results in path traversal. The attack may be initiated remotely. The exploit has been made public and could be used. Upgrading to version 0.9.4 is sufficient to fix this issue. The patch is named 8c81056712709b4845ec6d9531e4d35bab4a367c. It is suggested to upgrade the affected component.","display_title":"Software component issue could expose restricted files","display_summary":"A vulnerability was found in EricLBuehler Mistral.rs up to 0.9.3. The affected element is the function calibrationapply of the file mistralrs-server-core/src/handlers.rs.","display_reference":"CVE-2026-108940","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108940","source_title":"A vulnerability was found in EricLBuehler Mistral.rs up to 0.9.3. The affected element is the function calibration_apply of the file mistralrs-server-core/src/handlers.rs. Performing a manipulation of the argument save_cimatrix results in path traversal. The attack may be initiated remotely. The exploit has been made public and could be used. Upgrading to version 0.9.4 is sufficient to fix this issue. The patch is named 8c81056712709b4845ec6d9531e4d35bab4a367c. It is suggested to upgrade the affected component.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T09:20:33.933Z","source_hash":"content-fingerprint:fnv1a-b3ba080d","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108940-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability was found in EricLBuehler Mistral.rs up to 0.9.3. The affected element is the function calibration_apply of the file mistralrs-server-core/src/handlers.rs. Performing a manipulation of the argument save_cimatrix results in path traversal. The attack may be initiated remotely. The exploit has been made public and could be used. Upgrading to version 0.9.4 is sufficient to fix this issue. The patch is named 8c81056712709b4845ec6d9531e4d35bab4a367c. It is suggested to upgrade the affected component.","source_quote_or_pointer":"Security Advisory CVE-2026-108940","fact_id":"SEA-CVE-2026-108940-F1","document_citation":"Security Advisory CVE-2026-108940"},{"id":"SEA-CVE-2026-108940-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability was found in EricLBuehler Mistral.rs up to 0.9.3. The affected element is the function calibrationapply of the file mistralrs-server-core/src/handlers.rs. Performing a manipulation of the argument savecimatrix results in path traversal. The attack may be initiated remotely.","source_quote_or_pointer":"Advisory description (CVE-2026-108940)","fact_id":"SEA-CVE-2026-108940-F2","document_citation":"Advisory description (CVE-2026-108940)"}],"source_stated_contributors":["A vulnerability was found in EricLBuehler Mistral.rs up to 0.9.3. The affected element is the function calibrationapply of the file mistralrs-server-core/src/handlers.rs. Performing a manipulation of the argument savecimatrix results in path traversal. The attack may be initiated remotely."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.public_publication"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Restricted file exposure","File overwrite"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108940","reporting_entity":"CVE-2026-108940","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108940-SG1","label":"Confine file access to a fixed root","description":"Resolve paths to canonical form and reject anything outside the intended directory before opening files.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108940-SG1","label":"Confine file access to a fixed root","description":"Resolve paths to canonical form and reject anything outside the intended directory before opening files.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"File paths supplied by a caller escaped the intended directory. Canonicalise paths and confine file access to a fixed root.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108940"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108939","title":"A vulnerability has been found in EricLBuehler mistral.rs up to 0.9.3. Impacted is the function is_global_ip of the file mistralrs-server-core/src/media_source.rs. Such manipulation of the argument ip leads to server-side request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 0.9.4 is recommended to address this issue. The name of the patch is cfb8c6a0c42361dc4579a9110b54d339c255b9fd. The affected component should be upgraded.","display_title":"Software component issue could reach internal services","display_summary":"A vulnerability has been found in EricLBuehler mistral.rs up to 0.9.3. Impacted is the function isglobalip of the file mistralrs-server-core/src/mediasource.rs.","display_reference":"CVE-2026-108939","display_source_type":"Security advisory","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108939","source_title":"A vulnerability has been found in EricLBuehler mistral.rs up to 0.9.3. Impacted is the function is_global_ip of the file mistralrs-server-core/src/media_source.rs. Such manipulation of the argument ip leads to server-side request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 0.9.4 is recommended to address this issue. The name of the patch is cfb8c6a0c42361dc4579a9110b54d339c255b9fd. The affected component should be upgraded.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T09:20:33.933Z","source_hash":"content-fingerprint:fnv1a-69ec20db","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108939-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability has been found in EricLBuehler mistral.rs up to 0.9.3. Impacted is the function is_global_ip of the file mistralrs-server-core/src/media_source.rs. Such manipulation of the argument ip leads to server-side request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 0.9.4 is recommended to address this issue. The name of the patch is cfb8c6a0c42361dc4579a9110b54d339c255b9fd. The affected component should be upgraded.","source_quote_or_pointer":"Security Advisory CVE-2026-108939","fact_id":"SEA-CVE-2026-108939-F1","document_citation":"Security Advisory CVE-2026-108939"},{"id":"SEA-CVE-2026-108939-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability has been found in EricLBuehler mistral.rs up to 0.9.3. Impacted is the function isglobalip of the file mistralrs-server-core/src/mediasource.rs. Such manipulation of the argument ip leads to server-side request forgery. The attack can be launched remotely.","source_quote_or_pointer":"Advisory description (CVE-2026-108939)","fact_id":"SEA-CVE-2026-108939-F2","document_citation":"Advisory description (CVE-2026-108939)"}],"source_stated_contributors":["A vulnerability has been found in EricLBuehler mistral.rs up to 0.9.3. Impacted is the function isglobalip of the file mistralrs-server-core/src/mediasource.rs. Such manipulation of the argument ip leads to server-side request forgery. The attack can be launched remotely."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.public_publication","data.pii","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Internal network access","Cloud metadata or credential exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108939","reporting_entity":"CVE-2026-108939","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108939-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108939-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"The service fetched a URL chosen by the caller and could be steered at internal systems. Restrict outbound destinations and block internal address ranges.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108939"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-77363","title":"obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, the Streamable HTTP transport does not validate the Host or Origin header or enable DNS-rebinding protection. When the documented loopback configuration uses auth.mode set to none, a malicious web page can send requests to the local MCP endpoint and receive unrestricted vault access through the http-local caller. Version 1.3.1 fixes the vulnerability by enabling host, origin, and DNS-rebinding validation.","display_title":"Security issue reported in Software component","display_summary":"obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, the Streamable HTTP transport does not validate the Host or Origin header or enable DNS-rebinding protection.","display_reference":"CVE-2026-77363","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-77363","source_title":"obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, the Streamable HTTP transport does not validate the Host or Origin header or enable DNS-rebinding protection. When the documented loopback configuration uses auth.mode set to none, a malicious web page can send requests to the local MCP endpoint and receive unrestricted vault access through the http-local caller. Version 1.3.1 fixes the vulnerability by enabling host, origin, and DNS-rebinding validation.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-17T00:24:19.387Z","source_hash":"content-fingerprint:fnv1a-65ae73e7","affected_system":{"organization":"Software component project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-77363-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, the Streamable HTTP transport does not validate the Host or Origin header or enable DNS-rebinding protection. When the documented loopback configuration uses auth.mode set to none, a malicious web page can send requests to the local MCP endpoint and receive unrestricted vault access through the http-local caller. Version 1.3.1 fixes the vulnerability by enabling host, origin, and DNS-rebinding validation.","source_quote_or_pointer":"Security Advisory CVE-2026-77363","fact_id":"SEA-CVE-2026-77363-F1","document_citation":"Security Advisory CVE-2026-77363"},{"id":"SEA-CVE-2026-77363-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, the Streamable HTTP transport does not validate the Host or Origin header or enable DNS-rebinding protection.","source_quote_or_pointer":"Advisory description (CVE-2026-77363)","fact_id":"SEA-CVE-2026-77363-F2","document_citation":"Advisory description (CVE-2026-77363)"}],"source_stated_contributors":["obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, the Streamable HTTP transport does not validate the Host or Origin header or enable DNS-rebinding protection."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-010"],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-77363","reporting_entity":"CVE-2026-77363","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-77363-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-77363-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-77363"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-57143","title":"PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.62, searxng_search and the search_web SearxNG provider pass the LLM-controlled searxng_url parameter directly to requests.get without validating its scheme, host, port, or resolved address. Prompt-injected content can direct the default search tool to internal JSON services, distinguish open and closed internal ports, and attempt cloud-metadata requests, with returned JSON results entering agent context. This issue is fixed in praisonaiagents 1.6.62.","display_title":"Security issue reported in Software component","display_summary":"PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.62, searxngsearch and the searchweb SearxNG provider pass the LLM-controlled searxngurl parameter directly to requests.get without validating its…","display_reference":"CVE-2026-57143","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-57143","source_title":"PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.62, searxng_search and the search_web SearxNG provider pass the LLM-controlled searxng_url parameter directly to requests.get without validating its scheme, host, port, or resolved address. Prompt-injected content can direct the default search tool to internal JSON services, distinguish open and closed internal ports, and attempt cloud-metadata requests, with returned JSON results entering agent context. This issue is fixed in praisonaiagents 1.6.62.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-17T00:24:19.388Z","source_hash":"content-fingerprint:fnv1a-8484ca93","affected_system":{"organization":"Software component project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-57143-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.62, searxng_search and the search_web SearxNG provider pass the LLM-controlled searxng_url parameter directly to requests.get without validating its scheme, host, port, or resolved address. Prompt-injected content can direct the default search tool to internal JSON services, distinguish open and closed internal ports, and attempt cloud-metadata requests, with returned JSON results entering agent context. This issue is fixed in praisonaiagents 1.6.62.","source_quote_or_pointer":"Security Advisory CVE-2026-57143","fact_id":"SEA-CVE-2026-57143-F1","document_citation":"Security Advisory CVE-2026-57143"},{"id":"SEA-CVE-2026-57143-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.62, searxngsearch and the searchweb SearxNG provider pass the LLM-controlled searxngurl parameter directly to requests.get without validating its scheme, host, port, or resolved address.","source_quote_or_pointer":"Advisory description (CVE-2026-57143)","fact_id":"SEA-CVE-2026-57143-F2","document_citation":"Advisory description (CVE-2026-57143)"}],"source_stated_contributors":["PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.62, searxngsearch and the searchweb SearxNG provider pass the LLM-controlled searxngurl parameter directly to requests.get without validating its scheme, host, port, or resolved address."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-010"],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-57143","reporting_entity":"CVE-2026-57143","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-57143-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-57143-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-57143"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-59976","title":"ConvertX is a self-hosted file conversion service. Prior to 0.18.0, the ImageMagick converter uses the unsanitized convert_to parameter to construct an output path. If an authenticated user, or an unauthenticated user when ConvertX is configured to allow unauthenticated access, uploads an extensionless image and supplies directory traversal sequences in convert_to through /convert, the constructed path escapes the intended output directory, allowing the attacker to write converted output to arbitrary container paths, potentially overwriting files or causing denial of service. This issue is fixed in version 0.18.0.","display_title":"Software component issue could expose restricted files","display_summary":"ConvertX is a self-hosted file conversion service. Prior to 0.18.0, the ImageMagick converter uses the unsanitized convertto parameter to construct an output path.","display_reference":"CVE-2026-59976","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-59976","source_title":"ConvertX is a self-hosted file conversion service. Prior to 0.18.0, the ImageMagick converter uses the unsanitized convert_to parameter to construct an output path. If an authenticated user, or an unauthenticated user when ConvertX is configured to allow unauthenticated access, uploads an extensionless image and supplies directory traversal sequences in convert_to through /convert, the constructed path escapes the intended output directory, allowing the attacker to write converted output to arbitrary container paths, potentially overwriting files or causing denial of service. This issue is fixed in version 0.18.0.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-17T06:53:08.195Z","source_hash":"content-fingerprint:fnv1a-fc8c2a9b","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Cloud & container infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-59976-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"ConvertX is a self-hosted file conversion service. Prior to 0.18.0, the ImageMagick converter uses the unsanitized convert_to parameter to construct an output path. If an authenticated user, or an unauthenticated user when ConvertX is configured to allow unauthenticated access, uploads an extensionless image and supplies directory traversal sequences in convert_to through /convert, the constructed path escapes the intended output directory, allowing the attacker to write converted output to arbitrary container paths, potentially overwriting files or causing denial of service. This issue is fixed in version 0.18.0.","source_quote_or_pointer":"Security Advisory CVE-2026-59976","fact_id":"SEA-CVE-2026-59976-F1","document_citation":"Security Advisory CVE-2026-59976"},{"id":"SEA-CVE-2026-59976-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"ConvertX is a self-hosted file conversion service. Prior to 0.18.0, the ImageMagick converter uses the unsanitized convertto parameter to construct an output path.","source_quote_or_pointer":"Advisory description (CVE-2026-59976)","fact_id":"SEA-CVE-2026-59976-F2","document_citation":"Advisory description (CVE-2026-59976)"}],"source_stated_contributors":["ConvertX is a self-hosted file conversion service. Prior to 0.18.0, the ImageMagick converter uses the unsanitized convertto parameter to construct an output path."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Restricted file exposure","File overwrite"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-59976","reporting_entity":"CVE-2026-59976","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-59976-SG1","label":"Confine file access to a fixed root","description":"Resolve paths to canonical form and reject anything outside the intended directory before opening files.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-59976-SG1","label":"Confine file access to a fixed root","description":"Resolve paths to canonical form and reject anything outside the intended directory before opening files.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"File paths supplied by a caller escaped the intended directory. Canonicalise paths and confine file access to a fixed root.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-59976"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108980","title":"Blinko through 1.8.8 allows directory traversal, overwriting startup files as root, via installPlugin. It builds the plugin install path from an unsanitized name in server/routerTrpc/plugin.ts, and the plugin.installPlugin tRPC procedure is open to any authenticated user. Thus, a name containing ../ sequences writes the downloaded plugin files outside the plugins directory. Because the official Docker image runs as root, an authenticated attacker overwrites a root-owned startup file and achieves remote code execution as root. Self-registration for an account may be possible.","display_title":"Software component issue could allow unintended commands to run","display_summary":"Blinko through 1.8.8 allows directory traversal, overwriting startup files as root, via installPlugin. It builds the plugin install path from an unsanitized name in server/routerTrpc/plugin.ts, and the…","display_reference":"CVE-2026-108980","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108980","source_title":"Blinko through 1.8.8 allows directory traversal, overwriting startup files as root, via installPlugin. It builds the plugin install path from an unsanitized name in server/routerTrpc/plugin.ts, and the plugin.installPlugin tRPC procedure is open to any authenticated user. Thus, a name containing ../ sequences writes the downloaded plugin files outside the plugins directory. Because the official Docker image runs as root, an authenticated attacker overwrites a root-owned startup file and achieves remote code execution as root. Self-registration for an account may be possible.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T21:01:43.264Z","source_hash":"content-fingerprint:fnv1a-12c6d7c7","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Cloud & container infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108980-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Blinko through 1.8.8 allows directory traversal, overwriting startup files as root, via installPlugin. It builds the plugin install path from an unsanitized name in server/routerTrpc/plugin.ts, and the plugin.installPlugin tRPC procedure is open to any authenticated user. Thus, a name containing ../ sequences writes the downloaded plugin files outside the plugins directory. Because the official Docker image runs as root, an authenticated attacker overwrites a root-owned startup file and achieves remote code execution as root. Self-registration for an account may be possible.","source_quote_or_pointer":"Security Advisory CVE-2026-108980","fact_id":"SEA-CVE-2026-108980-F1","document_citation":"Security Advisory CVE-2026-108980"},{"id":"SEA-CVE-2026-108980-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Blinko through 1.8.8 allows directory traversal, overwriting startup files as root, via installPlugin. It builds the plugin install path from an unsanitized name in server/routerTrpc/plugin.ts, and the plugin.installPlugin tRPC procedure is open to any authenticated user.","source_quote_or_pointer":"Advisory description (CVE-2026-108980)","fact_id":"SEA-CVE-2026-108980-F2","document_citation":"Advisory description (CVE-2026-108980)"}],"source_stated_contributors":["Blinko through 1.8.8 allows directory traversal, overwriting startup files as root, via installPlugin. It builds the plugin install path from an unsanitized name in server/routerTrpc/plugin.ts, and the plugin.installPlugin tRPC procedure is open to any authenticated user."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.code_execution","auth.privileged_action","auth.write_action","data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108980","reporting_entity":"CVE-2026-108980","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108980-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108980-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108980"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-87765","title":"In the kernel apsys DVFS driver, there is a possible out-of-bounds read or hardware register corruption due to improper input validation of the frequency index. This could lead to system instability or denial of service with local privileges.","display_title":"Software component issue could make the service unavailable","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-87765","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87765","source_title":"In the kernel apsys DVFS driver, there is a possible out-of-bounds read or hardware register corruption due to improper input validation of the frequency index. This could lead to system instability or denial of service with local privileges.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T21:01:43.280Z","source_hash":"content-fingerprint:fnv1a-96037f18","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-87765-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"In the kernel apsys DVFS driver, there is a possible out-of-bounds read or hardware register corruption due to improper input validation of the frequency index. This could lead to system instability or denial of service with local privileges.","source_quote_or_pointer":"Security Advisory CVE-2026-87765","fact_id":"SEA-CVE-2026-87765-F1","document_citation":"Security Advisory CVE-2026-87765"},{"id":"SEA-CVE-2026-87765-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"In the kernel apsys DVFS driver, there is a possible out-of-bounds read or hardware register corruption due to improper input validation of the frequency index. This could lead to system instability or denial of service with local privileges.","source_quote_or_pointer":"Advisory description (CVE-2026-87765)","fact_id":"SEA-CVE-2026-87765-F2","document_citation":"Advisory description (CVE-2026-87765)"}],"source_stated_contributors":["In the kernel apsys DVFS driver, there is a possible out-of-bounds read or hardware register corruption due to improper input validation of the frequency index. This could lead to system instability or denial of service with local privileges."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-87765","reporting_entity":"CVE-2026-87765","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-87765-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-87765-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-87765"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-92681","title":"In @neo4j/graphql versions up to and including 7.6.3, @authentication directives applied at the schema level or on the Query or Mutation types are silently ignored for top-level fields annotated with @cypher. Only @authentication directives placed directly on the individual fields are enforced. An application that exposes a top-level @cypher field and relies on schema-level or type-level @authentication to protect it allows unauthenticated callers to invoke the field and run the configured Cypher statement with the privileges of the GraphQL service account, which may permit reading and modifying data. Fixed in 7.6.4.","display_title":"Security issue reported in Software component","display_summary":"In @neo4j/graphql versions up to and including 7.6.3, @authentication directives applied at the schema level or on the Query or Mutation types are silently ignored for top-level fields annotated with @cypher.","display_reference":"CVE-2026-92681","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92681","source_title":"In @neo4j/graphql versions up to and including 7.6.3, @authentication directives applied at the schema level or on the Query or Mutation types are silently ignored for top-level fields annotated with @cypher. Only @authentication directives placed directly on the individual fields are enforced. An application that exposes a top-level @cypher field and relies on schema-level or type-level @authentication to protect it allows unauthenticated callers to invoke the field and run the configured Cypher statement with the privileges of the GraphQL service account, which may permit reading and modifying data. Fixed in 7.6.4.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T21:01:43.280Z","source_hash":"content-fingerprint:fnv1a-fefcc7bd","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-92681-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"In @neo4j/graphql versions up to and including 7.6.3, @authentication directives applied at the schema level or on the Query or Mutation types are silently ignored for top-level fields annotated with @cypher. Only @authentication directives placed directly on the individual fields are enforced. An application that exposes a top-level @cypher field and relies on schema-level or type-level @authentication to protect it allows unauthenticated callers to invoke the field and run the configured Cypher statement with the privileges of the GraphQL service account, which may permit reading and modifying data. Fixed in 7.6.4.","source_quote_or_pointer":"Security Advisory CVE-2026-92681","fact_id":"SEA-CVE-2026-92681-F1","document_citation":"Security Advisory CVE-2026-92681"},{"id":"SEA-CVE-2026-92681-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"In @neo4j/graphql versions up to and including 7.6.3, @authentication directives applied at the schema level or on the Query or Mutation types are silently ignored for top-level fields annotated with @cypher. Only @authentication directives placed directly on the individual fields are enforced.","source_quote_or_pointer":"Advisory description (CVE-2026-92681)","fact_id":"SEA-CVE-2026-92681-F2","document_citation":"Advisory description (CVE-2026-92681)"}],"source_stated_contributors":["In @neo4j/graphql versions up to and including 7.6.3, @authentication directives applied at the schema level or on the Query or Mutation types are silently ignored for top-level fields annotated with @cypher. Only @authentication directives placed directly on the individual fields are enforced."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.credentials_secrets"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-92681","reporting_entity":"CVE-2026-92681","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-92681-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-92681-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-92681"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-92682","title":"In @neo4j/graphql versions from 7.0.0 up to but not including 7.6.4, the none quantifier in @authorization filters on relationships and connections is not negated when translated to Cypher, so it behaves like some. A rule such as \"none of the related denied users matches the JWT subject\" therefore returns exactly the records it was meant to exclude, and excludes those it was meant to return. An authenticated user whom such a rule is meant to deny can read the protected records. This is also the case for mutations, so the impact is that sensitive data could also be created and deleted by users that shouldn't have access according to the typedefs. Fixed in 7.6.4.","display_title":"Security issue reported in Software component","display_summary":"In @neo4j/graphql versions from 7.0.0 up to but not including 7.6.4, the none quantifier in @authorization filters on relationships and connections is not negated when translated to Cypher, so it behaves like some.","display_reference":"CVE-2026-92682","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92682","source_title":"In @neo4j/graphql versions from 7.0.0 up to but not including 7.6.4, the none quantifier in @authorization filters on relationships and connections is not negated when translated to Cypher, so it behaves like some. A rule such as \"none of the related denied users matches the JWT subject\" therefore returns exactly the records it was meant to exclude, and excludes those it was meant to return. An authenticated user whom such a rule is meant to deny can read the protected records. This is also the case for mutations, so the impact is that sensitive data could also be created and deleted by users that shouldn't have access according to the typedefs. Fixed in 7.6.4.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T21:01:43.281Z","source_hash":"content-fingerprint:fnv1a-d03f73ba","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-92682-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"In @neo4j/graphql versions from 7.0.0 up to but not including 7.6.4, the none quantifier in @authorization filters on relationships and connections is not negated when translated to Cypher, so it behaves like some. A rule such as \"none of the related denied users matches the JWT subject\" therefore returns exactly the records it was meant to exclude, and excludes those it was meant to return. An authenticated user whom such a rule is meant to deny can read the protected records. This is also the case for mutations, so the impact is that sensitive data could also be created and deleted by users that shouldn't have access according to the typedefs. Fixed in 7.6.4.","source_quote_or_pointer":"Security Advisory CVE-2026-92682","fact_id":"SEA-CVE-2026-92682-F1","document_citation":"Security Advisory CVE-2026-92682"},{"id":"SEA-CVE-2026-92682-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"In @neo4j/graphql versions from 7.0.0 up to but not including 7.6.4, the none quantifier in @authorization filters on relationships and connections is not negated when translated to Cypher, so it behaves like some.","source_quote_or_pointer":"Advisory description (CVE-2026-92682)","fact_id":"SEA-CVE-2026-92682-F2","document_citation":"Advisory description (CVE-2026-92682)"}],"source_stated_contributors":["In @neo4j/graphql versions from 7.0.0 up to but not including 7.6.4, the none quantifier in @authorization filters on relationships and connections is not negated when translated to Cypher, so it behaves like some."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.write_action","data.pii","data.credentials_secrets"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-92682","reporting_entity":"CVE-2026-92682","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-92682-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-92682-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-92682"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-104355","title":"A connected peer cluster can modify a Temporal Server cluster's local namespaces, which are never replicated to that peer, because the receiving cluster applies inbound namespace replication updates to them. In a multi-cluster deployment, each cluster pulls replication tasks from the remote clusters an administrator has registered with connection enabled; the sending side excludes local namespaces, but the receiving side does not apply the same rule. When an inbound task names an existing namespace, the server checks at most that the namespace identifiers match, then overwrites its state, description, owner, retention, archival settings, and cluster list, and its active cluster when the task carries a higher failover version, without checking that the namespace is global. A party that controls a registered peer's replies, by operating or compromising it, can therefore change any local namespace whose name and identifier it can supply, without any credential on the receiving cluster: for example, marking it Deprecated, making the peer its active cluster, and shortening its retention, after which new Workflow starts in that namespace fail. Local namespaces include the built-in temporal-system namespace. Namespace metadata the History service refreshes from the peer while processing its history replication tasks passes through the same logic. A cluster with no remote cluster registered with connection enabled is not exposed.","display_title":"Software component issue could expose accounts or credentials","display_summary":"A connected peer cluster can modify a Temporal Server cluster's local namespaces, which are never replicated to that peer, because the receiving cluster applies inbound namespace replication updates to them.","display_reference":"CVE-2026-104355","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104355","source_title":"A connected peer cluster can modify a Temporal Server cluster's local namespaces, which are never replicated to that peer, because the receiving cluster applies inbound namespace replication updates to them. In a multi-cluster deployment, each cluster pulls replication tasks from the remote clusters an administrator has registered with connection enabled; the sending side excludes local namespaces, but the receiving side does not apply the same rule. When an inbound task names an existing namespace, the server checks at most that the namespace identifiers match, then overwrites its state, description, owner, retention, archival settings, and cluster list, and its active cluster when the task carries a higher failover version, without checking that the namespace is global. A party that controls a registered peer's replies, by operating or compromising it, can therefore change any local namespace whose name and identifier it can supply, without any credential on the receiving cluster: for example, marking it Deprecated, making the peer its active cluster, and shortening its retention, after which new Workflow starts in that namespace fail. Local namespaces include the built-in temporal-system namespace. Namespace metadata the History service refreshes from the peer while processing its history replication tasks passes through the same logic. A cluster with no remote cluster registered with connection enabled is not exposed.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T21:01:43.282Z","source_hash":"content-fingerprint:fnv1a-40af7899","affected_system":{"organization":"A connected peer cluster can modify a Temporal Server cluster's local namespaces, which are never replicated to that peer, because the receiving cluster applies inbound namespace replication updates to them. In a multi-cluster deployment, each cluster pulls replication tasks from the remote clusters an administrator has registered with connection enabled; the sending side excludes local namespaces, but the receiving side does not apply the same rule. When an inbound task names an existing namespace, the server checks at most that the namespace identifiers match, then overwrites its state, description, owner, retention, archival settings, and cluster list, and its active cluster when the task carries a higher failover version, without checking that the namespace is global. A party that controls a registered peer's replies, by operating or compromising it, can therefore change any local namespace whose name and identifier it can supply, without any credential on the receiving cluster project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-104355-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A connected peer cluster can modify a Temporal Server cluster's local namespaces, which are never replicated to that peer, because the receiving cluster applies inbound namespace replication updates to them. In a multi-cluster deployment, each cluster pulls replication tasks from the remote clusters an administrator has registered with connection enabled; the sending side excludes local namespaces, but the receiving side does not apply the same rule. When an inbound task names an existing namespace, the server checks at most that the namespace identifiers match, then overwrites its state, description, owner, retention, archival settings, and cluster list, and its active cluster when the task carries a higher failover version, without checking that the namespace is global. A party that controls a registered peer's replies, by operating or compromising it, can therefore change any local namespace whose name and identifier it can supply, without any credential on the receiving cluster: for example, marking it Deprecated, making the peer its active cluster, and shortening its retention, after which new Workflow starts in that namespace fail. Local namespaces include the built-in temporal-system namespace. Namespace metadata the History service refreshes from the peer while processing its history replication tasks passes through the same logic. A cluster with no remote cluster registered with connection enabled is not exposed.","source_quote_or_pointer":"Security Advisory CVE-2026-104355","fact_id":"SEA-CVE-2026-104355-F1","document_citation":"Security Advisory CVE-2026-104355"},{"id":"SEA-CVE-2026-104355-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A connected peer cluster can modify a Temporal Server cluster's local namespaces, which are never replicated to that peer, because the receiving cluster applies inbound namespace replication updates to them.","source_quote_or_pointer":"Advisory description (CVE-2026-104355)","fact_id":"SEA-CVE-2026-104355-F2","document_citation":"Advisory description (CVE-2026-104355)"}],"source_stated_contributors":["A connected peer cluster can modify a Temporal Server cluster's local namespaces, which are never replicated to that peer, because the receiving cluster applies inbound namespace replication updates to them."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.infrastructure_modification","auth.write_action"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-104355","reporting_entity":"CVE-2026-104355","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-104355-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-104355-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-104355"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-89140","title":"Temporal Server does not bind internal completion callbacks to the namespace that attached them, which allows an authenticated caller with write permission in one namespace to alter Scheduler V2 schedule state in another namespace. The callback address temporal://internal is reserved for callbacks that Scheduler V2 attaches to the Workflows it starts. In affected releases, any authenticated caller could attach a callback with that address to a Workflow start request, the address was exempt from the component.callbacks.allowedAddresses allowlist, and the History service delivered the callback to the component its token named, in whatever namespace that was, without authorizing the original caller there. When the forged completion matches an action a target schedule is running, the schedule records the action as completed while its Workflow still runs, which can defeat an overlap policy such as SKIP, and passes caller-controlled data to the next scheduled Workflow as its last completion result. A forged failure may also pause a schedule configured to pause on failure. A forgery requires the target namespace identifier, the schedule identifier, and the identity and timing of a running action. No disclosure of Workflow payloads or history was identified. Only namespaces that hold Scheduler V2 schedules can be targeted; Scheduler V2 is off by default, and existing Scheduler V2 schedules remain targets after the settings that create them are turned off.","display_title":"Security issue reported in Software component","display_summary":"Temporal Server does not bind internal completion callbacks to the namespace that attached them, which allows an authenticated caller with write permission in one namespace to alter Scheduler V2 schedule state in another…","display_reference":"CVE-2026-89140","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89140","source_title":"Temporal Server does not bind internal completion callbacks to the namespace that attached them, which allows an authenticated caller with write permission in one namespace to alter Scheduler V2 schedule state in another namespace. The callback address temporal://internal is reserved for callbacks that Scheduler V2 attaches to the Workflows it starts. In affected releases, any authenticated caller could attach a callback with that address to a Workflow start request, the address was exempt from the component.callbacks.allowedAddresses allowlist, and the History service delivered the callback to the component its token named, in whatever namespace that was, without authorizing the original caller there. When the forged completion matches an action a target schedule is running, the schedule records the action as completed while its Workflow still runs, which can defeat an overlap policy such as SKIP, and passes caller-controlled data to the next scheduled Workflow as its last completion result. A forged failure may also pause a schedule configured to pause on failure. A forgery requires the target namespace identifier, the schedule identifier, and the identity and timing of a running action. No disclosure of Workflow payloads or history was identified. Only namespaces that hold Scheduler V2 schedules can be targeted; Scheduler V2 is off by default, and existing Scheduler V2 schedules remain targets after the settings that create them are turned off.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T21:01:43.283Z","source_hash":"content-fingerprint:fnv1a-b176ffe9","affected_system":{"organization":"Temporal Server does not bind internal completion callbacks to the namespace that attached them, which allows an authenticated caller with write permission in one namespace to alter Scheduler V2 schedule state in another namespace. The callback address temporal project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-89140-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Temporal Server does not bind internal completion callbacks to the namespace that attached them, which allows an authenticated caller with write permission in one namespace to alter Scheduler V2 schedule state in another namespace. The callback address temporal://internal is reserved for callbacks that Scheduler V2 attaches to the Workflows it starts. In affected releases, any authenticated caller could attach a callback with that address to a Workflow start request, the address was exempt from the component.callbacks.allowedAddresses allowlist, and the History service delivered the callback to the component its token named, in whatever namespace that was, without authorizing the original caller there. When the forged completion matches an action a target schedule is running, the schedule records the action as completed while its Workflow still runs, which can defeat an overlap policy such as SKIP, and passes caller-controlled data to the next scheduled Workflow as its last completion result. A forged failure may also pause a schedule configured to pause on failure. A forgery requires the target namespace identifier, the schedule identifier, and the identity and timing of a running action. No disclosure of Workflow payloads or history was identified. Only namespaces that hold Scheduler V2 schedules can be targeted; Scheduler V2 is off by default, and existing Scheduler V2 schedules remain targets after the settings that create them are turned off.","source_quote_or_pointer":"Security Advisory CVE-2026-89140","fact_id":"SEA-CVE-2026-89140-F1","document_citation":"Security Advisory CVE-2026-89140"},{"id":"SEA-CVE-2026-89140-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Temporal Server does not bind internal completion callbacks to the namespace that attached them, which allows an authenticated caller with write permission in one namespace to alter Scheduler V2 schedule state in another namespace.","source_quote_or_pointer":"Advisory description (CVE-2026-89140)","fact_id":"SEA-CVE-2026-89140-F2","document_citation":"Advisory description (CVE-2026-89140)"}],"source_stated_contributors":["Temporal Server does not bind internal completion callbacks to the namespace that attached them, which allows an authenticated caller with write permission in one namespace to alter Scheduler V2 schedule state in another namespace."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.write_action","arch.async_job"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-89140","reporting_entity":"CVE-2026-89140","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-89140-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-89140-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-89140"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109575","title":"In HAProxy Data Plane API 2.2.0 through 3.4.3 (and corresponding Enterprise Edition releases), Server.ConfigureAPI() has process-global authentication logic that improperly drops security controls across multiple transport types. When a TLS Certificate Authority (tls_ca) is configured and a numeric TLS port (tls_port) is specified, the application globally disables Basic authentication on its shared internal request handler. Because this handler is shared concurrently among HTTP, HTTPS, and UNIX domain socket listeners, and mutual TLS (mTLS) client certificate verification (tls.RequireAndVerifyClientCert) is enforced exclusively on the HTTPS server path, all other simultaneously active non-mTLS listeners fail open. Consequently, an unauthenticated attacker capable of reaching an affected HTTP or UNIX management endpoint can completely bypass credentials to gain full API administrative access. This allows unauthorized remote or local actors to read sensitive, cleartext HAProxy configuration data or replace the managed configuration entirely via the raw configuration endpoint. This has been fixed in versions 3.4.4, 3.3.9, 3.2.17, 3.0.25, 2.9.29, and their respective EE backports by migrating to a per-request TLS connection-state validation model.","display_title":"Software component issue could expose accounts or credentials","display_summary":"In HAProxy Data Plane API 2.2.0 through 3.4.3 (and corresponding Enterprise Edition releases), Server.ConfigureAPI() has process-global authentication logic that improperly drops security controls across multiple…","display_reference":"CVE-2026-109575","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109575","source_title":"In HAProxy Data Plane API 2.2.0 through 3.4.3 (and corresponding Enterprise Edition releases), Server.ConfigureAPI() has process-global authentication logic that improperly drops security controls across multiple transport types. When a TLS Certificate Authority (tls_ca) is configured and a numeric TLS port (tls_port) is specified, the application globally disables Basic authentication on its shared internal request handler. Because this handler is shared concurrently among HTTP, HTTPS, and UNIX domain socket listeners, and mutual TLS (mTLS) client certificate verification (tls.RequireAndVerifyClientCert) is enforced exclusively on the HTTPS server path, all other simultaneously active non-mTLS listeners fail open. Consequently, an unauthenticated attacker capable of reaching an affected HTTP or UNIX management endpoint can completely bypass credentials to gain full API administrative access. This allows unauthorized remote or local actors to read sensitive, cleartext HAProxy configuration data or replace the managed configuration entirely via the raw configuration endpoint. This has been fixed in versions 3.4.4, 3.3.9, 3.2.17, 3.0.25, 2.9.29, and their respective EE backports by migrating to a per-request TLS connection-state validation model.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T21:01:43.283Z","source_hash":"content-fingerprint:fnv1a-65a4b938","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109575-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"In HAProxy Data Plane API 2.2.0 through 3.4.3 (and corresponding Enterprise Edition releases), Server.ConfigureAPI() has process-global authentication logic that improperly drops security controls across multiple transport types. When a TLS Certificate Authority (tls_ca) is configured and a numeric TLS port (tls_port) is specified, the application globally disables Basic authentication on its shared internal request handler. Because this handler is shared concurrently among HTTP, HTTPS, and UNIX domain socket listeners, and mutual TLS (mTLS) client certificate verification (tls.RequireAndVerifyClientCert) is enforced exclusively on the HTTPS server path, all other simultaneously active non-mTLS listeners fail open. Consequently, an unauthenticated attacker capable of reaching an affected HTTP or UNIX management endpoint can completely bypass credentials to gain full API administrative access. This allows unauthorized remote or local actors to read sensitive, cleartext HAProxy configuration data or replace the managed configuration entirely via the raw configuration endpoint. This has been fixed in versions 3.4.4, 3.3.9, 3.2.17, 3.0.25, 2.9.29, and their respective EE backports by migrating to a per-request TLS connection-state validation model.","source_quote_or_pointer":"Security Advisory CVE-2026-109575","fact_id":"SEA-CVE-2026-109575-F1","document_citation":"Security Advisory CVE-2026-109575"},{"id":"SEA-CVE-2026-109575-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"In HAProxy Data Plane API 2.2.0 through 3.4.3 (and corresponding Enterprise Edition releases), Server.ConfigureAPI() has process-global authentication logic that improperly drops security controls across multiple transport types.","source_quote_or_pointer":"Advisory description (CVE-2026-109575)","fact_id":"SEA-CVE-2026-109575-F2","document_citation":"Advisory description (CVE-2026-109575)"}],"source_stated_contributors":["In HAProxy Data Plane API 2.2.0 through 3.4.3 (and corresponding Enterprise Edition releases), Server.ConfigureAPI() has process-global authentication logic that improperly drops security controls across multiple transport types."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109575","reporting_entity":"CVE-2026-109575","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109575-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109575-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-109575"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-103658","title":"GNU Aspell 0.60.8.2 (first vulnerable version is not known) contains a heap-based buffer overflow write (CWE-122) in its read-only dictionary loader. String::reserve() in common/string.hpp computes its capacity check with a signed int ((int)s + 1), so a requested size of 0x7FFFFFFF wraps negative and the backing buffer is never grown. ReadOnlyDict::load() in modules/speller/default/readonly_ws.cpp passes the unvalidated 32-bit size fields from a .rws dictionary header into this path, so a crafted .rws file with a valid endian marker (12345678) and an oversized length field (e.g. lang_name_size = 0x7FFFFFFF) causes attacker-controlled data to be written out of bounds past an undersized heap allocation. An attacker who induces a victim to load a malicious dictionary — for example via aspell dump master <file> — can corrupt heap memory, resulting in denial of service and potentially code execution. Fixed in b830b6e and will be fixed in release 0.60.8.3.","display_title":"Software component issue could allow unintended commands to run","display_summary":"GNU Aspell 0.60.8.2 (first vulnerable version is not known) contains a heap-based buffer overflow write (CWE-122) in its read-only dictionary loader.","display_reference":"CVE-2026-103658","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103658","source_title":"GNU Aspell 0.60.8.2 (first vulnerable version is not known) contains a heap-based buffer overflow write (CWE-122) in its read-only dictionary loader. String::reserve() in common/string.hpp computes its capacity check with a signed int ((int)s + 1), so a requested size of 0x7FFFFFFF wraps negative and the backing buffer is never grown. ReadOnlyDict::load() in modules/speller/default/readonly_ws.cpp passes the unvalidated 32-bit size fields from a .rws dictionary header into this path, so a crafted .rws file with a valid endian marker (12345678) and an oversized length field (e.g. lang_name_size = 0x7FFFFFFF) causes attacker-controlled data to be written out of bounds past an undersized heap allocation. An attacker who induces a victim to load a malicious dictionary — for example via aspell dump master <file> — can corrupt heap memory, resulting in denial of service and potentially code execution. Fixed in b830b6e and will be fixed in release 0.60.8.3.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T16:33:35.959Z","source_hash":"content-fingerprint:fnv1a-2cd12340","affected_system":{"organization":"GNU Aspell 0.60.8.2 (first vulnerable version is not known) contains a heap-based buffer overflow write (CWE-122) in its read-only dictionary loader. String project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-103658-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"GNU Aspell 0.60.8.2 (first vulnerable version is not known) contains a heap-based buffer overflow write (CWE-122) in its read-only dictionary loader. String::reserve() in common/string.hpp computes its capacity check with a signed int ((int)s + 1), so a requested size of 0x7FFFFFFF wraps negative and the backing buffer is never grown. ReadOnlyDict::load() in modules/speller/default/readonly_ws.cpp passes the unvalidated 32-bit size fields from a .rws dictionary header into this path, so a crafted .rws file with a valid endian marker (12345678) and an oversized length field (e.g. lang_name_size = 0x7FFFFFFF) causes attacker-controlled data to be written out of bounds past an undersized heap allocation. An attacker who induces a victim to load a malicious dictionary — for example via aspell dump master <file> — can corrupt heap memory, resulting in denial of service and potentially code execution. Fixed in b830b6e and will be fixed in release 0.60.8.3.","source_quote_or_pointer":"Security Advisory CVE-2026-103658","fact_id":"SEA-CVE-2026-103658-F1","document_citation":"Security Advisory CVE-2026-103658"},{"id":"SEA-CVE-2026-103658-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"GNU Aspell 0.60.8.2 (first vulnerable version is not known) contains a heap-based buffer overflow write (CWE-122) in its read-only dictionary loader. String::reserve() in common/string.hpp computes its capacity check with a signed int ((int)s + 1), so a requested size of 0x7FFFFFFF wraps negative and the backing…","source_quote_or_pointer":"Advisory description (CVE-2026-103658)","fact_id":"SEA-CVE-2026-103658-F2","document_citation":"Advisory description (CVE-2026-103658)"}],"source_stated_contributors":["GNU Aspell 0.60.8.2 (first vulnerable version is not known) contains a heap-based buffer overflow write (CWE-122) in its read-only dictionary loader. String::reserve() in common/string.hpp computes its capacity check with a signed int ((int)s + 1), so a requested size of 0x7FFFFFFF wraps negative and the backing…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-103658","reporting_entity":"CVE-2026-103658","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-103658-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-103658-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-103658"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-48211","title":"An authenticated administrator can be induced to delete administrative Import/Export templates through a Cross-Site Request Forgery (CSRF) attack. The OTRS AdminImportExport::TemplateDelete action does not validate the request's ChallengeToken, allowing an unauthenticated remote attacker to craft a malicious request that is executed with the privileges of an active administrator session. This issue affects OTRS: 7.0.X 8.0.X 2023.X 2024.X 2025.X 2026.X before 2026.7.X Please note that ((OTRS)) Community Edition 6.x and before are vulnerable. Products based on the ((OTRS)) Community Edition also very likely to be affected","display_title":"Security issue reported in Software component","display_summary":"An authenticated administrator can be induced to delete administrative Import/Export templates through a Cross-Site Request Forgery (CSRF) attack.","display_reference":"CVE-2026-48211","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-48211","source_title":"An authenticated administrator can be induced to delete administrative Import/Export templates through a Cross-Site Request Forgery (CSRF) attack. The OTRS AdminImportExport::TemplateDelete action does not validate the request's ChallengeToken, allowing an unauthenticated remote attacker to craft a malicious request that is executed with the privileges of an active administrator session. This issue affects OTRS: 7.0.X 8.0.X 2023.X 2024.X 2025.X 2026.X before 2026.7.X Please note that ((OTRS)) Community Edition 6.x and before are vulnerable. Products based on the ((OTRS)) Community Edition also very likely to be affected","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:45.576Z","source_hash":"content-fingerprint:fnv1a-6f6ffa7b","affected_system":{"organization":"An authenticated administrator can be induced to delete administrative Import/Export templates through a Cross-Site Request Forgery (CSRF) attack. The OTRS AdminImportExport project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-48211-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"An authenticated administrator can be induced to delete administrative Import/Export templates through a Cross-Site Request Forgery (CSRF) attack. The OTRS AdminImportExport::TemplateDelete action does not validate the request's ChallengeToken, allowing an unauthenticated remote attacker to craft a malicious request that is executed with the privileges of an active administrator session. This issue affects OTRS: 7.0.X 8.0.X 2023.X 2024.X 2025.X 2026.X before 2026.7.X Please note that ((OTRS)) Community Edition 6.x and before are vulnerable. Products based on the ((OTRS)) Community Edition also very likely to be affected","source_quote_or_pointer":"Security Advisory CVE-2026-48211","fact_id":"SEA-CVE-2026-48211-F1","document_citation":"Security Advisory CVE-2026-48211"},{"id":"SEA-CVE-2026-48211-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"An authenticated administrator can be induced to delete administrative Import/Export templates through a Cross-Site Request Forgery (CSRF) attack. The OTRS AdminImportExport::TemplateDelete action does not validate the request's ChallengeToken, allowing an unauthenticated remote attacker to craft a malicious request…","source_quote_or_pointer":"Advisory description (CVE-2026-48211)","fact_id":"SEA-CVE-2026-48211-F2","document_citation":"Advisory description (CVE-2026-48211)"}],"source_stated_contributors":["An authenticated administrator can be induced to delete administrative Import/Export templates through a Cross-Site Request Forgery (CSRF) attack. The OTRS AdminImportExport::TemplateDelete action does not validate the request's ChallengeToken, allowing an unauthenticated remote attacker to craft a malicious request…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.privileged_action","auth.write_action"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-48211","reporting_entity":"CVE-2026-48211","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-48211-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-48211-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-48211"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-78355","title":"A path traversal vulnerability in the OTRS SendSupportBundle functionality allows an authenticated administrator to reference file paths outside the intended directory. This may allow files accessible to the OTRS application process to be deleted. The vulnerability does not bypass operating system file permissions. On OTRS versions prior to OTRS 7, the effective permissions of the web server process are relevant. Starting with OTRS 7, access is limited by the permissions of the dedicated OTRS user. Files with overly permissive ownership or file system permissions may therefore also be affected. The affected functionality may additionally attempt to include controlled files in a support bundle. However, support bundles are sent to a predefined OTRS support address, and direct disclosure of arbitrary files to the attacker has not been demonstrated. An attacker therefore requires valid administrative access to exploit the vulnerable functionality. The primary demonstrated impact is the deletion of files outside the intended directory within the effective permissions of the OTRS application process. This issue affects OTRS: 7.0.X 8.0.X 2023.X 2024.X 2025.X 2026.X before 2026.7.X Please note that ((OTRS)) Community Edition 6.x and before are vulnerable. Products based on the ((OTRS)) Community Edition also very likely to be affected","display_title":"Software component issue could expose restricted files","display_summary":"A path traversal vulnerability in the OTRS SendSupportBundle functionality allows an authenticated administrator to reference file paths outside the intended directory.","display_reference":"CVE-2026-78355","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-78355","source_title":"A path traversal vulnerability in the OTRS SendSupportBundle functionality allows an authenticated administrator to reference file paths outside the intended directory. This may allow files accessible to the OTRS application process to be deleted. The vulnerability does not bypass operating system file permissions. On OTRS versions prior to OTRS 7, the effective permissions of the web server process are relevant. Starting with OTRS 7, access is limited by the permissions of the dedicated OTRS user. Files with overly permissive ownership or file system permissions may therefore also be affected. The affected functionality may additionally attempt to include controlled files in a support bundle. However, support bundles are sent to a predefined OTRS support address, and direct disclosure of arbitrary files to the attacker has not been demonstrated. An attacker therefore requires valid administrative access to exploit the vulnerable functionality. The primary demonstrated impact is the deletion of files outside the intended directory within the effective permissions of the OTRS application process. This issue affects OTRS: 7.0.X 8.0.X 2023.X 2024.X 2025.X 2026.X before 2026.7.X Please note that ((OTRS)) Community Edition 6.x and before are vulnerable. Products based on the ((OTRS)) Community Edition also very likely to be affected","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:45.576Z","source_hash":"content-fingerprint:fnv1a-cea72555","affected_system":{"organization":"A path traversal vulnerability in the OTRS SendSupportBundle functionality allows an authenticated administrator to reference file paths outside the intended directory. This may allow files accessible to the OTRS application process to be deleted. The vulnerability does not bypass operating system file permissions. On OTRS versions prior to OTRS 7, the effective permissions of the web server process are relevant. Starting with OTRS 7, access is limited by the permissions of the dedicated OTRS user. Files with overly permissive ownership or file system permissions may therefore also be affected. The affected functionality may additionally attempt to include controlled files in a support bundle. However, support bundles are sent to a predefined OTRS support address, and direct disclosure of arbitrary files to the attacker has not been demonstrated. An attacker therefore requires valid administrative access to exploit the vulnerable functionality. The primary demonstrated impact is the deletion of files outside the intended directory within the effective permissions of the OTRS application process. This issue affects OTRS project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-78355-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A path traversal vulnerability in the OTRS SendSupportBundle functionality allows an authenticated administrator to reference file paths outside the intended directory. This may allow files accessible to the OTRS application process to be deleted. The vulnerability does not bypass operating system file permissions. On OTRS versions prior to OTRS 7, the effective permissions of the web server process are relevant. Starting with OTRS 7, access is limited by the permissions of the dedicated OTRS user. Files with overly permissive ownership or file system permissions may therefore also be affected. The affected functionality may additionally attempt to include controlled files in a support bundle. However, support bundles are sent to a predefined OTRS support address, and direct disclosure of arbitrary files to the attacker has not been demonstrated. An attacker therefore requires valid administrative access to exploit the vulnerable functionality. The primary demonstrated impact is the deletion of files outside the intended directory within the effective permissions of the OTRS application process. This issue affects OTRS: 7.0.X 8.0.X 2023.X 2024.X 2025.X 2026.X before 2026.7.X Please note that ((OTRS)) Community Edition 6.x and before are vulnerable. Products based on the ((OTRS)) Community Edition also very likely to be affected","source_quote_or_pointer":"Security Advisory CVE-2026-78355","fact_id":"SEA-CVE-2026-78355-F1","document_citation":"Security Advisory CVE-2026-78355"},{"id":"SEA-CVE-2026-78355-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A path traversal vulnerability in the OTRS SendSupportBundle functionality allows an authenticated administrator to reference file paths outside the intended directory.","source_quote_or_pointer":"Advisory description (CVE-2026-78355)","fact_id":"SEA-CVE-2026-78355-F2","document_citation":"Advisory description (CVE-2026-78355)"}],"source_stated_contributors":["A path traversal vulnerability in the OTRS SendSupportBundle functionality allows an authenticated administrator to reference file paths outside the intended directory."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.privileged_action","data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Restricted file exposure","File overwrite"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-78355","reporting_entity":"CVE-2026-78355","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-78355-SG1","label":"Confine file access to a fixed root","description":"Resolve paths to canonical form and reject anything outside the intended directory before opening files.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-78355-SG1","label":"Confine file access to a fixed root","description":"Resolve paths to canonical form and reject anything outside the intended directory before opening files.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"File paths supplied by a caller escaped the intended directory. Canonicalise paths and confine file access to a fixed root.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-78355"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-78356","title":"The OTRS Agent Frontend configuration endpoint can be accessed without authentication. This allows unauthenticated remote users to retrieve internal application configuration that is intended for use by the authenticated Agent Frontend. The exposed information may include configured frontend routes and their associated authorization groups, authentication configuration, enabled product features, third-party integration settings, and other implementation details. The exposed configuration does not directly contain user credentials or provide unauthorized modification of the OTRS configuration. However, the disclosed information may assist an attacker in fingerprinting the affected OTRS installation and identifying enabled functionality or security-relevant configuration that could be used to prepare further attacks. This issue affects OTRS: 8.0.X 2023.X 2024.X 2025.X 2026.X before 2026.7.X","display_title":"Software component issue could expose accounts or credentials","display_summary":"The OTRS Agent Frontend configuration endpoint can be accessed without authentication. This allows unauthenticated remote users to retrieve internal application configuration that is intended for use by the authenticated…","display_reference":"CVE-2026-78356","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-78356","source_title":"The OTRS Agent Frontend configuration endpoint can be accessed without authentication. This allows unauthenticated remote users to retrieve internal application configuration that is intended for use by the authenticated Agent Frontend. The exposed information may include configured frontend routes and their associated authorization groups, authentication configuration, enabled product features, third-party integration settings, and other implementation details. The exposed configuration does not directly contain user credentials or provide unauthorized modification of the OTRS configuration. However, the disclosed information may assist an attacker in fingerprinting the affected OTRS installation and identifying enabled functionality or security-relevant configuration that could be used to prepare further attacks. This issue affects OTRS: 8.0.X 2023.X 2024.X 2025.X 2026.X before 2026.7.X","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:45.576Z","source_hash":"content-fingerprint:fnv1a-cfd15642","affected_system":{"organization":"The OTRS Agent Frontend configuration endpoint can be accessed without authentication. This allows unauthenticated remote users to retrieve internal application configuration that is intended for use by the authenticated Agent Frontend. The exposed information may include configured frontend routes and their associated authorization groups, authentication configuration, enabled product features, third-party integration settings, and other implementation details. The exposed configuration does not directly contain user credentials or provide unauthorized modification of the OTRS configuration. However, the disclosed information may assist an attacker in fingerprinting the affected OTRS installation and identifying enabled functionality or security-relevant configuration that could be used to prepare further attacks. This issue affects OTRS project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-78356-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The OTRS Agent Frontend configuration endpoint can be accessed without authentication. This allows unauthenticated remote users to retrieve internal application configuration that is intended for use by the authenticated Agent Frontend. The exposed information may include configured frontend routes and their associated authorization groups, authentication configuration, enabled product features, third-party integration settings, and other implementation details. The exposed configuration does not directly contain user credentials or provide unauthorized modification of the OTRS configuration. However, the disclosed information may assist an attacker in fingerprinting the affected OTRS installation and identifying enabled functionality or security-relevant configuration that could be used to prepare further attacks. This issue affects OTRS: 8.0.X 2023.X 2024.X 2025.X 2026.X before 2026.7.X","source_quote_or_pointer":"Security Advisory CVE-2026-78356","fact_id":"SEA-CVE-2026-78356-F1","document_citation":"Security Advisory CVE-2026-78356"},{"id":"SEA-CVE-2026-78356-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The OTRS Agent Frontend configuration endpoint can be accessed without authentication. This allows unauthenticated remote users to retrieve internal application configuration that is intended for use by the authenticated Agent Frontend.","source_quote_or_pointer":"Advisory description (CVE-2026-78356)","fact_id":"SEA-CVE-2026-78356-F2","document_citation":"Advisory description (CVE-2026-78356)"}],"source_stated_contributors":["The OTRS Agent Frontend configuration endpoint can be accessed without authentication. This allows unauthenticated remote users to retrieve internal application configuration that is intended for use by the authenticated Agent Frontend."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","data.credentials_secrets","arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-012","SEA-FM-010"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-78356","reporting_entity":"CVE-2026-78356","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-78356-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-78356-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-78356"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-78357","title":"Previously issued authentication tokens are not immediately invalidated when an OTRS agent or customer user account is deactivated or its password is changed. As a result, an existing JWT may remain valid until its regular expiration time, which can be approximately 16 hours. An attacker who has previously obtained a valid authentication token can therefore continue to access OTRS with the privileges of the affected agent or customer user even after the corresponding account has been deactivated or the user's password has been changed. The vulnerability does not allow an attacker to obtain authentication tokens by itself. Exploitation requires possession of a previously issued and still valid token. The actual impact depends on the privileges associated with the compromised token. Customer user tokens are limited to the permissions of the affected customer account, while agent tokens may provide access to broader ticket, customer, or administrative functionality depending on the assigned permissions. This issue affects OTRS: 7.0.X 8.0.X 2023.X 2024.X 2025.X 2026.X before 2026.7.X","display_title":"Security issue reported in Software component","display_summary":"Previously issued authentication tokens are not immediately invalidated when an OTRS agent or customer user account is deactivated or its password is changed.","display_reference":"CVE-2026-78357","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-78357","source_title":"Previously issued authentication tokens are not immediately invalidated when an OTRS agent or customer user account is deactivated or its password is changed. As a result, an existing JWT may remain valid until its regular expiration time, which can be approximately 16 hours. An attacker who has previously obtained a valid authentication token can therefore continue to access OTRS with the privileges of the affected agent or customer user even after the corresponding account has been deactivated or the user's password has been changed. The vulnerability does not allow an attacker to obtain authentication tokens by itself. Exploitation requires possession of a previously issued and still valid token. The actual impact depends on the privileges associated with the compromised token. Customer user tokens are limited to the permissions of the affected customer account, while agent tokens may provide access to broader ticket, customer, or administrative functionality depending on the assigned permissions. This issue affects OTRS: 7.0.X 8.0.X 2023.X 2024.X 2025.X 2026.X before 2026.7.X","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:45.577Z","source_hash":"content-fingerprint:fnv1a-4654ad3d","affected_system":{"organization":"Previously issued authentication tokens are not immediately invalidated when an OTRS agent or customer user account is deactivated or its password is changed. As a result, an existing JWT may remain valid until its regular expiration time, which can be approximately 16 hours. An attacker who has previously obtained a valid authentication token can therefore continue to access OTRS with the privileges of the affected agent or customer user even after the corresponding account has been deactivated or the user's password has been changed. The vulnerability does not allow an attacker to obtain authentication tokens by itself. Exploitation requires possession of a previously issued and still valid token. The actual impact depends on the privileges associated with the compromised token. Customer user tokens are limited to the permissions of the affected customer account, while agent tokens may provide access to broader ticket, customer, or administrative functionality depending on the assigned permissions. This issue affects OTRS project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-78357-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Previously issued authentication tokens are not immediately invalidated when an OTRS agent or customer user account is deactivated or its password is changed. As a result, an existing JWT may remain valid until its regular expiration time, which can be approximately 16 hours. An attacker who has previously obtained a valid authentication token can therefore continue to access OTRS with the privileges of the affected agent or customer user even after the corresponding account has been deactivated or the user's password has been changed. The vulnerability does not allow an attacker to obtain authentication tokens by itself. Exploitation requires possession of a previously issued and still valid token. The actual impact depends on the privileges associated with the compromised token. Customer user tokens are limited to the permissions of the affected customer account, while agent tokens may provide access to broader ticket, customer, or administrative functionality depending on the assigned permissions. This issue affects OTRS: 7.0.X 8.0.X 2023.X 2024.X 2025.X 2026.X before 2026.7.X","source_quote_or_pointer":"Security Advisory CVE-2026-78357","fact_id":"SEA-CVE-2026-78357-F1","document_citation":"Security Advisory CVE-2026-78357"},{"id":"SEA-CVE-2026-78357-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Previously issued authentication tokens are not immediately invalidated when an OTRS agent or customer user account is deactivated or its password is changed. As a result, an existing JWT may remain valid until its regular expiration time, which can be approximately 16 hours.","source_quote_or_pointer":"Advisory description (CVE-2026-78357)","fact_id":"SEA-CVE-2026-78357-F2","document_citation":"Advisory description (CVE-2026-78357)"}],"source_stated_contributors":["Previously issued authentication tokens are not immediately invalidated when an OTRS agent or customer user account is deactivated or its password is changed. As a result, an existing JWT may remain valid until its regular expiration time, which can be approximately 16 hours."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","data.credentials_secrets","arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-012","SEA-FM-010"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-78357","reporting_entity":"CVE-2026-78357","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-78357-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-78357-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-78357"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-93582","title":"The HTTP Basic Authentication modules in ((OTRS)) Community Edition 6 and prior accept the authenticated username from either the REMOTE_USER or HTTP_REMOTE_USER environment variable. In CGI and mod_perl based deployments, HTTP request headers may be mapped to corresponding HTTP_ environment variables. As a result, an unauthenticated remote attacker can supply a crafted Remote-User request header which is exposed to the application as HTTP_REMOTE_USER. When HTTP Basic Authentication is configured as the authentication backend, OTRS trusts this value as an already authenticated username and does not perform an additional password verification. An attacker may therefore authenticate through the Generic Interface as an existing agent or customer user without knowing the corresponding credentials. The resulting privileges depend on the account being impersonated. Successful exploitation may allow access to confidential information and modification of data or configuration with the permissions of the affected user. Exploitation requires HTTP Basic Authentication to be configured as an authentication backend and a web server environment in which attacker-controlled HTTP headers are exposed through the corresponding HTTP_ environment variables. OTRS 7 and later are not affected by this attack vector due to the use of Mojolicious/Hypnotoad and does not expose arbitrary request headers through %ENV in the manner required for exploitation. The supported REMOTE_USER mechanism additionally requires validation through the configured SSO shared secret. The unused HTTP_REMOTE_USER fallback has nevertheless been removed as a security-hardening measure. Please note that ((OTRS)) Community Edition 6.x and before are vulnerable. Products based on the ((OTRS)) Community Edition also very likely to be affected","display_title":"Software component issue could expose accounts or credentials","display_summary":"The HTTP Basic Authentication modules in ((OTRS)) Community Edition 6 and prior accept the authenticated username from either the REMOTEUSER or HTTPREMOTEUSER environment variable.","display_reference":"CVE-2026-93582","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93582","source_title":"The HTTP Basic Authentication modules in ((OTRS)) Community Edition 6 and prior accept the authenticated username from either the REMOTE_USER or HTTP_REMOTE_USER environment variable. In CGI and mod_perl based deployments, HTTP request headers may be mapped to corresponding HTTP_ environment variables. As a result, an unauthenticated remote attacker can supply a crafted Remote-User request header which is exposed to the application as HTTP_REMOTE_USER. When HTTP Basic Authentication is configured as the authentication backend, OTRS trusts this value as an already authenticated username and does not perform an additional password verification. An attacker may therefore authenticate through the Generic Interface as an existing agent or customer user without knowing the corresponding credentials. The resulting privileges depend on the account being impersonated. Successful exploitation may allow access to confidential information and modification of data or configuration with the permissions of the affected user. Exploitation requires HTTP Basic Authentication to be configured as an authentication backend and a web server environment in which attacker-controlled HTTP headers are exposed through the corresponding HTTP_ environment variables. OTRS 7 and later are not affected by this attack vector due to the use of Mojolicious/Hypnotoad and does not expose arbitrary request headers through %ENV in the manner required for exploitation. The supported REMOTE_USER mechanism additionally requires validation through the configured SSO shared secret. The unused HTTP_REMOTE_USER fallback has nevertheless been removed as a security-hardening measure. Please note that ((OTRS)) Community Edition 6.x and before are vulnerable. Products based on the ((OTRS)) Community Edition also very likely to be affected","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T23:01:45.577Z","source_hash":"content-fingerprint:fnv1a-d1adb756","affected_system":{"organization":"Software component project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-93582-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The HTTP Basic Authentication modules in ((OTRS)) Community Edition 6 and prior accept the authenticated username from either the REMOTE_USER or HTTP_REMOTE_USER environment variable. In CGI and mod_perl based deployments, HTTP request headers may be mapped to corresponding HTTP_ environment variables. As a result, an unauthenticated remote attacker can supply a crafted Remote-User request header which is exposed to the application as HTTP_REMOTE_USER. When HTTP Basic Authentication is configured as the authentication backend, OTRS trusts this value as an already authenticated username and does not perform an additional password verification. An attacker may therefore authenticate through the Generic Interface as an existing agent or customer user without knowing the corresponding credentials. The resulting privileges depend on the account being impersonated. Successful exploitation may allow access to confidential information and modification of data or configuration with the permissions of the affected user. Exploitation requires HTTP Basic Authentication to be configured as an authentication backend and a web server environment in which attacker-controlled HTTP headers are exposed through the corresponding HTTP_ environment variables. OTRS 7 and later are not affected by this attack vector due to the use of Mojolicious/Hypnotoad and does not expose arbitrary request headers through %ENV in the manner required for exploitation. The supported REMOTE_USER mechanism additionally requires validation through the configured SSO shared secret. The unused HTTP_REMOTE_USER fallback has nevertheless been removed as a security-hardening measure. Please note that ((OTRS)) Community Edition 6.x and before are vulnerable. Products based on the ((OTRS)) Community Edition also very likely to be affected","source_quote_or_pointer":"Security Advisory CVE-2026-93582","fact_id":"SEA-CVE-2026-93582-F1","document_citation":"Security Advisory CVE-2026-93582"},{"id":"SEA-CVE-2026-93582-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The HTTP Basic Authentication modules in ((OTRS)) Community Edition 6 and prior accept the authenticated username from either the REMOTEUSER or HTTPREMOTEUSER environment variable. In CGI and modperl based deployments, HTTP request headers may be mapped to corresponding HTTP environment variables.","source_quote_or_pointer":"Advisory description (CVE-2026-93582)","fact_id":"SEA-CVE-2026-93582-F2","document_citation":"Advisory description (CVE-2026-93582)"}],"source_stated_contributors":["The HTTP Basic Authentication modules in ((OTRS)) Community Edition 6 and prior accept the authenticated username from either the REMOTEUSER or HTTPREMOTEUSER environment variable. In CGI and modperl based deployments, HTTP request headers may be mapped to corresponding HTTP environment variables."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","data.pii","data.credentials_secrets","arch.tool_enabled_agent","arch.content_ingestion_rag"],"failure_mechanisms":["SEA-FM-012","SEA-FM-010"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-93582","reporting_entity":"CVE-2026-93582","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-93582-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-93582-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-93582"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-103529","title":"Thelia v2.6.0 permits authenticated administrators to upload and install modules via the ZIP upload function without validating or sandboxing embedded PHP code. An attacker can include malicious PHP code in a module's install() method which will then be executed upon installation, enabling remote code execution with the privileges of the web server.","display_title":"Software component issue could allow unintended commands to run","display_summary":"Thelia v2.6.0 permits authenticated administrators to upload and install modules via the ZIP upload function without validating or sandboxing embedded PHP code.","display_reference":"CVE-2026-103529","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103529","source_title":"Thelia v2.6.0 permits authenticated administrators to upload and install modules via the ZIP upload function without validating or sandboxing embedded PHP code. An attacker can include malicious PHP code in a module's install() method which will then be executed upon installation, enabling remote code execution with the privileges of the web server.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T18:14:27.112Z","source_hash":"content-fingerprint:fnv1a-5770a48f","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-103529-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Thelia v2.6.0 permits authenticated administrators to upload and install modules via the ZIP upload function without validating or sandboxing embedded PHP code. An attacker can include malicious PHP code in a module's install() method which will then be executed upon installation, enabling remote code execution with the privileges of the web server.","source_quote_or_pointer":"Security Advisory CVE-2026-103529","fact_id":"SEA-CVE-2026-103529-F1","document_citation":"Security Advisory CVE-2026-103529"},{"id":"SEA-CVE-2026-103529-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Thelia v2.6.0 permits authenticated administrators to upload and install modules via the ZIP upload function without validating or sandboxing embedded PHP code. An attacker can include malicious PHP code in a module's install() method which will then be executed upon installation, enabling remote code execution with…","source_quote_or_pointer":"Advisory description (CVE-2026-103529)","fact_id":"SEA-CVE-2026-103529-F2","document_citation":"Advisory description (CVE-2026-103529)"}],"source_stated_contributors":["Thelia v2.6.0 permits authenticated administrators to upload and install modules via the ZIP upload function without validating or sandboxing embedded PHP code. An attacker can include malicious PHP code in a module's install() method which will then be executed upon installation, enabling remote code execution with…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.uploaded_files"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-103529","reporting_entity":"CVE-2026-103529","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-103529-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-103529-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-103529"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-103528","title":"Thelia 2.6.0 uses Smarty for email templates without properly restricting access to dangerous PHP functions. An authenticated administrator can inject malicious Smarty expressions into email templates via the messages configuration interface, and when the template is previewed or rendered, functions such as system(), exec(), file_put_contents(), and file_get_contents() can be executed with the privileges of the web process. This allows arbitrary OS command execution, file read/write operations, and RCE on the underlying server.","display_title":"Software component issue could allow unintended commands to run","display_summary":"Thelia 2.6.0 uses Smarty for email templates without properly restricting access to dangerous PHP functions. An authenticated administrator can inject malicious Smarty expressions into email templates via the messages…","display_reference":"CVE-2026-103528","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103528","source_title":"Thelia 2.6.0 uses Smarty for email templates without properly restricting access to dangerous PHP functions. An authenticated administrator can inject malicious Smarty expressions into email templates via the messages configuration interface, and when the template is previewed or rendered, functions such as system(), exec(), file_put_contents(), and file_get_contents() can be executed with the privileges of the web process. This allows arbitrary OS command execution, file read/write operations, and RCE on the underlying server.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T18:14:27.112Z","source_hash":"content-fingerprint:fnv1a-e6d9e2b8","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-103528-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Thelia 2.6.0 uses Smarty for email templates without properly restricting access to dangerous PHP functions. An authenticated administrator can inject malicious Smarty expressions into email templates via the messages configuration interface, and when the template is previewed or rendered, functions such as system(), exec(), file_put_contents(), and file_get_contents() can be executed with the privileges of the web process. This allows arbitrary OS command execution, file read/write operations, and RCE on the underlying server.","source_quote_or_pointer":"Security Advisory CVE-2026-103528","fact_id":"SEA-CVE-2026-103528-F1","document_citation":"Security Advisory CVE-2026-103528"},{"id":"SEA-CVE-2026-103528-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Thelia 2.6.0 uses Smarty for email templates without properly restricting access to dangerous PHP functions. An authenticated administrator can inject malicious Smarty expressions into email templates via the messages configuration interface, and when the template is previewed or rendered, functions such as system(),…","source_quote_or_pointer":"Advisory description (CVE-2026-103528)","fact_id":"SEA-CVE-2026-103528-F2","document_citation":"Advisory description (CVE-2026-103528)"}],"source_stated_contributors":["Thelia 2.6.0 uses Smarty for email templates without properly restricting access to dangerous PHP functions. An authenticated administrator can inject malicious Smarty expressions into email templates via the messages configuration interface, and when the template is previewed or rendered, functions such as system(),…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.write_action"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-103528","reporting_entity":"CVE-2026-103528","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-103528-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-103528-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-103528"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-107193","title":"A flaw has been found in permission filters in the foreman package. The API loads a filter by its identifier and does not apply the search limit on the caller's permission. A low-privileged network attacker or user must already be allowed to delete filters for one role only. They can delete filters that belong to other unlocked roles. Those other roles then lose the access the deleted filters had granted.","display_title":"Security issue reported in Software component","display_summary":"A flaw has been found in permission filters in the foreman package. The API loads a filter by its identifier and does not apply the search limit on the caller's permission.","display_reference":"CVE-2026-107193","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107193","source_title":"A flaw has been found in permission filters in the foreman package. The API loads a filter by its identifier and does not apply the search limit on the caller's permission. A low-privileged network attacker or user must already be allowed to delete filters for one role only. They can delete filters that belong to other unlocked roles. Those other roles then lose the access the deleted filters had granted.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T18:14:27.119Z","source_hash":"content-fingerprint:fnv1a-cadf26f8","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-107193-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A flaw has been found in permission filters in the foreman package. The API loads a filter by its identifier and does not apply the search limit on the caller's permission. A low-privileged network attacker or user must already be allowed to delete filters for one role only. They can delete filters that belong to other unlocked roles. Those other roles then lose the access the deleted filters had granted.","source_quote_or_pointer":"Security Advisory CVE-2026-107193","fact_id":"SEA-CVE-2026-107193-F1","document_citation":"Security Advisory CVE-2026-107193"},{"id":"SEA-CVE-2026-107193-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A flaw has been found in permission filters in the foreman package. The API loads a filter by its identifier and does not apply the search limit on the caller's permission. A low-privileged network attacker or user must already be allowed to delete filters for one role only.","source_quote_or_pointer":"Advisory description (CVE-2026-107193)","fact_id":"SEA-CVE-2026-107193-F2","document_citation":"Advisory description (CVE-2026-107193)"}],"source_stated_contributors":["A flaw has been found in permission filters in the foreman package. The API loads a filter by its identifier and does not apply the search limit on the caller's permission. A low-privileged network attacker or user must already be allowed to delete filters for one role only."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.privileged_action","auth.write_action","data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-107193","reporting_entity":"CVE-2026-107193","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-107193-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-107193-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-107193"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-94451","title":"Quarkus REST Data Panache provides a way to automatically generate REST endpoints for data entities. A flaw was found where certain endpoints do not properly check the sort parameter provided by users. This could allow an attacker to learn information they should not have access to or slow down the system by forcing the database to perform complex tasks, potentially causing a denial of service.","display_title":"Software component issue could make the service unavailable","display_summary":"Quarkus REST Data Panache provides a way to automatically generate REST endpoints for data entities. A flaw was found where certain endpoints do not properly check the sort parameter provided by users.","display_reference":"CVE-2026-94451","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-94451","source_title":"Quarkus REST Data Panache provides a way to automatically generate REST endpoints for data entities. A flaw was found where certain endpoints do not properly check the sort parameter provided by users. This could allow an attacker to learn information they should not have access to or slow down the system by forcing the database to perform complex tasks, potentially causing a denial of service.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T07:22:13.591Z","source_hash":"content-fingerprint:fnv1a-5a1375d0","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-94451-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Quarkus REST Data Panache provides a way to automatically generate REST endpoints for data entities. A flaw was found where certain endpoints do not properly check the sort parameter provided by users. This could allow an attacker to learn information they should not have access to or slow down the system by forcing the database to perform complex tasks, potentially causing a denial of service.","source_quote_or_pointer":"Security Advisory CVE-2026-94451","fact_id":"SEA-CVE-2026-94451-F1","document_citation":"Security Advisory CVE-2026-94451"},{"id":"SEA-CVE-2026-94451-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Quarkus REST Data Panache provides a way to automatically generate REST endpoints for data entities. A flaw was found where certain endpoints do not properly check the sort parameter provided by users.","source_quote_or_pointer":"Advisory description (CVE-2026-94451)","fact_id":"SEA-CVE-2026-94451-F2","document_citation":"Advisory description (CVE-2026-94451)"}],"source_stated_contributors":["Quarkus REST Data Panache provides a way to automatically generate REST endpoints for data entities. A flaw was found where certain endpoints do not properly check the sort parameter provided by users."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.pii"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-94451","reporting_entity":"CVE-2026-94451","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-94451-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-94451-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-94451"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109362","title":"Heym v0.0.5 before v0.0.113 contains a broken access control vulnerability that allows former collaborators to keep executing JWT-auth workflows by reusing scoped workflow:execute tokens after share removal. Attackers can mint a token with a TTL up to 10 years, which the owner cannot list or revoke, and repeatedly run the workflow consuming shared credentials.","display_title":"Software component issue could allow unauthorized access","display_summary":"Heym v0.0.5 before v0.0.113 contains a broken access control vulnerability that allows former collaborators to keep executing JWT-auth workflows by reusing scoped workflow:execute tokens after share removal.","display_reference":"CVE-2026-109362","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109362","source_title":"Heym v0.0.5 before v0.0.113 contains a broken access control vulnerability that allows former collaborators to keep executing JWT-auth workflows by reusing scoped workflow:execute tokens after share removal. Attackers can mint a token with a TTL up to 10 years, which the owner cannot list or revoke, and repeatedly run the workflow consuming shared credentials.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T07:22:13.593Z","source_hash":"content-fingerprint:fnv1a-9dcf9146","affected_system":{"organization":"Heym v0.0.5 before v0.0.113 contains a broken access control vulnerability that allows former collaborators to keep executing JWT-auth workflows by reusing scoped workflow project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109362-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Heym v0.0.5 before v0.0.113 contains a broken access control vulnerability that allows former collaborators to keep executing JWT-auth workflows by reusing scoped workflow:execute tokens after share removal. Attackers can mint a token with a TTL up to 10 years, which the owner cannot list or revoke, and repeatedly run the workflow consuming shared credentials.","source_quote_or_pointer":"Security Advisory CVE-2026-109362","fact_id":"SEA-CVE-2026-109362-F1","document_citation":"Security Advisory CVE-2026-109362"},{"id":"SEA-CVE-2026-109362-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Heym v0.0.5 before v0.0.113 contains a broken access control vulnerability that allows former collaborators to keep executing JWT-auth workflows by reusing scoped workflow:execute tokens after share removal.","source_quote_or_pointer":"Advisory description (CVE-2026-109362)","fact_id":"SEA-CVE-2026-109362-F2","document_citation":"Advisory description (CVE-2026-109362)"}],"source_stated_contributors":["Heym v0.0.5 before v0.0.113 contains a broken access control vulnerability that allows former collaborators to keep executing JWT-auth workflows by reusing scoped workflow:execute tokens after share removal."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.privileged_action","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109362","reporting_entity":"CVE-2026-109362","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109362-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109362-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-109362"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109352","title":"LibreNMS before 26.9.0 contains a stored cross-site scripting vulnerability in includes/html/pages/device/wireless.inc.php, which echoes wireless sensor sensor_descr values, populated from SNMP DisplayString fields during discovery, into HTML without escaping. Attackers controlling a monitored device's SNMP agent can set values such as AI-AP-MIB::aiSSID to malicious JavaScript that executes when authenticated users view the device's Wireless tab, enabling session hijacking.","display_title":"Software component issue could run attacker-controlled scripts in a browser","display_summary":"LibreNMS before 26.9.0 contains a stored cross-site scripting vulnerability in includes/html/pages/device/wireless.inc.php, which echoes wireless sensor sensordescr values, populated from SNMP DisplayString fields during…","display_reference":"CVE-2026-109352","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109352","source_title":"LibreNMS before 26.9.0 contains a stored cross-site scripting vulnerability in includes/html/pages/device/wireless.inc.php, which echoes wireless sensor sensor_descr values, populated from SNMP DisplayString fields during discovery, into HTML without escaping. Attackers controlling a monitored device's SNMP agent can set values such as AI-AP-MIB::aiSSID to malicious JavaScript that executes when authenticated users view the device's Wireless tab, enabling session hijacking.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T07:22:13.594Z","source_hash":"content-fingerprint:fnv1a-cab4d71f","affected_system":{"organization":"LibreNMS before 26.9.0 contains a stored cross-site scripting vulnerability in includes/html/pages/device/wireless.inc.php, which echoes wireless sensor sensordescr values, populated from SNMP DisplayString fields during discovery, into HTML without escaping. Attackers controlling a monitored device's SNMP agent can set values such as AI-AP-MIB project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109352-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"LibreNMS before 26.9.0 contains a stored cross-site scripting vulnerability in includes/html/pages/device/wireless.inc.php, which echoes wireless sensor sensor_descr values, populated from SNMP DisplayString fields during discovery, into HTML without escaping. Attackers controlling a monitored device's SNMP agent can set values such as AI-AP-MIB::aiSSID to malicious JavaScript that executes when authenticated users view the device's Wireless tab, enabling session hijacking.","source_quote_or_pointer":"Security Advisory CVE-2026-109352","fact_id":"SEA-CVE-2026-109352-F1","document_citation":"Security Advisory CVE-2026-109352"},{"id":"SEA-CVE-2026-109352-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"LibreNMS before 26.9.0 contains a stored cross-site scripting vulnerability in includes/html/pages/device/wireless.inc.php, which echoes wireless sensor sensordescr values, populated from SNMP DisplayString fields during discovery, into HTML without escaping.","source_quote_or_pointer":"Advisory description (CVE-2026-109352)","fact_id":"SEA-CVE-2026-109352-F2","document_citation":"Advisory description (CVE-2026-109352)"}],"source_stated_contributors":["LibreNMS before 26.9.0 contains a stored cross-site scripting vulnerability in includes/html/pages/device/wireless.inc.php, which echoes wireless sensor sensordescr values, populated from SNMP DisplayString fields during discovery, into HTML without escaping."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-010"],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109352","reporting_entity":"CVE-2026-109352","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109352-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109352-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-109352"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109347","title":"Adminer before 6.1.1 contains a remote code execution vulnerability that allows authenticated SQLite users to bypass ATTACH and VACUUM INTO restrictions by prefixing statements with a UTF-8 byte-order mark. Attackers can attach a database file at a PHP-served path and create a table named with PHP code to execute it as the web server user.","display_title":"Software component issue could allow unintended commands to run","display_summary":"Adminer before 6.1.1 contains a remote code execution vulnerability that allows authenticated SQLite users to bypass ATTACH and VACUUM INTO restrictions by prefixing statements with a UTF-8 byte-order mark.","display_reference":"CVE-2026-109347","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109347","source_title":"Adminer before 6.1.1 contains a remote code execution vulnerability that allows authenticated SQLite users to bypass ATTACH and VACUUM INTO restrictions by prefixing statements with a UTF-8 byte-order mark. Attackers can attach a database file at a PHP-served path and create a table named with PHP code to execute it as the web server user.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T07:22:13.594Z","source_hash":"content-fingerprint:fnv1a-4dd12a4f","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109347-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Adminer before 6.1.1 contains a remote code execution vulnerability that allows authenticated SQLite users to bypass ATTACH and VACUUM INTO restrictions by prefixing statements with a UTF-8 byte-order mark. Attackers can attach a database file at a PHP-served path and create a table named with PHP code to execute it as the web server user.","source_quote_or_pointer":"Security Advisory CVE-2026-109347","fact_id":"SEA-CVE-2026-109347-F1","document_citation":"Security Advisory CVE-2026-109347"},{"id":"SEA-CVE-2026-109347-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Adminer before 6.1.1 contains a remote code execution vulnerability that allows authenticated SQLite users to bypass ATTACH and VACUUM INTO restrictions by prefixing statements with a UTF-8 byte-order mark.","source_quote_or_pointer":"Advisory description (CVE-2026-109347)","fact_id":"SEA-CVE-2026-109347-F2","document_citation":"Advisory description (CVE-2026-109347)"}],"source_stated_contributors":["Adminer before 6.1.1 contains a remote code execution vulnerability that allows authenticated SQLite users to bypass ATTACH and VACUUM INTO restrictions by prefixing statements with a UTF-8 byte-order mark."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109347","reporting_entity":"CVE-2026-109347","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109347-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109347-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-109347"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109332","title":"Network-AI (npm network-ai) before 5.15.2 contains an origin validation error in McpSseServer._handleRequest in lib/mcp-transport-sse.ts that reflects localhost Origins into Access-Control-Allow-Origin regardless of bind interface. When the server binds a non-loopback address, an attacker page with a localhost Origin visited by a victim can read unauthenticated endpoints like /health cross-origin.","display_title":"Software component issue could allow unauthorized access","display_summary":"Network-AI (npm network-ai) before 5.15.2 contains an origin validation error in McpSseServer.handleRequest in lib/mcp-transport-sse.ts that reflects localhost Origins into Access-Control-Allow-Origin regardless of bind…","display_reference":"CVE-2026-109332","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109332","source_title":"Network-AI (npm network-ai) before 5.15.2 contains an origin validation error in McpSseServer._handleRequest in lib/mcp-transport-sse.ts that reflects localhost Origins into Access-Control-Allow-Origin regardless of bind interface. When the server binds a non-loopback address, an attacker page with a localhost Origin visited by a victim can read unauthenticated endpoints like /health cross-origin.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T07:22:13.594Z","source_hash":"content-fingerprint:fnv1a-271d6993","affected_system":{"organization":"Software component project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109332-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Network-AI (npm network-ai) before 5.15.2 contains an origin validation error in McpSseServer._handleRequest in lib/mcp-transport-sse.ts that reflects localhost Origins into Access-Control-Allow-Origin regardless of bind interface. When the server binds a non-loopback address, an attacker page with a localhost Origin visited by a victim can read unauthenticated endpoints like /health cross-origin.","source_quote_or_pointer":"Security Advisory CVE-2026-109332","fact_id":"SEA-CVE-2026-109332-F1","document_citation":"Security Advisory CVE-2026-109332"},{"id":"SEA-CVE-2026-109332-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Network-AI (npm network-ai) before 5.15.2 contains an origin validation error in McpSseServer.handleRequest in lib/mcp-transport-sse.ts that reflects localhost Origins into Access-Control-Allow-Origin regardless of bind interface.","source_quote_or_pointer":"Advisory description (CVE-2026-109332)","fact_id":"SEA-CVE-2026-109332-F2","document_citation":"Advisory description (CVE-2026-109332)"}],"source_stated_contributors":["Network-AI (npm network-ai) before 5.15.2 contains an origin validation error in McpSseServer.handleRequest in lib/mcp-transport-sse.ts that reflects localhost Origins into Access-Control-Allow-Origin regardless of bind interface."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-003","SEA-FM-010"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109332","reporting_entity":"CVE-2026-109332","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109332-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109332-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-109332"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109322","title":"Grav Guestbook plugin before 0.5.2 contains a stored cross-site scripting vulnerability because its AJAX Load more and Admin Load all handlers insert stored author and message fields into the DOM as unescaped HTML via jQuery. Unauthenticated visitors can submit markup that executes in other visitors' browsers and, in versions 0.5.0 and 0.5.1, in administrator moderation sessions.","display_title":"Software component issue could run attacker-controlled scripts in a browser","display_summary":"Grav Guestbook plugin before 0.5.2 contains a stored cross-site scripting vulnerability because its AJAX Load more and Admin Load all handlers insert stored author and message fields into the DOM as unescaped HTML via…","display_reference":"CVE-2026-109322","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109322","source_title":"Grav Guestbook plugin before 0.5.2 contains a stored cross-site scripting vulnerability because its AJAX Load more and Admin Load all handlers insert stored author and message fields into the DOM as unescaped HTML via jQuery. Unauthenticated visitors can submit markup that executes in other visitors' browsers and, in versions 0.5.0 and 0.5.1, in administrator moderation sessions.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T07:22:13.595Z","source_hash":"content-fingerprint:fnv1a-9f9855d8","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109322-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Grav Guestbook plugin before 0.5.2 contains a stored cross-site scripting vulnerability because its AJAX Load more and Admin Load all handlers insert stored author and message fields into the DOM as unescaped HTML via jQuery. Unauthenticated visitors can submit markup that executes in other visitors' browsers and, in versions 0.5.0 and 0.5.1, in administrator moderation sessions.","source_quote_or_pointer":"Security Advisory CVE-2026-109322","fact_id":"SEA-CVE-2026-109322-F1","document_citation":"Security Advisory CVE-2026-109322"},{"id":"SEA-CVE-2026-109322-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Grav Guestbook plugin before 0.5.2 contains a stored cross-site scripting vulnerability because its AJAX Load more and Admin Load all handlers insert stored author and message fields into the DOM as unescaped HTML via jQuery.","source_quote_or_pointer":"Advisory description (CVE-2026-109322)","fact_id":"SEA-CVE-2026-109322-F2","document_citation":"Advisory description (CVE-2026-109322)"}],"source_stated_contributors":["Grav Guestbook plugin before 0.5.2 contains a stored cross-site scripting vulnerability because its AJAX Load more and Admin Load all handlers insert stored author and message fields into the DOM as unescaped HTML via jQuery."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.write_action"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109322","reporting_entity":"CVE-2026-109322","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109322-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109322-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-109322"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109317","title":"Grav grav-plugin-api before 1.0.36 contains a privilege escalation vulnerability that allows delegated user managers to obtain super-admin access by storing positive scalar admin or api parent grants. Attackers with api.users.write can edit account access maps or invitations so the inheriting permission resolver satisfies requireSuper checks, accessing super-only API endpoints.","display_title":"Software component issue could grant elevated privileges","display_summary":"Grav grav-plugin-api before 1.0.36 contains a privilege escalation vulnerability that allows delegated user managers to obtain super-admin access by storing positive scalar admin or api parent grants.","display_reference":"CVE-2026-109317","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109317","source_title":"Grav grav-plugin-api before 1.0.36 contains a privilege escalation vulnerability that allows delegated user managers to obtain super-admin access by storing positive scalar admin or api parent grants. Attackers with api.users.write can edit account access maps or invitations so the inheriting permission resolver satisfies requireSuper checks, accessing super-only API endpoints.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T07:22:13.595Z","source_hash":"content-fingerprint:fnv1a-c3b6be36","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109317-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Grav grav-plugin-api before 1.0.36 contains a privilege escalation vulnerability that allows delegated user managers to obtain super-admin access by storing positive scalar admin or api parent grants. Attackers with api.users.write can edit account access maps or invitations so the inheriting permission resolver satisfies requireSuper checks, accessing super-only API endpoints.","source_quote_or_pointer":"Security Advisory CVE-2026-109317","fact_id":"SEA-CVE-2026-109317-F1","document_citation":"Security Advisory CVE-2026-109317"},{"id":"SEA-CVE-2026-109317-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Grav grav-plugin-api before 1.0.36 contains a privilege escalation vulnerability that allows delegated user managers to obtain super-admin access by storing positive scalar admin or api parent grants.","source_quote_or_pointer":"Advisory description (CVE-2026-109317)","fact_id":"SEA-CVE-2026-109317-F2","document_citation":"Advisory description (CVE-2026-109317)"}],"source_stated_contributors":["Grav grav-plugin-api before 1.0.36 contains a privilege escalation vulnerability that allows delegated user managers to obtain super-admin access by storing positive scalar admin or api parent grants."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.write_action","data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Elevated privileges","Boundary bypass"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109317","reporting_entity":"CVE-2026-109317","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109317-SG1","label":"Enforce privilege boundaries in code","description":"Require explicit, server-verified authorization for privileged operations and isolate components with separate identities.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109317-SG1","label":"Enforce privilege boundaries in code","description":"Require explicit, server-verified authorization for privileged operations and isolate components with separate identities.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A low-privilege actor reached a high-privilege capability. Enforce approval and privilege boundaries in deterministic code, not by convention.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-109317"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109312","title":"Grav Login plugin 2.7.0 before 3.9.9 contains an authentication bypass in processUserProfile(), which checks that the session user exists but not that a pending front-end 2FA session is fully authorized. Attackers with a victim's password who can publish a page form without an access rule can invoke update_user before completing 2FA to disable twofa_enabled and take over the account.","display_title":"Software component issue could allow unauthorized access","display_summary":"Grav Login plugin 2.7.0 before 3.9.9 contains an authentication bypass in processUserProfile(), which checks that the session user exists but not that a pending front-end 2FA session is fully authorized.","display_reference":"CVE-2026-109312","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109312","source_title":"Grav Login plugin 2.7.0 before 3.9.9 contains an authentication bypass in processUserProfile(), which checks that the session user exists but not that a pending front-end 2FA session is fully authorized. Attackers with a victim's password who can publish a page form without an access rule can invoke update_user before completing 2FA to disable twofa_enabled and take over the account.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T07:22:13.596Z","source_hash":"content-fingerprint:fnv1a-9839a37d","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109312-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Grav Login plugin 2.7.0 before 3.9.9 contains an authentication bypass in processUserProfile(), which checks that the session user exists but not that a pending front-end 2FA session is fully authorized. Attackers with a victim's password who can publish a page form without an access rule can invoke update_user before completing 2FA to disable twofa_enabled and take over the account.","source_quote_or_pointer":"Security Advisory CVE-2026-109312","fact_id":"SEA-CVE-2026-109312-F1","document_citation":"Security Advisory CVE-2026-109312"},{"id":"SEA-CVE-2026-109312-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Grav Login plugin 2.7.0 before 3.9.9 contains an authentication bypass in processUserProfile(), which checks that the session user exists but not that a pending front-end 2FA session is fully authorized.","source_quote_or_pointer":"Advisory description (CVE-2026-109312)","fact_id":"SEA-CVE-2026-109312-F2","document_citation":"Advisory description (CVE-2026-109312)"}],"source_stated_contributors":["Grav Login plugin 2.7.0 before 3.9.9 contains an authentication bypass in processUserProfile(), which checks that the session user exists but not that a pending front-end 2FA session is fully authorized."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.public_publication","data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109312","reporting_entity":"CVE-2026-109312","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109312-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109312-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-109312"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109297","title":"Open WebUI 0.11.0 before 0.11.4 contains a denial of service vulnerability in the automation recurrence-rule validator, whose sub-daily frequency guard parses rule text more strictly than the calendar library that executes it. Users permitted to create automations can submit whitespace-folded rules (or, in 0.11.0, lowercase frequencies or omitted RRULE prefixes) that expand per-second synchronously, blocking the shared event loop for minutes per request and on every scheduler poll.","display_title":"Software component issue could make the service unavailable","display_summary":"Open WebUI 0.11.0 before 0.11.4 contains a denial of service vulnerability in the automation recurrence-rule validator, whose sub-daily frequency guard parses rule text more strictly than the calendar library that…","display_reference":"CVE-2026-109297","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109297","source_title":"Open WebUI 0.11.0 before 0.11.4 contains a denial of service vulnerability in the automation recurrence-rule validator, whose sub-daily frequency guard parses rule text more strictly than the calendar library that executes it. Users permitted to create automations can submit whitespace-folded rules (or, in 0.11.0, lowercase frequencies or omitted RRULE prefixes) that expand per-second synchronously, blocking the shared event loop for minutes per request and on every scheduler poll.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T07:22:13.596Z","source_hash":"content-fingerprint:fnv1a-c42ce313","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109297-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Open WebUI 0.11.0 before 0.11.4 contains a denial of service vulnerability in the automation recurrence-rule validator, whose sub-daily frequency guard parses rule text more strictly than the calendar library that executes it. Users permitted to create automations can submit whitespace-folded rules (or, in 0.11.0, lowercase frequencies or omitted RRULE prefixes) that expand per-second synchronously, blocking the shared event loop for minutes per request and on every scheduler poll.","source_quote_or_pointer":"Security Advisory CVE-2026-109297","fact_id":"SEA-CVE-2026-109297-F1","document_citation":"Security Advisory CVE-2026-109297"},{"id":"SEA-CVE-2026-109297-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Open WebUI 0.11.0 before 0.11.4 contains a denial of service vulnerability in the automation recurrence-rule validator, whose sub-daily frequency guard parses rule text more strictly than the calendar library that executes it.","source_quote_or_pointer":"Advisory description (CVE-2026-109297)","fact_id":"SEA-CVE-2026-109297-F2","document_citation":"Advisory description (CVE-2026-109297)"}],"source_stated_contributors":["Open WebUI 0.11.0 before 0.11.4 contains a denial of service vulnerability in the automation recurrence-rule validator, whose sub-daily frequency guard parses rule text more strictly than the calendar library that executes it."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","arch.async_job","arch.event_driven"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109297","reporting_entity":"CVE-2026-109297","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109297-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109297-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-109297"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109292","title":"Open WebUI from 0.6.27 before 0.11.4 contains an information disclosure vulnerability that allows destination servers to obtain user session cookies by receiving the full browser cookie jar on OAuth-mode connections. Operators of OpenAI-compatible connections, OpenAPI tool servers or terminal servers can capture forwarded session cookies from routine requests and replay them to hijack accounts, including administrators.","display_title":"Security issue reported in Software component","display_summary":"Open WebUI from 0.6.27 before 0.11.4 contains an information disclosure vulnerability that allows destination servers to obtain user session cookies by receiving the full browser cookie jar on OAuth-mode connections.","display_reference":"CVE-2026-109292","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109292","source_title":"Open WebUI from 0.6.27 before 0.11.4 contains an information disclosure vulnerability that allows destination servers to obtain user session cookies by receiving the full browser cookie jar on OAuth-mode connections. Operators of OpenAI-compatible connections, OpenAPI tool servers or terminal servers can capture forwarded session cookies from routine requests and replay them to hijack accounts, including administrators.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T07:22:13.597Z","source_hash":"content-fingerprint:fnv1a-86999976","affected_system":{"organization":"Software component project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109292-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Open WebUI from 0.6.27 before 0.11.4 contains an information disclosure vulnerability that allows destination servers to obtain user session cookies by receiving the full browser cookie jar on OAuth-mode connections. Operators of OpenAI-compatible connections, OpenAPI tool servers or terminal servers can capture forwarded session cookies from routine requests and replay them to hijack accounts, including administrators.","source_quote_or_pointer":"Security Advisory CVE-2026-109292","fact_id":"SEA-CVE-2026-109292-F1","document_citation":"Security Advisory CVE-2026-109292"},{"id":"SEA-CVE-2026-109292-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Open WebUI from 0.6.27 before 0.11.4 contains an information disclosure vulnerability that allows destination servers to obtain user session cookies by receiving the full browser cookie jar on OAuth-mode connections.","source_quote_or_pointer":"Advisory description (CVE-2026-109292)","fact_id":"SEA-CVE-2026-109292-F2","document_citation":"Advisory description (CVE-2026-109292)"}],"source_stated_contributors":["Open WebUI from 0.6.27 before 0.11.4 contains an information disclosure vulnerability that allows destination servers to obtain user session cookies by receiving the full browser cookie jar on OAuth-mode connections."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.code_execution","auth.privileged_action","data.pii","data.credentials_secrets"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109292","reporting_entity":"CVE-2026-109292","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109292-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109292-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-109292"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109287","title":"Open WebUI from 0.9.6 before 0.11.4 contains an authorization flaw where the knowledge base file listing does not verify that a supplied directory_id belongs to the requested knowledge base. Users with read access to any knowledge base can supply a retained foreign directory UUID to GET /api/v1/knowledge/{id}/files. The returned breadcrumbs expose folder names, owner user ids and knowledge base ids of that directory and all its ancestors.","display_title":"Security issue reported in Software component","display_summary":"Open WebUI from 0.9.6 before 0.11.4 contains an authorization flaw where the knowledge base file listing does not verify that a supplied directoryid belongs to the requested knowledge base.","display_reference":"CVE-2026-109287","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109287","source_title":"Open WebUI from 0.9.6 before 0.11.4 contains an authorization flaw where the knowledge base file listing does not verify that a supplied directory_id belongs to the requested knowledge base. Users with read access to any knowledge base can supply a retained foreign directory UUID to GET /api/v1/knowledge/{id}/files. The returned breadcrumbs expose folder names, owner user ids and knowledge base ids of that directory and all its ancestors.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T07:22:13.598Z","source_hash":"content-fingerprint:fnv1a-3719a422","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109287-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Open WebUI from 0.9.6 before 0.11.4 contains an authorization flaw where the knowledge base file listing does not verify that a supplied directory_id belongs to the requested knowledge base. Users with read access to any knowledge base can supply a retained foreign directory UUID to GET /api/v1/knowledge/{id}/files. The returned breadcrumbs expose folder names, owner user ids and knowledge base ids of that directory and all its ancestors.","source_quote_or_pointer":"Security Advisory CVE-2026-109287","fact_id":"SEA-CVE-2026-109287-F1","document_citation":"Security Advisory CVE-2026-109287"},{"id":"SEA-CVE-2026-109287-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Open WebUI from 0.9.6 before 0.11.4 contains an authorization flaw where the knowledge base file listing does not verify that a supplied directoryid belongs to the requested knowledge base. Users with read access to any knowledge base can supply a retained foreign directory UUID to GET /api/v1/knowledge/{id}/files.","source_quote_or_pointer":"Advisory description (CVE-2026-109287)","fact_id":"SEA-CVE-2026-109287-F2","document_citation":"Advisory description (CVE-2026-109287)"}],"source_stated_contributors":["Open WebUI from 0.9.6 before 0.11.4 contains an authorization flaw where the knowledge base file listing does not verify that a supplied directoryid belongs to the requested knowledge base. Users with read access to any knowledge base can supply a retained foreign directory UUID to GET /api/v1/knowledge/{id}/files."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","arch.content_ingestion_rag"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109287","reporting_entity":"CVE-2026-109287","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109287-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109287-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-109287"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109282","title":"ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a type confusion flaw in the INFO, JSON and YAML encoders, where an internal method receives a pointer of an unexpected type when writing an image in a compressed format. An attacker who can cause such an image write can trigger a SIGABRT or SIGSEGV, crashing the process and causing denial of service.","display_title":"Software component issue could make the service unavailable","display_summary":"ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a type confusion flaw in the INFO, JSON and YAML encoders, where an internal method receives a pointer of an unexpected type when writing an image in a…","display_reference":"CVE-2026-109282","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109282","source_title":"ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a type confusion flaw in the INFO, JSON and YAML encoders, where an internal method receives a pointer of an unexpected type when writing an image in a compressed format. An attacker who can cause such an image write can trigger a SIGABRT or SIGSEGV, crashing the process and causing denial of service.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T07:22:13.598Z","source_hash":"content-fingerprint:fnv1a-9fdbfdd9","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109282-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a type confusion flaw in the INFO, JSON and YAML encoders, where an internal method receives a pointer of an unexpected type when writing an image in a compressed format. An attacker who can cause such an image write can trigger a SIGABRT or SIGSEGV, crashing the process and causing denial of service.","source_quote_or_pointer":"Security Advisory CVE-2026-109282","fact_id":"SEA-CVE-2026-109282-F1","document_citation":"Security Advisory CVE-2026-109282"},{"id":"SEA-CVE-2026-109282-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a type confusion flaw in the INFO, JSON and YAML encoders, where an internal method receives a pointer of an unexpected type when writing an image in a compressed format.","source_quote_or_pointer":"Advisory description (CVE-2026-109282)","fact_id":"SEA-CVE-2026-109282-F2","document_citation":"Advisory description (CVE-2026-109282)"}],"source_stated_contributors":["ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a type confusion flaw in the INFO, JSON and YAML encoders, where an internal method receives a pointer of an unexpected type when writing an image in a compressed format."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109282","reporting_entity":"CVE-2026-109282","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109282-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109282-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-109282"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109272","title":"ImageMagick 7.1.1-31 before 7.1.2-32 contains a NULL pointer dereference in the PostScript decoder that is triggered when a policy limit is reached. Attackers can supply a crafted PostScript file for processing to crash the application, causing a denial of service.","display_title":"Software component issue could make the service unavailable","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-109272","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109272","source_title":"ImageMagick 7.1.1-31 before 7.1.2-32 contains a NULL pointer dereference in the PostScript decoder that is triggered when a policy limit is reached. Attackers can supply a crafted PostScript file for processing to crash the application, causing a denial of service.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T07:22:13.599Z","source_hash":"content-fingerprint:fnv1a-e8e60d1c","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109272-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"ImageMagick 7.1.1-31 before 7.1.2-32 contains a NULL pointer dereference in the PostScript decoder that is triggered when a policy limit is reached. Attackers can supply a crafted PostScript file for processing to crash the application, causing a denial of service.","source_quote_or_pointer":"Security Advisory CVE-2026-109272","fact_id":"SEA-CVE-2026-109272-F1","document_citation":"Security Advisory CVE-2026-109272"},{"id":"SEA-CVE-2026-109272-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"ImageMagick 7.1.1-31 before 7.1.2-32 contains a NULL pointer dereference in the PostScript decoder that is triggered when a policy limit is reached. Attackers can supply a crafted PostScript file for processing to crash the application, causing a denial of service.","source_quote_or_pointer":"Advisory description (CVE-2026-109272)","fact_id":"SEA-CVE-2026-109272-F2","document_citation":"Advisory description (CVE-2026-109272)"}],"source_stated_contributors":["ImageMagick 7.1.1-31 before 7.1.2-32 contains a NULL pointer dereference in the PostScript decoder that is triggered when a policy limit is reached. Attackers can supply a crafted PostScript file for processing to crash the application, causing a denial of service."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109272","reporting_entity":"CVE-2026-109272","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109272-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109272-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-109272"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109267","title":"ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a stack overflow in the MSL decoder caused by an incorrect depth check that fails to limit recursion. Attackers can supply a set of crafted MSL images that exhaust the stack when one of them is read, crashing the process and causing a denial of service.","display_title":"Software component issue could make the service unavailable","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-109267","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109267","source_title":"ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a stack overflow in the MSL decoder caused by an incorrect depth check that fails to limit recursion. Attackers can supply a set of crafted MSL images that exhaust the stack when one of them is read, crashing the process and causing a denial of service.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T07:22:13.600Z","source_hash":"content-fingerprint:fnv1a-78581486","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109267-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a stack overflow in the MSL decoder caused by an incorrect depth check that fails to limit recursion. Attackers can supply a set of crafted MSL images that exhaust the stack when one of them is read, crashing the process and causing a denial of service.","source_quote_or_pointer":"Security Advisory CVE-2026-109267","fact_id":"SEA-CVE-2026-109267-F1","document_citation":"Security Advisory CVE-2026-109267"},{"id":"SEA-CVE-2026-109267-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a stack overflow in the MSL decoder caused by an incorrect depth check that fails to limit recursion. Attackers can supply a set of crafted MSL images that exhaust the stack when one of them is read, crashing the process and causing a denial of service.","source_quote_or_pointer":"Advisory description (CVE-2026-109267)","fact_id":"SEA-CVE-2026-109267-F2","document_citation":"Advisory description (CVE-2026-109267)"}],"source_stated_contributors":["ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a stack overflow in the MSL decoder caused by an incorrect depth check that fails to limit recursion. Attackers can supply a set of crafted MSL images that exhaust the stack when one of them is read, crashing the process and causing a denial of service."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.uploaded_files"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109267","reporting_entity":"CVE-2026-109267","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109267-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109267-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-109267"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109262","title":"ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the SVG encoder (WriteSVGImage) that fails to release allocated memory when handling crafted images. Attackers can supply crafted image files that are processed by the SVG encoder to leak memory and cause a denial of service through resource consumption.","display_title":"Software component issue could make the service unavailable","display_summary":"ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the SVG encoder (WriteSVGImage) that fails to release allocated memory when handling crafted images.","display_reference":"CVE-2026-109262","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109262","source_title":"ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the SVG encoder (WriteSVGImage) that fails to release allocated memory when handling crafted images. Attackers can supply crafted image files that are processed by the SVG encoder to leak memory and cause a denial of service through resource consumption.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T07:22:13.600Z","source_hash":"content-fingerprint:fnv1a-a809d8e9","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109262-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the SVG encoder (WriteSVGImage) that fails to release allocated memory when handling crafted images. Attackers can supply crafted image files that are processed by the SVG encoder to leak memory and cause a denial of service through resource consumption.","source_quote_or_pointer":"Security Advisory CVE-2026-109262","fact_id":"SEA-CVE-2026-109262-F1","document_citation":"Security Advisory CVE-2026-109262"},{"id":"SEA-CVE-2026-109262-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the SVG encoder (WriteSVGImage) that fails to release allocated memory when handling crafted images.","source_quote_or_pointer":"Advisory description (CVE-2026-109262)","fact_id":"SEA-CVE-2026-109262-F2","document_citation":"Advisory description (CVE-2026-109262)"}],"source_stated_contributors":["ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the SVG encoder (WriteSVGImage) that fails to release allocated memory when handling crafted images."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.uploaded_files"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109262","reporting_entity":"CVE-2026-109262","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109262-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109262-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-109262"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109247","title":"FreeRDP before 3.32.0 contains a path traversal vulnerability in convert_filedescriptors_to_file_list() in winpr/libwinpr/clipboard/synthetic_file.c, which concatenates server-supplied cFileName values from FileGroupDescriptorW clipboard data into the published local file:// URI without rejecting '/' or '..' sequences. A malicious RDP server can supply '../' sequences so the user's next clipboard paste copies an arbitrary local file readable by the client user instead of the expected remote file.","display_title":"Software component issue could expose restricted files","display_summary":"FreeRDP before 3.32.0 contains a path traversal vulnerability in convertfiledescriptorstofilelist() in winpr/libwinpr/clipboard/syntheticfile.c, which concatenates server-supplied cFileName values from…","display_reference":"CVE-2026-109247","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109247","source_title":"FreeRDP before 3.32.0 contains a path traversal vulnerability in convert_filedescriptors_to_file_list() in winpr/libwinpr/clipboard/synthetic_file.c, which concatenates server-supplied cFileName values from FileGroupDescriptorW clipboard data into the published local file:// URI without rejecting '/' or '..' sequences. A malicious RDP server can supply '../' sequences so the user's next clipboard paste copies an arbitrary local file readable by the client user instead of the expected remote file.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T07:22:13.601Z","source_hash":"content-fingerprint:fnv1a-ed9e23bc","affected_system":{"organization":"FreeRDP before 3.32.0 contains a path traversal vulnerability in convertfiledescriptorstofilelist() in winpr/libwinpr/clipboard/syntheticfile.c, which concatenates server-supplied cFileName values from FileGroupDescriptorW clipboard data into the published local file project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109247-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"FreeRDP before 3.32.0 contains a path traversal vulnerability in convert_filedescriptors_to_file_list() in winpr/libwinpr/clipboard/synthetic_file.c, which concatenates server-supplied cFileName values from FileGroupDescriptorW clipboard data into the published local file:// URI without rejecting '/' or '..' sequences. A malicious RDP server can supply '../' sequences so the user's next clipboard paste copies an arbitrary local file readable by the client user instead of the expected remote file.","source_quote_or_pointer":"Security Advisory CVE-2026-109247","fact_id":"SEA-CVE-2026-109247-F1","document_citation":"Security Advisory CVE-2026-109247"},{"id":"SEA-CVE-2026-109247-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"FreeRDP before 3.32.0 contains a path traversal vulnerability in convertfiledescriptorstofilelist() in winpr/libwinpr/clipboard/syntheticfile.c, which concatenates server-supplied cFileName values from FileGroupDescriptorW clipboard data into the published local file:// URI without rejecting '/' or '..' sequences.","source_quote_or_pointer":"Advisory description (CVE-2026-109247)","fact_id":"SEA-CVE-2026-109247-F2","document_citation":"Advisory description (CVE-2026-109247)"}],"source_stated_contributors":["FreeRDP before 3.32.0 contains a path traversal vulnerability in convertfiledescriptorstofilelist() in winpr/libwinpr/clipboard/syntheticfile.c, which concatenates server-supplied cFileName values from FileGroupDescriptorW clipboard data into the published local file:// URI without rejecting '/' or '..' sequences."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Restricted file exposure","File overwrite"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109247","reporting_entity":"CVE-2026-109247","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109247-SG1","label":"Confine file access to a fixed root","description":"Resolve paths to canonical form and reject anything outside the intended directory before opening files.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109247-SG1","label":"Confine file access to a fixed root","description":"Resolve paths to canonical form and reject anything outside the intended directory before opening files.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"File paths supplied by a caller escaped the intended directory. Canonicalise paths and confine file access to a fixed root.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-109247"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109237","title":"Crawl4AI from 0.9.0 before 0.9.4 contains an untrusted-config gate bypass that allows non-admin API clients to construct forbidden config objects by wrapping them in dict-type wrappers. Attackers can send a laundered LLMConfig with api_token set to an env reference via /config/dump to read SECRET_KEY and provider keys, enabling admin JWT forgery.","display_title":"Software component issue could expose accounts or credentials","display_summary":"Crawl4AI from 0.9.0 before 0.9.4 contains an untrusted-config gate bypass that allows non-admin API clients to construct forbidden config objects by wrapping them in dict-type wrappers.","display_reference":"CVE-2026-109237","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109237","source_title":"Crawl4AI from 0.9.0 before 0.9.4 contains an untrusted-config gate bypass that allows non-admin API clients to construct forbidden config objects by wrapping them in dict-type wrappers. Attackers can send a laundered LLMConfig with api_token set to an env reference via /config/dump to read SECRET_KEY and provider keys, enabling admin JWT forgery.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T07:22:13.602Z","source_hash":"content-fingerprint:fnv1a-46b8fed","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109237-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Crawl4AI from 0.9.0 before 0.9.4 contains an untrusted-config gate bypass that allows non-admin API clients to construct forbidden config objects by wrapping them in dict-type wrappers. Attackers can send a laundered LLMConfig with api_token set to an env reference via /config/dump to read SECRET_KEY and provider keys, enabling admin JWT forgery.","source_quote_or_pointer":"Security Advisory CVE-2026-109237","fact_id":"SEA-CVE-2026-109237-F1","document_citation":"Security Advisory CVE-2026-109237"},{"id":"SEA-CVE-2026-109237-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Crawl4AI from 0.9.0 before 0.9.4 contains an untrusted-config gate bypass that allows non-admin API clients to construct forbidden config objects by wrapping them in dict-type wrappers.","source_quote_or_pointer":"Advisory description (CVE-2026-109237)","fact_id":"SEA-CVE-2026-109237-F2","document_citation":"Advisory description (CVE-2026-109237)"}],"source_stated_contributors":["Crawl4AI from 0.9.0 before 0.9.4 contains an untrusted-config gate bypass that allows non-admin API clients to construct forbidden config objects by wrapping them in dict-type wrappers."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109237","reporting_entity":"CVE-2026-109237","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109237-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109237-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-109237"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109200","title":"LogicalDOC Community Edition through 9.3 contains a server-side request forgery vulnerability in the default-enabled XMLConverter that fetches xml-stylesheet href URLs without scheme or host allowlisting. Authenticated users can upload XML documents whose stylesheet href points to internal http, ftp, file, or jar URLs, forcing server requests and applying attacker-controlled XSLT during conversion.","display_title":"Software component issue could reach internal services","display_summary":"LogicalDOC Community Edition through 9.3 contains a server-side request forgery vulnerability in the default-enabled XMLConverter that fetches xml-stylesheet href URLs without scheme or host allowlisting.","display_reference":"CVE-2026-109200","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109200","source_title":"LogicalDOC Community Edition through 9.3 contains a server-side request forgery vulnerability in the default-enabled XMLConverter that fetches xml-stylesheet href URLs without scheme or host allowlisting. Authenticated users can upload XML documents whose stylesheet href points to internal http, ftp, file, or jar URLs, forcing server requests and applying attacker-controlled XSLT during conversion.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T07:22:13.603Z","source_hash":"content-fingerprint:fnv1a-f0c2385b","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109200-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"LogicalDOC Community Edition through 9.3 contains a server-side request forgery vulnerability in the default-enabled XMLConverter that fetches xml-stylesheet href URLs without scheme or host allowlisting. Authenticated users can upload XML documents whose stylesheet href points to internal http, ftp, file, or jar URLs, forcing server requests and applying attacker-controlled XSLT during conversion.","source_quote_or_pointer":"Security Advisory CVE-2026-109200","fact_id":"SEA-CVE-2026-109200-F1","document_citation":"Security Advisory CVE-2026-109200"},{"id":"SEA-CVE-2026-109200-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"LogicalDOC Community Edition through 9.3 contains a server-side request forgery vulnerability in the default-enabled XMLConverter that fetches xml-stylesheet href URLs without scheme or host allowlisting.","source_quote_or_pointer":"Advisory description (CVE-2026-109200)","fact_id":"SEA-CVE-2026-109200-F2","document_citation":"Advisory description (CVE-2026-109200)"}],"source_stated_contributors":["LogicalDOC Community Edition through 9.3 contains a server-side request forgery vulnerability in the default-enabled XMLConverter that fetches xml-stylesheet href URLs without scheme or host allowlisting."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","data.uploaded_files"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Internal network access","Cloud metadata or credential exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109200","reporting_entity":"CVE-2026-109200","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109200-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109200-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"The service fetched a URL chosen by the caller and could be steered at internal systems. Restrict outbound destinations and block internal address ranges.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-109200"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108982","title":"VeraCrypt 1.26.29 (FUSE-T build) on macOS sometimes allows unintended access to decrypted data. It does not terminate the FUSE-T auxiliary service (go-nfsv4) and its associated VeraCrypt core-service helper processes when a volume is dismounted. After VeraCrypt reports the volume as dismounted, the auxiliary mount continues to serve the decrypted volume image (volume.dmg) over a loopback SMB session, and the leaked processes retain an open handle to the underlying raw device. A local user or process can therefore remount and access the decrypted volume without the passphrase, e.g., by reopening a previously accessed path (such as through a macOS Open Recent menu) or by attaching volume.dmg from the stale auxiliary mount. (The macFUSE build of VeraCrypt is not affected.)","display_title":"Security issue reported in Software component","display_summary":"VeraCrypt 1.26.29 (FUSE-T build) on macOS sometimes allows unintended access to decrypted data. It does not terminate the FUSE-T auxiliary service (go-nfsv4) and its associated VeraCrypt core-service helper processes…","display_reference":"CVE-2026-108982","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108982","source_title":"VeraCrypt 1.26.29 (FUSE-T build) on macOS sometimes allows unintended access to decrypted data. It does not terminate the FUSE-T auxiliary service (go-nfsv4) and its associated VeraCrypt core-service helper processes when a volume is dismounted. After VeraCrypt reports the volume as dismounted, the auxiliary mount continues to serve the decrypted volume image (volume.dmg) over a loopback SMB session, and the leaked processes retain an open handle to the underlying raw device. A local user or process can therefore remount and access the decrypted volume without the passphrase, e.g., by reopening a previously accessed path (such as through a macOS Open Recent menu) or by attaching volume.dmg from the stale auxiliary mount. (The macFUSE build of VeraCrypt is not affected.)","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T07:22:13.605Z","source_hash":"content-fingerprint:fnv1a-5522ea7f","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108982-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"VeraCrypt 1.26.29 (FUSE-T build) on macOS sometimes allows unintended access to decrypted data. It does not terminate the FUSE-T auxiliary service (go-nfsv4) and its associated VeraCrypt core-service helper processes when a volume is dismounted. After VeraCrypt reports the volume as dismounted, the auxiliary mount continues to serve the decrypted volume image (volume.dmg) over a loopback SMB session, and the leaked processes retain an open handle to the underlying raw device. A local user or process can therefore remount and access the decrypted volume without the passphrase, e.g., by reopening a previously accessed path (such as through a macOS Open Recent menu) or by attaching volume.dmg from the stale auxiliary mount. (The macFUSE build of VeraCrypt is not affected.)","source_quote_or_pointer":"Security Advisory CVE-2026-108982","fact_id":"SEA-CVE-2026-108982-F1","document_citation":"Security Advisory CVE-2026-108982"},{"id":"SEA-CVE-2026-108982-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"VeraCrypt 1.26.29 (FUSE-T build) on macOS sometimes allows unintended access to decrypted data. It does not terminate the FUSE-T auxiliary service (go-nfsv4) and its associated VeraCrypt core-service helper processes when a volume is dismounted.","source_quote_or_pointer":"Advisory description (CVE-2026-108982)","fact_id":"SEA-CVE-2026-108982-F2","document_citation":"Advisory description (CVE-2026-108982)"}],"source_stated_contributors":["VeraCrypt 1.26.29 (FUSE-T build) on macOS sometimes allows unintended access to decrypted data. It does not terminate the FUSE-T auxiliary service (go-nfsv4) and its associated VeraCrypt core-service helper processes when a volume is dismounted."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108982","reporting_entity":"CVE-2026-108982","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108982-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108982-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-108982"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-82101","title":"IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of service due to a path traversal vulnerability.","display_title":"datastage on cloud pak for data issue could expose restricted files","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-82101","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-82101","source_title":"IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of service due to a path traversal vulnerability.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T01:57:40.305Z","source_hash":"content-fingerprint:fnv1a-373267f1","affected_system":{"organization":"datastage on cloud pak for data project","product":"datastage on cloud pak for data","system_type":"Cloud & container infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-82101-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of service due to a path traversal vulnerability.","source_quote_or_pointer":"Security Advisory CVE-2026-82101","fact_id":"SEA-CVE-2026-82101-F1","document_citation":"Security Advisory CVE-2026-82101"},{"id":"SEA-CVE-2026-82101-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of service due to a path traversal vulnerability.","source_quote_or_pointer":"Advisory description (CVE-2026-82101)","fact_id":"SEA-CVE-2026-82101-F2","document_citation":"Advisory description (CVE-2026-82101)"}],"source_stated_contributors":["IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of service due to a path traversal vulnerability."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Restricted file exposure","File overwrite"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-82101","reporting_entity":"CVE-2026-82101","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-82101-SG1","label":"Confine file access to a fixed root","description":"Resolve paths to canonical form and reject anything outside the intended directory before opening files.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-82101-SG1","label":"Confine file access to a fixed root","description":"Resolve paths to canonical form and reject anything outside the intended directory before opening files.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"File paths supplied by a caller escaped the intended directory. Canonicalise paths and confine file access to a fixed root.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-82101"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-82110","title":"IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of pathname during a path traversal.","display_title":"datastage on cloud pak for data issue could allow unintended commands to run","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-82110","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-82110","source_title":"IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of pathname during a path traversal.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T01:57:40.306Z","source_hash":"content-fingerprint:fnv1a-6c0677cb","affected_system":{"organization":"datastage on cloud pak for data project","product":"datastage on cloud pak for data","system_type":"Cloud & container infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-82110-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of pathname during a path traversal.","source_quote_or_pointer":"Security Advisory CVE-2026-82110","fact_id":"SEA-CVE-2026-82110-F1","document_citation":"Security Advisory CVE-2026-82110"},{"id":"SEA-CVE-2026-82110-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of pathname during a path traversal.","source_quote_or_pointer":"Advisory description (CVE-2026-82110)","fact_id":"SEA-CVE-2026-82110-F2","document_citation":"Advisory description (CVE-2026-82110)"}],"source_stated_contributors":["IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of pathname during a path traversal."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-82110","reporting_entity":"CVE-2026-82110","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-82110-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-82110-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-82110"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-84418","title":"IBM DataStage on Cloud Pak for Data 5.4.0.0 can allow a man-in-the-middle attacker to present a forged TLS certificate, intercept the connection, and capture the IAM bearer Authorization header automatically attached by the session adapter. The captured token grants full platform-scope tenant API access, enabling the attacker to read and manipulate the victim's DataStage projects, flows, assets, and pipeline definitions. This is client-side SDK code running on the user's own machine, so exploitation requires an external network interceptor rather than a co-tenant in the shared cluster.","display_title":"Security issue reported in datastage on cloud pak for data","display_summary":"IBM DataStage on Cloud Pak for Data 5.4.0.0 can allow a man-in-the-middle attacker to present a forged TLS certificate, intercept the connection, and capture the IAM bearer Authorization header automatically attached by…","display_reference":"CVE-2026-84418","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84418","source_title":"IBM DataStage on Cloud Pak for Data 5.4.0.0 can allow a man-in-the-middle attacker to present a forged TLS certificate, intercept the connection, and capture the IAM bearer Authorization header automatically attached by the session adapter. The captured token grants full platform-scope tenant API access, enabling the attacker to read and manipulate the victim's DataStage projects, flows, assets, and pipeline definitions. This is client-side SDK code running on the user's own machine, so exploitation requires an external network interceptor rather than a co-tenant in the shared cluster.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T01:57:40.306Z","source_hash":"content-fingerprint:fnv1a-e5e4ae5e","affected_system":{"organization":"datastage on cloud pak for data project","product":"datastage on cloud pak for data","system_type":"Cloud & container infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-84418-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM DataStage on Cloud Pak for Data 5.4.0.0 can allow a man-in-the-middle attacker to present a forged TLS certificate, intercept the connection, and capture the IAM bearer Authorization header automatically attached by the session adapter. The captured token grants full platform-scope tenant API access, enabling the attacker to read and manipulate the victim's DataStage projects, flows, assets, and pipeline definitions. This is client-side SDK code running on the user's own machine, so exploitation requires an external network interceptor rather than a co-tenant in the shared cluster.","source_quote_or_pointer":"Security Advisory CVE-2026-84418","fact_id":"SEA-CVE-2026-84418-F1","document_citation":"Security Advisory CVE-2026-84418"},{"id":"SEA-CVE-2026-84418-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM DataStage on Cloud Pak for Data 5.4.0.0 can allow a man-in-the-middle attacker to present a forged TLS certificate, intercept the connection, and capture the IAM bearer Authorization header automatically attached by the session adapter.","source_quote_or_pointer":"Advisory description (CVE-2026-84418)","fact_id":"SEA-CVE-2026-84418-F2","document_citation":"Advisory description (CVE-2026-84418)"}],"source_stated_contributors":["IBM DataStage on Cloud Pak for Data 5.4.0.0 can allow a man-in-the-middle attacker to present a forged TLS certificate, intercept the connection, and capture the IAM bearer Authorization header automatically attached by the session adapter."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.code_execution","data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-84418","reporting_entity":"CVE-2026-84418","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-84418-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-84418-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-84418"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-9191","title":"Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not sufficiently isolate user-supplied code executed through certain REST and XDBC evaluation paths from HTTP request, response, and session state. An attacker able to execute code through an affected path could perform unauthorized actions or compromise an authenticated session.","display_title":"Security issue reported in Software component","display_summary":"Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not sufficiently isolate user-supplied code executed through certain REST and XDBC evaluation paths from HTTP request, response,…","display_reference":"CVE-2026-9191","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-9191","source_title":"Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not sufficiently isolate user-supplied code executed through certain REST and XDBC evaluation paths from HTTP request, response, and session state. An attacker able to execute code through an affected path could perform unauthorized actions or compromise an authenticated session.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-14T17:05:08.274Z","source_hash":"content-fingerprint:fnv1a-894c5665","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-9191-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not sufficiently isolate user-supplied code executed through certain REST and XDBC evaluation paths from HTTP request, response, and session state. An attacker able to execute code through an affected path could perform unauthorized actions or compromise an authenticated session.","source_quote_or_pointer":"Security Advisory CVE-2026-9191","fact_id":"SEA-CVE-2026-9191-F1","document_citation":"Security Advisory CVE-2026-9191"},{"id":"SEA-CVE-2026-9191-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not sufficiently isolate user-supplied code executed through certain REST and XDBC evaluation paths from HTTP request, response, and session state.","source_quote_or_pointer":"Advisory description (CVE-2026-9191)","fact_id":"SEA-CVE-2026-9191-F2","document_citation":"Advisory description (CVE-2026-9191)"}],"source_stated_contributors":["Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not sufficiently isolate user-supplied code executed through certain REST and XDBC evaluation paths from HTTP request, response, and session state."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.code_execution","data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-9191","reporting_entity":"CVE-2026-9191","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-9191-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-9191-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-9191"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-87690","title":"The Metasploit Framework post module post/apple_ios/gather/ios_image_gather is affected by a relative path traversal vulnerability (CWE-22). The module interpolates file names taken from a Meterpreter directory listing — data fully controlled by a hostile or tampered iOS device — directly into the local destination path passed to client.fs.file.download_file(), with no sanitization. The underlying stdapi sink (lib/rex/post/meterpreter/extensions/stdapi/fs/file.rb) writes to whatever path is supplied, so a listing entry such as ../../msfconsole.rc escapes the intended ~/.msf4/loot/<random> directory and overwrites ~/.msf4/msfconsole.rc, a resource file that every msfconsole invocation automatically executes at startup (lib/msf/ui/console/driver.rb:196). An attacker-controlled device that lures an operator into running this gather module achieves an arbitrary file write as the operator; because the written msfconsole.rc can load a second written file (a Ruby plugin whose top-level code runs on require), this converts into persistent code execution and an interactive shell as the operator (frequently root) on the pentester's workstation at the next console launch. The same traversal was previously fixed upstream in the recursive downloader (stdapi/fs/dir.rb scrubs separators); this module omitted the equivalent scrub. The fix applies the same separator scrub (or File.basename) to listing entries before building the local path.","display_title":"Software component issue could allow unintended commands to run","display_summary":"The Metasploit Framework post module post/appleios/gather/iosimagegather is affected by a relative path traversal vulnerability (CWE-22).","display_reference":"CVE-2026-87690","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87690","source_title":"The Metasploit Framework post module post/apple_ios/gather/ios_image_gather is affected by a relative path traversal vulnerability (CWE-22). The module interpolates file names taken from a Meterpreter directory listing — data fully controlled by a hostile or tampered iOS device — directly into the local destination path passed to client.fs.file.download_file(), with no sanitization. The underlying stdapi sink (lib/rex/post/meterpreter/extensions/stdapi/fs/file.rb) writes to whatever path is supplied, so a listing entry such as ../../msfconsole.rc escapes the intended ~/.msf4/loot/<random> directory and overwrites ~/.msf4/msfconsole.rc, a resource file that every msfconsole invocation automatically executes at startup (lib/msf/ui/console/driver.rb:196). An attacker-controlled device that lures an operator into running this gather module achieves an arbitrary file write as the operator; because the written msfconsole.rc can load a second written file (a Ruby plugin whose top-level code runs on require), this converts into persistent code execution and an interactive shell as the operator (frequently root) on the pentester's workstation at the next console launch. The same traversal was previously fixed upstream in the recursive downloader (stdapi/fs/dir.rb scrubs separators); this module omitted the equivalent scrub. The fix applies the same separator scrub (or File.basename) to listing entries before building the local path.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-14T17:05:08.282Z","source_hash":"content-fingerprint:fnv1a-143d1d83","affected_system":{"organization":"The Metasploit Framework post module post/appleios/gather/iosimagegather is affected by a relative path traversal vulnerability (CWE-22). The module interpolates file names taken from a Meterpreter directory listing — data fully controlled by a hostile or tampered iOS device — directly into the local destination path passed to client.fs.file.downloadfile(), with no sanitization. The underlying stdapi sink (lib/rex/post/meterpreter/extensions/stdapi/fs/file.rb) writes to whatever path is supplied, so a listing entry such as ../../msfconsole.rc escapes the intended ~/.msf4/loot/<random> directory and overwrites ~/.msf4/msfconsole.rc, a resource file that every msfconsole invocation automatically executes at startup (lib/msf/ui/console/driver.rb project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-87690-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Metasploit Framework post module post/apple_ios/gather/ios_image_gather is affected by a relative path traversal vulnerability (CWE-22). The module interpolates file names taken from a Meterpreter directory listing — data fully controlled by a hostile or tampered iOS device — directly into the local destination path passed to client.fs.file.download_file(), with no sanitization. The underlying stdapi sink (lib/rex/post/meterpreter/extensions/stdapi/fs/file.rb) writes to whatever path is supplied, so a listing entry such as ../../msfconsole.rc escapes the intended ~/.msf4/loot/<random> directory and overwrites ~/.msf4/msfconsole.rc, a resource file that every msfconsole invocation automatically executes at startup (lib/msf/ui/console/driver.rb:196). An attacker-controlled device that lures an operator into running this gather module achieves an arbitrary file write as the operator; because the written msfconsole.rc can load a second written file (a Ruby plugin whose top-level code runs on require), this converts into persistent code execution and an interactive shell as the operator (frequently root) on the pentester's workstation at the next console launch. The same traversal was previously fixed upstream in the recursive downloader (stdapi/fs/dir.rb scrubs separators); this module omitted the equivalent scrub. The fix applies the same separator scrub (or File.basename) to listing entries before building the local path.","source_quote_or_pointer":"Security Advisory CVE-2026-87690","fact_id":"SEA-CVE-2026-87690-F1","document_citation":"Security Advisory CVE-2026-87690"},{"id":"SEA-CVE-2026-87690-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Metasploit Framework post module post/appleios/gather/iosimagegather is affected by a relative path traversal vulnerability (CWE-22). The module interpolates file names taken from a Meterpreter directory listing — data fully controlled by a hostile or tampered iOS device — directly into the local destination path…","source_quote_or_pointer":"Advisory description (CVE-2026-87690)","fact_id":"SEA-CVE-2026-87690-F2","document_citation":"Advisory description (CVE-2026-87690)"}],"source_stated_contributors":["The Metasploit Framework post module post/appleios/gather/iosimagegather is affected by a relative path traversal vulnerability (CWE-22). The module interpolates file names taken from a Meterpreter directory listing — data fully controlled by a hostile or tampered iOS device — directly into the local destination path…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.write_action"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-87690","reporting_entity":"CVE-2026-87690","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-87690-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-87690-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-87690"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-85972","title":"Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not sufficiently verify the identity of a Kerberos authentication service in certain password-based authentication configurations. A network-positioned attacker could impersonate trusted authentication infrastructure, potentially resulting in unauthorized access or modification of protected data.","display_title":"Software component issue could allow unauthorized access","display_summary":"Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not sufficiently verify the identity of a Kerberos authentication service in certain password-based authentication configurations.","display_reference":"CVE-2026-85972","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85972","source_title":"Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not sufficiently verify the identity of a Kerberos authentication service in certain password-based authentication configurations. A network-positioned attacker could impersonate trusted authentication infrastructure, potentially resulting in unauthorized access or modification of protected data.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-14T17:05:08.283Z","source_hash":"content-fingerprint:fnv1a-90099f14","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-85972-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not sufficiently verify the identity of a Kerberos authentication service in certain password-based authentication configurations. A network-positioned attacker could impersonate trusted authentication infrastructure, potentially resulting in unauthorized access or modification of protected data.","source_quote_or_pointer":"Security Advisory CVE-2026-85972","fact_id":"SEA-CVE-2026-85972-F1","document_citation":"Security Advisory CVE-2026-85972"},{"id":"SEA-CVE-2026-85972-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not sufficiently verify the identity of a Kerberos authentication service in certain password-based authentication configurations.","source_quote_or_pointer":"Advisory description (CVE-2026-85972)","fact_id":"SEA-CVE-2026-85972-F2","document_citation":"Advisory description (CVE-2026-85972)"}],"source_stated_contributors":["Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not sufficiently verify the identity of a Kerberos authentication service in certain password-based authentication configurations."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.credentials_secrets"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-85972","reporting_entity":"CVE-2026-85972","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-85972-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-85972-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-85972"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-85960","title":"Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 use predictable CSRF tokens in Query Console. A remote attacker who lures an authenticated Query Console user to a malicious page could submit unauthorized requests and execute server-side code with the victim's permissions.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-85960","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85960","source_title":"Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 use predictable CSRF tokens in Query Console. A remote attacker who lures an authenticated Query Console user to a malicious page could submit unauthorized requests and execute server-side code with the victim's permissions.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-14T17:05:08.283Z","source_hash":"content-fingerprint:fnv1a-1a7847a5","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-85960-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 use predictable CSRF tokens in Query Console. A remote attacker who lures an authenticated Query Console user to a malicious page could submit unauthorized requests and execute server-side code with the victim's permissions.","source_quote_or_pointer":"Security Advisory CVE-2026-85960","fact_id":"SEA-CVE-2026-85960-F1","document_citation":"Security Advisory CVE-2026-85960"},{"id":"SEA-CVE-2026-85960-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 use predictable CSRF tokens in Query Console. A remote attacker who lures an authenticated Query Console user to a malicious page could submit unauthorized requests and execute server-side code with the victim's permissions.","source_quote_or_pointer":"Advisory description (CVE-2026-85960)","fact_id":"SEA-CVE-2026-85960-F2","document_citation":"Advisory description (CVE-2026-85960)"}],"source_stated_contributors":["Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 use predictable CSRF tokens in Query Console. A remote attacker who lures an authenticated Query Console user to a malicious page could submit unauthorized requests and execute server-side code with the victim's permissions."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-85960","reporting_entity":"CVE-2026-85960","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-85960-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-85960-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-85960"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-85956","title":"Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 allow a remote attacker with delegated database-administrator privileges to perform backup or restore operations on forests outside the authorized database scope, which could result in unauthorized access to or modification of security-critical data.","display_title":"Software component issue could allow unauthorized access","display_summary":"Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 allow a remote attacker with delegated database-administrator privileges to perform backup or restore operations on forests outside…","display_reference":"CVE-2026-85956","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85956","source_title":"Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 allow a remote attacker with delegated database-administrator privileges to perform backup or restore operations on forests outside the authorized database scope, which could result in unauthorized access to or modification of security-critical data.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-14T17:05:08.284Z","source_hash":"content-fingerprint:fnv1a-2c55803a","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-85956-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 allow a remote attacker with delegated database-administrator privileges to perform backup or restore operations on forests outside the authorized database scope, which could result in unauthorized access to or modification of security-critical data.","source_quote_or_pointer":"Security Advisory CVE-2026-85956","fact_id":"SEA-CVE-2026-85956-F1","document_citation":"Security Advisory CVE-2026-85956"},{"id":"SEA-CVE-2026-85956-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 allow a remote attacker with delegated database-administrator privileges to perform backup or restore operations on forests outside the authorized database scope, which could result in unauthorized access to or modification of…","source_quote_or_pointer":"Advisory description (CVE-2026-85956)","fact_id":"SEA-CVE-2026-85956-F2","document_citation":"Advisory description (CVE-2026-85956)"}],"source_stated_contributors":["Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 allow a remote attacker with delegated database-administrator privileges to perform backup or restore operations on forests outside the authorized database scope, which could result in unauthorized access to or modification of…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.write_action"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-85956","reporting_entity":"CVE-2026-85956","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-85956-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-85956-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-85956"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-85955","title":"Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 allow a remote attacker with query-execution access to invoke an XQuery evaluation function without the additional required evaluation privilege, which could result in server-side code execution with elevated permissions.","display_title":"Software component issue could allow unintended commands to run","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-85955","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85955","source_title":"Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 allow a remote attacker with query-execution access to invoke an XQuery evaluation function without the additional required evaluation privilege, which could result in server-side code execution with elevated permissions.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-14T17:05:08.284Z","source_hash":"content-fingerprint:fnv1a-23228a37","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-85955-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 allow a remote attacker with query-execution access to invoke an XQuery evaluation function without the additional required evaluation privilege, which could result in server-side code execution with elevated permissions.","source_quote_or_pointer":"Security Advisory CVE-2026-85955","fact_id":"SEA-CVE-2026-85955-F1","document_citation":"Security Advisory CVE-2026-85955"},{"id":"SEA-CVE-2026-85955-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 allow a remote attacker with query-execution access to invoke an XQuery evaluation function without the additional required evaluation privilege, which could result in server-side code execution with elevated permissions.","source_quote_or_pointer":"Advisory description (CVE-2026-85955)","fact_id":"SEA-CVE-2026-85955-F2","document_citation":"Advisory description (CVE-2026-85955)"}],"source_stated_contributors":["Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 allow a remote attacker with query-execution access to invoke an XQuery evaluation function without the additional required evaluation privilege, which could result in server-side code execution with elevated permissions."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-85955","reporting_entity":"CVE-2026-85955","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-85955-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-85955-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-85955"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-90921","title":"IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to improper handling of malformed frames, resulting in termination of the host process.","display_title":"Software component issue could make the service unavailable","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-90921","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90921","source_title":"IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to improper handling of malformed frames, resulting in termination of the host process.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T17:34:01.280Z","source_hash":"content-fingerprint:fnv1a-5810ded8","affected_system":{"organization":"Software component project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-90921-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to improper handling of malformed frames, resulting in termination of the host process.","source_quote_or_pointer":"Security Advisory CVE-2026-90921","fact_id":"SEA-CVE-2026-90921-F1","document_citation":"Security Advisory CVE-2026-90921"},{"id":"SEA-CVE-2026-90921-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to improper handling of malformed frames, resulting in termination of the host process.","source_quote_or_pointer":"Advisory description (CVE-2026-90921)","fact_id":"SEA-CVE-2026-90921-F2","document_citation":"Advisory description (CVE-2026-90921)"}],"source_stated_contributors":["IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to improper handling of malformed frames, resulting in termination of the host process."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-90921","reporting_entity":"CVE-2026-90921","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-90921-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-90921-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-90921"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-90911","title":"IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.","display_title":"Software component issue could make the service unavailable","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-90911","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90911","source_title":"IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T17:34:01.280Z","source_hash":"content-fingerprint:fnv1a-542022e5","affected_system":{"organization":"Software component project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-90911-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.","source_quote_or_pointer":"Security Advisory CVE-2026-90911","fact_id":"SEA-CVE-2026-90911-F1","document_citation":"Security Advisory CVE-2026-90911"},{"id":"SEA-CVE-2026-90911-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.","source_quote_or_pointer":"Advisory description (CVE-2026-90911)","fact_id":"SEA-CVE-2026-90911-F2","document_citation":"Advisory description (CVE-2026-90911)"}],"source_stated_contributors":["IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-90911","reporting_entity":"CVE-2026-90911","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-90911-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-90911-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-90911"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-78673","title":"IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to improper input validation.","display_title":"Software component issue could make the service unavailable","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-78673","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-78673","source_title":"IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to improper input validation.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T17:34:01.283Z","source_hash":"content-fingerprint:fnv1a-7d4a280c","affected_system":{"organization":"Software component project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-78673-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to improper input validation.","source_quote_or_pointer":"Security Advisory CVE-2026-78673","fact_id":"SEA-CVE-2026-78673-F1","document_citation":"Security Advisory CVE-2026-78673"},{"id":"SEA-CVE-2026-78673-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to improper input validation.","source_quote_or_pointer":"Advisory description (CVE-2026-78673)","fact_id":"SEA-CVE-2026-78673-F2","document_citation":"Advisory description (CVE-2026-78673)"}],"source_stated_contributors":["IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to improper input validation."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-78673","reporting_entity":"CVE-2026-78673","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-78673-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-78673-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-78673"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108952","title":"RT-Thread through 5.3.0 contains a memory corruption vulnerability in the legacy USB CDC virtual COM port driver that aliases rx_ringbuffer as a Serial V2 rt_serial_rx_fifo in _function_enable(). A connected USB host configuring the CDC device triggers writes past the ring buffer into struct vcom members and an invalid rt_free() on close, causing denial of service.","display_title":"Software component issue could make the service unavailable","display_summary":"RT-Thread through 5.3.0 contains a memory corruption vulnerability in the legacy USB CDC virtual COM port driver that aliases rxringbuffer as a Serial V2 rtserialrxfifo in functionenable().","display_reference":"CVE-2026-108952","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108952","source_title":"RT-Thread through 5.3.0 contains a memory corruption vulnerability in the legacy USB CDC virtual COM port driver that aliases rx_ringbuffer as a Serial V2 rt_serial_rx_fifo in _function_enable(). A connected USB host configuring the CDC device triggers writes past the ring buffer into struct vcom members and an invalid rt_free() on close, causing denial of service.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T17:34:01.300Z","source_hash":"content-fingerprint:fnv1a-f12a4f2","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108952-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"RT-Thread through 5.3.0 contains a memory corruption vulnerability in the legacy USB CDC virtual COM port driver that aliases rx_ringbuffer as a Serial V2 rt_serial_rx_fifo in _function_enable(). A connected USB host configuring the CDC device triggers writes past the ring buffer into struct vcom members and an invalid rt_free() on close, causing denial of service.","source_quote_or_pointer":"Security Advisory CVE-2026-108952","fact_id":"SEA-CVE-2026-108952-F1","document_citation":"Security Advisory CVE-2026-108952"},{"id":"SEA-CVE-2026-108952-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"RT-Thread through 5.3.0 contains a memory corruption vulnerability in the legacy USB CDC virtual COM port driver that aliases rxringbuffer as a Serial V2 rtserialrxfifo in functionenable().","source_quote_or_pointer":"Advisory description (CVE-2026-108952)","fact_id":"SEA-CVE-2026-108952-F2","document_citation":"Advisory description (CVE-2026-108952)"}],"source_stated_contributors":["RT-Thread through 5.3.0 contains a memory corruption vulnerability in the legacy USB CDC virtual COM port driver that aliases rxringbuffer as a Serial V2 rtserialrxfifo in functionenable()."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108952","reporting_entity":"CVE-2026-108952","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108952-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108952-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108952"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108828","title":"A vulnerability was identified in Zen Cart 2.2.2. Affected by this vulnerability is the function eval of the file admin/configuration.php of the component Admin Panel. The manipulation of the argument gID leads to sql injection. The attack may be initiated remotely. The attack is considered to have high complexity. The exploitation appears to be difficult. The exploit is publicly available and might be used. The vendor explains: \"set_function/use_function are not editable through any normal admin UI (only at plugin-install time via SQL, or via direct database access)\".","display_title":"Software component issue could expose or alter stored data","display_summary":"A vulnerability was identified in Zen Cart 2.2.2. Affected by this vulnerability is the function eval of the file admin/configuration.php of the component Admin Panel.","display_reference":"CVE-2026-108828","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108828","source_title":"A vulnerability was identified in Zen Cart 2.2.2. Affected by this vulnerability is the function eval of the file admin/configuration.php of the component Admin Panel. The manipulation of the argument gID leads to sql injection. The attack may be initiated remotely. The attack is considered to have high complexity. The exploitation appears to be difficult. The exploit is publicly available and might be used. The vendor explains: \"set_function/use_function are not editable through any normal admin UI (only at plugin-install time via SQL, or via direct database access)\".","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T17:34:01.300Z","source_hash":"content-fingerprint:fnv1a-87deaf3a","affected_system":{"organization":"A vulnerability was identified in Zen Cart 2.2.2. Affected by this vulnerability is the function eval of the file admin/configuration.php of the component Admin Panel. The manipulation of the argument gID leads to sql injection. The attack may be initiated remotely. The attack is considered to have high complexity. The exploitation appears to be difficult. The exploit is publicly available and might be used. The vendor explains project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108828-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability was identified in Zen Cart 2.2.2. Affected by this vulnerability is the function eval of the file admin/configuration.php of the component Admin Panel. The manipulation of the argument gID leads to sql injection. The attack may be initiated remotely. The attack is considered to have high complexity. The exploitation appears to be difficult. The exploit is publicly available and might be used. The vendor explains: \"set_function/use_function are not editable through any normal admin UI (only at plugin-install time via SQL, or via direct database access)\".","source_quote_or_pointer":"Security Advisory CVE-2026-108828","fact_id":"SEA-CVE-2026-108828-F1","document_citation":"Security Advisory CVE-2026-108828"},{"id":"SEA-CVE-2026-108828-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability was identified in Zen Cart 2.2.2. Affected by this vulnerability is the function eval of the file admin/configuration.php of the component Admin Panel. The manipulation of the argument gID leads to sql injection. The attack may be initiated remotely. The attack is considered to have high complexity.","source_quote_or_pointer":"Advisory description (CVE-2026-108828)","fact_id":"SEA-CVE-2026-108828-F2","document_citation":"Advisory description (CVE-2026-108828)"}],"source_stated_contributors":["A vulnerability was identified in Zen Cart 2.2.2. Affected by this vulnerability is the function eval of the file admin/configuration.php of the component Admin Panel. The manipulation of the argument gID leads to sql injection. The attack may be initiated remotely. The attack is considered to have high complexity."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.code_execution","auth.privileged_action","auth.write_action","data.pii","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108828","reporting_entity":"CVE-2026-108828","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108828-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108828-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108828"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108824","title":"A flaw has been found in DataEase up to 3.0.0. The impacted element is the function Utils.buildCalcField of the file io/dataease/engine/utils/Utils.java. This manipulation of the argument calculated field causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and may be used. Patch name: 8509e218e6c1f0080eee9e379f269b2104785ef7. It is recommended to apply a patch to fix this issue.","display_title":"Software component issue could expose or alter stored data","display_summary":"A flaw has been found in DataEase up to 3.0.0. The impacted element is the function Utils.buildCalcField of the file io/dataease/engine/utils/Utils.java.","display_reference":"CVE-2026-108824","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108824","source_title":"A flaw has been found in DataEase up to 3.0.0. The impacted element is the function Utils.buildCalcField of the file io/dataease/engine/utils/Utils.java. This manipulation of the argument calculated field causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and may be used. Patch name: 8509e218e6c1f0080eee9e379f269b2104785ef7. It is recommended to apply a patch to fix this issue.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T17:34:01.301Z","source_hash":"content-fingerprint:fnv1a-2fca66b8","affected_system":{"organization":"A flaw has been found in DataEase up to 3.0.0. The impacted element is the function Utils.buildCalcField of the file io/dataease/engine/utils/Utils.java. This manipulation of the argument calculated field causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and may be used. Patch name project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108824-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A flaw has been found in DataEase up to 3.0.0. The impacted element is the function Utils.buildCalcField of the file io/dataease/engine/utils/Utils.java. This manipulation of the argument calculated field causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and may be used. Patch name: 8509e218e6c1f0080eee9e379f269b2104785ef7. It is recommended to apply a patch to fix this issue.","source_quote_or_pointer":"Security Advisory CVE-2026-108824","fact_id":"SEA-CVE-2026-108824-F1","document_citation":"Security Advisory CVE-2026-108824"},{"id":"SEA-CVE-2026-108824-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A flaw has been found in DataEase up to 3.0.0. The impacted element is the function Utils.buildCalcField of the file io/dataease/engine/utils/Utils.java. This manipulation of the argument calculated field causes sql injection. It is possible to initiate the attack remotely.","source_quote_or_pointer":"Advisory description (CVE-2026-108824)","fact_id":"SEA-CVE-2026-108824-F2","document_citation":"Advisory description (CVE-2026-108824)"}],"source_stated_contributors":["A flaw has been found in DataEase up to 3.0.0. The impacted element is the function Utils.buildCalcField of the file io/dataease/engine/utils/Utils.java. This manipulation of the argument calculated field causes sql injection. It is possible to initiate the attack remotely."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108824","reporting_entity":"CVE-2026-108824","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108824-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108824-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108824"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108819","title":"A security flaw has been discovered in agno-agi agno up to 3.0.6/3.1.1. This vulnerability affects the function exec of the component Agent Orchestration Layer. Performing a manipulation of the argument code results in dynamically-managed code resources. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks. The pull request to fix this issue awaits acceptance.","display_title":"Security issue reported in Software component","display_summary":"A security flaw has been discovered in agno-agi agno up to 3.0.6/3.1.1. This vulnerability affects the function exec of the component Agent Orchestration Layer.","display_reference":"CVE-2026-108819","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108819","source_title":"A security flaw has been discovered in agno-agi agno up to 3.0.6/3.1.1. This vulnerability affects the function exec of the component Agent Orchestration Layer. Performing a manipulation of the argument code results in dynamically-managed code resources. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks. The pull request to fix this issue awaits acceptance.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T17:34:01.301Z","source_hash":"content-fingerprint:fnv1a-97966c9e","affected_system":{"organization":"Software component project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108819-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A security flaw has been discovered in agno-agi agno up to 3.0.6/3.1.1. This vulnerability affects the function exec of the component Agent Orchestration Layer. Performing a manipulation of the argument code results in dynamically-managed code resources. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks. The pull request to fix this issue awaits acceptance.","source_quote_or_pointer":"Security Advisory CVE-2026-108819","fact_id":"SEA-CVE-2026-108819-F1","document_citation":"Security Advisory CVE-2026-108819"},{"id":"SEA-CVE-2026-108819-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A security flaw has been discovered in agno-agi agno up to 3.0.6/3.1.1. This vulnerability affects the function exec of the component Agent Orchestration Layer. Performing a manipulation of the argument code results in dynamically-managed code resources. Remote exploitation of the attack is possible.","source_quote_or_pointer":"Advisory description (CVE-2026-108819)","fact_id":"SEA-CVE-2026-108819-F2","document_citation":"Advisory description (CVE-2026-108819)"}],"source_stated_contributors":["A security flaw has been discovered in agno-agi agno up to 3.0.6/3.1.1. This vulnerability affects the function exec of the component Agent Orchestration Layer. Performing a manipulation of the argument code results in dynamically-managed code resources. Remote exploitation of the attack is possible."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.public_publication","arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-010"],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108819","reporting_entity":"CVE-2026-108819","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108819-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108819-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-108819"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108807","title":"A vulnerability was found in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. This affects the function mysql_query of the file source/adminregister.php of the component Registration Handler. Performing a manipulation results in sql injection. The attack may be initiated remotely. The exploit has been made public and could be used. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available. The vendor was contacted early about this disclosure but did not respond in any way. This vulnerability only affects products that are no longer supported by the maintainer.","display_title":"Software component issue could expose or alter stored data","display_summary":"A vulnerability was found in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. This affects the function mysqlquery of the file source/adminregister.php of the component Registration…","display_reference":"CVE-2026-108807","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108807","source_title":"A vulnerability was found in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. This affects the function mysql_query of the file source/adminregister.php of the component Registration Handler. Performing a manipulation results in sql injection. The attack may be initiated remotely. The exploit has been made public and could be used. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available. The vendor was contacted early about this disclosure but did not respond in any way. This vulnerability only affects products that are no longer supported by the maintainer.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T17:34:01.302Z","source_hash":"content-fingerprint:fnv1a-dc1937f5","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108807-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability was found in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. This affects the function mysql_query of the file source/adminregister.php of the component Registration Handler. Performing a manipulation results in sql injection. The attack may be initiated remotely. The exploit has been made public and could be used. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available. The vendor was contacted early about this disclosure but did not respond in any way. This vulnerability only affects products that are no longer supported by the maintainer.","source_quote_or_pointer":"Security Advisory CVE-2026-108807","fact_id":"SEA-CVE-2026-108807-F1","document_citation":"Security Advisory CVE-2026-108807"},{"id":"SEA-CVE-2026-108807-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability was found in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. This affects the function mysqlquery of the file source/adminregister.php of the component Registration Handler. Performing a manipulation results in sql injection. The attack may be initiated remotely.","source_quote_or_pointer":"Advisory description (CVE-2026-108807)","fact_id":"SEA-CVE-2026-108807-F2","document_citation":"Advisory description (CVE-2026-108807)"}],"source_stated_contributors":["A vulnerability was found in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. This affects the function mysqlquery of the file source/adminregister.php of the component Registration Handler. Performing a manipulation results in sql injection. The attack may be initiated remotely."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","auth.public_publication"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108807","reporting_entity":"CVE-2026-108807","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108807-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108807-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108807"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108803","title":"A security vulnerability has been detected in y_project RuoYi up to 4.8.3. This impacts the function changeStatus of the file /system/config/add of the component Disable API. The manipulation leads to session expiration. It is possible to initiate the attack remotely. The vendor was contacted early about this disclosure but did not respond in any way.","display_title":"Security issue reported in Software component","display_summary":"A security vulnerability has been detected in yproject RuoYi up to 4.8.3. This impacts the function changeStatus of the file /system/config/add of the component Disable API. The manipulation leads to session expiration.","display_reference":"CVE-2026-108803","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108803","source_title":"A security vulnerability has been detected in y_project RuoYi up to 4.8.3. This impacts the function changeStatus of the file /system/config/add of the component Disable API. The manipulation leads to session expiration. It is possible to initiate the attack remotely. The vendor was contacted early about this disclosure but did not respond in any way.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T17:34:01.302Z","source_hash":"content-fingerprint:fnv1a-f294f30b","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108803-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A security vulnerability has been detected in y_project RuoYi up to 4.8.3. This impacts the function changeStatus of the file /system/config/add of the component Disable API. The manipulation leads to session expiration. It is possible to initiate the attack remotely. The vendor was contacted early about this disclosure but did not respond in any way.","source_quote_or_pointer":"Security Advisory CVE-2026-108803","fact_id":"SEA-CVE-2026-108803-F1","document_citation":"Security Advisory CVE-2026-108803"},{"id":"SEA-CVE-2026-108803-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A security vulnerability has been detected in yproject RuoYi up to 4.8.3. This impacts the function changeStatus of the file /system/config/add of the component Disable API. The manipulation leads to session expiration. It is possible to initiate the attack remotely.","source_quote_or_pointer":"Advisory description (CVE-2026-108803)","fact_id":"SEA-CVE-2026-108803-F2","document_citation":"Advisory description (CVE-2026-108803)"}],"source_stated_contributors":["A security vulnerability has been detected in yproject RuoYi up to 4.8.3. This impacts the function changeStatus of the file /system/config/add of the component Disable API. The manipulation leads to session expiration. It is possible to initiate the attack remotely."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108803","reporting_entity":"CVE-2026-108803","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108803-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108803-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-108803"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108799","title":"A vulnerability was determined in jackq XCMS up to 3fab5342cc509945a7ce1b8ec39d19f701b89261. Impacted is the function PublicController::sendFindPwdMail of the file Admin/Home/Controller/PublicController.class.php of the component Password Recovery Mail Endpoint. This manipulation of the argument email causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized.","display_title":"Software component issue could expose or alter stored data","display_summary":"A vulnerability was determined in jackq XCMS up to 3fab5342cc509945a7ce1b8ec39d19f701b89261. Impacted is the function PublicController::sendFindPwdMail of the file Admin/Home/Controller/PublicController.class.php of the…","display_reference":"CVE-2026-108799","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108799","source_title":"A vulnerability was determined in jackq XCMS up to 3fab5342cc509945a7ce1b8ec39d19f701b89261. Impacted is the function PublicController::sendFindPwdMail of the file Admin/Home/Controller/PublicController.class.php of the component Password Recovery Mail Endpoint. This manipulation of the argument email causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T17:34:01.303Z","source_hash":"content-fingerprint:fnv1a-316fd759","affected_system":{"organization":"A vulnerability was determined in jackq XCMS up to 3fab5342cc509945a7ce1b8ec39d19f701b89261. Impacted is the function PublicController project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108799-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability was determined in jackq XCMS up to 3fab5342cc509945a7ce1b8ec39d19f701b89261. Impacted is the function PublicController::sendFindPwdMail of the file Admin/Home/Controller/PublicController.class.php of the component Password Recovery Mail Endpoint. This manipulation of the argument email causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized.","source_quote_or_pointer":"Security Advisory CVE-2026-108799","fact_id":"SEA-CVE-2026-108799-F1","document_citation":"Security Advisory CVE-2026-108799"},{"id":"SEA-CVE-2026-108799-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability was determined in jackq XCMS up to 3fab5342cc509945a7ce1b8ec39d19f701b89261. Impacted is the function PublicController::sendFindPwdMail of the file Admin/Home/Controller/PublicController.class.php of the component Password Recovery Mail Endpoint.","source_quote_or_pointer":"Advisory description (CVE-2026-108799)","fact_id":"SEA-CVE-2026-108799-F2","document_citation":"Advisory description (CVE-2026-108799)"}],"source_stated_contributors":["A vulnerability was determined in jackq XCMS up to 3fab5342cc509945a7ce1b8ec39d19f701b89261. Impacted is the function PublicController::sendFindPwdMail of the file Admin/Home/Controller/PublicController.class.php of the component Password Recovery Mail Endpoint."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108799","reporting_entity":"CVE-2026-108799","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108799-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108799-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108799"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108795","title":"A vulnerability was detected in ZKTeco BioTime 9.5.6 Build 20260130.3206. Affected by this issue is some unknown functionality of the file /base/api/systemSettings of the component System Settings API. Performing a manipulation results in improper access controls. The attack can be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any way.","display_title":"Software component issue could allow unauthorized access","display_summary":"A vulnerability was detected in ZKTeco BioTime 9.5.6 Build 20260130.3206. Affected by this issue is some unknown functionality of the file /base/api/systemSettings of the component System Settings API.","display_reference":"CVE-2026-108795","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108795","source_title":"A vulnerability was detected in ZKTeco BioTime 9.5.6 Build 20260130.3206. Affected by this issue is some unknown functionality of the file /base/api/systemSettings of the component System Settings API. Performing a manipulation results in improper access controls. The attack can be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any way.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T17:34:01.303Z","source_hash":"content-fingerprint:fnv1a-83a567d5","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108795-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability was detected in ZKTeco BioTime 9.5.6 Build 20260130.3206. Affected by this issue is some unknown functionality of the file /base/api/systemSettings of the component System Settings API. Performing a manipulation results in improper access controls. The attack can be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any way.","source_quote_or_pointer":"Security Advisory CVE-2026-108795","fact_id":"SEA-CVE-2026-108795-F1","document_citation":"Security Advisory CVE-2026-108795"},{"id":"SEA-CVE-2026-108795-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability was detected in ZKTeco BioTime 9.5.6 Build 20260130.3206. Affected by this issue is some unknown functionality of the file /base/api/systemSettings of the component System Settings API. Performing a manipulation results in improper access controls. The attack can be initiated remotely.","source_quote_or_pointer":"Advisory description (CVE-2026-108795)","fact_id":"SEA-CVE-2026-108795-F2","document_citation":"Advisory description (CVE-2026-108795)"}],"source_stated_contributors":["A vulnerability was detected in ZKTeco BioTime 9.5.6 Build 20260130.3206. Affected by this issue is some unknown functionality of the file /base/api/systemSettings of the component System Settings API. Performing a manipulation results in improper access controls. The attack can be initiated remotely."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108795","reporting_entity":"CVE-2026-108795","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108795-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108795-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108795"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108789","title":"A vulnerability was identified in deepseek-ai deepseek-harness up to 0.1.1-rc.2. This affects the function agent of the component dsh-workflow-worker-thread. The manipulation leads to enforcement of behavioral workflow. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.","display_title":"Security issue reported in Software component","display_summary":"A vulnerability was identified in deepseek-ai deepseek-harness up to 0.1.1-rc.2. This affects the function agent of the component dsh-workflow-worker-thread. The manipulation leads to enforcement of behavioral workflow.","display_reference":"CVE-2026-108789","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108789","source_title":"A vulnerability was identified in deepseek-ai deepseek-harness up to 0.1.1-rc.2. This affects the function agent of the component dsh-workflow-worker-thread. The manipulation leads to enforcement of behavioral workflow. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T17:34:01.303Z","source_hash":"content-fingerprint:fnv1a-918f70b4","affected_system":{"organization":"Software component project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108789-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability was identified in deepseek-ai deepseek-harness up to 0.1.1-rc.2. This affects the function agent of the component dsh-workflow-worker-thread. The manipulation leads to enforcement of behavioral workflow. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.","source_quote_or_pointer":"Security Advisory CVE-2026-108789","fact_id":"SEA-CVE-2026-108789-F1","document_citation":"Security Advisory CVE-2026-108789"},{"id":"SEA-CVE-2026-108789-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability was identified in deepseek-ai deepseek-harness up to 0.1.1-rc.2. This affects the function agent of the component dsh-workflow-worker-thread. The manipulation leads to enforcement of behavioral workflow. The attack is possible to be carried out remotely.","source_quote_or_pointer":"Advisory description (CVE-2026-108789)","fact_id":"SEA-CVE-2026-108789-F2","document_citation":"Advisory description (CVE-2026-108789)"}],"source_stated_contributors":["A vulnerability was identified in deepseek-ai deepseek-harness up to 0.1.1-rc.2. This affects the function agent of the component dsh-workflow-worker-thread. The manipulation leads to enforcement of behavioral workflow. The attack is possible to be carried out remotely."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","data.untrusted_external_text","arch.async_job","arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-010"],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108789","reporting_entity":"CVE-2026-108789","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108789-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108789-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-108789"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108785","title":"A flaw has been found in macrozheng mall up to 1.0.3. This issue affects the function JwtTokenUtil.refreshHeadToken of the file /admin/refreshToken of the component JwtAuthenticationTokenFilter. This manipulation of the argument token causes session expiration. The attack may be initiated remotely. The exploit has been published and may be used. Patch name: 9bfc2fd2c4aaa4ac519e9152e65d673a5380de1a. To fix this issue, it is recommended to deploy a patch.","display_title":"Security issue reported in Software component","display_summary":"A flaw has been found in macrozheng mall up to 1.0.3. This issue affects the function JwtTokenUtil.refreshHeadToken of the file /admin/refreshToken of the component JwtAuthenticationTokenFilter.","display_reference":"CVE-2026-108785","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108785","source_title":"A flaw has been found in macrozheng mall up to 1.0.3. This issue affects the function JwtTokenUtil.refreshHeadToken of the file /admin/refreshToken of the component JwtAuthenticationTokenFilter. This manipulation of the argument token causes session expiration. The attack may be initiated remotely. The exploit has been published and may be used. Patch name: 9bfc2fd2c4aaa4ac519e9152e65d673a5380de1a. To fix this issue, it is recommended to deploy a patch.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T17:34:01.304Z","source_hash":"content-fingerprint:fnv1a-fe3ba294","affected_system":{"organization":"A flaw has been found in macrozheng mall up to 1.0.3. This issue affects the function JwtTokenUtil.refreshHeadToken of the file /admin/refreshToken of the component JwtAuthenticationTokenFilter. This manipulation of the argument token causes session expiration. The attack may be initiated remotely. The exploit has been published and may be used. Patch name project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108785-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A flaw has been found in macrozheng mall up to 1.0.3. This issue affects the function JwtTokenUtil.refreshHeadToken of the file /admin/refreshToken of the component JwtAuthenticationTokenFilter. This manipulation of the argument token causes session expiration. The attack may be initiated remotely. The exploit has been published and may be used. Patch name: 9bfc2fd2c4aaa4ac519e9152e65d673a5380de1a. To fix this issue, it is recommended to deploy a patch.","source_quote_or_pointer":"Security Advisory CVE-2026-108785","fact_id":"SEA-CVE-2026-108785-F1","document_citation":"Security Advisory CVE-2026-108785"},{"id":"SEA-CVE-2026-108785-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A flaw has been found in macrozheng mall up to 1.0.3. This issue affects the function JwtTokenUtil.refreshHeadToken of the file /admin/refreshToken of the component JwtAuthenticationTokenFilter. This manipulation of the argument token causes session expiration. The attack may be initiated remotely.","source_quote_or_pointer":"Advisory description (CVE-2026-108785)","fact_id":"SEA-CVE-2026-108785-F2","document_citation":"Advisory description (CVE-2026-108785)"}],"source_stated_contributors":["A flaw has been found in macrozheng mall up to 1.0.3. This issue affects the function JwtTokenUtil.refreshHeadToken of the file /admin/refreshToken of the component JwtAuthenticationTokenFilter. This manipulation of the argument token causes session expiration. The attack may be initiated remotely."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108785","reporting_entity":"CVE-2026-108785","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108785-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108785-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-108785"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108781","title":"A security flaw has been discovered in erzhongxmu JEEWMS up to 2026.09.27-W39. Affected by this vulnerability is the function WmToMoveGoodsController.list of the file src/main/java/com/zzjee/wm/controller/WmToMoveGoodsController.java of the component PDA Interface. Performing a manipulation of the argument searchstr results in sql injection. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.","display_title":"Software component issue could expose or alter stored data","display_summary":"A security flaw has been discovered in erzhongxmu JEEWMS up to 2026.09.27-W39. Affected by this vulnerability is the function WmToMoveGoodsController.list of the file…","display_reference":"CVE-2026-108781","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108781","source_title":"A security flaw has been discovered in erzhongxmu JEEWMS up to 2026.09.27-W39. Affected by this vulnerability is the function WmToMoveGoodsController.list of the file src/main/java/com/zzjee/wm/controller/WmToMoveGoodsController.java of the component PDA Interface. Performing a manipulation of the argument searchstr results in sql injection. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T17:34:01.304Z","source_hash":"content-fingerprint:fnv1a-663fa038","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108781-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A security flaw has been discovered in erzhongxmu JEEWMS up to 2026.09.27-W39. Affected by this vulnerability is the function WmToMoveGoodsController.list of the file src/main/java/com/zzjee/wm/controller/WmToMoveGoodsController.java of the component PDA Interface. Performing a manipulation of the argument searchstr results in sql injection. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.","source_quote_or_pointer":"Security Advisory CVE-2026-108781","fact_id":"SEA-CVE-2026-108781-F1","document_citation":"Security Advisory CVE-2026-108781"},{"id":"SEA-CVE-2026-108781-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A security flaw has been discovered in erzhongxmu JEEWMS up to 2026.09.27-W39. Affected by this vulnerability is the function WmToMoveGoodsController.list of the file src/main/java/com/zzjee/wm/controller/WmToMoveGoodsController.java of the component PDA Interface.","source_quote_or_pointer":"Advisory description (CVE-2026-108781)","fact_id":"SEA-CVE-2026-108781-F2","document_citation":"Advisory description (CVE-2026-108781)"}],"source_stated_contributors":["A security flaw has been discovered in erzhongxmu JEEWMS up to 2026.09.27-W39. Affected by this vulnerability is the function WmToMoveGoodsController.list of the file src/main/java/com/zzjee/wm/controller/WmToMoveGoodsController.java of the component PDA Interface."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.public_publication"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108781","reporting_entity":"CVE-2026-108781","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108781-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108781-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108781"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-93695","title":"In Progress ShareFile Storage Zones Controller v5.12.6 and below, FileCopyService uses a remote file identifier when constructing a local temporary file path without enforcing containment. This can cause FileCopyService to write attacker-controlled content to filesystem locations writable by the service account. This can result in remote code execution when an executable IIS-served directory is writable.","display_title":"Software component issue could allow unintended commands to run","display_summary":"In Progress ShareFile Storage Zones Controller v5.12.6 and below, FileCopyService uses a remote file identifier when constructing a local temporary file path without enforcing containment.","display_reference":"CVE-2026-93695","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93695","source_title":"In Progress ShareFile Storage Zones Controller v5.12.6 and below, FileCopyService uses a remote file identifier when constructing a local temporary file path without enforcing containment. This can cause FileCopyService to write attacker-controlled content to filesystem locations writable by the service account. This can result in remote code execution when an executable IIS-served directory is writable.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T09:20:33.873Z","source_hash":"content-fingerprint:fnv1a-2842a18b","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-93695-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"In Progress ShareFile Storage Zones Controller v5.12.6 and below, FileCopyService uses a remote file identifier when constructing a local temporary file path without enforcing containment. This can cause FileCopyService to write attacker-controlled content to filesystem locations writable by the service account. This can result in remote code execution when an executable IIS-served directory is writable.","source_quote_or_pointer":"Security Advisory CVE-2026-93695","fact_id":"SEA-CVE-2026-93695-F1","document_citation":"Security Advisory CVE-2026-93695"},{"id":"SEA-CVE-2026-93695-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"In Progress ShareFile Storage Zones Controller v5.12.6 and below, FileCopyService uses a remote file identifier when constructing a local temporary file path without enforcing containment. This can cause FileCopyService to write attacker-controlled content to filesystem locations writable by the service account.","source_quote_or_pointer":"Advisory description (CVE-2026-93695)","fact_id":"SEA-CVE-2026-93695-F2","document_citation":"Advisory description (CVE-2026-93695)"}],"source_stated_contributors":["In Progress ShareFile Storage Zones Controller v5.12.6 and below, FileCopyService uses a remote file identifier when constructing a local temporary file path without enforcing containment. This can cause FileCopyService to write attacker-controlled content to filesystem locations writable by the service account."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-93695","reporting_entity":"CVE-2026-93695","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-93695-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-93695-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-93695"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-21120","title":"Use after free in WSM service prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code with system privilege.","display_title":"Software component issue could allow unintended commands to run","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-21120","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-21120","source_title":"Use after free in WSM service prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code with system privilege.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T09:20:33.876Z","source_hash":"content-fingerprint:fnv1a-40c1d935","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-21120-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Use after free in WSM service prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code with system privilege.","source_quote_or_pointer":"Security Advisory CVE-2026-21120","fact_id":"SEA-CVE-2026-21120-F1","document_citation":"Security Advisory CVE-2026-21120"},{"id":"SEA-CVE-2026-21120-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Use after free in WSM service prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code with system privilege.","source_quote_or_pointer":"Advisory description (CVE-2026-21120)","fact_id":"SEA-CVE-2026-21120-F2","document_citation":"Advisory description (CVE-2026-21120)"}],"source_stated_contributors":["Use after free in WSM service prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code with system privilege."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-21120","reporting_entity":"CVE-2026-21120","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-21120-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-21120-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-21120"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109390","title":"AnyDesk before 8.0.3 allows unauthenticated remote attackers to execute arbitrary code via a heap-based buffer overflow, as demonstrated on Linux for command execution as root without the victim approving desktop control. In the stream packet handler for mode 5 in the session protocol, a payload length value is not validated.","display_title":"Software component issue could allow unintended commands to run","display_summary":"AnyDesk before 8.0.3 allows unauthenticated remote attackers to execute arbitrary code via a heap-based buffer overflow, as demonstrated on Linux for command execution as root without the victim approving desktop…","display_reference":"CVE-2026-109390","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109390","source_title":"AnyDesk before 8.0.3 allows unauthenticated remote attackers to execute arbitrary code via a heap-based buffer overflow, as demonstrated on Linux for command execution as root without the victim approving desktop control. In the stream packet handler for mode 5 in the session protocol, a payload length value is not validated.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T09:20:33.879Z","source_hash":"content-fingerprint:fnv1a-aab218d7","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109390-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"AnyDesk before 8.0.3 allows unauthenticated remote attackers to execute arbitrary code via a heap-based buffer overflow, as demonstrated on Linux for command execution as root without the victim approving desktop control. In the stream packet handler for mode 5 in the session protocol, a payload length value is not validated.","source_quote_or_pointer":"Security Advisory CVE-2026-109390","fact_id":"SEA-CVE-2026-109390-F1","document_citation":"Security Advisory CVE-2026-109390"},{"id":"SEA-CVE-2026-109390-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"AnyDesk before 8.0.3 allows unauthenticated remote attackers to execute arbitrary code via a heap-based buffer overflow, as demonstrated on Linux for command execution as root without the victim approving desktop control.","source_quote_or_pointer":"Advisory description (CVE-2026-109390)","fact_id":"SEA-CVE-2026-109390-F2","document_citation":"Advisory description (CVE-2026-109390)"}],"source_stated_contributors":["AnyDesk before 8.0.3 allows unauthenticated remote attackers to execute arbitrary code via a heap-based buffer overflow, as demonstrated on Linux for command execution as root without the victim approving desktop control."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","arch.async_job","arch.event_driven"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109390","reporting_entity":"CVE-2026-109390","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109390-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109390-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-109390"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-105464","title":"IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow a local attacker to gain elevated privileges due to improper privilege management.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-105464","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105464","source_title":"IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow a local attacker to gain elevated privileges due to improper privilege management.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T09:20:33.881Z","source_hash":"content-fingerprint:fnv1a-441948d5","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-105464-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow a local attacker to gain elevated privileges due to improper privilege management.","source_quote_or_pointer":"Security Advisory CVE-2026-105464","fact_id":"SEA-CVE-2026-105464-F1","document_citation":"Security Advisory CVE-2026-105464"},{"id":"SEA-CVE-2026-105464-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow a local attacker to gain elevated privileges due to improper privilege management.","source_quote_or_pointer":"Advisory description (CVE-2026-105464)","fact_id":"SEA-CVE-2026-105464-F2","document_citation":"Advisory description (CVE-2026-105464)"}],"source_stated_contributors":["IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow a local attacker to gain elevated privileges due to improper privilege management."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-105464","reporting_entity":"CVE-2026-105464","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-105464-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-105464-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-105464"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-103903","title":"An incorrect authorization vulnerability in the WinBox authentication flow of MikroTik RouterOS allows a remote authenticated attacker with credentials for a low-privilege account permitted to use WinBox to obtain the authorization policy of a different existing account. The stage-one EC-SRP challenge and proof are verified using the attacker's account, while the independently supplied stage-two username is used to install the target account's privileges. By specifying a higher-privilege account such as admin, a low-privilege user can obtain a full administrative session without knowing the target account's password and can use that session to increase the privileges of the attacker's own account.","display_title":"Software component issue could expose accounts or credentials","display_summary":"An incorrect authorization vulnerability in the WinBox","display_reference":"CVE-2026-103903","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103903","source_title":"An incorrect authorization vulnerability in the WinBox authentication flow of MikroTik RouterOS allows a remote authenticated attacker with credentials for a low-privilege account permitted to use WinBox to obtain the authorization policy of a different existing account. The stage-one EC-SRP challenge and proof are verified using the attacker's account, while the independently supplied stage-two username is used to install the target account's privileges. By specifying a higher-privilege account such as admin, a low-privilege user can obtain a full administrative session without knowing the target account's password and can use that session to increase the privileges of the attacker's own account.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T09:20:33.882Z","source_hash":"content-fingerprint:fnv1a-102aa63f","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-103903-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"An incorrect authorization vulnerability in the WinBox authentication flow of MikroTik RouterOS allows a remote authenticated attacker with credentials for a low-privilege account permitted to use WinBox to obtain the authorization policy of a different existing account. The stage-one EC-SRP challenge and proof are verified using the attacker's account, while the independently supplied stage-two username is used to install the target account's privileges. By specifying a higher-privilege account such as admin, a low-privilege user can obtain a full administrative session without knowing the target account's password and can use that session to increase the privileges of the attacker's own account.","source_quote_or_pointer":"Security Advisory CVE-2026-103903","fact_id":"SEA-CVE-2026-103903-F1","document_citation":"Security Advisory CVE-2026-103903"},{"id":"SEA-CVE-2026-103903-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"An incorrect authorization vulnerability in the WinBox","source_quote_or_pointer":"Advisory description (CVE-2026-103903)","fact_id":"SEA-CVE-2026-103903-F2","document_citation":"Advisory description (CVE-2026-103903)"}],"source_stated_contributors":["An incorrect authorization vulnerability in the WinBox"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-103903","reporting_entity":"CVE-2026-103903","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-103903-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-103903-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-103903"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-93892","title":"IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to exposure of session tokens in the HTML response.","display_title":"Software component issue could expose accounts or credentials","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-93892","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93892","source_title":"IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to exposure of session tokens in the HTML response.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T01:59:40.529Z","source_hash":"content-fingerprint:fnv1a-d135d6e4","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-93892-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to exposure of session tokens in the HTML response.","source_quote_or_pointer":"Security Advisory CVE-2026-93892","fact_id":"SEA-CVE-2026-93892-F1","document_citation":"Security Advisory CVE-2026-93892"},{"id":"SEA-CVE-2026-93892-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to exposure of session tokens in the HTML response.","source_quote_or_pointer":"Advisory description (CVE-2026-93892)","fact_id":"SEA-CVE-2026-93892-F2","document_citation":"Advisory description (CVE-2026-93892)"}],"source_stated_contributors":["IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to exposure of session tokens in the HTML response."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.credentials_secrets","arch.caching"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-93892","reporting_entity":"CVE-2026-93892","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-93892-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-93892-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-93892"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-75095","title":"IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.","display_title":"Software component issue could make the service unavailable","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-75095","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-75095","source_title":"IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T01:59:40.547Z","source_hash":"content-fingerprint:fnv1a-ae2eba5f","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-75095-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.","source_quote_or_pointer":"Security Advisory CVE-2026-75095","fact_id":"SEA-CVE-2026-75095-F1","document_citation":"Security Advisory CVE-2026-75095"},{"id":"SEA-CVE-2026-75095-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.","source_quote_or_pointer":"Advisory description (CVE-2026-75095)","fact_id":"SEA-CVE-2026-75095-F2","document_citation":"Advisory description (CVE-2026-75095)"}],"source_stated_contributors":["IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-75095","reporting_entity":"CVE-2026-75095","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-75095-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-75095-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-75095"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-18541","title":"IBM Planning Analytics 2.0, and 2.1 is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.","display_title":"Software component issue could run attacker-controlled scripts in a browser","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-18541","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-18541","source_title":"IBM Planning Analytics 2.0, and 2.1 is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T01:59:40.548Z","source_hash":"content-fingerprint:fnv1a-57fc8c2a","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-18541-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM Planning Analytics 2.0, and 2.1 is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.","source_quote_or_pointer":"Security Advisory CVE-2026-18541","fact_id":"SEA-CVE-2026-18541-F1","document_citation":"Security Advisory CVE-2026-18541"},{"id":"SEA-CVE-2026-18541-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM Planning Analytics 2.0, and 2.1 is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.","source_quote_or_pointer":"Advisory description (CVE-2026-18541)","fact_id":"SEA-CVE-2026-18541-F2","document_citation":"Advisory description (CVE-2026-18541)"}],"source_stated_contributors":["IBM Planning Analytics 2.0, and 2.1 is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-18541","reporting_entity":"CVE-2026-18541","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-18541-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-18541-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-18541"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-18166","title":"IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow a remote authenticated attacker to obtain sensitive information due to improper authorization when using the CREATE WRAPPER command.","display_title":"Software component issue could allow unauthorized access","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-18166","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-18166","source_title":"IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow a remote authenticated attacker to obtain sensitive information due to improper authorization when using the CREATE WRAPPER command.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T01:59:40.549Z","source_hash":"content-fingerprint:fnv1a-20e4ab13","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-18166-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow a remote authenticated attacker to obtain sensitive information due to improper authorization when using the CREATE WRAPPER command.","source_quote_or_pointer":"Security Advisory CVE-2026-18166","fact_id":"SEA-CVE-2026-18166-F1","document_citation":"Security Advisory CVE-2026-18166"},{"id":"SEA-CVE-2026-18166-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow a remote authenticated attacker to obtain sensitive information due to improper authorization when using the CREATE WRAPPER command.","source_quote_or_pointer":"Advisory description (CVE-2026-18166)","fact_id":"SEA-CVE-2026-18166-F2","document_citation":"Advisory description (CVE-2026-18166)"}],"source_stated_contributors":["IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow a remote authenticated attacker to obtain sensitive information due to improper authorization when using the CREATE WRAPPER command."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-18166","reporting_entity":"CVE-2026-18166","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-18166-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-18166-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-18166"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109674","title":"Frappe ERPNext before 15.98.0 and 16.x before 16.6.0 contains an SQL injection vulnerability in some endpoints caused by missing input validation. Remote authenticated attackers can send specially crafted requests to the affected endpoints to manipulate database queries and extract sensitive information from the database.","display_title":"Software component issue could expose or alter stored data","display_summary":"Frappe ERPNext before 15.98.0 and 16.x before 16.6.0 contains an SQL injection vulnerability in some endpoints caused by missing input validation.","display_reference":"CVE-2026-109674","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109674","source_title":"Frappe ERPNext before 15.98.0 and 16.x before 16.6.0 contains an SQL injection vulnerability in some endpoints caused by missing input validation. Remote authenticated attackers can send specially crafted requests to the affected endpoints to manipulate database queries and extract sensitive information from the database.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T01:59:40.552Z","source_hash":"content-fingerprint:fnv1a-44f65ae4","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109674-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Frappe ERPNext before 15.98.0 and 16.x before 16.6.0 contains an SQL injection vulnerability in some endpoints caused by missing input validation. Remote authenticated attackers can send specially crafted requests to the affected endpoints to manipulate database queries and extract sensitive information from the database.","source_quote_or_pointer":"Security Advisory CVE-2026-109674","fact_id":"SEA-CVE-2026-109674-F1","document_citation":"Security Advisory CVE-2026-109674"},{"id":"SEA-CVE-2026-109674-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Frappe ERPNext before 15.98.0 and 16.x before 16.6.0 contains an SQL injection vulnerability in some endpoints caused by missing input validation. Remote authenticated attackers can send specially crafted requests to the affected endpoints to manipulate database queries and extract sensitive information from the…","source_quote_or_pointer":"Advisory description (CVE-2026-109674)","fact_id":"SEA-CVE-2026-109674-F2","document_citation":"Advisory description (CVE-2026-109674)"}],"source_stated_contributors":["Frappe ERPNext before 15.98.0 and 16.x before 16.6.0 contains an SQL injection vulnerability in some endpoints caused by missing input validation. Remote authenticated attackers can send specially crafted requests to the affected endpoints to manipulate database queries and extract sensitive information from the…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109674","reporting_entity":"CVE-2026-109674","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109674-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109674-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-109674"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109663","title":"Frappe ERPNext before 15.113.0 and 16.x before 16.22.0 contains an SQL injection vulnerability caused by missing input validation in some endpoints. Authenticated remote attackers can send specially crafted requests to these endpoints to manipulate database queries and extract sensitive information from the database.","display_title":"Software component issue could expose or alter stored data","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-109663","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109663","source_title":"Frappe ERPNext before 15.113.0 and 16.x before 16.22.0 contains an SQL injection vulnerability caused by missing input validation in some endpoints. Authenticated remote attackers can send specially crafted requests to these endpoints to manipulate database queries and extract sensitive information from the database.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T01:59:40.553Z","source_hash":"content-fingerprint:fnv1a-3efe3c64","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109663-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Frappe ERPNext before 15.113.0 and 16.x before 16.22.0 contains an SQL injection vulnerability caused by missing input validation in some endpoints. Authenticated remote attackers can send specially crafted requests to these endpoints to manipulate database queries and extract sensitive information from the database.","source_quote_or_pointer":"Security Advisory CVE-2026-109663","fact_id":"SEA-CVE-2026-109663-F1","document_citation":"Security Advisory CVE-2026-109663"},{"id":"SEA-CVE-2026-109663-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Frappe ERPNext before 15.113.0 and 16.x before 16.22.0 contains an SQL injection vulnerability caused by missing input validation in some endpoints. Authenticated remote attackers can send specially crafted requests to these endpoints to manipulate database queries and extract sensitive information from the database.","source_quote_or_pointer":"Advisory description (CVE-2026-109663)","fact_id":"SEA-CVE-2026-109663-F2","document_citation":"Advisory description (CVE-2026-109663)"}],"source_stated_contributors":["Frappe ERPNext before 15.113.0 and 16.x before 16.22.0 contains an SQL injection vulnerability caused by missing input validation in some endpoints. Authenticated remote attackers can send specially crafted requests to these endpoints to manipulate database queries and extract sensitive information from the database."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109663","reporting_entity":"CVE-2026-109663","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109663-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109663-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-109663"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109652","title":"Frappe ERPNext before 15.119.1 and 16.x before 16.32.0 contains a server-side template injection vulnerability because user-controlled message fields are not validated before template rendering, allowing expressions to run in an unrestricted context. Authenticated attackers holding a common operational role can inject template expressions to read and write arbitrary database data, delete documents, send outbound requests from the server, and send mail from the site.","display_title":"Security issue reported in Software component","display_summary":"Frappe ERPNext before 15.119.1 and 16.x before 16.32.0 contains a server-side template injection vulnerability because user-controlled message fields are not validated before template rendering, allowing expressions to…","display_reference":"CVE-2026-109652","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109652","source_title":"Frappe ERPNext before 15.119.1 and 16.x before 16.32.0 contains a server-side template injection vulnerability because user-controlled message fields are not validated before template rendering, allowing expressions to run in an unrestricted context. Authenticated attackers holding a common operational role can inject template expressions to read and write arbitrary database data, delete documents, send outbound requests from the server, and send mail from the site.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T01:59:40.554Z","source_hash":"content-fingerprint:fnv1a-aeeaf6ba","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109652-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Frappe ERPNext before 15.119.1 and 16.x before 16.32.0 contains a server-side template injection vulnerability because user-controlled message fields are not validated before template rendering, allowing expressions to run in an unrestricted context. Authenticated attackers holding a common operational role can inject template expressions to read and write arbitrary database data, delete documents, send outbound requests from the server, and send mail from the site.","source_quote_or_pointer":"Security Advisory CVE-2026-109652","fact_id":"SEA-CVE-2026-109652-F1","document_citation":"Security Advisory CVE-2026-109652"},{"id":"SEA-CVE-2026-109652-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Frappe ERPNext before 15.119.1 and 16.x before 16.32.0 contains a server-side template injection vulnerability because user-controlled message fields are not validated before template rendering, allowing expressions to run in an unrestricted context.","source_quote_or_pointer":"Advisory description (CVE-2026-109652)","fact_id":"SEA-CVE-2026-109652-F2","document_citation":"Advisory description (CVE-2026-109652)"}],"source_stated_contributors":["Frappe ERPNext before 15.119.1 and 16.x before 16.32.0 contains a server-side template injection vulnerability because user-controlled message fields are not validated before template rendering, allowing expressions to run in an unrestricted context."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.code_execution","auth.destructive_action","auth.write_action","data.pii","data.uploaded_files"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109652","reporting_entity":"CVE-2026-109652","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109652-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109652-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-109652"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109651","title":"Frappe ERPNext before 15.112.0 and 16.x before 16.23.0 contains a server-side request forgery vulnerability caused by a configuration field, writable by common operational roles, that accepts an arbitrary outbound request destination without validation. Authenticated attackers can set the field to hosts of their choosing, making the server issue requests to addresses reachable only from inside the deployment's network.","display_title":"Software component issue could reach internal services","display_summary":"Frappe ERPNext before 15.112.0 and 16.x before 16.23.0 contains a server-side request forgery vulnerability caused by a configuration field, writable by common operational roles, that accepts an arbitrary outbound…","display_reference":"CVE-2026-109651","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109651","source_title":"Frappe ERPNext before 15.112.0 and 16.x before 16.23.0 contains a server-side request forgery vulnerability caused by a configuration field, writable by common operational roles, that accepts an arbitrary outbound request destination without validation. Authenticated attackers can set the field to hosts of their choosing, making the server issue requests to addresses reachable only from inside the deployment's network.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T01:59:40.554Z","source_hash":"content-fingerprint:fnv1a-9659ac6f","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109651-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Frappe ERPNext before 15.112.0 and 16.x before 16.23.0 contains a server-side request forgery vulnerability caused by a configuration field, writable by common operational roles, that accepts an arbitrary outbound request destination without validation. Authenticated attackers can set the field to hosts of their choosing, making the server issue requests to addresses reachable only from inside the deployment's network.","source_quote_or_pointer":"Security Advisory CVE-2026-109651","fact_id":"SEA-CVE-2026-109651-F1","document_citation":"Security Advisory CVE-2026-109651"},{"id":"SEA-CVE-2026-109651-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Frappe ERPNext before 15.112.0 and 16.x before 16.23.0 contains a server-side request forgery vulnerability caused by a configuration field, writable by common operational roles, that accepts an arbitrary outbound request destination without validation.","source_quote_or_pointer":"Advisory description (CVE-2026-109651)","fact_id":"SEA-CVE-2026-109651-F2","document_citation":"Advisory description (CVE-2026-109651)"}],"source_stated_contributors":["Frappe ERPNext before 15.112.0 and 16.x before 16.23.0 contains a server-side request forgery vulnerability caused by a configuration field, writable by common operational roles, that accepts an arbitrary outbound request destination without validation."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Internal network access","Cloud metadata or credential exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109651","reporting_entity":"CVE-2026-109651","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109651-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109651-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"The service fetched a URL chosen by the caller and could be steered at internal systems. Restrict outbound destinations and block internal address ranges.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-109651"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109649","title":"Frappe ERPNext before 15.102.0 and 16.x before 16.11.0 contains an SQL injection vulnerability in some endpoints due to missing input validation, allowing manipulation of database queries. Authenticated attackers can send specially crafted requests to the affected endpoints to extract sensitive information from the database.","display_title":"Software component issue could expose or alter stored data","display_summary":"Frappe ERPNext before 15.102.0 and 16.x before 16.11.0 contains an SQL injection vulnerability in some endpoints due to missing input validation, allowing manipulation of database queries.","display_reference":"CVE-2026-109649","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109649","source_title":"Frappe ERPNext before 15.102.0 and 16.x before 16.11.0 contains an SQL injection vulnerability in some endpoints due to missing input validation, allowing manipulation of database queries. Authenticated attackers can send specially crafted requests to the affected endpoints to extract sensitive information from the database.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T01:59:40.554Z","source_hash":"content-fingerprint:fnv1a-813c190c","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109649-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Frappe ERPNext before 15.102.0 and 16.x before 16.11.0 contains an SQL injection vulnerability in some endpoints due to missing input validation, allowing manipulation of database queries. Authenticated attackers can send specially crafted requests to the affected endpoints to extract sensitive information from the database.","source_quote_or_pointer":"Security Advisory CVE-2026-109649","fact_id":"SEA-CVE-2026-109649-F1","document_citation":"Security Advisory CVE-2026-109649"},{"id":"SEA-CVE-2026-109649-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Frappe ERPNext before 15.102.0 and 16.x before 16.11.0 contains an SQL injection vulnerability in some endpoints due to missing input validation, allowing manipulation of database queries.","source_quote_or_pointer":"Advisory description (CVE-2026-109649)","fact_id":"SEA-CVE-2026-109649-F2","document_citation":"Advisory description (CVE-2026-109649)"}],"source_stated_contributors":["Frappe ERPNext before 15.102.0 and 16.x before 16.11.0 contains an SQL injection vulnerability in some endpoints due to missing input validation, allowing manipulation of database queries."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109649","reporting_entity":"CVE-2026-109649","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109649-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109649-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-109649"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109648","title":"Frappe ERPNext before 15.106.0 and 16.x before 16.16.0 contains an SQL injection vulnerability in some endpoints due to missing input validation. Authenticated attackers can send specially crafted requests to inject SQL into database queries and extract sensitive information from the underlying database.","display_title":"Software component issue could expose or alter stored data","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-109648","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109648","source_title":"Frappe ERPNext before 15.106.0 and 16.x before 16.16.0 contains an SQL injection vulnerability in some endpoints due to missing input validation. Authenticated attackers can send specially crafted requests to inject SQL into database queries and extract sensitive information from the underlying database.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T01:59:40.555Z","source_hash":"content-fingerprint:fnv1a-e8e61621","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109648-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Frappe ERPNext before 15.106.0 and 16.x before 16.16.0 contains an SQL injection vulnerability in some endpoints due to missing input validation. Authenticated attackers can send specially crafted requests to inject SQL into database queries and extract sensitive information from the underlying database.","source_quote_or_pointer":"Security Advisory CVE-2026-109648","fact_id":"SEA-CVE-2026-109648-F1","document_citation":"Security Advisory CVE-2026-109648"},{"id":"SEA-CVE-2026-109648-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Frappe ERPNext before 15.106.0 and 16.x before 16.16.0 contains an SQL injection vulnerability in some endpoints due to missing input validation. Authenticated attackers can send specially crafted requests to inject SQL into database queries and extract sensitive information from the underlying database.","source_quote_or_pointer":"Advisory description (CVE-2026-109648)","fact_id":"SEA-CVE-2026-109648-F2","document_citation":"Advisory description (CVE-2026-109648)"}],"source_stated_contributors":["Frappe ERPNext before 15.106.0 and 16.x before 16.16.0 contains an SQL injection vulnerability in some endpoints due to missing input validation. Authenticated attackers can send specially crafted requests to inject SQL into database queries and extract sensitive information from the underlying database."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109648","reporting_entity":"CVE-2026-109648","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109648-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109648-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-109648"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109647","title":"Frappe ERPNext before 15.106.0 and 16.x before 16.16.0 contains an SQL injection vulnerability in multiple endpoints caused by missing input validation. Authenticated attackers can send specially crafted requests to these endpoints to manipulate database queries and extract sensitive information from the ERPNext database.","display_title":"Software component issue could expose or alter stored data","display_summary":"Frappe ERPNext before 15.106.0 and 16.x before 16.16.0 contains an SQL injection vulnerability in multiple endpoints caused by missing input validation.","display_reference":"CVE-2026-109647","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109647","source_title":"Frappe ERPNext before 15.106.0 and 16.x before 16.16.0 contains an SQL injection vulnerability in multiple endpoints caused by missing input validation. Authenticated attackers can send specially crafted requests to these endpoints to manipulate database queries and extract sensitive information from the ERPNext database.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T01:59:40.555Z","source_hash":"content-fingerprint:fnv1a-b38d6a54","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109647-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Frappe ERPNext before 15.106.0 and 16.x before 16.16.0 contains an SQL injection vulnerability in multiple endpoints caused by missing input validation. Authenticated attackers can send specially crafted requests to these endpoints to manipulate database queries and extract sensitive information from the ERPNext database.","source_quote_or_pointer":"Security Advisory CVE-2026-109647","fact_id":"SEA-CVE-2026-109647-F1","document_citation":"Security Advisory CVE-2026-109647"},{"id":"SEA-CVE-2026-109647-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Frappe ERPNext before 15.106.0 and 16.x before 16.16.0 contains an SQL injection vulnerability in multiple endpoints caused by missing input validation. Authenticated attackers can send specially crafted requests to these endpoints to manipulate database queries and extract sensitive information from the ERPNext…","source_quote_or_pointer":"Advisory description (CVE-2026-109647)","fact_id":"SEA-CVE-2026-109647-F2","document_citation":"Advisory description (CVE-2026-109647)"}],"source_stated_contributors":["Frappe ERPNext before 15.106.0 and 16.x before 16.16.0 contains an SQL injection vulnerability in multiple endpoints caused by missing input validation. Authenticated attackers can send specially crafted requests to these endpoints to manipulate database queries and extract sensitive information from the ERPNext…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109647","reporting_entity":"CVE-2026-109647","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109647-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109647-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-109647"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109646","title":"Frappe ERPNext before 15.106.0 and 16.x before 16.16.0 contains an SQL injection vulnerability in some endpoints due to missing input validation. Authenticated low-privileged attackers can send specially crafted requests to these endpoints to inject SQL and extract sensitive information from the database.","display_title":"Software component issue could expose or alter stored data","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-109646","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109646","source_title":"Frappe ERPNext before 15.106.0 and 16.x before 16.16.0 contains an SQL injection vulnerability in some endpoints due to missing input validation. Authenticated low-privileged attackers can send specially crafted requests to these endpoints to inject SQL and extract sensitive information from the database.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T01:59:40.556Z","source_hash":"content-fingerprint:fnv1a-922cabf1","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109646-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Frappe ERPNext before 15.106.0 and 16.x before 16.16.0 contains an SQL injection vulnerability in some endpoints due to missing input validation. Authenticated low-privileged attackers can send specially crafted requests to these endpoints to inject SQL and extract sensitive information from the database.","source_quote_or_pointer":"Security Advisory CVE-2026-109646","fact_id":"SEA-CVE-2026-109646-F1","document_citation":"Security Advisory CVE-2026-109646"},{"id":"SEA-CVE-2026-109646-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Frappe ERPNext before 15.106.0 and 16.x before 16.16.0 contains an SQL injection vulnerability in some endpoints due to missing input validation. Authenticated low-privileged attackers can send specially crafted requests to these endpoints to inject SQL and extract sensitive information from the database.","source_quote_or_pointer":"Advisory description (CVE-2026-109646)","fact_id":"SEA-CVE-2026-109646-F2","document_citation":"Advisory description (CVE-2026-109646)"}],"source_stated_contributors":["Frappe ERPNext before 15.106.0 and 16.x before 16.16.0 contains an SQL injection vulnerability in some endpoints due to missing input validation. Authenticated low-privileged attackers can send specially crafted requests to these endpoints to inject SQL and extract sensitive information from the database."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.write_action"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109646","reporting_entity":"CVE-2026-109646","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109646-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109646-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-109646"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109639","title":"Frappe ERPNext before 15.102.0 and 16.x before 16.8.0 contains an SQL injection vulnerability in some endpoints due to missing input validation, allowing manipulation of database queries. Authenticated attackers with low privileges can send specially crafted requests to the affected endpoints to extract sensitive information from the database.","display_title":"Software component issue could expose or alter stored data","display_summary":"Frappe ERPNext before 15.102.0 and 16.x before 16.8.0 contains an SQL injection vulnerability in some endpoints due to missing input validation, allowing manipulation of database queries.","display_reference":"CVE-2026-109639","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109639","source_title":"Frappe ERPNext before 15.102.0 and 16.x before 16.8.0 contains an SQL injection vulnerability in some endpoints due to missing input validation, allowing manipulation of database queries. Authenticated attackers with low privileges can send specially crafted requests to the affected endpoints to extract sensitive information from the database.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T01:59:40.556Z","source_hash":"content-fingerprint:fnv1a-217d4e01","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109639-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Frappe ERPNext before 15.102.0 and 16.x before 16.8.0 contains an SQL injection vulnerability in some endpoints due to missing input validation, allowing manipulation of database queries. Authenticated attackers with low privileges can send specially crafted requests to the affected endpoints to extract sensitive information from the database.","source_quote_or_pointer":"Security Advisory CVE-2026-109639","fact_id":"SEA-CVE-2026-109639-F1","document_citation":"Security Advisory CVE-2026-109639"},{"id":"SEA-CVE-2026-109639-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Frappe ERPNext before 15.102.0 and 16.x before 16.8.0 contains an SQL injection vulnerability in some endpoints due to missing input validation, allowing manipulation of database queries.","source_quote_or_pointer":"Advisory description (CVE-2026-109639)","fact_id":"SEA-CVE-2026-109639-F2","document_citation":"Advisory description (CVE-2026-109639)"}],"source_stated_contributors":["Frappe ERPNext before 15.102.0 and 16.x before 16.8.0 contains an SQL injection vulnerability in some endpoints due to missing input validation, allowing manipulation of database queries."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109639","reporting_entity":"CVE-2026-109639","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109639-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109639-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-109639"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109638","title":"Frappe ERPNext before 15.110.0 and 16.x before 16.21.0 contains a SQL injection vulnerability in some endpoints caused by missing input validation. Authenticated attackers can send specially crafted requests to these endpoints to manipulate database queries and extract sensitive information from the database.","display_title":"Software component issue could expose or alter stored data","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-109638","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109638","source_title":"Frappe ERPNext before 15.110.0 and 16.x before 16.21.0 contains a SQL injection vulnerability in some endpoints caused by missing input validation. Authenticated attackers can send specially crafted requests to these endpoints to manipulate database queries and extract sensitive information from the database.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T01:59:40.557Z","source_hash":"content-fingerprint:fnv1a-a435b7fc","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109638-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Frappe ERPNext before 15.110.0 and 16.x before 16.21.0 contains a SQL injection vulnerability in some endpoints caused by missing input validation. Authenticated attackers can send specially crafted requests to these endpoints to manipulate database queries and extract sensitive information from the database.","source_quote_or_pointer":"Security Advisory CVE-2026-109638","fact_id":"SEA-CVE-2026-109638-F1","document_citation":"Security Advisory CVE-2026-109638"},{"id":"SEA-CVE-2026-109638-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Frappe ERPNext before 15.110.0 and 16.x before 16.21.0 contains a SQL injection vulnerability in some endpoints caused by missing input validation. Authenticated attackers can send specially crafted requests to these endpoints to manipulate database queries and extract sensitive information from the database.","source_quote_or_pointer":"Advisory description (CVE-2026-109638)","fact_id":"SEA-CVE-2026-109638-F2","document_citation":"Advisory description (CVE-2026-109638)"}],"source_stated_contributors":["Frappe ERPNext before 15.110.0 and 16.x before 16.21.0 contains a SQL injection vulnerability in some endpoints caused by missing input validation. Authenticated attackers can send specially crafted requests to these endpoints to manipulate database queries and extract sensitive information from the database."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109638","reporting_entity":"CVE-2026-109638","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109638-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109638-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-109638"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109634","title":"Frappe ERPNext before 15.121.0 and 16.x before 16.34.0 contains an SQL injection vulnerability in some endpoints due to missing input validation. Authenticated attackers with high privileges can send specially crafted requests to these endpoints to inject SQL and extract sensitive information from the database.","display_title":"Software component issue could expose or alter stored data","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-109634","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109634","source_title":"Frappe ERPNext before 15.121.0 and 16.x before 16.34.0 contains an SQL injection vulnerability in some endpoints due to missing input validation. Authenticated attackers with high privileges can send specially crafted requests to these endpoints to inject SQL and extract sensitive information from the database.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T01:59:40.557Z","source_hash":"content-fingerprint:fnv1a-93bf40","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109634-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Frappe ERPNext before 15.121.0 and 16.x before 16.34.0 contains an SQL injection vulnerability in some endpoints due to missing input validation. Authenticated attackers with high privileges can send specially crafted requests to these endpoints to inject SQL and extract sensitive information from the database.","source_quote_or_pointer":"Security Advisory CVE-2026-109634","fact_id":"SEA-CVE-2026-109634-F1","document_citation":"Security Advisory CVE-2026-109634"},{"id":"SEA-CVE-2026-109634-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Frappe ERPNext before 15.121.0 and 16.x before 16.34.0 contains an SQL injection vulnerability in some endpoints due to missing input validation. Authenticated attackers with high privileges can send specially crafted requests to these endpoints to inject SQL and extract sensitive information from the database.","source_quote_or_pointer":"Advisory description (CVE-2026-109634)","fact_id":"SEA-CVE-2026-109634-F2","document_citation":"Advisory description (CVE-2026-109634)"}],"source_stated_contributors":["Frappe ERPNext before 15.121.0 and 16.x before 16.34.0 contains an SQL injection vulnerability in some endpoints due to missing input validation. Authenticated attackers with high privileges can send specially crafted requests to these endpoints to inject SQL and extract sensitive information from the database."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109634","reporting_entity":"CVE-2026-109634","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109634-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109634-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-109634"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109633","title":"Frappe ERPNext before 15.119.1 and 16.x before 16.32.0 contains a stored cross-site scripting vulnerability because content submitted through a public-facing booking page is stored without neutralization. Unauthenticated attackers can submit crafted content that is rendered as raw HTML in a privileged user's session, executing script to act as that user and take over the account.","display_title":"Software component issue could run attacker-controlled scripts in a browser","display_summary":"Frappe ERPNext before 15.119.1 and 16.x before 16.32.0 contains a stored cross-site scripting vulnerability because content submitted through a public-facing booking page is stored without neutralization.","display_reference":"CVE-2026-109633","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109633","source_title":"Frappe ERPNext before 15.119.1 and 16.x before 16.32.0 contains a stored cross-site scripting vulnerability because content submitted through a public-facing booking page is stored without neutralization. Unauthenticated attackers can submit crafted content that is rendered as raw HTML in a privileged user's session, executing script to act as that user and take over the account.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T01:59:40.558Z","source_hash":"content-fingerprint:fnv1a-2766a6ff","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109633-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Frappe ERPNext before 15.119.1 and 16.x before 16.32.0 contains a stored cross-site scripting vulnerability because content submitted through a public-facing booking page is stored without neutralization. Unauthenticated attackers can submit crafted content that is rendered as raw HTML in a privileged user's session, executing script to act as that user and take over the account.","source_quote_or_pointer":"Security Advisory CVE-2026-109633","fact_id":"SEA-CVE-2026-109633-F1","document_citation":"Security Advisory CVE-2026-109633"},{"id":"SEA-CVE-2026-109633-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Frappe ERPNext before 15.119.1 and 16.x before 16.32.0 contains a stored cross-site scripting vulnerability because content submitted through a public-facing booking page is stored without neutralization.","source_quote_or_pointer":"Advisory description (CVE-2026-109633)","fact_id":"SEA-CVE-2026-109633-F2","document_citation":"Advisory description (CVE-2026-109633)"}],"source_stated_contributors":["Frappe ERPNext before 15.119.1 and 16.x before 16.32.0 contains a stored cross-site scripting vulnerability because content submitted through a public-facing booking page is stored without neutralization."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.public_publication","data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109633","reporting_entity":"CVE-2026-109633","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109633-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109633-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-109633"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109631","title":"Frappe ERPNext before 15.119.1 and 16.x before 16.32.0 contains an SQL injection vulnerability in some endpoints that lack input validation, allowing crafted input to alter database queries. Authenticated attackers with low privileges can send specially crafted requests to these endpoints to extract sensitive information from the database.","display_title":"Software component issue could expose or alter stored data","display_summary":"Frappe ERPNext before 15.119.1 and 16.x before 16.32.0 contains an SQL injection vulnerability in some endpoints that lack input validation, allowing crafted input to alter database queries.","display_reference":"CVE-2026-109631","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109631","source_title":"Frappe ERPNext before 15.119.1 and 16.x before 16.32.0 contains an SQL injection vulnerability in some endpoints that lack input validation, allowing crafted input to alter database queries. Authenticated attackers with low privileges can send specially crafted requests to these endpoints to extract sensitive information from the database.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T01:59:40.558Z","source_hash":"content-fingerprint:fnv1a-e9ad9c25","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109631-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Frappe ERPNext before 15.119.1 and 16.x before 16.32.0 contains an SQL injection vulnerability in some endpoints that lack input validation, allowing crafted input to alter database queries. Authenticated attackers with low privileges can send specially crafted requests to these endpoints to extract sensitive information from the database.","source_quote_or_pointer":"Security Advisory CVE-2026-109631","fact_id":"SEA-CVE-2026-109631-F1","document_citation":"Security Advisory CVE-2026-109631"},{"id":"SEA-CVE-2026-109631-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Frappe ERPNext before 15.119.1 and 16.x before 16.32.0 contains an SQL injection vulnerability in some endpoints that lack input validation, allowing crafted input to alter database queries.","source_quote_or_pointer":"Advisory description (CVE-2026-109631)","fact_id":"SEA-CVE-2026-109631-F2","document_citation":"Advisory description (CVE-2026-109631)"}],"source_stated_contributors":["Frappe ERPNext before 15.119.1 and 16.x before 16.32.0 contains an SQL injection vulnerability in some endpoints that lack input validation, allowing crafted input to alter database queries."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109631","reporting_entity":"CVE-2026-109631","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109631-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109631-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-109631"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109626","title":"Frappe ERPNext before 16.34.2 contains an SQL injection vulnerability caused by missing input validation in multiple endpoints. Authenticated attackers with low privileges can send specially crafted requests to these endpoints to inject SQL and extract sensitive information from the database.","display_title":"Software component issue could expose or alter stored data","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-109626","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109626","source_title":"Frappe ERPNext before 16.34.2 contains an SQL injection vulnerability caused by missing input validation in multiple endpoints. Authenticated attackers with low privileges can send specially crafted requests to these endpoints to inject SQL and extract sensitive information from the database.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T01:59:40.559Z","source_hash":"content-fingerprint:fnv1a-b7254285","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109626-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Frappe ERPNext before 16.34.2 contains an SQL injection vulnerability caused by missing input validation in multiple endpoints. Authenticated attackers with low privileges can send specially crafted requests to these endpoints to inject SQL and extract sensitive information from the database.","source_quote_or_pointer":"Security Advisory CVE-2026-109626","fact_id":"SEA-CVE-2026-109626-F1","document_citation":"Security Advisory CVE-2026-109626"},{"id":"SEA-CVE-2026-109626-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Frappe ERPNext before 16.34.2 contains an SQL injection vulnerability caused by missing input validation in multiple endpoints. Authenticated attackers with low privileges can send specially crafted requests to these endpoints to inject SQL and extract sensitive information from the database.","source_quote_or_pointer":"Advisory description (CVE-2026-109626)","fact_id":"SEA-CVE-2026-109626-F2","document_citation":"Advisory description (CVE-2026-109626)"}],"source_stated_contributors":["Frappe ERPNext before 16.34.2 contains an SQL injection vulnerability caused by missing input validation in multiple endpoints. Authenticated attackers with low privileges can send specially crafted requests to these endpoints to inject SQL and extract sensitive information from the database."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109626","reporting_entity":"CVE-2026-109626","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109626-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109626-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-109626"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109612","title":"Frappe ERPNext before 15.120.0 and 16.x before 16.33.0 contains a stored cross-site scripting vulnerability in a report view that interpolates stored record names into markup without escaping. Authenticated users able to create records can store crafted record names that execute script in the session of any user who later opens the report.","display_title":"Software component issue could run attacker-controlled scripts in a browser","display_summary":"Frappe ERPNext before 15.120.0 and 16.x before 16.33.0 contains a stored cross-site scripting vulnerability in a report view that interpolates stored record names into markup without escaping.","display_reference":"CVE-2026-109612","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109612","source_title":"Frappe ERPNext before 15.120.0 and 16.x before 16.33.0 contains a stored cross-site scripting vulnerability in a report view that interpolates stored record names into markup without escaping. Authenticated users able to create records can store crafted record names that execute script in the session of any user who later opens the report.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T01:59:40.560Z","source_hash":"content-fingerprint:fnv1a-144f489c","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109612-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Frappe ERPNext before 15.120.0 and 16.x before 16.33.0 contains a stored cross-site scripting vulnerability in a report view that interpolates stored record names into markup without escaping. Authenticated users able to create records can store crafted record names that execute script in the session of any user who later opens the report.","source_quote_or_pointer":"Security Advisory CVE-2026-109612","fact_id":"SEA-CVE-2026-109612-F1","document_citation":"Security Advisory CVE-2026-109612"},{"id":"SEA-CVE-2026-109612-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Frappe ERPNext before 15.120.0 and 16.x before 16.33.0 contains a stored cross-site scripting vulnerability in a report view that interpolates stored record names into markup without escaping.","source_quote_or_pointer":"Advisory description (CVE-2026-109612)","fact_id":"SEA-CVE-2026-109612-F2","document_citation":"Advisory description (CVE-2026-109612)"}],"source_stated_contributors":["Frappe ERPNext before 15.120.0 and 16.x before 16.33.0 contains a stored cross-site scripting vulnerability in a report view that interpolates stored record names into markup without escaping."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109612","reporting_entity":"CVE-2026-109612","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109612-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109612-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-109612"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109609","title":"Frappe ERPNext before 15.119.1 and 16.x before 16.32.0 contains an SQL injection vulnerability in some endpoints that lack input validation. Authenticated attackers with low privileges can send specially crafted requests to these endpoints to inject SQL and extract sensitive information from the ERPNext database.","display_title":"Software component issue could expose or alter stored data","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-109609","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109609","source_title":"Frappe ERPNext before 15.119.1 and 16.x before 16.32.0 contains an SQL injection vulnerability in some endpoints that lack input validation. Authenticated attackers with low privileges can send specially crafted requests to these endpoints to inject SQL and extract sensitive information from the ERPNext database.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T01:59:40.561Z","source_hash":"content-fingerprint:fnv1a-2d7a5360","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109609-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Frappe ERPNext before 15.119.1 and 16.x before 16.32.0 contains an SQL injection vulnerability in some endpoints that lack input validation. Authenticated attackers with low privileges can send specially crafted requests to these endpoints to inject SQL and extract sensitive information from the ERPNext database.","source_quote_or_pointer":"Security Advisory CVE-2026-109609","fact_id":"SEA-CVE-2026-109609-F1","document_citation":"Security Advisory CVE-2026-109609"},{"id":"SEA-CVE-2026-109609-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Frappe ERPNext before 15.119.1 and 16.x before 16.32.0 contains an SQL injection vulnerability in some endpoints that lack input validation. Authenticated attackers with low privileges can send specially crafted requests to these endpoints to inject SQL and extract sensitive information from the ERPNext database.","source_quote_or_pointer":"Advisory description (CVE-2026-109609)","fact_id":"SEA-CVE-2026-109609-F2","document_citation":"Advisory description (CVE-2026-109609)"}],"source_stated_contributors":["Frappe ERPNext before 15.119.1 and 16.x before 16.32.0 contains an SQL injection vulnerability in some endpoints that lack input validation. Authenticated attackers with low privileges can send specially crafted requests to these endpoints to inject SQL and extract sensitive information from the ERPNext database."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109609","reporting_entity":"CVE-2026-109609","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109609-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109609-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-109609"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109608","title":"Frappe ERPNext before 15.121.0 and 16.x before 16.34.0 contains an SQL injection vulnerability in several endpoints that lack input validation. Any authenticated user, including one with no assigned roles, can send specially crafted requests to read other users' sensitive information and escalate to a privileged account.","display_title":"Software component issue could expose or alter stored data","display_summary":"Frappe ERPNext before 15.121.0 and 16.x before 16.34.0 contains an SQL injection vulnerability in several endpoints that lack input validation.","display_reference":"CVE-2026-109608","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109608","source_title":"Frappe ERPNext before 15.121.0 and 16.x before 16.34.0 contains an SQL injection vulnerability in several endpoints that lack input validation. Any authenticated user, including one with no assigned roles, can send specially crafted requests to read other users' sensitive information and escalate to a privileged account.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T01:59:40.562Z","source_hash":"content-fingerprint:fnv1a-9b5ea985","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109608-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Frappe ERPNext before 15.121.0 and 16.x before 16.34.0 contains an SQL injection vulnerability in several endpoints that lack input validation. Any authenticated user, including one with no assigned roles, can send specially crafted requests to read other users' sensitive information and escalate to a privileged account.","source_quote_or_pointer":"Security Advisory CVE-2026-109608","fact_id":"SEA-CVE-2026-109608-F1","document_citation":"Security Advisory CVE-2026-109608"},{"id":"SEA-CVE-2026-109608-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Frappe ERPNext before 15.121.0 and 16.x before 16.34.0 contains an SQL injection vulnerability in several endpoints that lack input validation. Any authenticated user, including one with no assigned roles, can send specially crafted requests to read other users' sensitive information and escalate to a privileged…","source_quote_or_pointer":"Advisory description (CVE-2026-109608)","fact_id":"SEA-CVE-2026-109608-F2","document_citation":"Advisory description (CVE-2026-109608)"}],"source_stated_contributors":["Frappe ERPNext before 15.121.0 and 16.x before 16.34.0 contains an SQL injection vulnerability in several endpoints that lack input validation. Any authenticated user, including one with no assigned roles, can send specially crafted requests to read other users' sensitive information and escalate to a privileged…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109608","reporting_entity":"CVE-2026-109608","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109608-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109608-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-109608"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109604","title":"Frappe ERPNext before 15.112.0 and 16.x before 16.23.0 contains a stored cross-site scripting vulnerability because a tool view interpolates stored record names into markup without escaping. An authenticated user able to create such records can give them malicious names, executing script in the session of any user who later opens that tool.","display_title":"Software component issue could run attacker-controlled scripts in a browser","display_summary":"Frappe ERPNext before 15.112.0 and 16.x before 16.23.0 contains a stored cross-site scripting vulnerability because a tool view interpolates stored record names into markup without escaping.","display_reference":"CVE-2026-109604","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109604","source_title":"Frappe ERPNext before 15.112.0 and 16.x before 16.23.0 contains a stored cross-site scripting vulnerability because a tool view interpolates stored record names into markup without escaping. An authenticated user able to create such records can give them malicious names, executing script in the session of any user who later opens that tool.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T01:59:40.562Z","source_hash":"content-fingerprint:fnv1a-365a2e9","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109604-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Frappe ERPNext before 15.112.0 and 16.x before 16.23.0 contains a stored cross-site scripting vulnerability because a tool view interpolates stored record names into markup without escaping. An authenticated user able to create such records can give them malicious names, executing script in the session of any user who later opens that tool.","source_quote_or_pointer":"Security Advisory CVE-2026-109604","fact_id":"SEA-CVE-2026-109604-F1","document_citation":"Security Advisory CVE-2026-109604"},{"id":"SEA-CVE-2026-109604-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Frappe ERPNext before 15.112.0 and 16.x before 16.23.0 contains a stored cross-site scripting vulnerability because a tool view interpolates stored record names into markup without escaping.","source_quote_or_pointer":"Advisory description (CVE-2026-109604)","fact_id":"SEA-CVE-2026-109604-F2","document_citation":"Advisory description (CVE-2026-109604)"}],"source_stated_contributors":["Frappe ERPNext before 15.112.0 and 16.x before 16.23.0 contains a stored cross-site scripting vulnerability because a tool view interpolates stored record names into markup without escaping."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109604","reporting_entity":"CVE-2026-109604","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109604-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109604-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-109604"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109603","title":"Frappe Framework 15.x before 15.107.3 and 16.x before 16.17.0 relies on a vulnerable pdfkit library (CVE-2025-26240) for PDF generation, enabling server-side request forgery and local file inclusion. Authenticated attackers can supply crafted content to PDF rendering to make the server fetch internal resources or embed local server files in generated PDFs.","display_title":"Software component issue could reach internal services","display_summary":"Frappe Framework 15.x before 15.107.3 and 16.x before 16.17.0 relies on a vulnerable pdfkit library (CVE-2025-26240) for PDF generation, enabling server-side request forgery and local file inclusion.","display_reference":"CVE-2026-109603","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109603","source_title":"Frappe Framework 15.x before 15.107.3 and 16.x before 16.17.0 relies on a vulnerable pdfkit library (CVE-2025-26240) for PDF generation, enabling server-side request forgery and local file inclusion. Authenticated attackers can supply crafted content to PDF rendering to make the server fetch internal resources or embed local server files in generated PDFs.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T01:59:40.563Z","source_hash":"content-fingerprint:fnv1a-280beac8","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109603-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Frappe Framework 15.x before 15.107.3 and 16.x before 16.17.0 relies on a vulnerable pdfkit library (CVE-2025-26240) for PDF generation, enabling server-side request forgery and local file inclusion. Authenticated attackers can supply crafted content to PDF rendering to make the server fetch internal resources or embed local server files in generated PDFs.","source_quote_or_pointer":"Security Advisory CVE-2026-109603","fact_id":"SEA-CVE-2026-109603-F1","document_citation":"Security Advisory CVE-2026-109603"},{"id":"SEA-CVE-2026-109603-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Frappe Framework 15.x before 15.107.3 and 16.x before 16.17.0 relies on a vulnerable pdfkit library (CVE-2025-26240) for PDF generation, enabling server-side request forgery and local file inclusion.","source_quote_or_pointer":"Advisory description (CVE-2026-109603)","fact_id":"SEA-CVE-2026-109603-F2","document_citation":"Advisory description (CVE-2026-109603)"}],"source_stated_contributors":["Frappe Framework 15.x before 15.107.3 and 16.x before 16.17.0 relies on a vulnerable pdfkit library (CVE-2025-26240) for PDF generation, enabling server-side request forgery and local file inclusion."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.uploaded_files"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Internal network access","Cloud metadata or credential exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109603","reporting_entity":"CVE-2026-109603","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109603-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109603-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"The service fetched a URL chosen by the caller and could be steered at internal systems. Restrict outbound destinations and block internal address ranges.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-109603"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109598","title":"Frappe Framework before 15.120.0 and 16.x before 16.33.0 contains a missing authorization vulnerability in the whitelisted send_sms API endpoint, which does not verify that the caller is permitted to send SMS messages. Users lacking the required permissions can invoke send_sms to send arbitrary SMS messages that impersonate the Company.","display_title":"Security issue reported in Software component","display_summary":"Frappe Framework before 15.120.0 and 16.x before 16.33.0 contains a missing authorization vulnerability in the whitelisted sendsms API endpoint, which does not verify that the caller is permitted to send SMS messages.","display_reference":"CVE-2026-109598","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109598","source_title":"Frappe Framework before 15.120.0 and 16.x before 16.33.0 contains a missing authorization vulnerability in the whitelisted send_sms API endpoint, which does not verify that the caller is permitted to send SMS messages. Users lacking the required permissions can invoke send_sms to send arbitrary SMS messages that impersonate the Company.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T01:59:40.564Z","source_hash":"content-fingerprint:fnv1a-1b20b17d","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109598-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Frappe Framework before 15.120.0 and 16.x before 16.33.0 contains a missing authorization vulnerability in the whitelisted send_sms API endpoint, which does not verify that the caller is permitted to send SMS messages. Users lacking the required permissions can invoke send_sms to send arbitrary SMS messages that impersonate the Company.","source_quote_or_pointer":"Security Advisory CVE-2026-109598","fact_id":"SEA-CVE-2026-109598-F1","document_citation":"Security Advisory CVE-2026-109598"},{"id":"SEA-CVE-2026-109598-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Frappe Framework before 15.120.0 and 16.x before 16.33.0 contains a missing authorization vulnerability in the whitelisted sendsms API endpoint, which does not verify that the caller is permitted to send SMS messages.","source_quote_or_pointer":"Advisory description (CVE-2026-109598)","fact_id":"SEA-CVE-2026-109598-F2","document_citation":"Advisory description (CVE-2026-109598)"}],"source_stated_contributors":["Frappe Framework before 15.120.0 and 16.x before 16.33.0 contains a missing authorization vulnerability in the whitelisted sendsms API endpoint, which does not verify that the caller is permitted to send SMS messages."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.external_communication","data.pii"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109598","reporting_entity":"CVE-2026-109598","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109598-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109598-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-109598"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109573","title":"phpMyFAQ before 4.1.9 contains an SQL injection vulnerability in PdoMysql::escape(), which escapes single quotes with backslashes that are treated literally when MySQL or MariaDB runs in NO_BACKSLASH_ESCAPES mode. Unauthenticated attackers can send a Unicode right single quotation mark in the search parameter of api/autocomplete, which is normalized to an ASCII quote, to read credentials and configuration secrets, modify records, or drop tables.","display_title":"Software component issue could expose or alter stored data","display_summary":"phpMyFAQ before 4.1.9 contains an SQL injection vulnerability in PdoMysql::escape(), which escapes single quotes with backslashes that are treated literally when MySQL or MariaDB runs in NOBACKSLASHESCAPES mode.","display_reference":"CVE-2026-109573","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109573","source_title":"phpMyFAQ before 4.1.9 contains an SQL injection vulnerability in PdoMysql::escape(), which escapes single quotes with backslashes that are treated literally when MySQL or MariaDB runs in NO_BACKSLASH_ESCAPES mode. Unauthenticated attackers can send a Unicode right single quotation mark in the search parameter of api/autocomplete, which is normalized to an ASCII quote, to read credentials and configuration secrets, modify records, or drop tables.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T01:59:40.564Z","source_hash":"content-fingerprint:fnv1a-1aad42f2","affected_system":{"organization":"phpMyFAQ before 4.1.9 contains an SQL injection vulnerability in PdoMysql project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109573-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"phpMyFAQ before 4.1.9 contains an SQL injection vulnerability in PdoMysql::escape(), which escapes single quotes with backslashes that are treated literally when MySQL or MariaDB runs in NO_BACKSLASH_ESCAPES mode. Unauthenticated attackers can send a Unicode right single quotation mark in the search parameter of api/autocomplete, which is normalized to an ASCII quote, to read credentials and configuration secrets, modify records, or drop tables.","source_quote_or_pointer":"Security Advisory CVE-2026-109573","fact_id":"SEA-CVE-2026-109573-F1","document_citation":"Security Advisory CVE-2026-109573"},{"id":"SEA-CVE-2026-109573-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"phpMyFAQ before 4.1.9 contains an SQL injection vulnerability in PdoMysql::escape(), which escapes single quotes with backslashes that are treated literally when MySQL or MariaDB runs in NOBACKSLASHESCAPES mode.","source_quote_or_pointer":"Advisory description (CVE-2026-109573)","fact_id":"SEA-CVE-2026-109573-F2","document_citation":"Advisory description (CVE-2026-109573)"}],"source_stated_contributors":["phpMyFAQ before 4.1.9 contains an SQL injection vulnerability in PdoMysql::escape(), which escapes single quotes with backslashes that are treated literally when MySQL or MariaDB runs in NOBACKSLASHESCAPES mode."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.write_action","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109573","reporting_entity":"CVE-2026-109573","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109573-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109573-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-109573"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109572","title":"Open WebUI from 0.8.6 before 0.11.4 contains a privilege escalation vulnerability in the terminal proxy that allows authenticated users to reach the Terminals administrator API with the shared key attached. Attackers can send requests through /api/v1/terminals/{server_id}/{path} to list or stop other users' terminals and modify terminal policies, injecting environment variables into other users' terminals.","display_title":"Software component issue could grant elevated privileges","display_summary":"Open WebUI from 0.8.6 before 0.11.4 contains a privilege escalation vulnerability in the terminal proxy that allows authenticated users to reach the Terminals administrator API with the shared key attached.","display_reference":"CVE-2026-109572","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109572","source_title":"Open WebUI from 0.8.6 before 0.11.4 contains a privilege escalation vulnerability in the terminal proxy that allows authenticated users to reach the Terminals administrator API with the shared key attached. Attackers can send requests through /api/v1/terminals/{server_id}/{path} to list or stop other users' terminals and modify terminal policies, injecting environment variables into other users' terminals.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T01:59:40.565Z","source_hash":"content-fingerprint:fnv1a-664d0d19","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109572-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Open WebUI from 0.8.6 before 0.11.4 contains a privilege escalation vulnerability in the terminal proxy that allows authenticated users to reach the Terminals administrator API with the shared key attached. Attackers can send requests through /api/v1/terminals/{server_id}/{path} to list or stop other users' terminals and modify terminal policies, injecting environment variables into other users' terminals.","source_quote_or_pointer":"Security Advisory CVE-2026-109572","fact_id":"SEA-CVE-2026-109572-F1","document_citation":"Security Advisory CVE-2026-109572"},{"id":"SEA-CVE-2026-109572-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Open WebUI from 0.8.6 before 0.11.4 contains a privilege escalation vulnerability in the terminal proxy that allows authenticated users to reach the Terminals administrator API with the shared key attached.","source_quote_or_pointer":"Advisory description (CVE-2026-109572)","fact_id":"SEA-CVE-2026-109572-F2","document_citation":"Advisory description (CVE-2026-109572)"}],"source_stated_contributors":["Open WebUI from 0.8.6 before 0.11.4 contains a privilege escalation vulnerability in the terminal proxy that allows authenticated users to reach the Terminals administrator API with the shared key attached."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.code_execution","auth.privileged_action","auth.write_action","data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Elevated privileges","Boundary bypass"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109572","reporting_entity":"CVE-2026-109572","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109572-SG1","label":"Enforce privilege boundaries in code","description":"Require explicit, server-verified authorization for privileged operations and isolate components with separate identities.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109572-SG1","label":"Enforce privilege boundaries in code","description":"Require explicit, server-verified authorization for privileged operations and isolate components with separate identities.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A low-privilege actor reached a high-privilege capability. Enforce approval and privilege boundaries in deterministic code, not by convention.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-109572"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-105466","title":"IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to a denial of service when inserting into a table with XML columns under specific conditions.","display_title":"Software component issue could make the service unavailable","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-105466","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105466","source_title":"IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to a denial of service when inserting into a table with XML columns under specific conditions.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T01:59:40.565Z","source_hash":"content-fingerprint:fnv1a-31ed1563","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-105466-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to a denial of service when inserting into a table with XML columns under specific conditions.","source_quote_or_pointer":"Security Advisory CVE-2026-105466","fact_id":"SEA-CVE-2026-105466-F1","document_citation":"Security Advisory CVE-2026-105466"},{"id":"SEA-CVE-2026-105466-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to a denial of service when inserting into a table with XML columns under specific conditions.","source_quote_or_pointer":"Advisory description (CVE-2026-105466)","fact_id":"SEA-CVE-2026-105466-F2","document_citation":"Advisory description (CVE-2026-105466)"}],"source_stated_contributors":["IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to a denial of service when inserting into a table with XML columns under specific conditions."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-105466","reporting_entity":"CVE-2026-105466","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-105466-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-105466-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-105466"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-104364","title":"IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 could allow a local attacker to cause a denial of service due to improper input validation.","display_title":"Software component issue could make the service unavailable","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-104364","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104364","source_title":"IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 could allow a local attacker to cause a denial of service due to improper input validation.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T01:59:40.565Z","source_hash":"content-fingerprint:fnv1a-ad5200f7","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-104364-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 could allow a local attacker to cause a denial of service due to improper input validation.","source_quote_or_pointer":"Security Advisory CVE-2026-104364","fact_id":"SEA-CVE-2026-104364-F1","document_citation":"Security Advisory CVE-2026-104364"},{"id":"SEA-CVE-2026-104364-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 could allow a local attacker to cause a denial of service due to improper input validation.","source_quote_or_pointer":"Advisory description (CVE-2026-104364)","fact_id":"SEA-CVE-2026-104364-F2","document_citation":"Advisory description (CVE-2026-104364)"}],"source_stated_contributors":["IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 could allow a local attacker to cause a denial of service due to improper input validation."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-104364","reporting_entity":"CVE-2026-104364","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-104364-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-104364-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-104364"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-104332","title":"IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to a denial of service when executing a specially crafted query with a Materialized Query Table","display_title":"Software component issue could make the service unavailable","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-104332","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104332","source_title":"IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to a denial of service when executing a specially crafted query with a Materialized Query Table","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T01:59:40.566Z","source_hash":"content-fingerprint:fnv1a-9b06b80","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-104332-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to a denial of service when executing a specially crafted query with a Materialized Query Table","source_quote_or_pointer":"Security Advisory CVE-2026-104332","fact_id":"SEA-CVE-2026-104332-F1","document_citation":"Security Advisory CVE-2026-104332"},{"id":"SEA-CVE-2026-104332-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to a denial of service when executing a specially crafted query with a Materialized Query Table","source_quote_or_pointer":"Advisory description (CVE-2026-104332)","fact_id":"SEA-CVE-2026-104332-F2","document_citation":"Advisory description (CVE-2026-104332)"}],"source_stated_contributors":["IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to a denial of service when executing a specially crafted query with a Materialized Query Table"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-104332","reporting_entity":"CVE-2026-104332","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-104332-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-104332-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-104332"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2025-27897","title":"IBM Db2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.","display_title":"Software component issue could run attacker-controlled scripts in a browser","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2025-27897","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2025-27897","source_title":"IBM Db2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T01:59:40.567Z","source_hash":"content-fingerprint:fnv1a-69532ec7","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2025-27897-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM Db2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.","source_quote_or_pointer":"Security Advisory CVE-2025-27897","fact_id":"SEA-CVE-2025-27897-F1","document_citation":"Security Advisory CVE-2025-27897"},{"id":"SEA-CVE-2025-27897-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM Db2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.","source_quote_or_pointer":"Advisory description (CVE-2025-27897)","fact_id":"SEA-CVE-2025-27897-F2","document_citation":"Advisory description (CVE-2025-27897)"}],"source_stated_contributors":["IBM Db2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2025-27897","reporting_entity":"CVE-2025-27897","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2025-27897-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2025-27897-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2025-27897"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2025-27896","title":"IBM Db2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.","display_title":"Software component issue could run attacker-controlled scripts in a browser","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2025-27896","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2025-27896","source_title":"IBM Db2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T01:59:40.567Z","source_hash":"content-fingerprint:fnv1a-60b585f6","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2025-27896-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM Db2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.","source_quote_or_pointer":"Security Advisory CVE-2025-27896","fact_id":"SEA-CVE-2025-27896-F1","document_citation":"Security Advisory CVE-2025-27896"},{"id":"SEA-CVE-2025-27896-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM Db2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.","source_quote_or_pointer":"Advisory description (CVE-2025-27896)","fact_id":"SEA-CVE-2025-27896-F2","document_citation":"Advisory description (CVE-2025-27896)"}],"source_stated_contributors":["IBM Db2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2025-27896","reporting_entity":"CVE-2025-27896","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2025-27896-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2025-27896-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2025-27896"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2025-27895","title":"IBM DB2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.","display_title":"Software component issue could run attacker-controlled scripts in a browser","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2025-27895","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2025-27895","source_title":"IBM DB2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T01:59:40.568Z","source_hash":"content-fingerprint:fnv1a-536142d","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2025-27895-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM DB2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.","source_quote_or_pointer":"Security Advisory CVE-2025-27895","fact_id":"SEA-CVE-2025-27895-F1","document_citation":"Security Advisory CVE-2025-27895"},{"id":"SEA-CVE-2025-27895-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM DB2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.","source_quote_or_pointer":"Advisory description (CVE-2025-27895)","fact_id":"SEA-CVE-2025-27895-F2","document_citation":"Advisory description (CVE-2025-27895)"}],"source_stated_contributors":["IBM DB2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2025-27895","reporting_entity":"CVE-2025-27895","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2025-27895-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2025-27895-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2025-27895"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2024-58391","title":"Frappe before 14.58.0 and 15.x before 15.4.0 contains a cross-site scripting vulnerability in printview because printview parameters are not escaped before being rendered. Remote attackers can craft a malicious printview URL that, when visited by a victim, injects HTML and executes script in the victim's browser session.","display_title":"Software component issue could run attacker-controlled scripts in a browser","display_summary":"Frappe before 14.58.0 and 15.x before 15.4.0 contains a cross-site scripting vulnerability in printview because printview parameters are not escaped before being rendered.","display_reference":"CVE-2024-58391","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2024-58391","source_title":"Frappe before 14.58.0 and 15.x before 15.4.0 contains a cross-site scripting vulnerability in printview because printview parameters are not escaped before being rendered. Remote attackers can craft a malicious printview URL that, when visited by a victim, injects HTML and executes script in the victim's browser session.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T01:59:40.568Z","source_hash":"content-fingerprint:fnv1a-baed5645","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2024-58391-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Frappe before 14.58.0 and 15.x before 15.4.0 contains a cross-site scripting vulnerability in printview because printview parameters are not escaped before being rendered. Remote attackers can craft a malicious printview URL that, when visited by a victim, injects HTML and executes script in the victim's browser session.","source_quote_or_pointer":"Security Advisory CVE-2024-58391","fact_id":"SEA-CVE-2024-58391-F1","document_citation":"Security Advisory CVE-2024-58391"},{"id":"SEA-CVE-2024-58391-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Frappe before 14.58.0 and 15.x before 15.4.0 contains a cross-site scripting vulnerability in printview because printview parameters are not escaped before being rendered.","source_quote_or_pointer":"Advisory description (CVE-2024-58391)","fact_id":"SEA-CVE-2024-58391-F2","document_citation":"Advisory description (CVE-2024-58391)"}],"source_stated_contributors":["Frappe before 14.58.0 and 15.x before 15.4.0 contains a cross-site scripting vulnerability in printview because printview parameters are not escaped before being rendered."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2024-58391","reporting_entity":"CVE-2024-58391","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2024-58391-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2024-58391-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2024-58391"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2023-54411","title":"Frappe framework before 13.32.0 uses weak authentication for print view access, because the print view key can be derived from data exposed by other whitelisted API endpoints. Attackers can generate a valid key to view documents through the print view without proper permissions.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2023-54411","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2023-54411","source_title":"Frappe framework before 13.32.0 uses weak authentication for print view access, because the print view key can be derived from data exposed by other whitelisted API endpoints. Attackers can generate a valid key to view documents through the print view without proper permissions.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T01:59:40.568Z","source_hash":"content-fingerprint:fnv1a-9837a181","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2023-54411-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Frappe framework before 13.32.0 uses weak authentication for print view access, because the print view key can be derived from data exposed by other whitelisted API endpoints. Attackers can generate a valid key to view documents through the print view without proper permissions.","source_quote_or_pointer":"Security Advisory CVE-2023-54411","fact_id":"SEA-CVE-2023-54411-F1","document_citation":"Security Advisory CVE-2023-54411"},{"id":"SEA-CVE-2023-54411-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Frappe framework before 13.32.0 uses weak authentication for print view access, because the print view key can be derived from data exposed by other whitelisted API endpoints. Attackers can generate a valid key to view documents through the print view without proper permissions.","source_quote_or_pointer":"Advisory description (CVE-2023-54411)","fact_id":"SEA-CVE-2023-54411-F2","document_citation":"Advisory description (CVE-2023-54411)"}],"source_stated_contributors":["Frappe framework before 13.32.0 uses weak authentication for print view access, because the print view key can be derived from data exposed by other whitelisted API endpoints. Attackers can generate a valid key to view documents through the print view without proper permissions."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.uploaded_files"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2023-54411","reporting_entity":"CVE-2023-54411","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2023-54411-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2023-54411-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2023-54411"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2023-54406","title":"Frappe before 14.59.0 and 15.x before 15.5.0 contains a sandbox flaw where the frappe.flags.in_safe_exec global flag can become False during Server Script execution when one server script triggers another. Authenticated high-privileged users can craft a Server Script that triggers other server scripts, such as by saving a document, so the remaining code runs without safe execution protections.","display_title":"Security issue reported in Software component","display_summary":"Frappe before 14.59.0 and 15.x before 15.5.0 contains a sandbox flaw where the frappe.flags.insafeexec global flag can become False during Server Script execution when one server script triggers another.","display_reference":"CVE-2023-54406","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2023-54406","source_title":"Frappe before 14.59.0 and 15.x before 15.5.0 contains a sandbox flaw where the frappe.flags.in_safe_exec global flag can become False during Server Script execution when one server script triggers another. Authenticated high-privileged users can craft a Server Script that triggers other server scripts, such as by saving a document, so the remaining code runs without safe execution protections.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T01:59:40.569Z","source_hash":"content-fingerprint:fnv1a-2f7d6cb1","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2023-54406-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Frappe before 14.59.0 and 15.x before 15.5.0 contains a sandbox flaw where the frappe.flags.in_safe_exec global flag can become False during Server Script execution when one server script triggers another. Authenticated high-privileged users can craft a Server Script that triggers other server scripts, such as by saving a document, so the remaining code runs without safe execution protections.","source_quote_or_pointer":"Security Advisory CVE-2023-54406","fact_id":"SEA-CVE-2023-54406-F1","document_citation":"Security Advisory CVE-2023-54406"},{"id":"SEA-CVE-2023-54406-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Frappe before 14.59.0 and 15.x before 15.5.0 contains a sandbox flaw where the frappe.flags.insafeexec global flag can become False during Server Script execution when one server script triggers another.","source_quote_or_pointer":"Advisory description (CVE-2023-54406)","fact_id":"SEA-CVE-2023-54406-F2","document_citation":"Advisory description (CVE-2023-54406)"}],"source_stated_contributors":["Frappe before 14.59.0 and 15.x before 15.5.0 contains a sandbox flaw where the frappe.flags.insafeexec global flag can become False during Server Script execution when one server script triggers another."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.code_execution","auth.privileged_action","auth.write_action","data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2023-54406","reporting_entity":"CVE-2023-54406","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2023-54406-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2023-54406-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2023-54406"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-92876","title":"IBM Maximo Application Suite - IoT Component 9.2.0, 9.1.0, and 9.0.0 could allow a remote attacker to cause a denial of service due to uncontrolled recursion.","display_title":"Software component issue could make the service unavailable","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-92876","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92876","source_title":"IBM Maximo Application Suite - IoT Component 9.2.0, 9.1.0, and 9.0.0 could allow a remote attacker to cause a denial of service due to uncontrolled recursion.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T01:59:40.569Z","source_hash":"content-fingerprint:fnv1a-1f6af081","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-92876-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM Maximo Application Suite - IoT Component 9.2.0, 9.1.0, and 9.0.0 could allow a remote attacker to cause a denial of service due to uncontrolled recursion.","source_quote_or_pointer":"Security Advisory CVE-2026-92876","fact_id":"SEA-CVE-2026-92876-F1","document_citation":"Security Advisory CVE-2026-92876"},{"id":"SEA-CVE-2026-92876-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM Maximo Application Suite - IoT Component 9.2.0, 9.1.0, and 9.0.0 could allow a remote attacker to cause a denial of service due to uncontrolled recursion.","source_quote_or_pointer":"Advisory description (CVE-2026-92876)","fact_id":"SEA-CVE-2026-92876-F2","document_citation":"Advisory description (CVE-2026-92876)"}],"source_stated_contributors":["IBM Maximo Application Suite - IoT Component 9.2.0, 9.1.0, and 9.0.0 could allow a remote attacker to cause a denial of service due to uncontrolled recursion."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-92876","reporting_entity":"CVE-2026-92876","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-92876-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-92876-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-92876"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-90912","title":"IBM Maximo AI Service 9.1.0, and 9.2.0 SaaS could allow a remote attacker to cause a denial of service due to uncontrolled recursion.","display_title":"Software component issue could make the service unavailable","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-90912","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90912","source_title":"IBM Maximo AI Service 9.1.0, and 9.2.0 SaaS could allow a remote attacker to cause a denial of service due to uncontrolled recursion.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T01:59:40.570Z","source_hash":"content-fingerprint:fnv1a-e5931cce","affected_system":{"organization":"Software component project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-90912-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM Maximo AI Service 9.1.0, and 9.2.0 SaaS could allow a remote attacker to cause a denial of service due to uncontrolled recursion.","source_quote_or_pointer":"Security Advisory CVE-2026-90912","fact_id":"SEA-CVE-2026-90912-F1","document_citation":"Security Advisory CVE-2026-90912"},{"id":"SEA-CVE-2026-90912-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM Maximo AI Service 9.1.0, and 9.2.0 SaaS could allow a remote attacker to cause a denial of service due to uncontrolled recursion.","source_quote_or_pointer":"Advisory description (CVE-2026-90912)","fact_id":"SEA-CVE-2026-90912-F2","document_citation":"Advisory description (CVE-2026-90912)"}],"source_stated_contributors":["IBM Maximo AI Service 9.1.0, and 9.2.0 SaaS could allow a remote attacker to cause a denial of service due to uncontrolled recursion."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["arch.multi_tenant"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-90912","reporting_entity":"CVE-2026-90912","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-90912-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-90912-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-90912"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-54459","title":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.14.0, FileRise authenticates requests to the file creation and share-link creation handlers but does not enforce the server-side CSRF token check used by adjacent state-changing operations. The POST endpoints /api/file/createFile.php and /api/file/createShareLink.php invoke FileController::createFile and FileController::createShareLink without rejecting a missing or invalid X-CSRF-Token header. A request issued with a logged-in user's session can create an empty file or create a share link with that user's permissions, although the default SameSite=Lax session cookie reduces ordinary cross-site POST reachability. This issue is fixed in version 3.14.0.","display_title":"Security issue reported in Software component","display_summary":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.14.0, FileRise authenticates requests to the file creation and share-link creation handlers but does not…","display_reference":"CVE-2026-54459","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-54459","source_title":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.14.0, FileRise authenticates requests to the file creation and share-link creation handlers but does not enforce the server-side CSRF token check used by adjacent state-changing operations. The POST endpoints /api/file/createFile.php and /api/file/createShareLink.php invoke FileController::createFile and FileController::createShareLink without rejecting a missing or invalid X-CSRF-Token header. A request issued with a logged-in user's session can create an empty file or create a share link with that user's permissions, although the default SameSite=Lax session cookie reduces ordinary cross-site POST reachability. This issue is fixed in version 3.14.0.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T01:59:40.572Z","source_hash":"content-fingerprint:fnv1a-70d2fdb2","affected_system":{"organization":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.14.0, FileRise authenticates requests to the file creation and share-link creation handlers but does not enforce the server-side CSRF token check used by adjacent state-changing operations. The POST endpoints /api/file/createFile.php and /api/file/createShareLink.php invoke FileController project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-54459-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.14.0, FileRise authenticates requests to the file creation and share-link creation handlers but does not enforce the server-side CSRF token check used by adjacent state-changing operations. The POST endpoints /api/file/createFile.php and /api/file/createShareLink.php invoke FileController::createFile and FileController::createShareLink without rejecting a missing or invalid X-CSRF-Token header. A request issued with a logged-in user's session can create an empty file or create a share link with that user's permissions, although the default SameSite=Lax session cookie reduces ordinary cross-site POST reachability. This issue is fixed in version 3.14.0.","source_quote_or_pointer":"Security Advisory CVE-2026-54459","fact_id":"SEA-CVE-2026-54459-F1","document_citation":"Security Advisory CVE-2026-54459"},{"id":"SEA-CVE-2026-54459-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.14.0, FileRise authenticates requests to the file creation and share-link creation handlers but does not enforce the server-side CSRF token check used by adjacent state-changing operations.","source_quote_or_pointer":"Advisory description (CVE-2026-54459)","fact_id":"SEA-CVE-2026-54459-F2","document_citation":"Advisory description (CVE-2026-54459)"}],"source_stated_contributors":["FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.14.0, FileRise authenticates requests to the file creation and share-link creation handlers but does not enforce the server-side CSRF token check used by adjacent state-changing operations."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","data.uploaded_files","arch.async_job"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-54459","reporting_entity":"CVE-2026-54459","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-54459-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-54459-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-54459"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-44828","title":"Qexo is an open source online editor for static blogs. From 4.0.0 until 4.2.0, Qexo exposes /api/init_step/ through init_step_api without authentication, authorization, or a setup-completion guard. An unauthenticated requester with a valid CSRF token obtained from a public page can submit the first initialization step and reset the INIT setting, causing the instance to re-enter the setup flow. The setup response and /init/ page can expose stored PROVIDER configuration, including service credentials, in frontend content. This issue is fixed in version 4.2.0.","display_title":"Software component issue could expose accounts or credentials","display_summary":"Qexo is an open source online editor for static blogs. From 4.0.0 until 4.2.0, Qexo exposes /api/initstep/ through initstepapi without authentication, authorization, or a setup-completion guard.","display_reference":"CVE-2026-44828","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-44828","source_title":"Qexo is an open source online editor for static blogs. From 4.0.0 until 4.2.0, Qexo exposes /api/init_step/ through init_step_api without authentication, authorization, or a setup-completion guard. An unauthenticated requester with a valid CSRF token obtained from a public page can submit the first initialization step and reset the INIT setting, causing the instance to re-enter the setup flow. The setup response and /init/ page can expose stored PROVIDER configuration, including service credentials, in frontend content. This issue is fixed in version 4.2.0.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T01:59:40.572Z","source_hash":"content-fingerprint:fnv1a-527386d1","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-44828-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Qexo is an open source online editor for static blogs. From 4.0.0 until 4.2.0, Qexo exposes /api/init_step/ through init_step_api without authentication, authorization, or a setup-completion guard. An unauthenticated requester with a valid CSRF token obtained from a public page can submit the first initialization step and reset the INIT setting, causing the instance to re-enter the setup flow. The setup response and /init/ page can expose stored PROVIDER configuration, including service credentials, in frontend content. This issue is fixed in version 4.2.0.","source_quote_or_pointer":"Security Advisory CVE-2026-44828","fact_id":"SEA-CVE-2026-44828-F1","document_citation":"Security Advisory CVE-2026-44828"},{"id":"SEA-CVE-2026-44828-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Qexo is an open source online editor for static blogs. From 4.0.0 until 4.2.0, Qexo exposes /api/initstep/ through initstepapi without authentication, authorization, or a setup-completion guard.","source_quote_or_pointer":"Advisory description (CVE-2026-44828)","fact_id":"SEA-CVE-2026-44828-F2","document_citation":"Advisory description (CVE-2026-44828)"}],"source_stated_contributors":["Qexo is an open source online editor for static blogs. From 4.0.0 until 4.2.0, Qexo exposes /api/initstep/ through initstepapi without authentication, authorization, or a setup-completion guard."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.public_publication","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-44828","reporting_entity":"CVE-2026-44828","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-44828-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-44828-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-44828"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-41210","title":"Moonlight Qt is a GameStream client for Windows, macOS, Linux, and Steam Link. In version 6.1.0 and earlier, after a victim initiates a streaming session to a malicious host, the host can send a crafted H.264 SPS NAL when Moonlight selects a decoder path that does not advertise CAPABILITY_REFERENCE_FRAME_INVALIDATION_AVC. The SPS fixup path in app/streaming/video/ffmpeg.cpp parses the server-provided data with h264bitstream, where attacker-controlled seq_parameter_set_id is used to index the 32-entry sps_table without validation. A value of 32 or greater causes an out-of-bounds write and remote heap corruption in the Moonlight client. The demonstrated impact is a reliable client crash, while code execution is not established. This issue is fixed in version 6.2.0.","display_title":"Software component issue could allow unintended commands to run","display_summary":"Moonlight Qt is a GameStream client for Windows, macOS, Linux, and Steam Link. In version 6.1.0 and earlier, after a victim initiates a streaming session to a malicious host, the host can send a crafted H.264 SPS NAL…","display_reference":"CVE-2026-41210","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-41210","source_title":"Moonlight Qt is a GameStream client for Windows, macOS, Linux, and Steam Link. In version 6.1.0 and earlier, after a victim initiates a streaming session to a malicious host, the host can send a crafted H.264 SPS NAL when Moonlight selects a decoder path that does not advertise CAPABILITY_REFERENCE_FRAME_INVALIDATION_AVC. The SPS fixup path in app/streaming/video/ffmpeg.cpp parses the server-provided data with h264bitstream, where attacker-controlled seq_parameter_set_id is used to index the 32-entry sps_table without validation. A value of 32 or greater causes an out-of-bounds write and remote heap corruption in the Moonlight client. The demonstrated impact is a reliable client crash, while code execution is not established. This issue is fixed in version 6.2.0.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T01:59:40.573Z","source_hash":"content-fingerprint:fnv1a-7fe4f3a5","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-41210-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Moonlight Qt is a GameStream client for Windows, macOS, Linux, and Steam Link. In version 6.1.0 and earlier, after a victim initiates a streaming session to a malicious host, the host can send a crafted H.264 SPS NAL when Moonlight selects a decoder path that does not advertise CAPABILITY_REFERENCE_FRAME_INVALIDATION_AVC. The SPS fixup path in app/streaming/video/ffmpeg.cpp parses the server-provided data with h264bitstream, where attacker-controlled seq_parameter_set_id is used to index the 32-entry sps_table without validation. A value of 32 or greater causes an out-of-bounds write and remote heap corruption in the Moonlight client. The demonstrated impact is a reliable client crash, while code execution is not established. This issue is fixed in version 6.2.0.","source_quote_or_pointer":"Security Advisory CVE-2026-41210","fact_id":"SEA-CVE-2026-41210-F1","document_citation":"Security Advisory CVE-2026-41210"},{"id":"SEA-CVE-2026-41210-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Moonlight Qt is a GameStream client for Windows, macOS, Linux, and Steam Link. In version 6.1.0 and earlier, after a victim initiates a streaming session to a malicious host, the host can send a crafted H.264 SPS NAL when Moonlight selects a decoder path that does not advertise CAPABILITYREFERENCEFRAMEINVALIDATIONAVC.","source_quote_or_pointer":"Advisory description (CVE-2026-41210)","fact_id":"SEA-CVE-2026-41210-F2","document_citation":"Advisory description (CVE-2026-41210)"}],"source_stated_contributors":["Moonlight Qt is a GameStream client for Windows, macOS, Linux, and Steam Link. In version 6.1.0 and earlier, after a victim initiates a streaming session to a malicious host, the host can send a crafted H.264 SPS NAL when Moonlight selects a decoder path that does not advertise CAPABILITYREFERENCEFRAMEINVALIDATIONAVC."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","arch.event_driven"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-41210","reporting_entity":"CVE-2026-41210","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-41210-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-41210-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-41210"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-104140","title":"QGIS is a free, open source, cross-platform geographic information system. Prior to 3.44.12 and 4.0.0 through 4.2.3, QGIS Server renders feature data in WFS3 (OGC API Features) HTML responses without HTML escaping. Attacker-controlled feature.properties values from a published writable vector layer reach resources/server/api/ogc/templates/wfs3/getFeatures.html through QgsServerOgcApiHandler::htmlDump and the if_nullptr_null_str callback. A user who opens an items HTML page can execute stored markup or script in the QGIS Server origin, which can expose the viewer's session data or issue authenticated requests with the viewer's privileges. This issue is fixed in version 3.44.12.","display_title":"Security issue reported in Software component","display_summary":"QGIS is a free, open source, cross-platform geographic information system. Prior to 3.44.12 and 4.0.0 through 4.2.3, QGIS Server renders feature data in WFS3 (OGC API Features) HTML responses without HTML escaping.","display_reference":"CVE-2026-104140","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104140","source_title":"QGIS is a free, open source, cross-platform geographic information system. Prior to 3.44.12 and 4.0.0 through 4.2.3, QGIS Server renders feature data in WFS3 (OGC API Features) HTML responses without HTML escaping. Attacker-controlled feature.properties values from a published writable vector layer reach resources/server/api/ogc/templates/wfs3/getFeatures.html through QgsServerOgcApiHandler::htmlDump and the if_nullptr_null_str callback. A user who opens an items HTML page can execute stored markup or script in the QGIS Server origin, which can expose the viewer's session data or issue authenticated requests with the viewer's privileges. This issue is fixed in version 3.44.12.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T01:59:40.574Z","source_hash":"content-fingerprint:fnv1a-4fa58579","affected_system":{"organization":"QGIS is a free, open source, cross-platform geographic information system. Prior to 3.44.12 and 4.0.0 through 4.2.3, QGIS Server renders feature data in WFS3 (OGC API Features) HTML responses without HTML escaping. Attacker-controlled feature.properties values from a published writable vector layer reach resources/server/api/ogc/templates/wfs3/getFeatures.html through QgsServerOgcApiHandler project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-104140-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"QGIS is a free, open source, cross-platform geographic information system. Prior to 3.44.12 and 4.0.0 through 4.2.3, QGIS Server renders feature data in WFS3 (OGC API Features) HTML responses without HTML escaping. Attacker-controlled feature.properties values from a published writable vector layer reach resources/server/api/ogc/templates/wfs3/getFeatures.html through QgsServerOgcApiHandler::htmlDump and the if_nullptr_null_str callback. A user who opens an items HTML page can execute stored markup or script in the QGIS Server origin, which can expose the viewer's session data or issue authenticated requests with the viewer's privileges. This issue is fixed in version 3.44.12.","source_quote_or_pointer":"Security Advisory CVE-2026-104140","fact_id":"SEA-CVE-2026-104140-F1","document_citation":"Security Advisory CVE-2026-104140"},{"id":"SEA-CVE-2026-104140-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"QGIS is a free, open source, cross-platform geographic information system. Prior to 3.44.12 and 4.0.0 through 4.2.3, QGIS Server renders feature data in WFS3 (OGC API Features) HTML responses without HTML escaping.","source_quote_or_pointer":"Advisory description (CVE-2026-104140)","fact_id":"SEA-CVE-2026-104140-F2","document_citation":"Advisory description (CVE-2026-104140)"}],"source_stated_contributors":["QGIS is a free, open source, cross-platform geographic information system. Prior to 3.44.12 and 4.0.0 through 4.2.3, QGIS Server renders feature data in WFS3 (OGC API Features) HTML responses without HTML escaping."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","arch.content_ingestion_rag"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-104140","reporting_entity":"CVE-2026-104140","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-104140-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-104140-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-104140"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-102596","title":"Nango is an open-source platform for connecting agents and products to third-party APIs. Prior to 0.70.9, on accounts with RBAC enabled through a plan with has_rbac=true, two private flow-read routes, GET /api/v1/integrations/:providerConfigKey/flows and GET /api/v1/flow/:flowName, apply webAuth but omit can({ action: 'read', resource: 'flow', scopedBy: envScope }). A same-team user with the development_full_access role can therefore request env=prod and read production integration flow metadata or named flow configuration despite being denied by guarded production routes. Both controllers use res.locals.environment from the authenticated account, so the issue bypasses the production role boundary but does not cross tenant boundaries. This issue is fixed in version 0.70.9 and managed-1.5.11-0.70.8-aae30d044d7e229807d51a3957c212f3fb689e1a","display_title":"Security issue reported in Software component","display_summary":"Nango is an open-source platform for connecting agents and products to third-party APIs. Prior to 0.70.9, on accounts with RBAC enabled through a plan with hasrbac=true, two private flow-read routes, GET…","display_reference":"CVE-2026-102596","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-102596","source_title":"Nango is an open-source platform for connecting agents and products to third-party APIs. Prior to 0.70.9, on accounts with RBAC enabled through a plan with has_rbac=true, two private flow-read routes, GET /api/v1/integrations/:providerConfigKey/flows and GET /api/v1/flow/:flowName, apply webAuth but omit can({ action: 'read', resource: 'flow', scopedBy: envScope }). A same-team user with the development_full_access role can therefore request env=prod and read production integration flow metadata or named flow configuration despite being denied by guarded production routes. Both controllers use res.locals.environment from the authenticated account, so the issue bypasses the production role boundary but does not cross tenant boundaries. This issue is fixed in version 0.70.9 and managed-1.5.11-0.70.8-aae30d044d7e229807d51a3957c212f3fb689e1a","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T01:59:40.575Z","source_hash":"content-fingerprint:fnv1a-6ac25000","affected_system":{"organization":"Nango is an open-source platform for connecting agents and products to third-party APIs. Prior to 0.70.9, on accounts with RBAC enabled through a plan with hasrbac=true, two private flow-read routes, GET /api/v1/integrations/ project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-102596-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Nango is an open-source platform for connecting agents and products to third-party APIs. Prior to 0.70.9, on accounts with RBAC enabled through a plan with has_rbac=true, two private flow-read routes, GET /api/v1/integrations/:providerConfigKey/flows and GET /api/v1/flow/:flowName, apply webAuth but omit can({ action: 'read', resource: 'flow', scopedBy: envScope }). A same-team user with the development_full_access role can therefore request env=prod and read production integration flow metadata or named flow configuration despite being denied by guarded production routes. Both controllers use res.locals.environment from the authenticated account, so the issue bypasses the production role boundary but does not cross tenant boundaries. This issue is fixed in version 0.70.9 and managed-1.5.11-0.70.8-aae30d044d7e229807d51a3957c212f3fb689e1a","source_quote_or_pointer":"Security Advisory CVE-2026-102596","fact_id":"SEA-CVE-2026-102596-F1","document_citation":"Security Advisory CVE-2026-102596"},{"id":"SEA-CVE-2026-102596-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Nango is an open-source platform for connecting agents and products to third-party APIs. Prior to 0.70.9, on accounts with RBAC enabled through a plan with hasrbac=true, two private flow-read routes, GET /api/v1/integrations/:providerConfigKey/flows and GET /api/v1/flow/:flowName, apply webAuth but omit can({ action:…","source_quote_or_pointer":"Advisory description (CVE-2026-102596)","fact_id":"SEA-CVE-2026-102596-F2","document_citation":"Advisory description (CVE-2026-102596)"}],"source_stated_contributors":["Nango is an open-source platform for connecting agents and products to third-party APIs. Prior to 0.70.9, on accounts with RBAC enabled through a plan with hasrbac=true, two private flow-read routes, GET /api/v1/integrations/:providerConfigKey/flows and GET /api/v1/flow/:flowName, apply webAuth but omit can({ action:…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-003","SEA-FM-010"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-102596","reporting_entity":"CVE-2026-102596","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-102596-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-102596-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-102596"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-102539","title":"Super Productivity is an advanced todo list app with integrated timeboxing and time tracking capabilities. From 17.3.0 until 18.13.1, the SuperSync end-to-end encryption setup calls sync(true) before a user sets an encryption password, causing the operation-upload path to transmit and store all user operations in plaintext. The exposed operations can include private task content and connected issue-provider credentials, including reusable passwords, API tokens, and app passwords. Users who complete E2EE setup have the plaintext operations deleted, while users who leave the password-setting step can leave the data stored indefinitely. The Disable SuperSync action did not remove plaintext that had already been uploaded. Routing and causal metadata remain plaintext by design and are not part of this vulnerability. This issue is fixed in version 18.13.1.","display_title":"Software component issue could expose accounts or credentials","display_summary":"Super Productivity is an advanced todo list app with integrated timeboxing and time tracking capabilities. From 17.3.0 until 18.13.1, the SuperSync end-to-end encryption setup calls sync(true) before a user sets an…","display_reference":"CVE-2026-102539","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-102539","source_title":"Super Productivity is an advanced todo list app with integrated timeboxing and time tracking capabilities. From 17.3.0 until 18.13.1, the SuperSync end-to-end encryption setup calls sync(true) before a user sets an encryption password, causing the operation-upload path to transmit and store all user operations in plaintext. The exposed operations can include private task content and connected issue-provider credentials, including reusable passwords, API tokens, and app passwords. Users who complete E2EE setup have the plaintext operations deleted, while users who leave the password-setting step can leave the data stored indefinitely. The Disable SuperSync action did not remove plaintext that had already been uploaded. Routing and causal metadata remain plaintext by design and are not part of this vulnerability. This issue is fixed in version 18.13.1.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T01:59:40.576Z","source_hash":"content-fingerprint:fnv1a-cd7b5f5b","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-102539-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Super Productivity is an advanced todo list app with integrated timeboxing and time tracking capabilities. From 17.3.0 until 18.13.1, the SuperSync end-to-end encryption setup calls sync(true) before a user sets an encryption password, causing the operation-upload path to transmit and store all user operations in plaintext. The exposed operations can include private task content and connected issue-provider credentials, including reusable passwords, API tokens, and app passwords. Users who complete E2EE setup have the plaintext operations deleted, while users who leave the password-setting step can leave the data stored indefinitely. The Disable SuperSync action did not remove plaintext that had already been uploaded. Routing and causal metadata remain plaintext by design and are not part of this vulnerability. This issue is fixed in version 18.13.1.","source_quote_or_pointer":"Security Advisory CVE-2026-102539","fact_id":"SEA-CVE-2026-102539-F1","document_citation":"Security Advisory CVE-2026-102539"},{"id":"SEA-CVE-2026-102539-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Super Productivity is an advanced todo list app with integrated timeboxing and time tracking capabilities. From 17.3.0 until 18.13.1, the SuperSync end-to-end encryption setup calls sync(true) before a user sets an encryption password, causing the operation-upload path to transmit and store all user operations in…","source_quote_or_pointer":"Advisory description (CVE-2026-102539)","fact_id":"SEA-CVE-2026-102539-F2","document_citation":"Advisory description (CVE-2026-102539)"}],"source_stated_contributors":["Super Productivity is an advanced todo list app with integrated timeboxing and time tracking capabilities. From 17.3.0 until 18.13.1, the SuperSync end-to-end encryption setup calls sync(true) before a user sets an encryption password, causing the operation-upload path to transmit and store all user operations in…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.write_action","data.pii","data.credentials_secrets","data.uploaded_files"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-102539","reporting_entity":"CVE-2026-102539","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-102539-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-102539-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-102539"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-84360","title":"Nginx UI is a web user interface for the Nginx web server. Prior to 2.4.1, the HTTP configuration mutation routes require RequireSecureSession, but /mcp and /mcp_message require only ordinary authentication before exposing nginx_config_add and nginx_config_modify. An OTP-enabled user with a normal JWT but no valid X-Secure-Session-ID can therefore create or modify Nginx configuration and trigger reload behavior through MCP, bypassing the intended step-up control. This issue is fixed in version 2.4.1.","display_title":"Security issue reported in Software component","display_summary":"Nginx UI is a web user interface for the Nginx web server. Prior to 2.4.1, the HTTP configuration mutation routes require RequireSecureSession, but /mcp and /mcpmessage require only ordinary authentication before…","display_reference":"CVE-2026-84360","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84360","source_title":"Nginx UI is a web user interface for the Nginx web server. Prior to 2.4.1, the HTTP configuration mutation routes require RequireSecureSession, but /mcp and /mcp_message require only ordinary authentication before exposing nginx_config_add and nginx_config_modify. An OTP-enabled user with a normal JWT but no valid X-Secure-Session-ID can therefore create or modify Nginx configuration and trigger reload behavior through MCP, bypassing the intended step-up control. This issue is fixed in version 2.4.1.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T01:59:40.576Z","source_hash":"content-fingerprint:fnv1a-2d53c14a","affected_system":{"organization":"Software component project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-84360-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Nginx UI is a web user interface for the Nginx web server. Prior to 2.4.1, the HTTP configuration mutation routes require RequireSecureSession, but /mcp and /mcp_message require only ordinary authentication before exposing nginx_config_add and nginx_config_modify. An OTP-enabled user with a normal JWT but no valid X-Secure-Session-ID can therefore create or modify Nginx configuration and trigger reload behavior through MCP, bypassing the intended step-up control. This issue is fixed in version 2.4.1.","source_quote_or_pointer":"Security Advisory CVE-2026-84360","fact_id":"SEA-CVE-2026-84360-F1","document_citation":"Security Advisory CVE-2026-84360"},{"id":"SEA-CVE-2026-84360-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Nginx UI is a web user interface for the Nginx web server. Prior to 2.4.1, the HTTP configuration mutation routes require RequireSecureSession, but /mcp and /mcpmessage require only ordinary authentication before exposing nginxconfigadd and nginxconfigmodify.","source_quote_or_pointer":"Advisory description (CVE-2026-84360)","fact_id":"SEA-CVE-2026-84360-F2","document_citation":"Advisory description (CVE-2026-84360)"}],"source_stated_contributors":["Nginx UI is a web user interface for the Nginx web server. Prior to 2.4.1, the HTTP configuration mutation routes require RequireSecureSession, but /mcp and /mcpmessage require only ordinary authentication before exposing nginxconfigadd and nginxconfigmodify."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.pii","data.credentials_secrets","arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-010"],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-84360","reporting_entity":"CVE-2026-84360","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-84360-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-84360-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-84360"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-85975","title":"Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 may use cleartext transport for Amazon S3 connections by default. A network-positioned attacker could intercept data or credentials transmitted through an affected connection.","display_title":"Software component issue could expose accounts or credentials","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-85975","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85975","source_title":"Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 may use cleartext transport for Amazon S3 connections by default. A network-positioned attacker could intercept data or credentials transmitted through an affected connection.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-12T19:47:05.116Z","source_hash":"content-fingerprint:fnv1a-73ad04ed","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-85975-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 may use cleartext transport for Amazon S3 connections by default. A network-positioned attacker could intercept data or credentials transmitted through an affected connection.","source_quote_or_pointer":"Security Advisory CVE-2026-85975","fact_id":"SEA-CVE-2026-85975-F1","document_citation":"Security Advisory CVE-2026-85975"},{"id":"SEA-CVE-2026-85975-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 may use cleartext transport for Amazon S3 connections by default. A network-positioned attacker could intercept data or credentials transmitted through an affected connection.","source_quote_or_pointer":"Advisory description (CVE-2026-85975)","fact_id":"SEA-CVE-2026-85975-F2","document_citation":"Advisory description (CVE-2026-85975)"}],"source_stated_contributors":["Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 may use cleartext transport for Amazon S3 connections by default. A network-positioned attacker could intercept data or credentials transmitted through an affected connection."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.infrastructure_modification","data.credentials_secrets","arch.external_api"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-85975","reporting_entity":"CVE-2026-85975","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-85975-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-85975-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-85975"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-85970","title":"Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 enable XML external entity processing by default in multiple server paths, which could allow crafted XML to cause server-side requests or disclosure of local files.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-85970","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85970","source_title":"Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 enable XML external entity processing by default in multiple server paths, which could allow crafted XML to cause server-side requests or disclosure of local files.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-12T19:47:05.118Z","source_hash":"content-fingerprint:fnv1a-80fad3e2","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-85970-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 enable XML external entity processing by default in multiple server paths, which could allow crafted XML to cause server-side requests or disclosure of local files.","source_quote_or_pointer":"Security Advisory CVE-2026-85970","fact_id":"SEA-CVE-2026-85970-F1","document_citation":"Security Advisory CVE-2026-85970"},{"id":"SEA-CVE-2026-85970-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 enable XML external entity processing by default in multiple server paths, which could allow crafted XML to cause server-side requests or disclosure of local files.","source_quote_or_pointer":"Advisory description (CVE-2026-85970)","fact_id":"SEA-CVE-2026-85970-F2","document_citation":"Advisory description (CVE-2026-85970)"}],"source_stated_contributors":["Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 enable XML external entity processing by default in multiple server paths, which could allow crafted XML to cause server-side requests or disclosure of local files."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-85970","reporting_entity":"CVE-2026-85970","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-85970-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-85970-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-85970"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-85967","title":"Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain a cross-site scripting vulnerability that could allow a remote attacker to execute script in the context of an authenticated user's browser session, which could result in unauthorized actions or disclosure of information accessible to that user.","display_title":"Software component issue could run attacker-controlled scripts in a browser","display_summary":"Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain a cross-site scripting vulnerability that could allow a remote attacker to execute script in the context of an authenticated…","display_reference":"CVE-2026-85967","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85967","source_title":"Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain a cross-site scripting vulnerability that could allow a remote attacker to execute script in the context of an authenticated user's browser session, which could result in unauthorized actions or disclosure of information accessible to that user.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-12T19:47:05.121Z","source_hash":"content-fingerprint:fnv1a-e68f038c","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-85967-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain a cross-site scripting vulnerability that could allow a remote attacker to execute script in the context of an authenticated user's browser session, which could result in unauthorized actions or disclosure of information accessible to that user.","source_quote_or_pointer":"Security Advisory CVE-2026-85967","fact_id":"SEA-CVE-2026-85967-F1","document_citation":"Security Advisory CVE-2026-85967"},{"id":"SEA-CVE-2026-85967-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain a cross-site scripting vulnerability that could allow a remote attacker to execute script in the context of an authenticated user's browser session, which could result in unauthorized actions or disclosure of information…","source_quote_or_pointer":"Advisory description (CVE-2026-85967)","fact_id":"SEA-CVE-2026-85967-F2","document_citation":"Advisory description (CVE-2026-85967)"}],"source_stated_contributors":["Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain a cross-site scripting vulnerability that could allow a remote attacker to execute script in the context of an authenticated user's browser session, which could result in unauthorized actions or disclosure of information…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-85967","reporting_entity":"CVE-2026-85967","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-85967-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-85967-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-85967"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-85964","title":"Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 allow an authenticated Query Console user to supply unsafe path values to a privileged filesystem helper, which could result in disclosure of arbitrary server files.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-85964","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85964","source_title":"Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 allow an authenticated Query Console user to supply unsafe path values to a privileged filesystem helper, which could result in disclosure of arbitrary server files.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-12T19:47:05.122Z","source_hash":"content-fingerprint:fnv1a-ae416a3","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-85964-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 allow an authenticated Query Console user to supply unsafe path values to a privileged filesystem helper, which could result in disclosure of arbitrary server files.","source_quote_or_pointer":"Security Advisory CVE-2026-85964","fact_id":"SEA-CVE-2026-85964-F1","document_citation":"Security Advisory CVE-2026-85964"},{"id":"SEA-CVE-2026-85964-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 allow an authenticated Query Console user to supply unsafe path values to a privileged filesystem helper, which could result in disclosure of arbitrary server files.","source_quote_or_pointer":"Advisory description (CVE-2026-85964)","fact_id":"SEA-CVE-2026-85964-F2","document_citation":"Advisory description (CVE-2026-85964)"}],"source_stated_contributors":["Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 allow an authenticated Query Console user to supply unsafe path values to a privileged filesystem helper, which could result in disclosure of arbitrary server files."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-85964","reporting_entity":"CVE-2026-85964","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-85964-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-85964-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-85964"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-85962","title":"Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an improper authentication vulnerability in SAML processing. In deployments that use SAML authentication, an unauthenticated remote attacker could cause the affected server to accept an assertion that should be rejected, potentially resulting in unauthorized access.","display_title":"Software component issue could allow unauthorized access","display_summary":"Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an improper authentication vulnerability in SAML processing.","display_reference":"CVE-2026-85962","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85962","source_title":"Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an improper authentication vulnerability in SAML processing. In deployments that use SAML authentication, an unauthenticated remote attacker could cause the affected server to accept an assertion that should be rejected, potentially resulting in unauthorized access.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-12T19:47:05.123Z","source_hash":"content-fingerprint:fnv1a-72f9d23f","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-85962-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an improper authentication vulnerability in SAML processing. In deployments that use SAML authentication, an unauthenticated remote attacker could cause the affected server to accept an assertion that should be rejected, potentially resulting in unauthorized access.","source_quote_or_pointer":"Security Advisory CVE-2026-85962","fact_id":"SEA-CVE-2026-85962-F1","document_citation":"Security Advisory CVE-2026-85962"},{"id":"SEA-CVE-2026-85962-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an improper authentication vulnerability in SAML processing. In deployments that use SAML authentication, an unauthenticated remote attacker could cause the affected server to accept an assertion that should be rejected,…","source_quote_or_pointer":"Advisory description (CVE-2026-85962)","fact_id":"SEA-CVE-2026-85962-F2","document_citation":"Advisory description (CVE-2026-85962)"}],"source_stated_contributors":["Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an improper authentication vulnerability in SAML processing. In deployments that use SAML authentication, an unauthenticated remote attacker could cause the affected server to accept an assertion that should be rejected,…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-85962","reporting_entity":"CVE-2026-85962","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-85962-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-85962-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-85962"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-85961","title":"On Azure deployments, Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 may record security-sensitive authentication information in diagnostic logs under certain configurations. An attacker with access to the affected logs could use this information to obtain unauthorized access to protected cloud resources.","display_title":"Software component issue could allow unauthorized access","display_summary":"On Azure deployments, Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 may record security-sensitive authentication information in diagnostic logs under certain configurations.","display_reference":"CVE-2026-85961","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85961","source_title":"On Azure deployments, Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 may record security-sensitive authentication information in diagnostic logs under certain configurations. An attacker with access to the affected logs could use this information to obtain unauthorized access to protected cloud resources.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-12T19:47:05.123Z","source_hash":"content-fingerprint:fnv1a-4124fd42","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Cloud & container infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-85961-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"On Azure deployments, Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 may record security-sensitive authentication information in diagnostic logs under certain configurations. An attacker with access to the affected logs could use this information to obtain unauthorized access to protected cloud resources.","source_quote_or_pointer":"Security Advisory CVE-2026-85961","fact_id":"SEA-CVE-2026-85961-F1","document_citation":"Security Advisory CVE-2026-85961"},{"id":"SEA-CVE-2026-85961-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"On Azure deployments, Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 may record security-sensitive authentication information in diagnostic logs under certain configurations.","source_quote_or_pointer":"Advisory description (CVE-2026-85961)","fact_id":"SEA-CVE-2026-85961-F2","document_citation":"Advisory description (CVE-2026-85961)"}],"source_stated_contributors":["On Azure deployments, Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 may record security-sensitive authentication information in diagnostic logs under certain configurations."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.infrastructure_modification"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-85961","reporting_entity":"CVE-2026-85961","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-85961-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-85961-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-85961"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-85959","title":"Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not consistently record successful authentication events in audit logs, which could limit customers' ability to detect and investigate unauthorized access or credential misuse.","display_title":"Software component issue could allow unauthorized access","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-85959","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85959","source_title":"Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not consistently record successful authentication events in audit logs, which could limit customers' ability to detect and investigate unauthorized access or credential misuse.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-12T19:47:05.124Z","source_hash":"content-fingerprint:fnv1a-f61820b7","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-85959-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not consistently record successful authentication events in audit logs, which could limit customers' ability to detect and investigate unauthorized access or credential misuse.","source_quote_or_pointer":"Security Advisory CVE-2026-85959","fact_id":"SEA-CVE-2026-85959-F1","document_citation":"Security Advisory CVE-2026-85959"},{"id":"SEA-CVE-2026-85959-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not consistently record successful authentication events in audit logs, which could limit customers' ability to detect and investigate unauthorized access or credential misuse.","source_quote_or_pointer":"Advisory description (CVE-2026-85959)","fact_id":"SEA-CVE-2026-85959-F2","document_citation":"Advisory description (CVE-2026-85959)"}],"source_stated_contributors":["Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not consistently record successful authentication events in audit logs, which could limit customers' ability to detect and investigate unauthorized access or credential misuse."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","arch.event_driven"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-85959","reporting_entity":"CVE-2026-85959","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-85959-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-85959-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-85959"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-85958","title":"Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an authentication validation weakness that could allow an attacker to use a token that should not be accepted by the affected server, which could result in unauthorized access.","display_title":"Software component issue could allow unauthorized access","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-85958","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85958","source_title":"Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an authentication validation weakness that could allow an attacker to use a token that should not be accepted by the affected server, which could result in unauthorized access.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-12T19:47:05.125Z","source_hash":"content-fingerprint:fnv1a-5be9081c","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-85958-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an authentication validation weakness that could allow an attacker to use a token that should not be accepted by the affected server, which could result in unauthorized access.","source_quote_or_pointer":"Security Advisory CVE-2026-85958","fact_id":"SEA-CVE-2026-85958-F1","document_citation":"Security Advisory CVE-2026-85958"},{"id":"SEA-CVE-2026-85958-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an authentication validation weakness that could allow an attacker to use a token that should not be accepted by the affected server, which could result in unauthorized access.","source_quote_or_pointer":"Advisory description (CVE-2026-85958)","fact_id":"SEA-CVE-2026-85958-F2","document_citation":"Advisory description (CVE-2026-85958)"}],"source_stated_contributors":["Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an authentication validation weakness that could allow an attacker to use a token that should not be accepted by the affected server, which could result in unauthorized access."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-85958","reporting_entity":"CVE-2026-85958","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-85958-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-85958-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-85958"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-75888","title":"A flaw was found in the OpenShift console. An authenticated console user can exploit a Server-Side Request Forgery (SSRF) vulnerability by providing a specially crafted Helm chart URL without proper validation. This allows the user to make the console pod fetch arbitrary URLs, potentially leading to the disclosure of sensitive information through error messages or enabling blind port scanning within the cluster.","display_title":"Software component issue could reach internal services","display_summary":"A flaw was found in the OpenShift console. An authenticated console user can exploit a Server-Side Request Forgery (SSRF) vulnerability by providing a specially crafted Helm chart URL without proper validation.","display_reference":"CVE-2026-75888","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-75888","source_title":"A flaw was found in the OpenShift console. An authenticated console user can exploit a Server-Side Request Forgery (SSRF) vulnerability by providing a specially crafted Helm chart URL without proper validation. This allows the user to make the console pod fetch arbitrary URLs, potentially leading to the disclosure of sensitive information through error messages or enabling blind port scanning within the cluster.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-12T19:47:05.125Z","source_hash":"content-fingerprint:fnv1a-e06eafbb","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Cloud & container infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-75888-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A flaw was found in the OpenShift console. An authenticated console user can exploit a Server-Side Request Forgery (SSRF) vulnerability by providing a specially crafted Helm chart URL without proper validation. This allows the user to make the console pod fetch arbitrary URLs, potentially leading to the disclosure of sensitive information through error messages or enabling blind port scanning within the cluster.","source_quote_or_pointer":"Security Advisory CVE-2026-75888","fact_id":"SEA-CVE-2026-75888-F1","document_citation":"Security Advisory CVE-2026-75888"},{"id":"SEA-CVE-2026-75888-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A flaw was found in the OpenShift console. An authenticated console user can exploit a Server-Side Request Forgery (SSRF) vulnerability by providing a specially crafted Helm chart URL without proper validation.","source_quote_or_pointer":"Advisory description (CVE-2026-75888)","fact_id":"SEA-CVE-2026-75888-F2","document_citation":"Advisory description (CVE-2026-75888)"}],"source_stated_contributors":["A flaw was found in the OpenShift console. An authenticated console user can exploit a Server-Side Request Forgery (SSRF) vulnerability by providing a specially crafted Helm chart URL without proper validation."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Internal network access","Cloud metadata or credential exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-75888","reporting_entity":"CVE-2026-75888","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-75888-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-75888-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"The service fetched a URL chosen by the caller and could be steered at internal systems. Restrict outbound destinations and block internal address ranges.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-75888"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109373","title":"ZITADEL 3.0.0 before 4.19.2 contains an authentication bypass vulnerability in the Login V2 UI that allows unauthenticated attackers to obtain other users' session tokens by forging unsigned session cookies. Attackers can guess time-ordered session IDs around a victim's sign-in and supply them with empty tokens to receive rotated tokens, taking over accounts including MFA-completed administrator sessions.","display_title":"Software component issue could allow unauthorized access","display_summary":"ZITADEL 3.0.0 before 4.19.2 contains an authentication bypass vulnerability in the Login V2 UI that allows unauthenticated attackers to obtain other users' session tokens by forging unsigned session cookies.","display_reference":"CVE-2026-109373","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109373","source_title":"ZITADEL 3.0.0 before 4.19.2 contains an authentication bypass vulnerability in the Login V2 UI that allows unauthenticated attackers to obtain other users' session tokens by forging unsigned session cookies. Attackers can guess time-ordered session IDs around a victim's sign-in and supply them with empty tokens to receive rotated tokens, taking over accounts including MFA-completed administrator sessions.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-12T19:47:05.126Z","source_hash":"content-fingerprint:fnv1a-607e7a16","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109373-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"ZITADEL 3.0.0 before 4.19.2 contains an authentication bypass vulnerability in the Login V2 UI that allows unauthenticated attackers to obtain other users' session tokens by forging unsigned session cookies. Attackers can guess time-ordered session IDs around a victim's sign-in and supply them with empty tokens to receive rotated tokens, taking over accounts including MFA-completed administrator sessions.","source_quote_or_pointer":"Security Advisory CVE-2026-109373","fact_id":"SEA-CVE-2026-109373-F1","document_citation":"Security Advisory CVE-2026-109373"},{"id":"SEA-CVE-2026-109373-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"ZITADEL 3.0.0 before 4.19.2 contains an authentication bypass vulnerability in the Login V2 UI that allows unauthenticated attackers to obtain other users' session tokens by forging unsigned session cookies.","source_quote_or_pointer":"Advisory description (CVE-2026-109373)","fact_id":"SEA-CVE-2026-109373-F2","document_citation":"Advisory description (CVE-2026-109373)"}],"source_stated_contributors":["ZITADEL 3.0.0 before 4.19.2 contains an authentication bypass vulnerability in the Login V2 UI that allows unauthenticated attackers to obtain other users' session tokens by forging unsigned session cookies."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii","data.credentials_secrets","arch.caching"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109373","reporting_entity":"CVE-2026-109373","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109373-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109373-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-109373"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109354","title":"LibreNMS before 26.9.0 contains a path traversal vulnerability in nfsen_channel_common.inc.php that allows authenticated users to read unauthorized RRD data by injecting ../ sequences into the channel parameter. Attackers with access to one NFSen-enabled device can request graph.php with a traversed channel value to view traffic and NetFlow graphs of devices outside their authorized scope.","display_title":"Software component issue could expose restricted files","display_summary":"LibreNMS before 26.9.0 contains a path traversal vulnerability in nfsenchannelcommon.inc.php that allows authenticated users to read unauthorized RRD data by injecting ../ sequences into the channel parameter.","display_reference":"CVE-2026-109354","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109354","source_title":"LibreNMS before 26.9.0 contains a path traversal vulnerability in nfsen_channel_common.inc.php that allows authenticated users to read unauthorized RRD data by injecting ../ sequences into the channel parameter. Attackers with access to one NFSen-enabled device can request graph.php with a traversed channel value to view traffic and NetFlow graphs of devices outside their authorized scope.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-12T19:47:05.127Z","source_hash":"content-fingerprint:fnv1a-4cfbbf27","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109354-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"LibreNMS before 26.9.0 contains a path traversal vulnerability in nfsen_channel_common.inc.php that allows authenticated users to read unauthorized RRD data by injecting ../ sequences into the channel parameter. Attackers with access to one NFSen-enabled device can request graph.php with a traversed channel value to view traffic and NetFlow graphs of devices outside their authorized scope.","source_quote_or_pointer":"Security Advisory CVE-2026-109354","fact_id":"SEA-CVE-2026-109354-F1","document_citation":"Security Advisory CVE-2026-109354"},{"id":"SEA-CVE-2026-109354-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"LibreNMS before 26.9.0 contains a path traversal vulnerability in nfsenchannelcommon.inc.php that allows authenticated users to read unauthorized RRD data by injecting ../ sequences into the channel parameter.","source_quote_or_pointer":"Advisory description (CVE-2026-109354)","fact_id":"SEA-CVE-2026-109354-F2","document_citation":"Advisory description (CVE-2026-109354)"}],"source_stated_contributors":["LibreNMS before 26.9.0 contains a path traversal vulnerability in nfsenchannelcommon.inc.php that allows authenticated users to read unauthorized RRD data by injecting ../ sequences into the channel parameter."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Restricted file exposure","File overwrite"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109354","reporting_entity":"CVE-2026-109354","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109354-SG1","label":"Confine file access to a fixed root","description":"Resolve paths to canonical form and reject anything outside the intended directory before opening files.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109354-SG1","label":"Confine file access to a fixed root","description":"Resolve paths to canonical form and reject anything outside the intended directory before opening files.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"File paths supplied by a caller escaped the intended directory. Canonicalise paths and confine file access to a fixed root.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-109354"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109353","title":"LibreNMS before 26.9.0 contains an SQL injection vulnerability that allows unprivileged users to inject SQL by supplying an array-valued notification_id parameter to notifications.inc.php. Attackers can perform cross-table reads of users.password hashes, with results persisted in notifications_attribs and readable through the interface.","display_title":"Software component issue could expose or alter stored data","display_summary":"LibreNMS before 26.9.0 contains an SQL injection vulnerability that allows unprivileged users to inject SQL by supplying an array-valued notificationid parameter to notifications.inc.php.","display_reference":"CVE-2026-109353","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109353","source_title":"LibreNMS before 26.9.0 contains an SQL injection vulnerability that allows unprivileged users to inject SQL by supplying an array-valued notification_id parameter to notifications.inc.php. Attackers can perform cross-table reads of users.password hashes, with results persisted in notifications_attribs and readable through the interface.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-12T19:47:05.127Z","source_hash":"content-fingerprint:fnv1a-32108fd6","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109353-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"LibreNMS before 26.9.0 contains an SQL injection vulnerability that allows unprivileged users to inject SQL by supplying an array-valued notification_id parameter to notifications.inc.php. Attackers can perform cross-table reads of users.password hashes, with results persisted in notifications_attribs and readable through the interface.","source_quote_or_pointer":"Security Advisory CVE-2026-109353","fact_id":"SEA-CVE-2026-109353-F1","document_citation":"Security Advisory CVE-2026-109353"},{"id":"SEA-CVE-2026-109353-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"LibreNMS before 26.9.0 contains an SQL injection vulnerability that allows unprivileged users to inject SQL by supplying an array-valued notificationid parameter to notifications.inc.php.","source_quote_or_pointer":"Advisory description (CVE-2026-109353)","fact_id":"SEA-CVE-2026-109353-F2","document_citation":"Advisory description (CVE-2026-109353)"}],"source_stated_contributors":["LibreNMS before 26.9.0 contains an SQL injection vulnerability that allows unprivileged users to inject SQL by supplying an array-valued notificationid parameter to notifications.inc.php."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109353","reporting_entity":"CVE-2026-109353","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109353-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109353-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-109353"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109350","title":"Gitoxide gix-pack before 0.75.0 contains a denial of service vulnerability that allows malicious remotes to crash fetch operations by sending crafted thin-pack OFS_DELTA entries. Attackers can serve a thin pack with a REF_DELTA referencing an existing object followed by an OFS_DELTA whose base_distance exceeds pack_offset, triggering a panic in LookupRefDeltaObjectsIter that aborts the fetch process.","display_title":"Software component issue could make the service unavailable","display_summary":"Gitoxide gix-pack before 0.75.0 contains a denial of service vulnerability that allows malicious remotes to crash fetch operations by sending crafted thin-pack OFSDELTA entries.","display_reference":"CVE-2026-109350","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109350","source_title":"Gitoxide gix-pack before 0.75.0 contains a denial of service vulnerability that allows malicious remotes to crash fetch operations by sending crafted thin-pack OFS_DELTA entries. Attackers can serve a thin pack with a REF_DELTA referencing an existing object followed by an OFS_DELTA whose base_distance exceeds pack_offset, triggering a panic in LookupRefDeltaObjectsIter that aborts the fetch process.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-12T19:47:05.129Z","source_hash":"content-fingerprint:fnv1a-44c32b7b","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109350-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Gitoxide gix-pack before 0.75.0 contains a denial of service vulnerability that allows malicious remotes to crash fetch operations by sending crafted thin-pack OFS_DELTA entries. Attackers can serve a thin pack with a REF_DELTA referencing an existing object followed by an OFS_DELTA whose base_distance exceeds pack_offset, triggering a panic in LookupRefDeltaObjectsIter that aborts the fetch process.","source_quote_or_pointer":"Security Advisory CVE-2026-109350","fact_id":"SEA-CVE-2026-109350-F1","document_citation":"Security Advisory CVE-2026-109350"},{"id":"SEA-CVE-2026-109350-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Gitoxide gix-pack before 0.75.0 contains a denial of service vulnerability that allows malicious remotes to crash fetch operations by sending crafted thin-pack OFSDELTA entries.","source_quote_or_pointer":"Advisory description (CVE-2026-109350)","fact_id":"SEA-CVE-2026-109350-F2","document_citation":"Advisory description (CVE-2026-109350)"}],"source_stated_contributors":["Gitoxide gix-pack before 0.75.0 contains a denial of service vulnerability that allows malicious remotes to crash fetch operations by sending crafted thin-pack OFSDELTA entries."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109350","reporting_entity":"CVE-2026-109350","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109350-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109350-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-109350"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109348","title":"Gitoxide gix-mailmap before 0.35.0 contains a denial of service vulnerability that allows attackers to exhaust CPU through quadratic-time parsing in Snapshot::from_bytes. Attackers can commit a crafted .mailmap with descending-ordered entries forcing repeated front inserts, blocking workers running log, blame, or shortlog for minutes.","display_title":"Software component issue could make the service unavailable","display_summary":"Gitoxide gix-mailmap before 0.35.0 contains a denial of service vulnerability that allows attackers to exhaust CPU through quadratic-time parsing in Snapshot::frombytes.","display_reference":"CVE-2026-109348","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109348","source_title":"Gitoxide gix-mailmap before 0.35.0 contains a denial of service vulnerability that allows attackers to exhaust CPU through quadratic-time parsing in Snapshot::from_bytes. Attackers can commit a crafted .mailmap with descending-ordered entries forcing repeated front inserts, blocking workers running log, blame, or shortlog for minutes.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-12T19:47:05.130Z","source_hash":"content-fingerprint:fnv1a-bb5cf7f4","affected_system":{"organization":"Gitoxide gix-mailmap before 0.35.0 contains a denial of service vulnerability that allows attackers to exhaust CPU through quadratic-time parsing in Snapshot project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109348-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Gitoxide gix-mailmap before 0.35.0 contains a denial of service vulnerability that allows attackers to exhaust CPU through quadratic-time parsing in Snapshot::from_bytes. Attackers can commit a crafted .mailmap with descending-ordered entries forcing repeated front inserts, blocking workers running log, blame, or shortlog for minutes.","source_quote_or_pointer":"Security Advisory CVE-2026-109348","fact_id":"SEA-CVE-2026-109348-F1","document_citation":"Security Advisory CVE-2026-109348"},{"id":"SEA-CVE-2026-109348-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Gitoxide gix-mailmap before 0.35.0 contains a denial of service vulnerability that allows attackers to exhaust CPU through quadratic-time parsing in Snapshot::frombytes.","source_quote_or_pointer":"Advisory description (CVE-2026-109348)","fact_id":"SEA-CVE-2026-109348-F2","document_citation":"Advisory description (CVE-2026-109348)"}],"source_stated_contributors":["Gitoxide gix-mailmap before 0.35.0 contains a denial of service vulnerability that allows attackers to exhaust CPU through quadratic-time parsing in Snapshot::frombytes."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["arch.async_job"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109348","reporting_entity":"CVE-2026-109348","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109348-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109348-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-109348"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109346","title":"better-auth from 1.3.8-beta.3 before 1.7.0-rc.3 contains a UI misrepresentation vulnerability in the deviceAuthorization plugin because GET /device omits the requesting client_id and scope. Attackers can start a device request via /device/code, trick signed-in users into approving the code, then redeem it at /device/token for a live session token.","display_title":"Software component issue could expose accounts or credentials","display_summary":"better-auth from 1.3.8-beta.3 before 1.7.0-rc.3 contains a UI misrepresentation vulnerability in the deviceAuthorization plugin because GET /device omits the requesting clientid and scope.","display_reference":"CVE-2026-109346","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109346","source_title":"better-auth from 1.3.8-beta.3 before 1.7.0-rc.3 contains a UI misrepresentation vulnerability in the deviceAuthorization plugin because GET /device omits the requesting client_id and scope. Attackers can start a device request via /device/code, trick signed-in users into approving the code, then redeem it at /device/token for a live session token.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-12T19:47:05.131Z","source_hash":"content-fingerprint:fnv1a-fd159904","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109346-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"better-auth from 1.3.8-beta.3 before 1.7.0-rc.3 contains a UI misrepresentation vulnerability in the deviceAuthorization plugin because GET /device omits the requesting client_id and scope. Attackers can start a device request via /device/code, trick signed-in users into approving the code, then redeem it at /device/token for a live session token.","source_quote_or_pointer":"Security Advisory CVE-2026-109346","fact_id":"SEA-CVE-2026-109346-F1","document_citation":"Security Advisory CVE-2026-109346"},{"id":"SEA-CVE-2026-109346-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"better-auth from 1.3.8-beta.3 before 1.7.0-rc.3 contains a UI misrepresentation vulnerability in the deviceAuthorization plugin because GET /device omits the requesting clientid and scope.","source_quote_or_pointer":"Advisory description (CVE-2026-109346)","fact_id":"SEA-CVE-2026-109346-F2","document_citation":"Advisory description (CVE-2026-109346)"}],"source_stated_contributors":["better-auth from 1.3.8-beta.3 before 1.7.0-rc.3 contains a UI misrepresentation vulnerability in the deviceAuthorization plugin because GET /device omits the requesting clientid and scope."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109346","reporting_entity":"CVE-2026-109346","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109346-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109346-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-109346"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109338","title":"SurrealDB before 3.3.0 contains a denial of service vulnerability that allows query-capable users to crash the server by reading non-ASCII header values in embedded JavaScript. Attackers with scripting enabled can read such values via Headers get(), entries(), values(), or getSetCookie(), or return them from fetch() endpoints, aborting the server process.","display_title":"Software component issue could make the service unavailable","display_summary":"SurrealDB before 3.3.0 contains a denial of service vulnerability that allows query-capable users to crash the server by reading non-ASCII header values in embedded JavaScript.","display_reference":"CVE-2026-109338","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109338","source_title":"SurrealDB before 3.3.0 contains a denial of service vulnerability that allows query-capable users to crash the server by reading non-ASCII header values in embedded JavaScript. Attackers with scripting enabled can read such values via Headers get(), entries(), values(), or getSetCookie(), or return them from fetch() endpoints, aborting the server process.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-12T19:47:05.132Z","source_hash":"content-fingerprint:fnv1a-58e09f2d","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109338-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"SurrealDB before 3.3.0 contains a denial of service vulnerability that allows query-capable users to crash the server by reading non-ASCII header values in embedded JavaScript. Attackers with scripting enabled can read such values via Headers get(), entries(), values(), or getSetCookie(), or return them from fetch() endpoints, aborting the server process.","source_quote_or_pointer":"Security Advisory CVE-2026-109338","fact_id":"SEA-CVE-2026-109338-F1","document_citation":"Security Advisory CVE-2026-109338"},{"id":"SEA-CVE-2026-109338-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"SurrealDB before 3.3.0 contains a denial of service vulnerability that allows query-capable users to crash the server by reading non-ASCII header values in embedded JavaScript.","source_quote_or_pointer":"Advisory description (CVE-2026-109338)","fact_id":"SEA-CVE-2026-109338-F2","document_citation":"Advisory description (CVE-2026-109338)"}],"source_stated_contributors":["SurrealDB before 3.3.0 contains a denial of service vulnerability that allows query-capable users to crash the server by reading non-ASCII header values in embedded JavaScript."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109338","reporting_entity":"CVE-2026-109338","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109338-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109338-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-109338"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109334","title":"SurrealDB before 3.3.0 does not check the caller-selected namespace or database against the level at which a namespace- or database-level system user authenticated, allowing cross-tenant access. An authenticated attacker can set the Surreal-NS/Surreal-DB headers on /sql or call the RPC use method to read, create, modify, and delete rows and read DEFINE PARAM values in another tenant where table PERMISSIONS allow it.","display_title":"Security issue reported in Software component","display_summary":"SurrealDB before 3.3.0 does not check the caller-selected namespace or database against the level at which a namespace- or database-level system user authenticated, allowing cross-tenant access.","display_reference":"CVE-2026-109334","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109334","source_title":"SurrealDB before 3.3.0 does not check the caller-selected namespace or database against the level at which a namespace- or database-level system user authenticated, allowing cross-tenant access. An authenticated attacker can set the Surreal-NS/Surreal-DB headers on /sql or call the RPC use method to read, create, modify, and delete rows and read DEFINE PARAM values in another tenant where table PERMISSIONS allow it.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-12T19:47:05.132Z","source_hash":"content-fingerprint:fnv1a-584ae2e5","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109334-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"SurrealDB before 3.3.0 does not check the caller-selected namespace or database against the level at which a namespace- or database-level system user authenticated, allowing cross-tenant access. An authenticated attacker can set the Surreal-NS/Surreal-DB headers on /sql or call the RPC use method to read, create, modify, and delete rows and read DEFINE PARAM values in another tenant where table PERMISSIONS allow it.","source_quote_or_pointer":"Security Advisory CVE-2026-109334","fact_id":"SEA-CVE-2026-109334-F1","document_citation":"Security Advisory CVE-2026-109334"},{"id":"SEA-CVE-2026-109334-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"SurrealDB before 3.3.0 does not check the caller-selected namespace or database against the level at which a namespace- or database-level system user authenticated, allowing cross-tenant access.","source_quote_or_pointer":"Advisory description (CVE-2026-109334)","fact_id":"SEA-CVE-2026-109334-F2","document_citation":"Advisory description (CVE-2026-109334)"}],"source_stated_contributors":["SurrealDB before 3.3.0 does not check the caller-selected namespace or database against the level at which a namespace- or database-level system user authenticated, allowing cross-tenant access."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.write_action","data.pii"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109334","reporting_entity":"CVE-2026-109334","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109334-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109334-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-109334"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109331","title":"Network-AI from 5.14.0 before 5.15.2 contains a security control bypass vulnerability in the ClaudeHookBridge PreToolUse hook, which matches deny patterns only against the first present candidate field. A prompt-injected agent can place dangerous payloads in fields like Write content or an MCP script parameter beside a benign file_path or command, evading denyPatterns to write web shells or execute scripts.","display_title":"Security issue reported in Software component","display_summary":"Network-AI from 5.14.0 before 5.15.2 contains a security control bypass vulnerability in the ClaudeHookBridge PreToolUse hook, which matches deny patterns only against the first present candidate field.","display_reference":"CVE-2026-109331","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109331","source_title":"Network-AI from 5.14.0 before 5.15.2 contains a security control bypass vulnerability in the ClaudeHookBridge PreToolUse hook, which matches deny patterns only against the first present candidate field. A prompt-injected agent can place dangerous payloads in fields like Write content or an MCP script parameter beside a benign file_path or command, evading denyPatterns to write web shells or execute scripts.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-12T19:47:05.133Z","source_hash":"content-fingerprint:fnv1a-d72f9040","affected_system":{"organization":"Software component project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109331-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Network-AI from 5.14.0 before 5.15.2 contains a security control bypass vulnerability in the ClaudeHookBridge PreToolUse hook, which matches deny patterns only against the first present candidate field. A prompt-injected agent can place dangerous payloads in fields like Write content or an MCP script parameter beside a benign file_path or command, evading denyPatterns to write web shells or execute scripts.","source_quote_or_pointer":"Security Advisory CVE-2026-109331","fact_id":"SEA-CVE-2026-109331-F1","document_citation":"Security Advisory CVE-2026-109331"},{"id":"SEA-CVE-2026-109331-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Network-AI from 5.14.0 before 5.15.2 contains a security control bypass vulnerability in the ClaudeHookBridge PreToolUse hook, which matches deny patterns only against the first present candidate field.","source_quote_or_pointer":"Advisory description (CVE-2026-109331)","fact_id":"SEA-CVE-2026-109331-F2","document_citation":"Advisory description (CVE-2026-109331)"}],"source_stated_contributors":["Network-AI from 5.14.0 before 5.15.2 contains a security control bypass vulnerability in the ClaudeHookBridge PreToolUse hook, which matches deny patterns only against the first present candidate field."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-010"],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109331","reporting_entity":"CVE-2026-109331","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109331-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109331-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-109331"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109330","title":"Network-AI 5.0.0 before 5.15.2 contains a cross-site WebSocket hijacking vulnerability in DashboardServer that allows remote attackers to read live agent topology because handleUpgrade performs no Origin or token validation. Attackers can lure a victim running the dashboard to a malicious page that opens a WebSocket to the loopback dashboard and exfiltrates agent IDs, roles, task descriptions, and token budgets.","display_title":"Security issue reported in Software component","display_summary":"Network-AI 5.0.0 before 5.15.2 contains a cross-site WebSocket hijacking vulnerability in DashboardServer that allows remote attackers to read live agent topology because handleUpgrade performs no Origin or token…","display_reference":"CVE-2026-109330","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109330","source_title":"Network-AI 5.0.0 before 5.15.2 contains a cross-site WebSocket hijacking vulnerability in DashboardServer that allows remote attackers to read live agent topology because handleUpgrade performs no Origin or token validation. Attackers can lure a victim running the dashboard to a malicious page that opens a WebSocket to the loopback dashboard and exfiltrates agent IDs, roles, task descriptions, and token budgets.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-12T19:47:05.134Z","source_hash":"content-fingerprint:fnv1a-5e5b3fe5","affected_system":{"organization":"Software component project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109330-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Network-AI 5.0.0 before 5.15.2 contains a cross-site WebSocket hijacking vulnerability in DashboardServer that allows remote attackers to read live agent topology because handleUpgrade performs no Origin or token validation. Attackers can lure a victim running the dashboard to a malicious page that opens a WebSocket to the loopback dashboard and exfiltrates agent IDs, roles, task descriptions, and token budgets.","source_quote_or_pointer":"Security Advisory CVE-2026-109330","fact_id":"SEA-CVE-2026-109330-F1","document_citation":"Security Advisory CVE-2026-109330"},{"id":"SEA-CVE-2026-109330-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Network-AI 5.0.0 before 5.15.2 contains a cross-site WebSocket hijacking vulnerability in DashboardServer that allows remote attackers to read live agent topology because handleUpgrade performs no Origin or token validation.","source_quote_or_pointer":"Advisory description (CVE-2026-109330)","fact_id":"SEA-CVE-2026-109330-F2","document_citation":"Advisory description (CVE-2026-109330)"}],"source_stated_contributors":["Network-AI 5.0.0 before 5.15.2 contains a cross-site WebSocket hijacking vulnerability in DashboardServer that allows remote attackers to read live agent topology because handleUpgrade performs no Origin or token validation."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["arch.event_driven","arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-010"],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109330","reporting_entity":"CVE-2026-109330","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109330-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109330-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-109330"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109329","title":"Admidio 4.3.2 through 4.3.17 and 5.0.0 before 5.0.15 contains a broken access control vulnerability that allows role administrators to assign users to roles in other organizations. Attackers can submit crafted assign requests to members_assignment.php with a foreign role UUID to gain privileged membership, log into that organization, and edit its user profiles.","display_title":"Software component issue could allow unauthorized access","display_summary":"Admidio 4.3.2 through 4.3.17 and 5.0.0 before 5.0.15 contains a broken access control vulnerability that allows role administrators to assign users to roles in other organizations.","display_reference":"CVE-2026-109329","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109329","source_title":"Admidio 4.3.2 through 4.3.17 and 5.0.0 before 5.0.15 contains a broken access control vulnerability that allows role administrators to assign users to roles in other organizations. Attackers can submit crafted assign requests to members_assignment.php with a foreign role UUID to gain privileged membership, log into that organization, and edit its user profiles.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-12T19:47:05.134Z","source_hash":"content-fingerprint:fnv1a-f421ce09","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109329-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Admidio 4.3.2 through 4.3.17 and 5.0.0 before 5.0.15 contains a broken access control vulnerability that allows role administrators to assign users to roles in other organizations. Attackers can submit crafted assign requests to members_assignment.php with a foreign role UUID to gain privileged membership, log into that organization, and edit its user profiles.","source_quote_or_pointer":"Security Advisory CVE-2026-109329","fact_id":"SEA-CVE-2026-109329-F1","document_citation":"Security Advisory CVE-2026-109329"},{"id":"SEA-CVE-2026-109329-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Admidio 4.3.2 through 4.3.17 and 5.0.0 before 5.0.15 contains a broken access control vulnerability that allows role administrators to assign users to roles in other organizations.","source_quote_or_pointer":"Advisory description (CVE-2026-109329)","fact_id":"SEA-CVE-2026-109329-F2","document_citation":"Advisory description (CVE-2026-109329)"}],"source_stated_contributors":["Admidio 4.3.2 through 4.3.17 and 5.0.0 before 5.0.15 contains a broken access control vulnerability that allows role administrators to assign users to roles in other organizations."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109329","reporting_entity":"CVE-2026-109329","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109329-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109329-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-109329"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109328","title":"Admidio 5.0.0 before 5.0.15 contains an unauthenticated stored cross-site scripting vulnerability in RegistrationPresenter.php, which inserts the raw FIRST_NAME registration value into an unencoded data-message attribute. Attackers can register with a double-quoted event handler that executes JavaScript in an administrator's session when they hover the entry on the Manage registrations page.","display_title":"Software component issue could run attacker-controlled scripts in a browser","display_summary":"Admidio 5.0.0 before 5.0.15 contains an unauthenticated stored cross-site scripting vulnerability in RegistrationPresenter.php, which inserts the raw FIRSTNAME registration value into an unencoded data-message attribute.","display_reference":"CVE-2026-109328","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109328","source_title":"Admidio 5.0.0 before 5.0.15 contains an unauthenticated stored cross-site scripting vulnerability in RegistrationPresenter.php, which inserts the raw FIRST_NAME registration value into an unencoded data-message attribute. Attackers can register with a double-quoted event handler that executes JavaScript in an administrator's session when they hover the entry on the Manage registrations page.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-12T19:47:05.134Z","source_hash":"content-fingerprint:fnv1a-d3353008","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109328-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Admidio 5.0.0 before 5.0.15 contains an unauthenticated stored cross-site scripting vulnerability in RegistrationPresenter.php, which inserts the raw FIRST_NAME registration value into an unencoded data-message attribute. Attackers can register with a double-quoted event handler that executes JavaScript in an administrator's session when they hover the entry on the Manage registrations page.","source_quote_or_pointer":"Security Advisory CVE-2026-109328","fact_id":"SEA-CVE-2026-109328-F1","document_citation":"Security Advisory CVE-2026-109328"},{"id":"SEA-CVE-2026-109328-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Admidio 5.0.0 before 5.0.15 contains an unauthenticated stored cross-site scripting vulnerability in RegistrationPresenter.php, which inserts the raw FIRSTNAME registration value into an unencoded data-message attribute.","source_quote_or_pointer":"Advisory description (CVE-2026-109328)","fact_id":"SEA-CVE-2026-109328-F2","document_citation":"Advisory description (CVE-2026-109328)"}],"source_stated_contributors":["Admidio 5.0.0 before 5.0.15 contains an unauthenticated stored cross-site scripting vulnerability in RegistrationPresenter.php, which inserts the raw FIRSTNAME registration value into an unencoded data-message attribute."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","arch.event_driven"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109328","reporting_entity":"CVE-2026-109328","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109328-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109328-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-109328"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109325","title":"Grav from 2.0.22 before 2.1.7 contains an authentication bypass vulnerability in the Clockwork profiler that trusts loopback REMOTE_ADDR values. Unauthenticated attackers behind a same-host HTTP proxy can read profiler records exposing system and plugin configuration, secrets, request metadata, and queries.","display_title":"Software component issue could allow unauthorized access","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-109325","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109325","source_title":"Grav from 2.0.22 before 2.1.7 contains an authentication bypass vulnerability in the Clockwork profiler that trusts loopback REMOTE_ADDR values. Unauthenticated attackers behind a same-host HTTP proxy can read profiler records exposing system and plugin configuration, secrets, request metadata, and queries.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-12T19:47:05.134Z","source_hash":"content-fingerprint:fnv1a-7c70bd19","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109325-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Grav from 2.0.22 before 2.1.7 contains an authentication bypass vulnerability in the Clockwork profiler that trusts loopback REMOTE_ADDR values. Unauthenticated attackers behind a same-host HTTP proxy can read profiler records exposing system and plugin configuration, secrets, request metadata, and queries.","source_quote_or_pointer":"Security Advisory CVE-2026-109325","fact_id":"SEA-CVE-2026-109325-F1","document_citation":"Security Advisory CVE-2026-109325"},{"id":"SEA-CVE-2026-109325-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Grav from 2.0.22 before 2.1.7 contains an authentication bypass vulnerability in the Clockwork profiler that trusts loopback REMOTEADDR values. Unauthenticated attackers behind a same-host HTTP proxy can read profiler records exposing system and plugin configuration, secrets, request metadata, and queries.","source_quote_or_pointer":"Advisory description (CVE-2026-109325)","fact_id":"SEA-CVE-2026-109325-F2","document_citation":"Advisory description (CVE-2026-109325)"}],"source_stated_contributors":["Grav from 2.0.22 before 2.1.7 contains an authentication bypass vulnerability in the Clockwork profiler that trusts loopback REMOTEADDR values. Unauthenticated attackers behind a same-host HTTP proxy can read profiler records exposing system and plugin configuration, secrets, request metadata, and queries."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109325","reporting_entity":"CVE-2026-109325","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109325-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109325-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-109325"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109324","title":"Grav before 2.1.7 contains a denial of service vulnerability that allows authenticated media authors to exhaust memory by uploading compressed oversized raster images. Attackers can reference a Twig or Markdown transform so GD or Imagick decodes the full source without dimension checks, letting anonymous requests repeatedly cause page unavailability.","display_title":"Software component issue could make the service unavailable","display_summary":"Grav before 2.1.7 contains a denial of service vulnerability that allows authenticated media authors to exhaust memory by uploading compressed oversized raster images.","display_reference":"CVE-2026-109324","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109324","source_title":"Grav before 2.1.7 contains a denial of service vulnerability that allows authenticated media authors to exhaust memory by uploading compressed oversized raster images. Attackers can reference a Twig or Markdown transform so GD or Imagick decodes the full source without dimension checks, letting anonymous requests repeatedly cause page unavailability.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-12T19:47:05.135Z","source_hash":"content-fingerprint:fnv1a-b263402a","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109324-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Grav before 2.1.7 contains a denial of service vulnerability that allows authenticated media authors to exhaust memory by uploading compressed oversized raster images. Attackers can reference a Twig or Markdown transform so GD or Imagick decodes the full source without dimension checks, letting anonymous requests repeatedly cause page unavailability.","source_quote_or_pointer":"Security Advisory CVE-2026-109324","fact_id":"SEA-CVE-2026-109324-F1","document_citation":"Security Advisory CVE-2026-109324"},{"id":"SEA-CVE-2026-109324-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Grav before 2.1.7 contains a denial of service vulnerability that allows authenticated media authors to exhaust memory by uploading compressed oversized raster images.","source_quote_or_pointer":"Advisory description (CVE-2026-109324)","fact_id":"SEA-CVE-2026-109324-F2","document_citation":"Advisory description (CVE-2026-109324)"}],"source_stated_contributors":["Grav before 2.1.7 contains a denial of service vulnerability that allows authenticated media authors to exhaust memory by uploading compressed oversized raster images."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.uploaded_files"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109324","reporting_entity":"CVE-2026-109324","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109324-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109324-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-109324"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109321","title":"Grav Login OAuth plugin (grav-plugin-login-oauth) before 1.4.3 provisions OAuth accounts as ordinary Grav users with a deterministic <provider>.<id> username and an unsalted MD5 hash of the provider identifier as the password, without disabling password login. Unauthenticated remote attackers who learn or guess a provider identifier can reproduce these credentials and log in, gaining administrative control of privileged accounts.","display_title":"Software component issue could expose accounts or credentials","display_summary":"Grav Login OAuth plugin (grav-plugin-login-oauth) before 1.4.3 provisions OAuth accounts as ordinary Grav users with a deterministic .","display_reference":"CVE-2026-109321","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109321","source_title":"Grav Login OAuth plugin (grav-plugin-login-oauth) before 1.4.3 provisions OAuth accounts as ordinary Grav users with a deterministic <provider>.<id> username and an unsalted MD5 hash of the provider identifier as the password, without disabling password login. Unauthenticated remote attackers who learn or guess a provider identifier can reproduce these credentials and log in, gaining administrative control of privileged accounts.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-12T19:47:05.136Z","source_hash":"content-fingerprint:fnv1a-e8d755d5","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109321-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Grav Login OAuth plugin (grav-plugin-login-oauth) before 1.4.3 provisions OAuth accounts as ordinary Grav users with a deterministic <provider>.<id> username and an unsalted MD5 hash of the provider identifier as the password, without disabling password login. Unauthenticated remote attackers who learn or guess a provider identifier can reproduce these credentials and log in, gaining administrative control of privileged accounts.","source_quote_or_pointer":"Security Advisory CVE-2026-109321","fact_id":"SEA-CVE-2026-109321-F1","document_citation":"Security Advisory CVE-2026-109321"},{"id":"SEA-CVE-2026-109321-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Grav Login OAuth plugin (grav-plugin-login-oauth) before 1.4.3 provisions OAuth accounts as ordinary Grav users with a deterministic . username and an unsalted MD5 hash of the provider identifier as the password, without disabling password login.","source_quote_or_pointer":"Advisory description (CVE-2026-109321)","fact_id":"SEA-CVE-2026-109321-F2","document_citation":"Advisory description (CVE-2026-109321)"}],"source_stated_contributors":["Grav Login OAuth plugin (grav-plugin-login-oauth) before 1.4.3 provisions OAuth accounts as ordinary Grav users with a deterministic . username and an unsalted MD5 hash of the provider identifier as the password, without disabling password login."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109321","reporting_entity":"CVE-2026-109321","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109321-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109321-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-109321"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109320","title":"The Grav API plugin (grav-plugin-api) before 1.0.36 contains an improper session validation vulnerability that allows disabled accounts to keep API access, because SessionAuthenticator does not enforce account state. Disabled users can reuse an already authorized browser or remember-me session to call API endpoints until expiry, defeating operator revocation.","display_title":"Security issue reported in Software component","display_summary":"The Grav API plugin (grav-plugin-api) before 1.0.36 contains an improper session validation vulnerability that allows disabled accounts to keep API access, because SessionAuthenticator does not enforce account state.","display_reference":"CVE-2026-109320","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109320","source_title":"The Grav API plugin (grav-plugin-api) before 1.0.36 contains an improper session validation vulnerability that allows disabled accounts to keep API access, because SessionAuthenticator does not enforce account state. Disabled users can reuse an already authorized browser or remember-me session to call API endpoints until expiry, defeating operator revocation.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-12T19:47:05.137Z","source_hash":"content-fingerprint:fnv1a-e6901fe","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109320-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Grav API plugin (grav-plugin-api) before 1.0.36 contains an improper session validation vulnerability that allows disabled accounts to keep API access, because SessionAuthenticator does not enforce account state. Disabled users can reuse an already authorized browser or remember-me session to call API endpoints until expiry, defeating operator revocation.","source_quote_or_pointer":"Security Advisory CVE-2026-109320","fact_id":"SEA-CVE-2026-109320-F1","document_citation":"Security Advisory CVE-2026-109320"},{"id":"SEA-CVE-2026-109320-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Grav API plugin (grav-plugin-api) before 1.0.36 contains an improper session validation vulnerability that allows disabled accounts to keep API access, because SessionAuthenticator does not enforce account state.","source_quote_or_pointer":"Advisory description (CVE-2026-109320)","fact_id":"SEA-CVE-2026-109320-F2","document_citation":"Advisory description (CVE-2026-109320)"}],"source_stated_contributors":["The Grav API plugin (grav-plugin-api) before 1.0.36 contains an improper session validation vulnerability that allows disabled accounts to keep API access, because SessionAuthenticator does not enforce account state."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109320","reporting_entity":"CVE-2026-109320","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109320-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109320-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-109320"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109319","title":"Grav Guestbook plugin 0.5.0 and 0.5.1 contains missing authorization and cross-site request forgery vulnerabilities in Admin moderation actions delete, approve, and approveAll. Authenticated Admin users lacking the admin.guestbook permission, or external sites abusing a moderator's session via nonce-less GET requests, can delete or approve Guestbook entries.","display_title":"Security issue reported in Software component","display_summary":"Grav Guestbook plugin 0.5.0 and 0.5.1 contains missing authorization and cross-site request forgery vulnerabilities in Admin moderation actions delete, approve, and approveAll.","display_reference":"CVE-2026-109319","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109319","source_title":"Grav Guestbook plugin 0.5.0 and 0.5.1 contains missing authorization and cross-site request forgery vulnerabilities in Admin moderation actions delete, approve, and approveAll. Authenticated Admin users lacking the admin.guestbook permission, or external sites abusing a moderator's session via nonce-less GET requests, can delete or approve Guestbook entries.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-12T19:47:05.137Z","source_hash":"content-fingerprint:fnv1a-5fe23908","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109319-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Grav Guestbook plugin 0.5.0 and 0.5.1 contains missing authorization and cross-site request forgery vulnerabilities in Admin moderation actions delete, approve, and approveAll. Authenticated Admin users lacking the admin.guestbook permission, or external sites abusing a moderator's session via nonce-less GET requests, can delete or approve Guestbook entries.","source_quote_or_pointer":"Security Advisory CVE-2026-109319","fact_id":"SEA-CVE-2026-109319-F1","document_citation":"Security Advisory CVE-2026-109319"},{"id":"SEA-CVE-2026-109319-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Grav Guestbook plugin 0.5.0 and 0.5.1 contains missing authorization and cross-site request forgery vulnerabilities in Admin moderation actions delete, approve, and approveAll.","source_quote_or_pointer":"Advisory description (CVE-2026-109319)","fact_id":"SEA-CVE-2026-109319-F2","document_citation":"Advisory description (CVE-2026-109319)"}],"source_stated_contributors":["Grav Guestbook plugin 0.5.0 and 0.5.1 contains missing authorization and cross-site request forgery vulnerabilities in Admin moderation actions delete, approve, and approveAll."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.privileged_action","auth.write_action","data.pii"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109319","reporting_entity":"CVE-2026-109319","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109319-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109319-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-109319"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109318","title":"Grav Git Sync 1.0.2 through 3.4.12 contains a command injection vulnerability that allows authenticated content editors to execute OS commands by injecting shell substitutions into profile fields. When the gravuser or gravfull author mode is enabled, attackers can set a malicious username, full name, or email that reaches PHP exec() via git commit --author, running commands as the web-server account.","display_title":"Software component issue could allow unintended commands to run","display_summary":"Grav Git Sync 1.0.2 through 3.4.12 contains a command injection vulnerability that allows authenticated content editors to execute OS commands by injecting shell substitutions into profile fields.","display_reference":"CVE-2026-109318","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109318","source_title":"Grav Git Sync 1.0.2 through 3.4.12 contains a command injection vulnerability that allows authenticated content editors to execute OS commands by injecting shell substitutions into profile fields. When the gravuser or gravfull author mode is enabled, attackers can set a malicious username, full name, or email that reaches PHP exec() via git commit --author, running commands as the web-server account.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-12T19:47:05.137Z","source_hash":"content-fingerprint:fnv1a-cc88f205","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109318-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Grav Git Sync 1.0.2 through 3.4.12 contains a command injection vulnerability that allows authenticated content editors to execute OS commands by injecting shell substitutions into profile fields. When the gravuser or gravfull author mode is enabled, attackers can set a malicious username, full name, or email that reaches PHP exec() via git commit --author, running commands as the web-server account.","source_quote_or_pointer":"Security Advisory CVE-2026-109318","fact_id":"SEA-CVE-2026-109318-F1","document_citation":"Security Advisory CVE-2026-109318"},{"id":"SEA-CVE-2026-109318-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Grav Git Sync 1.0.2 through 3.4.12 contains a command injection vulnerability that allows authenticated content editors to execute OS commands by injecting shell substitutions into profile fields.","source_quote_or_pointer":"Advisory description (CVE-2026-109318)","fact_id":"SEA-CVE-2026-109318-F2","document_citation":"Advisory description (CVE-2026-109318)"}],"source_stated_contributors":["Grav Git Sync 1.0.2 through 3.4.12 contains a command injection vulnerability that allows authenticated content editors to execute OS commands by injecting shell substitutions into profile fields."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109318","reporting_entity":"CVE-2026-109318","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109318-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109318-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-109318"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109316","title":"Grav Data Manager plugin 1.4.0 through 1.4.5 contains a missing authorization vulnerability that allows unauthenticated attackers to delete stored data files via the classic Admin integration. Attackers can send a request with the delete parameter and known data type and filename to remove files under user/data/, including form submissions, or forge requests lacking CSRF nonce checks.","display_title":"Security issue reported in Software component","display_summary":"Grav Data Manager plugin 1.4.0 through 1.4.5 contains a missing authorization vulnerability that allows unauthenticated attackers to delete stored data files via the classic Admin integration.","display_reference":"CVE-2026-109316","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109316","source_title":"Grav Data Manager plugin 1.4.0 through 1.4.5 contains a missing authorization vulnerability that allows unauthenticated attackers to delete stored data files via the classic Admin integration. Attackers can send a request with the delete parameter and known data type and filename to remove files under user/data/, including form submissions, or forge requests lacking CSRF nonce checks.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-12T19:47:05.138Z","source_hash":"content-fingerprint:fnv1a-b20ebd8b","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109316-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Grav Data Manager plugin 1.4.0 through 1.4.5 contains a missing authorization vulnerability that allows unauthenticated attackers to delete stored data files via the classic Admin integration. Attackers can send a request with the delete parameter and known data type and filename to remove files under user/data/, including form submissions, or forge requests lacking CSRF nonce checks.","source_quote_or_pointer":"Security Advisory CVE-2026-109316","fact_id":"SEA-CVE-2026-109316-F1","document_citation":"Security Advisory CVE-2026-109316"},{"id":"SEA-CVE-2026-109316-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Grav Data Manager plugin 1.4.0 through 1.4.5 contains a missing authorization vulnerability that allows unauthenticated attackers to delete stored data files via the classic Admin integration.","source_quote_or_pointer":"Advisory description (CVE-2026-109316)","fact_id":"SEA-CVE-2026-109316-F2","document_citation":"Advisory description (CVE-2026-109316)"}],"source_stated_contributors":["Grav Data Manager plugin 1.4.0 through 1.4.5 contains a missing authorization vulnerability that allows unauthenticated attackers to delete stored data files via the classic Admin integration."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.privileged_action","auth.write_action","data.pii"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109316","reporting_entity":"CVE-2026-109316","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109316-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109316-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-109316"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109315","title":"Grav from 2.0.22 before 2.1.7 contains an information disclosure vulnerability that allows page editors to read the Clockwork debugger token because the sandbox redaction list omits system.debugger.token. Attackers can render the token through editor-authored Twig and supply it as X-Clockwork-Auth to read profiler records with configuration, request metadata, and database queries.","display_title":"Security issue reported in Software component","display_summary":"Grav from 2.0.22 before 2.1.7 contains an information disclosure vulnerability that allows page editors to read the Clockwork debugger token because the sandbox redaction list omits system.debugger.token.","display_reference":"CVE-2026-109315","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109315","source_title":"Grav from 2.0.22 before 2.1.7 contains an information disclosure vulnerability that allows page editors to read the Clockwork debugger token because the sandbox redaction list omits system.debugger.token. Attackers can render the token through editor-authored Twig and supply it as X-Clockwork-Auth to read profiler records with configuration, request metadata, and database queries.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-12T19:47:05.139Z","source_hash":"content-fingerprint:fnv1a-1b92974c","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109315-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Grav from 2.0.22 before 2.1.7 contains an information disclosure vulnerability that allows page editors to read the Clockwork debugger token because the sandbox redaction list omits system.debugger.token. Attackers can render the token through editor-authored Twig and supply it as X-Clockwork-Auth to read profiler records with configuration, request metadata, and database queries.","source_quote_or_pointer":"Security Advisory CVE-2026-109315","fact_id":"SEA-CVE-2026-109315-F1","document_citation":"Security Advisory CVE-2026-109315"},{"id":"SEA-CVE-2026-109315-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Grav from 2.0.22 before 2.1.7 contains an information disclosure vulnerability that allows page editors to read the Clockwork debugger token because the sandbox redaction list omits system.debugger.token.","source_quote_or_pointer":"Advisory description (CVE-2026-109315)","fact_id":"SEA-CVE-2026-109315-F2","document_citation":"Advisory description (CVE-2026-109315)"}],"source_stated_contributors":["Grav from 2.0.22 before 2.1.7 contains an information disclosure vulnerability that allows page editors to read the Clockwork debugger token because the sandbox redaction list omits system.debugger.token."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.code_execution","auth.write_action"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109315","reporting_entity":"CVE-2026-109315","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109315-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109315-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-109315"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109314","title":"Grav Login plugin 1.2.0 before 3.9.9 contains an information disclosure vulnerability that allows publishers to obtain password-reset tokens by authoring a page at the reset route. When a victim opens an emailed reset link, the publisher-controlled page rendered by Login::getPage() exposes the username and bearer token, enabling takeover of more privileged accounts.","display_title":"Security issue reported in Software component","display_summary":"Grav Login plugin 1.2.0 before 3.9.9 contains an information disclosure vulnerability that allows publishers to obtain password-reset tokens by authoring a page at the reset route.","display_reference":"CVE-2026-109314","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109314","source_title":"Grav Login plugin 1.2.0 before 3.9.9 contains an information disclosure vulnerability that allows publishers to obtain password-reset tokens by authoring a page at the reset route. When a victim opens an emailed reset link, the publisher-controlled page rendered by Login::getPage() exposes the username and bearer token, enabling takeover of more privileged accounts.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-12T19:47:05.139Z","source_hash":"content-fingerprint:fnv1a-dee34a79","affected_system":{"organization":"Grav Login plugin 1.2.0 before 3.9.9 contains an information disclosure vulnerability that allows publishers to obtain password-reset tokens by authoring a page at the reset route. When a victim opens an emailed reset link, the publisher-controlled page rendered by Login project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109314-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Grav Login plugin 1.2.0 before 3.9.9 contains an information disclosure vulnerability that allows publishers to obtain password-reset tokens by authoring a page at the reset route. When a victim opens an emailed reset link, the publisher-controlled page rendered by Login::getPage() exposes the username and bearer token, enabling takeover of more privileged accounts.","source_quote_or_pointer":"Security Advisory CVE-2026-109314","fact_id":"SEA-CVE-2026-109314-F1","document_citation":"Security Advisory CVE-2026-109314"},{"id":"SEA-CVE-2026-109314-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Grav Login plugin 1.2.0 before 3.9.9 contains an information disclosure vulnerability that allows publishers to obtain password-reset tokens by authoring a page at the reset route.","source_quote_or_pointer":"Advisory description (CVE-2026-109314)","fact_id":"SEA-CVE-2026-109314-F2","document_citation":"Advisory description (CVE-2026-109314)"}],"source_stated_contributors":["Grav Login plugin 1.2.0 before 3.9.9 contains an information disclosure vulnerability that allows publishers to obtain password-reset tokens by authoring a page at the reset route."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109314","reporting_entity":"CVE-2026-109314","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109314-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109314-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-109314"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109313","title":"Grav Login plugin 2.7.0 before 3.9.9 contains an authentication bypass vulnerability that allows attackers with a valid password to skip two-factor authentication through remember-me cookie restoration. Attackers can obtain a persistent remember-me cookie after the password step and restore it as a fully authorized session without completing the second factor.","display_title":"Software component issue could allow unauthorized access","display_summary":"Grav Login plugin 2.7.0 before 3.9.9 contains an authentication bypass vulnerability that allows attackers with a valid password to skip two-factor authentication through remember-me cookie restoration.","display_reference":"CVE-2026-109313","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109313","source_title":"Grav Login plugin 2.7.0 before 3.9.9 contains an authentication bypass vulnerability that allows attackers with a valid password to skip two-factor authentication through remember-me cookie restoration. Attackers can obtain a persistent remember-me cookie after the password step and restore it as a fully authorized session without completing the second factor.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-12T19:47:05.139Z","source_hash":"content-fingerprint:fnv1a-b26bfd92","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109313-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Grav Login plugin 2.7.0 before 3.9.9 contains an authentication bypass vulnerability that allows attackers with a valid password to skip two-factor authentication through remember-me cookie restoration. Attackers can obtain a persistent remember-me cookie after the password step and restore it as a fully authorized session without completing the second factor.","source_quote_or_pointer":"Security Advisory CVE-2026-109313","fact_id":"SEA-CVE-2026-109313-F1","document_citation":"Security Advisory CVE-2026-109313"},{"id":"SEA-CVE-2026-109313-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Grav Login plugin 2.7.0 before 3.9.9 contains an authentication bypass vulnerability that allows attackers with a valid password to skip two-factor authentication through remember-me cookie restoration.","source_quote_or_pointer":"Advisory description (CVE-2026-109313)","fact_id":"SEA-CVE-2026-109313-F2","document_citation":"Advisory description (CVE-2026-109313)"}],"source_stated_contributors":["Grav Login plugin 2.7.0 before 3.9.9 contains an authentication bypass vulnerability that allows attackers with a valid password to skip two-factor authentication through remember-me cookie restoration."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.credentials_secrets"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109313","reporting_entity":"CVE-2026-109313","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109313-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109313-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-109313"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109310","title":"SiYuan v3.1.12 before v3.8.6 fails to restrict the Sprig template function map in the /api/icon/getDynamicIcon content parameter, allowing resource exhaustion. A publish reader, or anyone when publish auth is disabled, can use uncapped functions like until to OOM-kill the kernel with one request.","display_title":"Software component issue could make the service unavailable","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-109310","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109310","source_title":"SiYuan v3.1.12 before v3.8.6 fails to restrict the Sprig template function map in the /api/icon/getDynamicIcon content parameter, allowing resource exhaustion. A publish reader, or anyone when publish auth is disabled, can use uncapped functions like until to OOM-kill the kernel with one request.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-12T19:47:05.141Z","source_hash":"content-fingerprint:fnv1a-8a81d773","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109310-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"SiYuan v3.1.12 before v3.8.6 fails to restrict the Sprig template function map in the /api/icon/getDynamicIcon content parameter, allowing resource exhaustion. A publish reader, or anyone when publish auth is disabled, can use uncapped functions like until to OOM-kill the kernel with one request.","source_quote_or_pointer":"Security Advisory CVE-2026-109310","fact_id":"SEA-CVE-2026-109310-F1","document_citation":"Security Advisory CVE-2026-109310"},{"id":"SEA-CVE-2026-109310-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"SiYuan v3.1.12 before v3.8.6 fails to restrict the Sprig template function map in the /api/icon/getDynamicIcon content parameter, allowing resource exhaustion. A publish reader, or anyone when publish auth is disabled, can use uncapped functions like until to OOM-kill the kernel with one request.","source_quote_or_pointer":"Advisory description (CVE-2026-109310)","fact_id":"SEA-CVE-2026-109310-F2","document_citation":"Advisory description (CVE-2026-109310)"}],"source_stated_contributors":["SiYuan v3.1.12 before v3.8.6 fails to restrict the Sprig template function map in the /api/icon/getDynamicIcon content parameter, allowing resource exhaustion. A publish reader, or anyone when publish auth is disabled, can use uncapped functions like until to OOM-kill the kernel with one request."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.public_publication"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109310","reporting_entity":"CVE-2026-109310","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109310-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109310-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-109310"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109309","title":"SiYuan v3.7.0 before v3.8.6 contains an absolute path traversal vulnerability in the kernel's private plugin HTTP server, which passes a kernel plugin handler's ResponseFile.Path to gin's Context.File without validation. Attackers supplying a malicious kernel plugin can return an absolute path to read any file readable by the SiYuan process, including the API token and conf.json.","display_title":"Software component issue could expose restricted files","display_summary":"SiYuan v3.7.0 before v3.8.6 contains an absolute path traversal vulnerability in the kernel's private plugin HTTP server, which passes a kernel plugin handler's ResponseFile.Path to gin's Context.File without validation.","display_reference":"CVE-2026-109309","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109309","source_title":"SiYuan v3.7.0 before v3.8.6 contains an absolute path traversal vulnerability in the kernel's private plugin HTTP server, which passes a kernel plugin handler's ResponseFile.Path to gin's Context.File without validation. Attackers supplying a malicious kernel plugin can return an absolute path to read any file readable by the SiYuan process, including the API token and conf.json.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-12T19:47:05.141Z","source_hash":"content-fingerprint:fnv1a-ba40ca1b","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109309-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"SiYuan v3.7.0 before v3.8.6 contains an absolute path traversal vulnerability in the kernel's private plugin HTTP server, which passes a kernel plugin handler's ResponseFile.Path to gin's Context.File without validation. Attackers supplying a malicious kernel plugin can return an absolute path to read any file readable by the SiYuan process, including the API token and conf.json.","source_quote_or_pointer":"Security Advisory CVE-2026-109309","fact_id":"SEA-CVE-2026-109309-F1","document_citation":"Security Advisory CVE-2026-109309"},{"id":"SEA-CVE-2026-109309-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"SiYuan v3.7.0 before v3.8.6 contains an absolute path traversal vulnerability in the kernel's private plugin HTTP server, which passes a kernel plugin handler's ResponseFile.Path to gin's Context.File without validation.","source_quote_or_pointer":"Advisory description (CVE-2026-109309)","fact_id":"SEA-CVE-2026-109309-F2","document_citation":"Advisory description (CVE-2026-109309)"}],"source_stated_contributors":["SiYuan v3.7.0 before v3.8.6 contains an absolute path traversal vulnerability in the kernel's private plugin HTTP server, which passes a kernel plugin handler's ResponseFile.Path to gin's Context.File without validation."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.credentials_secrets"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Restricted file exposure","File overwrite"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109309","reporting_entity":"CVE-2026-109309","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109309-SG1","label":"Confine file access to a fixed root","description":"Resolve paths to canonical form and reject anything outside the intended directory before opening files.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109309-SG1","label":"Confine file access to a fixed root","description":"Resolve paths to canonical form and reject anything outside the intended directory before opening files.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"File paths supplied by a caller escaped the intended directory. Canonicalise paths and confine file access to a fixed root.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-109309"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109305","title":"Craft CMS from 5.10.2 before 5.10.14 contains a Twig sandbox bypass that allows non-admin users to invoke PHP callables through the \"has some\" and \"has every\" operators. Users with the System Messages permission can supply two-argument callables such as passthru or system in sandboxed templates to execute code as the web user.","display_title":"Security issue reported in Software component","display_summary":"Craft CMS from 5.10.2 before 5.10.14 contains a Twig sandbox bypass that allows non-admin users to invoke PHP callables through the \"has some\" and \"has every\" operators.","display_reference":"CVE-2026-109305","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109305","source_title":"Craft CMS from 5.10.2 before 5.10.14 contains a Twig sandbox bypass that allows non-admin users to invoke PHP callables through the \"has some\" and \"has every\" operators. Users with the System Messages permission can supply two-argument callables such as passthru or system in sandboxed templates to execute code as the web user.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-12T19:47:05.141Z","source_hash":"content-fingerprint:fnv1a-46a7992f","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109305-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Craft CMS from 5.10.2 before 5.10.14 contains a Twig sandbox bypass that allows non-admin users to invoke PHP callables through the \"has some\" and \"has every\" operators. Users with the System Messages permission can supply two-argument callables such as passthru or system in sandboxed templates to execute code as the web user.","source_quote_or_pointer":"Security Advisory CVE-2026-109305","fact_id":"SEA-CVE-2026-109305-F1","document_citation":"Security Advisory CVE-2026-109305"},{"id":"SEA-CVE-2026-109305-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Craft CMS from 5.10.2 before 5.10.14 contains a Twig sandbox bypass that allows non-admin users to invoke PHP callables through the \"has some\" and \"has every\" operators.","source_quote_or_pointer":"Advisory description (CVE-2026-109305)","fact_id":"SEA-CVE-2026-109305-F2","document_citation":"Advisory description (CVE-2026-109305)"}],"source_stated_contributors":["Craft CMS from 5.10.2 before 5.10.14 contains a Twig sandbox bypass that allows non-admin users to invoke PHP callables through the \"has some\" and \"has every\" operators."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.code_execution","auth.privileged_action","data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109305","reporting_entity":"CVE-2026-109305","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109305-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109305-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-109305"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109300","title":"Open WebUI from 0.6.31 before 0.11.4 contains a stored cross-site scripting vulnerability in its Markdown renderer, which treats user-authored tool-call details blocks as tool output and mounts their embeds attribute in script-enabled iframes. Authenticated users can post crafted channel messages, chat messages, or citation content that runs JavaScript in viewers' browsers, enabling in-app phishing, or session hijacking where iframeSandboxAllowSameOrigin is enabled.","display_title":"Software component issue could run attacker-controlled scripts in a browser","display_summary":"Open WebUI from 0.6.31 before 0.11.4 contains a stored cross-site scripting vulnerability in its Markdown renderer, which treats user-authored tool-call details blocks as tool output and mounts their embeds attribute in…","display_reference":"CVE-2026-109300","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109300","source_title":"Open WebUI from 0.6.31 before 0.11.4 contains a stored cross-site scripting vulnerability in its Markdown renderer, which treats user-authored tool-call details blocks as tool output and mounts their embeds attribute in script-enabled iframes. Authenticated users can post crafted channel messages, chat messages, or citation content that runs JavaScript in viewers' browsers, enabling in-app phishing, or session hijacking where iframeSandboxAllowSameOrigin is enabled.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-12T19:47:05.142Z","source_hash":"content-fingerprint:fnv1a-2fa5e6ca","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109300-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Open WebUI from 0.6.31 before 0.11.4 contains a stored cross-site scripting vulnerability in its Markdown renderer, which treats user-authored tool-call details blocks as tool output and mounts their embeds attribute in script-enabled iframes. Authenticated users can post crafted channel messages, chat messages, or citation content that runs JavaScript in viewers' browsers, enabling in-app phishing, or session hijacking where iframeSandboxAllowSameOrigin is enabled.","source_quote_or_pointer":"Security Advisory CVE-2026-109300","fact_id":"SEA-CVE-2026-109300-F1","document_citation":"Security Advisory CVE-2026-109300"},{"id":"SEA-CVE-2026-109300-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Open WebUI from 0.6.31 before 0.11.4 contains a stored cross-site scripting vulnerability in its Markdown renderer, which treats user-authored tool-call details blocks as tool output and mounts their embeds attribute in script-enabled iframes.","source_quote_or_pointer":"Advisory description (CVE-2026-109300)","fact_id":"SEA-CVE-2026-109300-F2","document_citation":"Advisory description (CVE-2026-109300)"}],"source_stated_contributors":["Open WebUI from 0.6.31 before 0.11.4 contains a stored cross-site scripting vulnerability in its Markdown renderer, which treats user-authored tool-call details blocks as tool output and mounts their embeds attribute in script-enabled iframes."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109300","reporting_entity":"CVE-2026-109300","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109300-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109300-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-109300"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109299","title":"Open WebUI from 0.9.0 before 0.11.4 contains a denial of service vulnerability that allows authenticated users with automations permission to stall the instance by submitting unsatisfiable recurrence rules. Attackers can repeatedly send rules like February 30th to the automations create or update endpoints, blocking the shared event loop for seconds per request.","display_title":"Software component issue could make the service unavailable","display_summary":"Open WebUI from 0.9.0 before 0.11.4 contains a denial of service vulnerability that allows authenticated users with automations permission to stall the instance by submitting unsatisfiable recurrence rules.","display_reference":"CVE-2026-109299","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109299","source_title":"Open WebUI from 0.9.0 before 0.11.4 contains a denial of service vulnerability that allows authenticated users with automations permission to stall the instance by submitting unsatisfiable recurrence rules. Attackers can repeatedly send rules like February 30th to the automations create or update endpoints, blocking the shared event loop for seconds per request.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-12T19:47:05.143Z","source_hash":"content-fingerprint:fnv1a-ba7cabaf","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109299-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Open WebUI from 0.9.0 before 0.11.4 contains a denial of service vulnerability that allows authenticated users with automations permission to stall the instance by submitting unsatisfiable recurrence rules. Attackers can repeatedly send rules like February 30th to the automations create or update endpoints, blocking the shared event loop for seconds per request.","source_quote_or_pointer":"Security Advisory CVE-2026-109299","fact_id":"SEA-CVE-2026-109299-F1","document_citation":"Security Advisory CVE-2026-109299"},{"id":"SEA-CVE-2026-109299-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Open WebUI from 0.9.0 before 0.11.4 contains a denial of service vulnerability that allows authenticated users with automations permission to stall the instance by submitting unsatisfiable recurrence rules.","source_quote_or_pointer":"Advisory description (CVE-2026-109299)","fact_id":"SEA-CVE-2026-109299-F2","document_citation":"Advisory description (CVE-2026-109299)"}],"source_stated_contributors":["Open WebUI from 0.9.0 before 0.11.4 contains a denial of service vulnerability that allows authenticated users with automations permission to stall the instance by submitting unsatisfiable recurrence rules."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.write_action","data.pii","arch.event_driven"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109299","reporting_entity":"CVE-2026-109299","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109299-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109299-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-109299"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109296","title":"Open WebUI before 0.11.4 contains a missing authorization vulnerability that allows authenticated users to reach disabled model provider backends by supplying an explicit backend index. Attackers can pass the index as a path segment or query parameter on Ollama and OpenAI-compatible listing routes to trigger requests carrying configured API keys, read version strings, and enumerate connections.","display_title":"Security issue reported in Software component","display_summary":"Open WebUI before 0.11.4 contains a missing authorization vulnerability that allows authenticated users to reach disabled model provider backends by supplying an explicit backend index.","display_reference":"CVE-2026-109296","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109296","source_title":"Open WebUI before 0.11.4 contains a missing authorization vulnerability that allows authenticated users to reach disabled model provider backends by supplying an explicit backend index. Attackers can pass the index as a path segment or query parameter on Ollama and OpenAI-compatible listing routes to trigger requests carrying configured API keys, read version strings, and enumerate connections.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-12T19:47:05.144Z","source_hash":"content-fingerprint:fnv1a-8afc82b2","affected_system":{"organization":"Software component project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109296-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Open WebUI before 0.11.4 contains a missing authorization vulnerability that allows authenticated users to reach disabled model provider backends by supplying an explicit backend index. Attackers can pass the index as a path segment or query parameter on Ollama and OpenAI-compatible listing routes to trigger requests carrying configured API keys, read version strings, and enumerate connections.","source_quote_or_pointer":"Security Advisory CVE-2026-109296","fact_id":"SEA-CVE-2026-109296-F1","document_citation":"Security Advisory CVE-2026-109296"},{"id":"SEA-CVE-2026-109296-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Open WebUI before 0.11.4 contains a missing authorization vulnerability that allows authenticated users to reach disabled model provider backends by supplying an explicit backend index.","source_quote_or_pointer":"Advisory description (CVE-2026-109296)","fact_id":"SEA-CVE-2026-109296-F2","document_citation":"Advisory description (CVE-2026-109296)"}],"source_stated_contributors":["Open WebUI before 0.11.4 contains a missing authorization vulnerability that allows authenticated users to reach disabled model provider backends by supplying an explicit backend index."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109296","reporting_entity":"CVE-2026-109296","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109296-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109296-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-109296"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109295","title":"Open WebUI from 0.11.0 before 0.11.4 contains a regular expression denial of service vulnerability that allows authenticated users to stall server workers via file search patterns. Attackers can instruct the model to call grep_knowledge_files or grep_chat_files with a catastrophically backtracking regex, blocking the event loop for two seconds per repeated call.","display_title":"Software component issue could make the service unavailable","display_summary":"Open WebUI from 0.11.0 before 0.11.4 contains a regular expression denial of service vulnerability that allows authenticated users to stall server workers via file search patterns.","display_reference":"CVE-2026-109295","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109295","source_title":"Open WebUI from 0.11.0 before 0.11.4 contains a regular expression denial of service vulnerability that allows authenticated users to stall server workers via file search patterns. Attackers can instruct the model to call grep_knowledge_files or grep_chat_files with a catastrophically backtracking regex, blocking the event loop for two seconds per repeated call.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-12T19:47:05.144Z","source_hash":"content-fingerprint:fnv1a-35e18a1d","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109295-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Open WebUI from 0.11.0 before 0.11.4 contains a regular expression denial of service vulnerability that allows authenticated users to stall server workers via file search patterns. Attackers can instruct the model to call grep_knowledge_files or grep_chat_files with a catastrophically backtracking regex, blocking the event loop for two seconds per repeated call.","source_quote_or_pointer":"Security Advisory CVE-2026-109295","fact_id":"SEA-CVE-2026-109295-F1","document_citation":"Security Advisory CVE-2026-109295"},{"id":"SEA-CVE-2026-109295-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Open WebUI from 0.11.0 before 0.11.4 contains a regular expression denial of service vulnerability that allows authenticated users to stall server workers via file search patterns.","source_quote_or_pointer":"Advisory description (CVE-2026-109295)","fact_id":"SEA-CVE-2026-109295-F2","document_citation":"Advisory description (CVE-2026-109295)"}],"source_stated_contributors":["Open WebUI from 0.11.0 before 0.11.4 contains a regular expression denial of service vulnerability that allows authenticated users to stall server workers via file search patterns."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","arch.async_job","arch.event_driven"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109295","reporting_entity":"CVE-2026-109295","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109295-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109295-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-109295"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109294","title":"Open WebUI from 0.6.42 before 0.11.4 contains an uncontrolled resource consumption vulnerability that allows authenticated users to exhaust server memory by supplying compressed remote image URLs in chat messages. Attackers can point the image field at a host returning gzip-encoded responses, which get_image_base64_from_url decompresses unbounded, causing denial of service for all users.","display_title":"Software component issue could make the service unavailable","display_summary":"Open WebUI from 0.6.42 before 0.11.4 contains an uncontrolled resource consumption vulnerability that allows authenticated users to exhaust server memory by supplying compressed remote image URLs in chat messages.","display_reference":"CVE-2026-109294","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109294","source_title":"Open WebUI from 0.6.42 before 0.11.4 contains an uncontrolled resource consumption vulnerability that allows authenticated users to exhaust server memory by supplying compressed remote image URLs in chat messages. Attackers can point the image field at a host returning gzip-encoded responses, which get_image_base64_from_url decompresses unbounded, causing denial of service for all users.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-12T19:47:05.145Z","source_hash":"content-fingerprint:fnv1a-bb2dafe0","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109294-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Open WebUI from 0.6.42 before 0.11.4 contains an uncontrolled resource consumption vulnerability that allows authenticated users to exhaust server memory by supplying compressed remote image URLs in chat messages. Attackers can point the image field at a host returning gzip-encoded responses, which get_image_base64_from_url decompresses unbounded, causing denial of service for all users.","source_quote_or_pointer":"Security Advisory CVE-2026-109294","fact_id":"SEA-CVE-2026-109294-F1","document_citation":"Security Advisory CVE-2026-109294"},{"id":"SEA-CVE-2026-109294-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Open WebUI from 0.6.42 before 0.11.4 contains an uncontrolled resource consumption vulnerability that allows authenticated users to exhaust server memory by supplying compressed remote image URLs in chat messages.","source_quote_or_pointer":"Advisory description (CVE-2026-109294)","fact_id":"SEA-CVE-2026-109294-F2","document_citation":"Advisory description (CVE-2026-109294)"}],"source_stated_contributors":["Open WebUI from 0.6.42 before 0.11.4 contains an uncontrolled resource consumption vulnerability that allows authenticated users to exhaust server memory by supplying compressed remote image URLs in chat messages."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109294","reporting_entity":"CVE-2026-109294","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109294-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109294-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-109294"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109293","title":"Open WebUI from 0.11.0 before 0.11.4 contains an information disclosure vulnerability that allows authenticated non-admin users with tool export permission to obtain tool source code shared with them read-only. Attackers can request GET /api/v1/tools/export to retrieve the full Python source of read-only shared tools, exposing embedded API keys and credentials.","display_title":"Software component issue could expose accounts or credentials","display_summary":"Open WebUI from 0.11.0 before 0.11.4 contains an information disclosure vulnerability that allows authenticated non-admin users with tool export permission to obtain tool source code shared with them read-only.","display_reference":"CVE-2026-109293","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109293","source_title":"Open WebUI from 0.11.0 before 0.11.4 contains an information disclosure vulnerability that allows authenticated non-admin users with tool export permission to obtain tool source code shared with them read-only. Attackers can request GET /api/v1/tools/export to retrieve the full Python source of read-only shared tools, exposing embedded API keys and credentials.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-12T19:47:05.145Z","source_hash":"content-fingerprint:fnv1a-69f8fc53","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109293-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Open WebUI from 0.11.0 before 0.11.4 contains an information disclosure vulnerability that allows authenticated non-admin users with tool export permission to obtain tool source code shared with them read-only. Attackers can request GET /api/v1/tools/export to retrieve the full Python source of read-only shared tools, exposing embedded API keys and credentials.","source_quote_or_pointer":"Security Advisory CVE-2026-109293","fact_id":"SEA-CVE-2026-109293-F1","document_citation":"Security Advisory CVE-2026-109293"},{"id":"SEA-CVE-2026-109293-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Open WebUI from 0.11.0 before 0.11.4 contains an information disclosure vulnerability that allows authenticated non-admin users with tool export permission to obtain tool source code shared with them read-only.","source_quote_or_pointer":"Advisory description (CVE-2026-109293)","fact_id":"SEA-CVE-2026-109293-F2","document_citation":"Advisory description (CVE-2026-109293)"}],"source_stated_contributors":["Open WebUI from 0.11.0 before 0.11.4 contains an information disclosure vulnerability that allows authenticated non-admin users with tool export permission to obtain tool source code shared with them read-only."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109293","reporting_entity":"CVE-2026-109293","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109293-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109293-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-109293"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109290","title":"Open WebUI from 0.11.1 before 0.11.4 contains a stored cross-site scripting vulnerability in DocxPreview.svelte that allows authenticated users to execute script by uploading crafted DOCX attachments. Attackers can embed an OOXML altChunk HTML part or script-scheme hyperlink to steal a previewing administrator's session token from local storage and take over the instance.","display_title":"Software component issue could run attacker-controlled scripts in a browser","display_summary":"Open WebUI from 0.11.1 before 0.11.4 contains a stored cross-site scripting vulnerability in DocxPreview.svelte that allows authenticated users to execute script by uploading crafted DOCX attachments.","display_reference":"CVE-2026-109290","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109290","source_title":"Open WebUI from 0.11.1 before 0.11.4 contains a stored cross-site scripting vulnerability in DocxPreview.svelte that allows authenticated users to execute script by uploading crafted DOCX attachments. Attackers can embed an OOXML altChunk HTML part or script-scheme hyperlink to steal a previewing administrator's session token from local storage and take over the instance.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-12T19:47:05.146Z","source_hash":"content-fingerprint:fnv1a-5f9cbbee","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109290-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Open WebUI from 0.11.1 before 0.11.4 contains a stored cross-site scripting vulnerability in DocxPreview.svelte that allows authenticated users to execute script by uploading crafted DOCX attachments. Attackers can embed an OOXML altChunk HTML part or script-scheme hyperlink to steal a previewing administrator's session token from local storage and take over the instance.","source_quote_or_pointer":"Security Advisory CVE-2026-109290","fact_id":"SEA-CVE-2026-109290-F1","document_citation":"Security Advisory CVE-2026-109290"},{"id":"SEA-CVE-2026-109290-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Open WebUI from 0.11.1 before 0.11.4 contains a stored cross-site scripting vulnerability in DocxPreview.svelte that allows authenticated users to execute script by uploading crafted DOCX attachments.","source_quote_or_pointer":"Advisory description (CVE-2026-109290)","fact_id":"SEA-CVE-2026-109290-F2","document_citation":"Advisory description (CVE-2026-109290)"}],"source_stated_contributors":["Open WebUI from 0.11.1 before 0.11.4 contains a stored cross-site scripting vulnerability in DocxPreview.svelte that allows authenticated users to execute script by uploading crafted DOCX attachments."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii","data.uploaded_files"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109290","reporting_entity":"CVE-2026-109290","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109290-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109290-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-109290"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109289","title":"Open WebUI from 0.8.8 before 0.11.4 contains an improper authorization vulnerability that allows deactivated users to keep executing terminal commands through an already open terminal WebSocket. Because the terminal proxy route in terminals.py checks access only on the first message, deactivated users can keep running commands and reading or writing files on the terminal server.","display_title":"Software component issue could allow unauthorized access","display_summary":"Open WebUI from 0.8.8 before 0.11.4 contains an improper authorization vulnerability that allows deactivated users to keep executing terminal commands through an already open terminal WebSocket.","display_reference":"CVE-2026-109289","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109289","source_title":"Open WebUI from 0.8.8 before 0.11.4 contains an improper authorization vulnerability that allows deactivated users to keep executing terminal commands through an already open terminal WebSocket. Because the terminal proxy route in terminals.py checks access only on the first message, deactivated users can keep running commands and reading or writing files on the terminal server.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-12T19:47:05.146Z","source_hash":"content-fingerprint:fnv1a-c5ea4380","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109289-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Open WebUI from 0.8.8 before 0.11.4 contains an improper authorization vulnerability that allows deactivated users to keep executing terminal commands through an already open terminal WebSocket. Because the terminal proxy route in terminals.py checks access only on the first message, deactivated users can keep running commands and reading or writing files on the terminal server.","source_quote_or_pointer":"Security Advisory CVE-2026-109289","fact_id":"SEA-CVE-2026-109289-F1","document_citation":"Security Advisory CVE-2026-109289"},{"id":"SEA-CVE-2026-109289-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Open WebUI from 0.8.8 before 0.11.4 contains an improper authorization vulnerability that allows deactivated users to keep executing terminal commands through an already open terminal WebSocket.","source_quote_or_pointer":"Advisory description (CVE-2026-109289)","fact_id":"SEA-CVE-2026-109289-F2","document_citation":"Advisory description (CVE-2026-109289)"}],"source_stated_contributors":["Open WebUI from 0.8.8 before 0.11.4 contains an improper authorization vulnerability that allows deactivated users to keep executing terminal commands through an already open terminal WebSocket."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.code_execution","data.pii","arch.event_driven"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109289","reporting_entity":"CVE-2026-109289","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109289-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109289-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-109289"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109288","title":"Open WebUI before 0.11.4 contains a stored cross-site scripting vulnerability in MarkdownInlineTokens.svelte, which renders markdown link URLs into anchor hrefs without validating their scheme. Authenticated users can embed javascript: links in shared chats that, when clicked by a victim, steal the victim's JWT from local storage, including admins' tokens.","display_title":"Software component issue could run attacker-controlled scripts in a browser","display_summary":"Open WebUI before 0.11.4 contains a stored cross-site scripting vulnerability in MarkdownInlineTokens.svelte, which renders markdown link URLs into anchor hrefs without validating their scheme.","display_reference":"CVE-2026-109288","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109288","source_title":"Open WebUI before 0.11.4 contains a stored cross-site scripting vulnerability in MarkdownInlineTokens.svelte, which renders markdown link URLs into anchor hrefs without validating their scheme. Authenticated users can embed javascript: links in shared chats that, when clicked by a victim, steal the victim's JWT from local storage, including admins' tokens.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-12T19:47:05.147Z","source_hash":"content-fingerprint:fnv1a-a533d493","affected_system":{"organization":"Open WebUI before 0.11.4 contains a stored cross-site scripting vulnerability in MarkdownInlineTokens.svelte, which renders markdown link URLs into anchor hrefs without validating their scheme. Authenticated users can embed javascript project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109288-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Open WebUI before 0.11.4 contains a stored cross-site scripting vulnerability in MarkdownInlineTokens.svelte, which renders markdown link URLs into anchor hrefs without validating their scheme. Authenticated users can embed javascript: links in shared chats that, when clicked by a victim, steal the victim's JWT from local storage, including admins' tokens.","source_quote_or_pointer":"Security Advisory CVE-2026-109288","fact_id":"SEA-CVE-2026-109288-F1","document_citation":"Security Advisory CVE-2026-109288"},{"id":"SEA-CVE-2026-109288-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Open WebUI before 0.11.4 contains a stored cross-site scripting vulnerability in MarkdownInlineTokens.svelte, which renders markdown link URLs into anchor hrefs without validating their scheme.","source_quote_or_pointer":"Advisory description (CVE-2026-109288)","fact_id":"SEA-CVE-2026-109288-F2","document_citation":"Advisory description (CVE-2026-109288)"}],"source_stated_contributors":["Open WebUI before 0.11.4 contains a stored cross-site scripting vulnerability in MarkdownInlineTokens.svelte, which renders markdown link URLs into anchor hrefs without validating their scheme."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","data.credentials_secrets"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109288","reporting_entity":"CVE-2026-109288","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109288-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109288-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-109288"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109286","title":"Open WebUI from 0.7.0 before 0.11.4 contains a cross-origin message handling vulnerability in SyncStatsModal that allows any website to steal a signed-in user's session token by posting unvalidated verify:chat messages. Attackers can supply a path-traversal chat id redirecting the authenticated stats export request to the auths endpoint, receiving the victim's JWT for full API access.","display_title":"Software component issue could expose accounts or credentials","display_summary":"Open WebUI from 0.7.0 before 0.11.4 contains a cross-origin message handling vulnerability in SyncStatsModal that allows any website to steal a signed-in user's session token by posting unvalidated verify:chat messages.","display_reference":"CVE-2026-109286","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109286","source_title":"Open WebUI from 0.7.0 before 0.11.4 contains a cross-origin message handling vulnerability in SyncStatsModal that allows any website to steal a signed-in user's session token by posting unvalidated verify:chat messages. Attackers can supply a path-traversal chat id redirecting the authenticated stats export request to the auths endpoint, receiving the victim's JWT for full API access.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-12T19:47:05.148Z","source_hash":"content-fingerprint:fnv1a-29ff2e37","affected_system":{"organization":"Open WebUI from 0.7.0 before 0.11.4 contains a cross-origin message handling vulnerability in SyncStatsModal that allows any website to steal a signed-in user's session token by posting unvalidated verify project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109286-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Open WebUI from 0.7.0 before 0.11.4 contains a cross-origin message handling vulnerability in SyncStatsModal that allows any website to steal a signed-in user's session token by posting unvalidated verify:chat messages. Attackers can supply a path-traversal chat id redirecting the authenticated stats export request to the auths endpoint, receiving the victim's JWT for full API access.","source_quote_or_pointer":"Security Advisory CVE-2026-109286","fact_id":"SEA-CVE-2026-109286-F1","document_citation":"Security Advisory CVE-2026-109286"},{"id":"SEA-CVE-2026-109286-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Open WebUI from 0.7.0 before 0.11.4 contains a cross-origin message handling vulnerability in SyncStatsModal that allows any website to steal a signed-in user's session token by posting unvalidated verify:chat messages.","source_quote_or_pointer":"Advisory description (CVE-2026-109286)","fact_id":"SEA-CVE-2026-109286-F2","document_citation":"Advisory description (CVE-2026-109286)"}],"source_stated_contributors":["Open WebUI from 0.7.0 before 0.11.4 contains a cross-origin message handling vulnerability in SyncStatsModal that allows any website to steal a signed-in user's session token by posting unvalidated verify:chat messages."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","data.untrusted_external_text","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109286","reporting_entity":"CVE-2026-109286","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109286-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109286-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-109286"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109284","title":"Open WebUI from 0.11.0 before 0.11.4 contains an improper authorization vulnerability in the chat fork handler, which places forked chats in the source chat's folder without checking folder write access. Shared folder members downgraded to read-only can call POST /api/v1/chats/{id}/fork on chats they created there while they had write access, inserting attacker-controlled chats visible to the folder owner and members.","display_title":"Software component issue could allow unauthorized access","display_summary":"Open WebUI from 0.11.0 before 0.11.4 contains an improper authorization vulnerability in the chat fork handler, which places forked chats in the source chat's folder without checking folder write access.","display_reference":"CVE-2026-109284","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109284","source_title":"Open WebUI from 0.11.0 before 0.11.4 contains an improper authorization vulnerability in the chat fork handler, which places forked chats in the source chat's folder without checking folder write access. Shared folder members downgraded to read-only can call POST /api/v1/chats/{id}/fork on chats they created there while they had write access, inserting attacker-controlled chats visible to the folder owner and members.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-12T19:47:05.148Z","source_hash":"content-fingerprint:fnv1a-714d2b9d","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109284-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Open WebUI from 0.11.0 before 0.11.4 contains an improper authorization vulnerability in the chat fork handler, which places forked chats in the source chat's folder without checking folder write access. Shared folder members downgraded to read-only can call POST /api/v1/chats/{id}/fork on chats they created there while they had write access, inserting attacker-controlled chats visible to the folder owner and members.","source_quote_or_pointer":"Security Advisory CVE-2026-109284","fact_id":"SEA-CVE-2026-109284-F1","document_citation":"Security Advisory CVE-2026-109284"},{"id":"SEA-CVE-2026-109284-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Open WebUI from 0.11.0 before 0.11.4 contains an improper authorization vulnerability in the chat fork handler, which places forked chats in the source chat's folder without checking folder write access.","source_quote_or_pointer":"Advisory description (CVE-2026-109284)","fact_id":"SEA-CVE-2026-109284-F2","document_citation":"Advisory description (CVE-2026-109284)"}],"source_stated_contributors":["Open WebUI from 0.11.0 before 0.11.4 contains an improper authorization vulnerability in the chat fork handler, which places forked chats in the source chat's folder without checking folder write access."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109284","reporting_entity":"CVE-2026-109284","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109284-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109284-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-109284"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-109283","title":"Open WebUI from 0.11.1 before 0.11.4 contains an authorization bypass in the OAuth token exchange endpoint, which reads role claims only from the provider's userinfo response and keeps the user's existing role when no roles claim is found, ignoring roles sent only in the ID token. Users with a linked account whose identity provider role no longer satisfies the OAuth role policy can send a valid provider access token to POST /api/v1/auths/oauth/{provider}/token/exchange to obtain a session retaining their previous role.","display_title":"Software component issue could allow unauthorized access","display_summary":"Open WebUI from 0.11.1 before 0.11.4 contains an authorization bypass in the OAuth token exchange endpoint, which reads role claims only from the provider's userinfo response and keeps the user's existing role when no…","display_reference":"CVE-2026-109283","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109283","source_title":"Open WebUI from 0.11.1 before 0.11.4 contains an authorization bypass in the OAuth token exchange endpoint, which reads role claims only from the provider's userinfo response and keeps the user's existing role when no roles claim is found, ignoring roles sent only in the ID token. Users with a linked account whose identity provider role no longer satisfies the OAuth role policy can send a valid provider access token to POST /api/v1/auths/oauth/{provider}/token/exchange to obtain a session retaining their previous role.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-12T19:47:05.148Z","source_hash":"content-fingerprint:fnv1a-54c6a236","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-109283-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Open WebUI from 0.11.1 before 0.11.4 contains an authorization bypass in the OAuth token exchange endpoint, which reads role claims only from the provider's userinfo response and keeps the user's existing role when no roles claim is found, ignoring roles sent only in the ID token. Users with a linked account whose identity provider role no longer satisfies the OAuth role policy can send a valid provider access token to POST /api/v1/auths/oauth/{provider}/token/exchange to obtain a session retaining their previous role.","source_quote_or_pointer":"Security Advisory CVE-2026-109283","fact_id":"SEA-CVE-2026-109283-F1","document_citation":"Security Advisory CVE-2026-109283"},{"id":"SEA-CVE-2026-109283-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Open WebUI from 0.11.1 before 0.11.4 contains an authorization bypass in the OAuth token exchange endpoint, which reads role claims only from the provider's userinfo response and keeps the user's existing role when no roles claim is found, ignoring roles sent only in the ID token.","source_quote_or_pointer":"Advisory description (CVE-2026-109283)","fact_id":"SEA-CVE-2026-109283-F2","document_citation":"Advisory description (CVE-2026-109283)"}],"source_stated_contributors":["Open WebUI from 0.11.1 before 0.11.4 contains an authorization bypass in the OAuth token exchange endpoint, which reads role claims only from the provider's userinfo response and keeps the user's existing role when no roles claim is found, ignoring roles sent only in the ID token."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-109283","reporting_entity":"CVE-2026-109283","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-109283-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-109283-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-109283"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108797","title":"A vulnerability has been found in ZKTeco BioTime 9.5.6 Build 20260130.3206. This vulnerability affects unknown code of the file /personnel/api/employees/ of the component Employee REST API. The manipulation leads to authorization bypass. The attack may be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any way.","display_title":"Software component issue could allow unauthorized access","display_summary":"A vulnerability has been found in ZKTeco BioTime 9.5.6 Build 20260130.3206. This vulnerability affects unknown code of the file /personnel/api/employees/ of the component Employee REST API.","display_reference":"CVE-2026-108797","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108797","source_title":"A vulnerability has been found in ZKTeco BioTime 9.5.6 Build 20260130.3206. This vulnerability affects unknown code of the file /personnel/api/employees/ of the component Employee REST API. The manipulation leads to authorization bypass. The attack may be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any way.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-12T09:06:33.709Z","source_hash":"content-fingerprint:fnv1a-24856a45","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108797-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability has been found in ZKTeco BioTime 9.5.6 Build 20260130.3206. This vulnerability affects unknown code of the file /personnel/api/employees/ of the component Employee REST API. The manipulation leads to authorization bypass. The attack may be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any way.","source_quote_or_pointer":"Security Advisory CVE-2026-108797","fact_id":"SEA-CVE-2026-108797-F1","document_citation":"Security Advisory CVE-2026-108797"},{"id":"SEA-CVE-2026-108797-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability has been found in ZKTeco BioTime 9.5.6 Build 20260130.3206. This vulnerability affects unknown code of the file /personnel/api/employees/ of the component Employee REST API. The manipulation leads to authorization bypass. The attack may be initiated remotely.","source_quote_or_pointer":"Advisory description (CVE-2026-108797)","fact_id":"SEA-CVE-2026-108797-F2","document_citation":"Advisory description (CVE-2026-108797)"}],"source_stated_contributors":["A vulnerability has been found in ZKTeco BioTime 9.5.6 Build 20260130.3206. This vulnerability affects unknown code of the file /personnel/api/employees/ of the component Employee REST API. The manipulation leads to authorization bypass. The attack may be initiated remotely."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108797","reporting_entity":"CVE-2026-108797","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108797-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108797-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108797"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108794","title":"A security vulnerability has been detected in ZKTeco BioTime 9.5.6 Build 20260130.3206. Affected by this vulnerability is an unknown functionality of the file /base/api/v1.0/systemSettings/db_migrate_setting/ of the component Database Migration Functionality. Such manipulation leads to sql injection. It is possible to launch the attack remotely. The vendor was contacted early about this disclosure but did not respond in any way.","display_title":"Software component issue could expose or alter stored data","display_summary":"A security vulnerability has been detected in ZKTeco BioTime 9.5.6 Build 20260130.3206. Affected by this vulnerability is an unknown functionality of the file /base/api/v1.0/systemSettings/dbmigratesetting/ of the…","display_reference":"CVE-2026-108794","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108794","source_title":"A security vulnerability has been detected in ZKTeco BioTime 9.5.6 Build 20260130.3206. Affected by this vulnerability is an unknown functionality of the file /base/api/v1.0/systemSettings/db_migrate_setting/ of the component Database Migration Functionality. Such manipulation leads to sql injection. It is possible to launch the attack remotely. The vendor was contacted early about this disclosure but did not respond in any way.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-12T09:06:33.716Z","source_hash":"content-fingerprint:fnv1a-71670b86","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108794-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A security vulnerability has been detected in ZKTeco BioTime 9.5.6 Build 20260130.3206. Affected by this vulnerability is an unknown functionality of the file /base/api/v1.0/systemSettings/db_migrate_setting/ of the component Database Migration Functionality. Such manipulation leads to sql injection. It is possible to launch the attack remotely. The vendor was contacted early about this disclosure but did not respond in any way.","source_quote_or_pointer":"Security Advisory CVE-2026-108794","fact_id":"SEA-CVE-2026-108794-F1","document_citation":"Security Advisory CVE-2026-108794"},{"id":"SEA-CVE-2026-108794-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A security vulnerability has been detected in ZKTeco BioTime 9.5.6 Build 20260130.3206. Affected by this vulnerability is an unknown functionality of the file /base/api/v1.0/systemSettings/dbmigratesetting/ of the component Database Migration Functionality. Such manipulation leads to sql injection.","source_quote_or_pointer":"Advisory description (CVE-2026-108794)","fact_id":"SEA-CVE-2026-108794-F2","document_citation":"Advisory description (CVE-2026-108794)"}],"source_stated_contributors":["A security vulnerability has been detected in ZKTeco BioTime 9.5.6 Build 20260130.3206. Affected by this vulnerability is an unknown functionality of the file /base/api/v1.0/systemSettings/dbmigratesetting/ of the component Database Migration Functionality. Such manipulation leads to sql injection."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.infrastructure_modification","auth.write_action","data.pii","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108794","reporting_entity":"CVE-2026-108794","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108794-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108794-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108794"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-107437","title":"GV-E-Map Server V18.2.0A contains a plaintext database password embedded within an application component. The credential can be recovered through static analysis of the distributed binary and may also be exposed in process memory during runtime.","display_title":"Software component issue could expose accounts or credentials","display_summary":"Server V18.2.0A contains a plaintext database password embedded within an","display_reference":"CVE-2026-107437","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107437","source_title":"GV-E-Map Server V18.2.0A contains a plaintext database password embedded within an application component. The credential can be recovered through static analysis of the distributed binary and may also be exposed in process memory during runtime.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-12T09:06:33.718Z","source_hash":"content-fingerprint:fnv1a-dcb2312b","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-107437-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"GV-E-Map Server V18.2.0A contains a plaintext database password embedded within an application component. The credential can be recovered through static analysis of the distributed binary and may also be exposed in process memory during runtime.","source_quote_or_pointer":"Security Advisory CVE-2026-107437","fact_id":"SEA-CVE-2026-107437-F1","document_citation":"Security Advisory CVE-2026-107437"},{"id":"SEA-CVE-2026-107437-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Server V18.2.0A contains a plaintext database password embedded within an","source_quote_or_pointer":"Advisory description (CVE-2026-107437)","fact_id":"SEA-CVE-2026-107437-F2","document_citation":"Advisory description (CVE-2026-107437)"}],"source_stated_contributors":["Server V18.2.0A contains a plaintext database password embedded within an"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.credentials_secrets","arch.distributed_tx"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-107437","reporting_entity":"CVE-2026-107437","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-107437-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-107437-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-107437"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108787","title":"A vulnerability was found in houtini-ai voice-analyser-mcp up to 2.1.1. The affected element is the function fetch of the file src/utils/crawler.ts of the component collect_corpus. Performing a manipulation of the argument sitemap_url results in server-side request forgery. Remote exploitation of the attack is possible. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.","display_title":"Software component issue could reach internal services","display_summary":"A vulnerability was found in houtini-ai voice-analyser-mcp up to 2.1.1. The affected element is the function fetch of the file src/utils/crawler.ts of the component collectcorpus.","display_reference":"CVE-2026-108787","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108787","source_title":"A vulnerability was found in houtini-ai voice-analyser-mcp up to 2.1.1. The affected element is the function fetch of the file src/utils/crawler.ts of the component collect_corpus. Performing a manipulation of the argument sitemap_url results in server-side request forgery. Remote exploitation of the attack is possible. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-12T09:06:33.721Z","source_hash":"content-fingerprint:fnv1a-1109846a","affected_system":{"organization":"Software component project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108787-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability was found in houtini-ai voice-analyser-mcp up to 2.1.1. The affected element is the function fetch of the file src/utils/crawler.ts of the component collect_corpus. Performing a manipulation of the argument sitemap_url results in server-side request forgery. Remote exploitation of the attack is possible. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.","source_quote_or_pointer":"Security Advisory CVE-2026-108787","fact_id":"SEA-CVE-2026-108787-F1","document_citation":"Security Advisory CVE-2026-108787"},{"id":"SEA-CVE-2026-108787-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability was found in houtini-ai voice-analyser-mcp up to 2.1.1. The affected element is the function fetch of the file src/utils/crawler.ts of the component collectcorpus. Performing a manipulation of the argument sitemapurl results in server-side request forgery. Remote exploitation of the attack is possible.","source_quote_or_pointer":"Advisory description (CVE-2026-108787)","fact_id":"SEA-CVE-2026-108787-F2","document_citation":"Advisory description (CVE-2026-108787)"}],"source_stated_contributors":["A vulnerability was found in houtini-ai voice-analyser-mcp up to 2.1.1. The affected element is the function fetch of the file src/utils/crawler.ts of the component collectcorpus. Performing a manipulation of the argument sitemapurl results in server-side request forgery. Remote exploitation of the attack is possible."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.public_publication","arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-002","SEA-FM-010"],"consequences":["Internal network access","Cloud metadata or credential exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108787","reporting_entity":"CVE-2026-108787","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108787-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108787-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"The service fetched a URL chosen by the caller and could be steered at internal systems. Restrict outbound destinations and block internal address ranges.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108787"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108786","title":"A vulnerability has been found in houtini-ai seo-crawler-mcp up to 2.1.5. Impacted is the function run_seo_audit of the file src/core/CrawlOrchestrator.ts of the component Crawler. Such manipulation leads to server-side request forgery. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.","display_title":"Software component issue could reach internal services","display_summary":"A vulnerability has been found in houtini-ai seo-crawler-mcp up to 2.1.5. Impacted is the function runseoaudit of the file src/core/CrawlOrchestrator.ts of the component Crawler.","display_reference":"CVE-2026-108786","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108786","source_title":"A vulnerability has been found in houtini-ai seo-crawler-mcp up to 2.1.5. Impacted is the function run_seo_audit of the file src/core/CrawlOrchestrator.ts of the component Crawler. Such manipulation leads to server-side request forgery. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-12T09:06:33.722Z","source_hash":"content-fingerprint:fnv1a-50534f45","affected_system":{"organization":"Software component project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108786-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability has been found in houtini-ai seo-crawler-mcp up to 2.1.5. Impacted is the function run_seo_audit of the file src/core/CrawlOrchestrator.ts of the component Crawler. Such manipulation leads to server-side request forgery. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.","source_quote_or_pointer":"Security Advisory CVE-2026-108786","fact_id":"SEA-CVE-2026-108786-F1","document_citation":"Security Advisory CVE-2026-108786"},{"id":"SEA-CVE-2026-108786-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability has been found in houtini-ai seo-crawler-mcp up to 2.1.5. Impacted is the function runseoaudit of the file src/core/CrawlOrchestrator.ts of the component Crawler. Such manipulation leads to server-side request forgery. The attack may be launched remotely.","source_quote_or_pointer":"Advisory description (CVE-2026-108786)","fact_id":"SEA-CVE-2026-108786-F2","document_citation":"Advisory description (CVE-2026-108786)"}],"source_stated_contributors":["A vulnerability has been found in houtini-ai seo-crawler-mcp up to 2.1.5. Impacted is the function runseoaudit of the file src/core/CrawlOrchestrator.ts of the component Crawler. Such manipulation leads to server-side request forgery. The attack may be launched remotely."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.public_publication","data.pii","data.untrusted_external_text","arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-002","SEA-FM-010"],"consequences":["Internal network access","Cloud metadata or credential exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108786","reporting_entity":"CVE-2026-108786","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108786-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108786-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"The service fetched a URL chosen by the caller and could be steered at internal systems. Restrict outbound destinations and block internal address ranges.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108786"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108782","title":"A weakness has been identified in erzhongxmu JEEWMS up to 2026.09.27-W39. Affected by this issue is the function CommonServiceImpl.getAutoList of the file src/main/java/org/jeecgframework/core/common/service/impl/CommonServiceImpl.java of the component Autocomplete Handler. Executing a manipulation of the argument trem/searchField/entityName can lead to sql injection. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.","display_title":"Software component issue could expose or alter stored data","display_summary":"A weakness has been identified in erzhongxmu JEEWMS up to 2026.09.27-W39. Affected by this issue is the function CommonServiceImpl.getAutoList of the file…","display_reference":"CVE-2026-108782","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108782","source_title":"A weakness has been identified in erzhongxmu JEEWMS up to 2026.09.27-W39. Affected by this issue is the function CommonServiceImpl.getAutoList of the file src/main/java/org/jeecgframework/core/common/service/impl/CommonServiceImpl.java of the component Autocomplete Handler. Executing a manipulation of the argument trem/searchField/entityName can lead to sql injection. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-12T09:06:33.723Z","source_hash":"content-fingerprint:fnv1a-75b88acb","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108782-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A weakness has been identified in erzhongxmu JEEWMS up to 2026.09.27-W39. Affected by this issue is the function CommonServiceImpl.getAutoList of the file src/main/java/org/jeecgframework/core/common/service/impl/CommonServiceImpl.java of the component Autocomplete Handler. Executing a manipulation of the argument trem/searchField/entityName can lead to sql injection. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.","source_quote_or_pointer":"Security Advisory CVE-2026-108782","fact_id":"SEA-CVE-2026-108782-F1","document_citation":"Security Advisory CVE-2026-108782"},{"id":"SEA-CVE-2026-108782-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A weakness has been identified in erzhongxmu JEEWMS up to 2026.09.27-W39. Affected by this issue is the function CommonServiceImpl.getAutoList of the file src/main/java/org/jeecgframework/core/common/service/impl/CommonServiceImpl.java of the component Autocomplete Handler.","source_quote_or_pointer":"Advisory description (CVE-2026-108782)","fact_id":"SEA-CVE-2026-108782-F2","document_citation":"Advisory description (CVE-2026-108782)"}],"source_stated_contributors":["A weakness has been identified in erzhongxmu JEEWMS up to 2026.09.27-W39. Affected by this issue is the function CommonServiceImpl.getAutoList of the file src/main/java/org/jeecgframework/core/common/service/impl/CommonServiceImpl.java of the component Autocomplete Handler."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.public_publication"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108782","reporting_entity":"CVE-2026-108782","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108782-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108782-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108782"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108779","title":"A vulnerability was identified in erzhongxmu JEEWMS up to 2026.09.27-W39. Affected is the function WmSttInGoodsController.list of the file src/main/java/com/zzjee/wm/controller/WmSttInGoodsController.java. Such manipulation of the argument searchstr leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.","display_title":"Software component issue could expose or alter stored data","display_summary":"A vulnerability was identified in erzhongxmu JEEWMS up to 2026.09.27-W39. Affected is the function WmSttInGoodsController.list of the file src/main/java/com/zzjee/wm/controller/WmSttInGoodsController.java.","display_reference":"CVE-2026-108779","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108779","source_title":"A vulnerability was identified in erzhongxmu JEEWMS up to 2026.09.27-W39. Affected is the function WmSttInGoodsController.list of the file src/main/java/com/zzjee/wm/controller/WmSttInGoodsController.java. Such manipulation of the argument searchstr leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-12T09:06:33.724Z","source_hash":"content-fingerprint:fnv1a-947bc96f","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108779-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability was identified in erzhongxmu JEEWMS up to 2026.09.27-W39. Affected is the function WmSttInGoodsController.list of the file src/main/java/com/zzjee/wm/controller/WmSttInGoodsController.java. Such manipulation of the argument searchstr leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.","source_quote_or_pointer":"Security Advisory CVE-2026-108779","fact_id":"SEA-CVE-2026-108779-F1","document_citation":"Security Advisory CVE-2026-108779"},{"id":"SEA-CVE-2026-108779-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability was identified in erzhongxmu JEEWMS up to 2026.09.27-W39. Affected is the function WmSttInGoodsController.list of the file src/main/java/com/zzjee/wm/controller/WmSttInGoodsController.java. Such manipulation of the argument searchstr leads to sql injection. The attack may be performed from remote.","source_quote_or_pointer":"Advisory description (CVE-2026-108779)","fact_id":"SEA-CVE-2026-108779-F2","document_citation":"Advisory description (CVE-2026-108779)"}],"source_stated_contributors":["A vulnerability was identified in erzhongxmu JEEWMS up to 2026.09.27-W39. Affected is the function WmSttInGoodsController.list of the file src/main/java/com/zzjee/wm/controller/WmSttInGoodsController.java. Such manipulation of the argument searchstr leads to sql injection. The attack may be performed from remote."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108779","reporting_entity":"CVE-2026-108779","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108779-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108779-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108779"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108778","title":"A vulnerability was determined in erzhongxmu JEEWMS up to 2026.09.27-W39. This impacts the function WmInQmIController.list of the file src/main/java/com/zzjee/wm/controller/WmInQmIController.java of the component Inbound Quality Check Pda Interface. This manipulation of the argument searchstr causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.","display_title":"Software component issue could expose or alter stored data","display_summary":"A vulnerability was determined in erzhongxmu JEEWMS up to 2026.09.27-W39. This impacts the function WmInQmIController.list of the file src/main/java/com/zzjee/wm/controller/WmInQmIController.java of the component Inbound…","display_reference":"CVE-2026-108778","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108778","source_title":"A vulnerability was determined in erzhongxmu JEEWMS up to 2026.09.27-W39. This impacts the function WmInQmIController.list of the file src/main/java/com/zzjee/wm/controller/WmInQmIController.java of the component Inbound Quality Check Pda Interface. This manipulation of the argument searchstr causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-12T09:06:33.725Z","source_hash":"content-fingerprint:fnv1a-4c7373b4","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108778-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability was determined in erzhongxmu JEEWMS up to 2026.09.27-W39. This impacts the function WmInQmIController.list of the file src/main/java/com/zzjee/wm/controller/WmInQmIController.java of the component Inbound Quality Check Pda Interface. This manipulation of the argument searchstr causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.","source_quote_or_pointer":"Security Advisory CVE-2026-108778","fact_id":"SEA-CVE-2026-108778-F1","document_citation":"Security Advisory CVE-2026-108778"},{"id":"SEA-CVE-2026-108778-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability was determined in erzhongxmu JEEWMS up to 2026.09.27-W39. This impacts the function WmInQmIController.list of the file src/main/java/com/zzjee/wm/controller/WmInQmIController.java of the component Inbound Quality Check Pda Interface. This manipulation of the argument searchstr causes sql injection.","source_quote_or_pointer":"Advisory description (CVE-2026-108778)","fact_id":"SEA-CVE-2026-108778-F2","document_citation":"Advisory description (CVE-2026-108778)"}],"source_stated_contributors":["A vulnerability was determined in erzhongxmu JEEWMS up to 2026.09.27-W39. This impacts the function WmInQmIController.list of the file src/main/java/com/zzjee/wm/controller/WmInQmIController.java of the component Inbound Quality Check Pda Interface. This manipulation of the argument searchstr causes sql injection."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108778","reporting_entity":"CVE-2026-108778","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108778-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108778-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108778"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108777","title":"A vulnerability was found in erzhongxmu JEEWMS up to 2026.09.27-W39. This affects the function WvGiController.list of the file src/main/java/com/zzjee/wmapi/controller/WvGiController.java. The manipulation of the argument searchstr results in sql injection. The attack can be executed remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.","display_title":"Software component issue could expose or alter stored data","display_summary":"A vulnerability was found in erzhongxmu JEEWMS up to 2026.09.27-W39. This affects the function WvGiController.list of the file src/main/java/com/zzjee/wmapi/controller/WvGiController.java.","display_reference":"CVE-2026-108777","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108777","source_title":"A vulnerability was found in erzhongxmu JEEWMS up to 2026.09.27-W39. This affects the function WvGiController.list of the file src/main/java/com/zzjee/wmapi/controller/WvGiController.java. The manipulation of the argument searchstr results in sql injection. The attack can be executed remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-12T09:06:33.726Z","source_hash":"content-fingerprint:fnv1a-b4fc1591","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108777-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability was found in erzhongxmu JEEWMS up to 2026.09.27-W39. This affects the function WvGiController.list of the file src/main/java/com/zzjee/wmapi/controller/WvGiController.java. The manipulation of the argument searchstr results in sql injection. The attack can be executed remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.","source_quote_or_pointer":"Security Advisory CVE-2026-108777","fact_id":"SEA-CVE-2026-108777-F1","document_citation":"Security Advisory CVE-2026-108777"},{"id":"SEA-CVE-2026-108777-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability was found in erzhongxmu JEEWMS up to 2026.09.27-W39. This affects the function WvGiController.list of the file src/main/java/com/zzjee/wmapi/controller/WvGiController.java. The manipulation of the argument searchstr results in sql injection. The attack can be executed remotely.","source_quote_or_pointer":"Advisory description (CVE-2026-108777)","fact_id":"SEA-CVE-2026-108777-F2","document_citation":"Advisory description (CVE-2026-108777)"}],"source_stated_contributors":["A vulnerability was found in erzhongxmu JEEWMS up to 2026.09.27-W39. This affects the function WvGiController.list of the file src/main/java/com/zzjee/wmapi/controller/WvGiController.java. The manipulation of the argument searchstr results in sql injection. The attack can be executed remotely."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.public_publication"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108777","reporting_entity":"CVE-2026-108777","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108777-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108777-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108777"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108775","title":"A vulnerability has been found in erzhongxmu JEEWMS up to 2026.09.27-W39. The impacted element is the function WvNoticeController.list of the file com/zzjee/wmapi/controller/WvNoticeController.java of the component Search Endpoint. The manipulation of the argument searchstr leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.","display_title":"Software component issue could expose or alter stored data","display_summary":"A vulnerability has been found in erzhongxmu JEEWMS up to 2026.09.27-W39. The impacted element is the function WvNoticeController.list of the file com/zzjee/wmapi/controller/WvNoticeController.java of the component…","display_reference":"CVE-2026-108775","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108775","source_title":"A vulnerability has been found in erzhongxmu JEEWMS up to 2026.09.27-W39. The impacted element is the function WvNoticeController.list of the file com/zzjee/wmapi/controller/WvNoticeController.java of the component Search Endpoint. The manipulation of the argument searchstr leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-12T09:06:33.727Z","source_hash":"content-fingerprint:fnv1a-d6afd79","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108775-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability has been found in erzhongxmu JEEWMS up to 2026.09.27-W39. The impacted element is the function WvNoticeController.list of the file com/zzjee/wmapi/controller/WvNoticeController.java of the component Search Endpoint. The manipulation of the argument searchstr leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.","source_quote_or_pointer":"Security Advisory CVE-2026-108775","fact_id":"SEA-CVE-2026-108775-F1","document_citation":"Security Advisory CVE-2026-108775"},{"id":"SEA-CVE-2026-108775-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability has been found in erzhongxmu JEEWMS up to 2026.09.27-W39. The impacted element is the function WvNoticeController.list of the file com/zzjee/wmapi/controller/WvNoticeController.java of the component Search Endpoint. The manipulation of the argument searchstr leads to sql injection.","source_quote_or_pointer":"Advisory description (CVE-2026-108775)","fact_id":"SEA-CVE-2026-108775-F2","document_citation":"Advisory description (CVE-2026-108775)"}],"source_stated_contributors":["A vulnerability has been found in erzhongxmu JEEWMS up to 2026.09.27-W39. The impacted element is the function WvNoticeController.list of the file com/zzjee/wmapi/controller/WvNoticeController.java of the component Search Endpoint. The manipulation of the argument searchstr leads to sql injection."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.public_publication","data.pii","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108775","reporting_entity":"CVE-2026-108775","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108775-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108775-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108775"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108774","title":"A flaw has been found in erzhongxmu JEEWMS up to 2026.09.27-W39. The affected element is the function getbinall/getbinallagv of the file src/main/java/com/zzjee/md/controller/MdBinController.java. Executing a manipulation of the argument binstore/binid/des/cengshu can lead to sql injection. The attack may be launched remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.","display_title":"Software component issue could expose or alter stored data","display_summary":"A flaw has been found in erzhongxmu JEEWMS up to 2026.09.27-W39. The affected element is the function getbinall/getbinallagv of the file src/main/java/com/zzjee/md/controller/MdBinController.java.","display_reference":"CVE-2026-108774","display_source_type":"Security advisory","incident_date":"2026-10-12","disclosure_date":"2026-10-12","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108774","source_title":"A flaw has been found in erzhongxmu JEEWMS up to 2026.09.27-W39. The affected element is the function getbinall/getbinallagv of the file src/main/java/com/zzjee/md/controller/MdBinController.java. Executing a manipulation of the argument binstore/binid/des/cengshu can lead to sql injection. The attack may be launched remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-12T09:06:33.727Z","source_hash":"content-fingerprint:fnv1a-c2bacbfc","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108774-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A flaw has been found in erzhongxmu JEEWMS up to 2026.09.27-W39. The affected element is the function getbinall/getbinallagv of the file src/main/java/com/zzjee/md/controller/MdBinController.java. Executing a manipulation of the argument binstore/binid/des/cengshu can lead to sql injection. The attack may be launched remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.","source_quote_or_pointer":"Security Advisory CVE-2026-108774","fact_id":"SEA-CVE-2026-108774-F1","document_citation":"Security Advisory CVE-2026-108774"},{"id":"SEA-CVE-2026-108774-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A flaw has been found in erzhongxmu JEEWMS up to 2026.09.27-W39. The affected element is the function getbinall/getbinallagv of the file src/main/java/com/zzjee/md/controller/MdBinController.java. Executing a manipulation of the argument binstore/binid/des/cengshu can lead to sql injection.","source_quote_or_pointer":"Advisory description (CVE-2026-108774)","fact_id":"SEA-CVE-2026-108774-F2","document_citation":"Advisory description (CVE-2026-108774)"}],"source_stated_contributors":["A flaw has been found in erzhongxmu JEEWMS up to 2026.09.27-W39. The affected element is the function getbinall/getbinallagv of the file src/main/java/com/zzjee/md/controller/MdBinController.java. Executing a manipulation of the argument binstore/binid/des/cengshu can lead to sql injection."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108774","reporting_entity":"CVE-2026-108774","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108774-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108774-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108774"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108773","title":"A vulnerability was detected in erzhongxmu JEEWMS up to 2026.09.27-W39. Impacted is the function docheck of the file src/main/java/com/zzjee/wm/controller/WmOmNoticeHController.java. Performing a manipulation of the argument goodscode results in sql injection. The attack may be initiated remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.","display_title":"Software component issue could expose or alter stored data","display_summary":"A vulnerability was detected in erzhongxmu JEEWMS up to 2026.09.27-W39. Impacted is the function docheck of the file src/main/java/com/zzjee/wm/controller/WmOmNoticeHController.java.","display_reference":"CVE-2026-108773","display_source_type":"Security advisory","incident_date":"2026-10-11","disclosure_date":"2026-10-11","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108773","source_title":"A vulnerability was detected in erzhongxmu JEEWMS up to 2026.09.27-W39. Impacted is the function docheck of the file src/main/java/com/zzjee/wm/controller/WmOmNoticeHController.java. Performing a manipulation of the argument goodscode results in sql injection. The attack may be initiated remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-12T01:16:47.437Z","source_hash":"content-fingerprint:fnv1a-23c61fcd","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108773-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability was detected in erzhongxmu JEEWMS up to 2026.09.27-W39. Impacted is the function docheck of the file src/main/java/com/zzjee/wm/controller/WmOmNoticeHController.java. Performing a manipulation of the argument goodscode results in sql injection. The attack may be initiated remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.","source_quote_or_pointer":"Security Advisory CVE-2026-108773","fact_id":"SEA-CVE-2026-108773-F1","document_citation":"Security Advisory CVE-2026-108773"},{"id":"SEA-CVE-2026-108773-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability was detected in erzhongxmu JEEWMS up to 2026.09.27-W39. Impacted is the function docheck of the file src/main/java/com/zzjee/wm/controller/WmOmNoticeHController.java. Performing a manipulation of the argument goodscode results in sql injection. The attack may be initiated remotely.","source_quote_or_pointer":"Advisory description (CVE-2026-108773)","fact_id":"SEA-CVE-2026-108773-F2","document_citation":"Advisory description (CVE-2026-108773)"}],"source_stated_contributors":["A vulnerability was detected in erzhongxmu JEEWMS up to 2026.09.27-W39. Impacted is the function docheck of the file src/main/java/com/zzjee/wm/controller/WmOmNoticeHController.java. Performing a manipulation of the argument goodscode results in sql injection. The attack may be initiated remotely."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.public_publication"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108773","reporting_entity":"CVE-2026-108773","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108773-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108773-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108773"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108772","title":"A security vulnerability has been detected in bleenco abstruse up to 2.1.0. This issue affects the function filepath.Join of the file server/api/worker/download_cache.go of the component Cache Endpoint. Such manipulation of the argument File leads to path traversal. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.","display_title":"Software component issue could expose restricted files","display_summary":"A security vulnerability has been detected in bleenco abstruse up to 2.1.0. This issue affects the function filepath.Join of the file server/api/worker/downloadcache.go of the component Cache Endpoint.","display_reference":"CVE-2026-108772","display_source_type":"Security advisory","incident_date":"2026-10-11","disclosure_date":"2026-10-11","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108772","source_title":"A security vulnerability has been detected in bleenco abstruse up to 2.1.0. This issue affects the function filepath.Join of the file server/api/worker/download_cache.go of the component Cache Endpoint. Such manipulation of the argument File leads to path traversal. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-12T01:16:47.441Z","source_hash":"content-fingerprint:fnv1a-3e379de8","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108772-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A security vulnerability has been detected in bleenco abstruse up to 2.1.0. This issue affects the function filepath.Join of the file server/api/worker/download_cache.go of the component Cache Endpoint. Such manipulation of the argument File leads to path traversal. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.","source_quote_or_pointer":"Security Advisory CVE-2026-108772","fact_id":"SEA-CVE-2026-108772-F1","document_citation":"Security Advisory CVE-2026-108772"},{"id":"SEA-CVE-2026-108772-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A security vulnerability has been detected in bleenco abstruse up to 2.1.0. This issue affects the function filepath.Join of the file server/api/worker/downloadcache.go of the component Cache Endpoint. Such manipulation of the argument File leads to path traversal. The attack can be launched remotely.","source_quote_or_pointer":"Advisory description (CVE-2026-108772)","fact_id":"SEA-CVE-2026-108772-F2","document_citation":"Advisory description (CVE-2026-108772)"}],"source_stated_contributors":["A security vulnerability has been detected in bleenco abstruse up to 2.1.0. This issue affects the function filepath.Join of the file server/api/worker/downloadcache.go of the component Cache Endpoint. Such manipulation of the argument File leads to path traversal. The attack can be launched remotely."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","data.untrusted_external_text","arch.caching","arch.async_job"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Restricted file exposure","File overwrite"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108772","reporting_entity":"CVE-2026-108772","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108772-SG1","label":"Confine file access to a fixed root","description":"Resolve paths to canonical form and reject anything outside the intended directory before opening files.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108772-SG1","label":"Confine file access to a fixed root","description":"Resolve paths to canonical form and reject anything outside the intended directory before opening files.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"File paths supplied by a caller escaped the intended directory. Canonicalise paths and confine file access to a fixed root.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108772"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108770","title":"A weakness has been identified in Appwrite up to 2.3.0. This vulnerability affects the function PublicHostname of the file src/Appwrite/Platform/Modules/Avatars/Http/Screenshots/Get.php of the component Browser Screenshot Service. This manipulation of the argument url causes server-side request forgery. The attack can be initiated remotely. Upgrading to version 2.4.0 is able to resolve this issue. Patch name: 393255e7302ae5503331d45802e2eee01c6a47fe. You should upgrade the affected component.","display_title":"Software component issue could reach internal services","display_summary":"A weakness has been identified in Appwrite up to 2.3.0. This vulnerability affects the function PublicHostname of the file src/Appwrite/Platform/Modules/Avatars/Http/Screenshots/Get.php of the component Browser…","display_reference":"CVE-2026-108770","display_source_type":"Security advisory","incident_date":"2026-10-11","disclosure_date":"2026-10-11","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108770","source_title":"A weakness has been identified in Appwrite up to 2.3.0. This vulnerability affects the function PublicHostname of the file src/Appwrite/Platform/Modules/Avatars/Http/Screenshots/Get.php of the component Browser Screenshot Service. This manipulation of the argument url causes server-side request forgery. The attack can be initiated remotely. Upgrading to version 2.4.0 is able to resolve this issue. Patch name: 393255e7302ae5503331d45802e2eee01c6a47fe. You should upgrade the affected component.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-12T01:16:47.442Z","source_hash":"content-fingerprint:fnv1a-e8f9868c","affected_system":{"organization":"A weakness has been identified in Appwrite up to 2.3.0. This vulnerability affects the function PublicHostname of the file src/Appwrite/Platform/Modules/Avatars/Http/Screenshots/Get.php of the component Browser Screenshot Service. This manipulation of the argument url causes server-side request forgery. The attack can be initiated remotely. Upgrading to version 2.4.0 is able to resolve this issue. Patch name project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108770-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A weakness has been identified in Appwrite up to 2.3.0. This vulnerability affects the function PublicHostname of the file src/Appwrite/Platform/Modules/Avatars/Http/Screenshots/Get.php of the component Browser Screenshot Service. This manipulation of the argument url causes server-side request forgery. The attack can be initiated remotely. Upgrading to version 2.4.0 is able to resolve this issue. Patch name: 393255e7302ae5503331d45802e2eee01c6a47fe. You should upgrade the affected component.","source_quote_or_pointer":"Security Advisory CVE-2026-108770","fact_id":"SEA-CVE-2026-108770-F1","document_citation":"Security Advisory CVE-2026-108770"},{"id":"SEA-CVE-2026-108770-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A weakness has been identified in Appwrite up to 2.3.0. This vulnerability affects the function PublicHostname of the file src/Appwrite/Platform/Modules/Avatars/Http/Screenshots/Get.php of the component Browser Screenshot Service. This manipulation of the argument url causes server-side request forgery.","source_quote_or_pointer":"Advisory description (CVE-2026-108770)","fact_id":"SEA-CVE-2026-108770-F2","document_citation":"Advisory description (CVE-2026-108770)"}],"source_stated_contributors":["A weakness has been identified in Appwrite up to 2.3.0. This vulnerability affects the function PublicHostname of the file src/Appwrite/Platform/Modules/Avatars/Http/Screenshots/Get.php of the component Browser Screenshot Service. This manipulation of the argument url causes server-side request forgery."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Internal network access","Cloud metadata or credential exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108770","reporting_entity":"CVE-2026-108770","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108770-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108770-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"The service fetched a URL chosen by the caller and could be steered at internal systems. Restrict outbound destinations and block internal address ranges.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108770"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108769","title":"A security flaw has been discovered in zhayujie CowAgent up to 2.2.0. This affects an unknown part of the file Markdown.tsx of the component Markdown Rendering. The manipulation results in denial of service. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.","display_title":"Software component issue could make the service unavailable","display_summary":"A security flaw has been discovered in zhayujie CowAgent up to 2.2.0. This affects an unknown part of the file Markdown.tsx of the component Markdown Rendering. The manipulation results in denial of service.","display_reference":"CVE-2026-108769","display_source_type":"Security advisory","incident_date":"2026-10-11","disclosure_date":"2026-10-11","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108769","source_title":"A security flaw has been discovered in zhayujie CowAgent up to 2.2.0. This affects an unknown part of the file Markdown.tsx of the component Markdown Rendering. The manipulation results in denial of service. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-12T01:16:47.443Z","source_hash":"content-fingerprint:fnv1a-5fdfd65a","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108769-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A security flaw has been discovered in zhayujie CowAgent up to 2.2.0. This affects an unknown part of the file Markdown.tsx of the component Markdown Rendering. The manipulation results in denial of service. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.","source_quote_or_pointer":"Security Advisory CVE-2026-108769","fact_id":"SEA-CVE-2026-108769-F1","document_citation":"Security Advisory CVE-2026-108769"},{"id":"SEA-CVE-2026-108769-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A security flaw has been discovered in zhayujie CowAgent up to 2.2.0. This affects an unknown part of the file Markdown.tsx of the component Markdown Rendering. The manipulation results in denial of service. It is possible to launch the attack remotely.","source_quote_or_pointer":"Advisory description (CVE-2026-108769)","fact_id":"SEA-CVE-2026-108769-F2","document_citation":"Advisory description (CVE-2026-108769)"}],"source_stated_contributors":["A security flaw has been discovered in zhayujie CowAgent up to 2.2.0. This affects an unknown part of the file Markdown.tsx of the component Markdown Rendering. The manipulation results in denial of service. It is possible to launch the attack remotely."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.public_publication"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108769","reporting_entity":"CVE-2026-108769","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108769-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108769-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108769"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108963","title":"databasement before 1.8.2 allows remote code execution because it runs certain commands (e.g., mariadb-dump) with a database name that can be specified by any authenticated user. For example, --result-file=/app/public/index.php can write to index.php. In other words, quoting prevents OS command injection in mariadb-dump, but the argument injection alone is sufficient for code execution indirectly. NOTE: the project's composer.json file does not indicate an independently published databasement Composer package.","display_title":"Software component issue could allow unintended commands to run","display_summary":"databasement before 1.8.2 allows remote code execution because it runs certain commands (e.g., mariadb-dump) with a database name that can be specified by any authenticated user.","display_reference":"CVE-2026-108963","display_source_type":"Security advisory","incident_date":"2026-10-11","disclosure_date":"2026-10-11","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108963","source_title":"databasement before 1.8.2 allows remote code execution because it runs certain commands (e.g., mariadb-dump) with a database name that can be specified by any authenticated user. For example, --result-file=/app/public/index.php can write to index.php. In other words, quoting prevents OS command injection in mariadb-dump, but the argument injection alone is sufficient for code execution indirectly. NOTE: the project's composer.json file does not indicate an independently published databasement Composer package.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-12T01:16:47.445Z","source_hash":"content-fingerprint:fnv1a-1b43cf32","affected_system":{"organization":"databasement before 1.8.2 allows remote code execution because it runs certain commands (e.g., mariadb-dump) with a database name that can be specified by any authenticated user. For example, --result-file=/app/public/index.php can write to index.php. In other words, quoting prevents OS command injection in mariadb-dump, but the argument injection alone is sufficient for code execution indirectly. NOTE project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108963-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"databasement before 1.8.2 allows remote code execution because it runs certain commands (e.g., mariadb-dump) with a database name that can be specified by any authenticated user. For example, --result-file=/app/public/index.php can write to index.php. In other words, quoting prevents OS command injection in mariadb-dump, but the argument injection alone is sufficient for code execution indirectly. NOTE: the project's composer.json file does not indicate an independently published databasement Composer package.","source_quote_or_pointer":"Security Advisory CVE-2026-108963","fact_id":"SEA-CVE-2026-108963-F1","document_citation":"Security Advisory CVE-2026-108963"},{"id":"SEA-CVE-2026-108963-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"databasement before 1.8.2 allows remote code execution because it runs certain commands (e.g., mariadb-dump) with a database name that can be specified by any authenticated user. For example, --result-file=/app/public/index.php can write to index.php.","source_quote_or_pointer":"Advisory description (CVE-2026-108963)","fact_id":"SEA-CVE-2026-108963-F2","document_citation":"Advisory description (CVE-2026-108963)"}],"source_stated_contributors":["databasement before 1.8.2 allows remote code execution because it runs certain commands (e.g., mariadb-dump) with a database name that can be specified by any authenticated user. For example, --result-file=/app/public/index.php can write to index.php."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","auth.public_publication","data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108963","reporting_entity":"CVE-2026-108963","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108963-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108963-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108963"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-59508","title":"Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Interuse i-Bos. This issue affects i-Bos: 3.0.","display_title":"Software component issue could expose or alter stored data","display_summary":"Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Interuse i-Bos.","display_reference":"CVE-2026-59508","display_source_type":"Security advisory","incident_date":"2026-10-11","disclosure_date":"2026-10-11","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-59508","source_title":"Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Interuse i-Bos. This issue affects i-Bos: 3.0.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:07.000Z","source_hash":"content-fingerprint:fnv1a-691bf24c","affected_system":{"organization":"Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Interuse i-Bos. This issue affects i-Bos project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-59508-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Interuse i-Bos. This issue affects i-Bos: 3.0.","source_quote_or_pointer":"Security Advisory CVE-2026-59508","fact_id":"SEA-CVE-2026-59508-F1","document_citation":"Security Advisory CVE-2026-59508"},{"id":"SEA-CVE-2026-59508-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Interuse i-Bos.","source_quote_or_pointer":"Advisory description (CVE-2026-59508)","fact_id":"SEA-CVE-2026-59508-F2","document_citation":"Advisory description (CVE-2026-59508)"}],"source_stated_contributors":["Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Interuse i-Bos."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-59508","reporting_entity":"CVE-2026-59508","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-59508-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-59508-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-59508"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-19739","title":"The Bluetooth Link Layer control procedure code in subsys/bluetooth/controller/ll_sw/ull_llcp_conn_upd.c retains the received RX node while a Connection Update / Connection Parameter procedure waits for its instant, so the node can later carry the host notification (llcp_rx_node_retain(), which marks it NODE_RX_TYPE_RETAIN and thereby suppresses the normal recycling in ull.c). The default: arm of llcp_rp_cu_rx() and llcp_lp_cu_rx() — the \"invalid PDU, terminate the connection\" path — completed the procedure without releasing that retained node. llcp_rr_check_done() then dequeued and freed the procedure context with ctx->node_ref.rx still pointing at the retained node, dropping the last reference to it. A peer device in radio range can reach this without pairing, bonding, or encryption. Against a peripheral, the peer sends a well-formed LL_CONNECTION_UPDATE_IND with an instant a few connection events in the future (the node is retained and the procedure enters RP_CU_STATE_WAIT_INSTANT), then, before the instant is reached, sends any other LL Control PDU such as LL_LENGTH_REQ. ull_cp_rx() routes that PDU into the active remote Connection Update procedure, which takes the invalid-PDU path. The central role is reachable symmetrically after accepting an LL_CONNECTION_PARAM_REQ, and the local-procedure variant is reachable with LL_REJECT_IND. With CONFIG_BT_CTLR_ASSERT_DEBUG enabled (its default), the resulting state violates the invariant asserted in llcp_rr_check_done(), so the two-PDU sequence produces an immediate fatal error in the controller. With those asserts disabled, each occurrence permanently loses one node from the controller's small fixed RX pool (sized from CONFIG_BT_CTLR_RX_BUFFERS, which defaults to 1); repeating the sequence across reconnections exhausts the pool, after which the link-layer receive path operates on a NULL node. The impact is an unauthenticated, remotely triggerable denial of service persisting until reboot; there is no memory-disclosure or memory-corruption consequence, since the leaked node simply becomes unreachable.","display_title":"Software component issue could make the service unavailable","display_summary":"The Bluetooth Link Layer control procedure code in subsys/bluetooth/controller/llsw/ullllcpconnupd.c retains the received RX node while a Connection Update / Connection Parameter procedure waits for its instant, so the…","display_reference":"CVE-2026-19739","display_source_type":"Security advisory","incident_date":"2026-10-11","disclosure_date":"2026-10-11","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-19739","source_title":"The Bluetooth Link Layer control procedure code in subsys/bluetooth/controller/ll_sw/ull_llcp_conn_upd.c retains the received RX node while a Connection Update / Connection Parameter procedure waits for its instant, so the node can later carry the host notification (llcp_rx_node_retain(), which marks it NODE_RX_TYPE_RETAIN and thereby suppresses the normal recycling in ull.c). The default: arm of llcp_rp_cu_rx() and llcp_lp_cu_rx() — the \"invalid PDU, terminate the connection\" path — completed the procedure without releasing that retained node. llcp_rr_check_done() then dequeued and freed the procedure context with ctx->node_ref.rx still pointing at the retained node, dropping the last reference to it. A peer device in radio range can reach this without pairing, bonding, or encryption. Against a peripheral, the peer sends a well-formed LL_CONNECTION_UPDATE_IND with an instant a few connection events in the future (the node is retained and the procedure enters RP_CU_STATE_WAIT_INSTANT), then, before the instant is reached, sends any other LL Control PDU such as LL_LENGTH_REQ. ull_cp_rx() routes that PDU into the active remote Connection Update procedure, which takes the invalid-PDU path. The central role is reachable symmetrically after accepting an LL_CONNECTION_PARAM_REQ, and the local-procedure variant is reachable with LL_REJECT_IND. With CONFIG_BT_CTLR_ASSERT_DEBUG enabled (its default), the resulting state violates the invariant asserted in llcp_rr_check_done(), so the two-PDU sequence produces an immediate fatal error in the controller. With those asserts disabled, each occurrence permanently loses one node from the controller's small fixed RX pool (sized from CONFIG_BT_CTLR_RX_BUFFERS, which defaults to 1); repeating the sequence across reconnections exhausts the pool, after which the link-layer receive path operates on a NULL node. The impact is an unauthenticated, remotely triggerable denial of service persisting until reboot; there is no memory-disclosure or memory-corruption consequence, since the leaked node simply becomes unreachable.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:07.005Z","source_hash":"content-fingerprint:fnv1a-42658252","affected_system":{"organization":"The Bluetooth Link Layer control procedure code in subsys/bluetooth/controller/llsw/ullllcpconnupd.c retains the received RX node while a Connection Update / Connection Parameter procedure waits for its instant, so the node can later carry the host notification (llcprxnoderetain(), which marks it NODERXTYPERETAIN and thereby suppresses the normal recycling in ull.c). The default project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-19739-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Bluetooth Link Layer control procedure code in subsys/bluetooth/controller/ll_sw/ull_llcp_conn_upd.c retains the received RX node while a Connection Update / Connection Parameter procedure waits for its instant, so the node can later carry the host notification (llcp_rx_node_retain(), which marks it NODE_RX_TYPE_RETAIN and thereby suppresses the normal recycling in ull.c). The default: arm of llcp_rp_cu_rx() and llcp_lp_cu_rx() — the \"invalid PDU, terminate the connection\" path — completed the procedure without releasing that retained node. llcp_rr_check_done() then dequeued and freed the procedure context with ctx->node_ref.rx still pointing at the retained node, dropping the last reference to it. A peer device in radio range can reach this without pairing, bonding, or encryption. Against a peripheral, the peer sends a well-formed LL_CONNECTION_UPDATE_IND with an instant a few connection events in the future (the node is retained and the procedure enters RP_CU_STATE_WAIT_INSTANT), then, before the instant is reached, sends any other LL Control PDU such as LL_LENGTH_REQ. ull_cp_rx() routes that PDU into the active remote Connection Update procedure, which takes the invalid-PDU path. The central role is reachable symmetrically after accepting an LL_CONNECTION_PARAM_REQ, and the local-procedure variant is reachable with LL_REJECT_IND. With CONFIG_BT_CTLR_ASSERT_DEBUG enabled (its default), the resulting state violates the invariant asserted in llcp_rr_check_done(), so the two-PDU sequence produces an immediate fatal error in the controller. With those asserts disabled, each occurrence permanently loses one node from the controller's small fixed RX pool (sized from CONFIG_BT_CTLR_RX_BUFFERS, which defaults to 1); repeating the sequence across reconnections exhausts the pool, after which the link-layer receive path operates on a NULL node. The impact is an unauthenticated, remotely triggerable denial of service persisting until reboot; there is no memory-disclosure or memory-corruption consequence, since the leaked node simply becomes unreachable.","source_quote_or_pointer":"Security Advisory CVE-2026-19739","fact_id":"SEA-CVE-2026-19739-F1","document_citation":"Security Advisory CVE-2026-19739"},{"id":"SEA-CVE-2026-19739-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Bluetooth Link Layer control procedure code in subsys/bluetooth/controller/llsw/ullllcpconnupd.c retains the received RX node while a Connection Update / Connection Parameter procedure waits for its instant, so the node can later carry the host notification (llcprxnoderetain(), which marks it NODERXTYPERETAIN and…","source_quote_or_pointer":"Advisory description (CVE-2026-19739)","fact_id":"SEA-CVE-2026-19739-F2","document_citation":"Advisory description (CVE-2026-19739)"}],"source_stated_contributors":["The Bluetooth Link Layer control procedure code in subsys/bluetooth/controller/llsw/ullllcpconnupd.c retains the received RX node while a Connection Update / Connection Parameter procedure waits for its instant, so the node can later carry the host notification (llcprxnoderetain(), which marks it NODERXTYPERETAIN and…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.write_action","arch.event_driven"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-19739","reporting_entity":"CVE-2026-19739","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-19739-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-19739-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-19739"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-19737","title":"i2s_esp32_trigger_check() in drivers/i2s/i2s_esp32.c validates the requested direction only for I2S_DIR_BOTH. The I2S_DIR_RX and I2S_DIR_TX branches read dev_cfg->rx.data->configured / dev_cfg->tx.data->configured without first checking the stream pointers. The device instantiation macro I2S_ESP32_STREAM_INIT() sets both .conf and .data to NULL for a direction the devicetree does not describe, so on an instance that wires only one direction — the normal shape for audio output or a worldsemi,ws2812-i2s LED strip — the other direction dereferences a NULL pointer instead of returning an error. i2s_trigger() is a Zephyr syscall, and z_vrfy_i2s_trigger() in drivers/i2s/i2s_handlers.c validates only the device object and the presence of the trigger API pointer; the dir argument is passed to the driver unvalidated. On a build with CONFIG_USERSPACE enabled, a user-mode thread that has been granted the I2S device can issue a single i2s_trigger() call naming the unwired direction and cause a load from address 0 in kernel mode. Among the Espressif parts that carry this driver, userspace is available in-tree only on RISC-V SoCs with CONFIG_RISCV_PMP, and v4.4.0 is the first release where that is buildable: the ESP32-C6 HPCORE selects RISCV_PMP when it is not built for MCUboot. ESP32-C5 in v4.4.x carries the same PMP-region and userspace linker support but does not select RISCV_PMP by default. Espressif Xtensa targets do not support Zephyr userspace, and in a non-userspace build the bad direction can only come from in-kernel application code. The impact is limited to availability: the access is a read at offset 0 of the missing stream structure, so there is no attacker-controlled offset, no write primitive and no information disclosure. With the default fatal-error handler the resulting exception halts the system, giving an unprivileged user-mode thread a system-wide denial of service. The fix adds the same pointer check the I2S_DIR_BOTH branch already performed and returns -ENOSYS for a direction the instance does not implement; the driver's other entry points (i2s_esp32_config_check(), i2s_esp32_config_get(), i2s_esp32_read(), i2s_esp32_write()) already guarded the pointers, and a static audit found no equivalent unguarded path. The driver defect is older than the affected range. The unguarded dereference is present from v4.2.0 (reached through i2s_esp32_trigger_stream(), whose if (stream) guard tests the address of a struct member and is never false) and takes its present i2s_esp32_trigger_check() form in v4.3.0. No in-tree Espressif configuration before v4.4.0 can run a user-mode thread, so in v4.2.x and v4.3.x the direction argument can only come from trusted kernel code. Those releases carry the bug but are not listed as affected; the fix has also been merged to v4.3-branch as hardening.","display_title":"Software component issue could make the service unavailable","display_summary":"i2sesp32triggercheck() in drivers/i2s/i2sesp32.c validates the requested direction only for I2SDIRBOTH. The I2SDIRRX and I2SDIRTX branches read devcfg-rx.data-configured / devcfg-tx.data-configured without first checking…","display_reference":"CVE-2026-19737","display_source_type":"Security advisory","incident_date":"2026-10-11","disclosure_date":"2026-10-11","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-19737","source_title":"i2s_esp32_trigger_check() in drivers/i2s/i2s_esp32.c validates the requested direction only for I2S_DIR_BOTH. The I2S_DIR_RX and I2S_DIR_TX branches read dev_cfg->rx.data->configured / dev_cfg->tx.data->configured without first checking the stream pointers. The device instantiation macro I2S_ESP32_STREAM_INIT() sets both .conf and .data to NULL for a direction the devicetree does not describe, so on an instance that wires only one direction — the normal shape for audio output or a worldsemi,ws2812-i2s LED strip — the other direction dereferences a NULL pointer instead of returning an error. i2s_trigger() is a Zephyr syscall, and z_vrfy_i2s_trigger() in drivers/i2s/i2s_handlers.c validates only the device object and the presence of the trigger API pointer; the dir argument is passed to the driver unvalidated. On a build with CONFIG_USERSPACE enabled, a user-mode thread that has been granted the I2S device can issue a single i2s_trigger() call naming the unwired direction and cause a load from address 0 in kernel mode. Among the Espressif parts that carry this driver, userspace is available in-tree only on RISC-V SoCs with CONFIG_RISCV_PMP, and v4.4.0 is the first release where that is buildable: the ESP32-C6 HPCORE selects RISCV_PMP when it is not built for MCUboot. ESP32-C5 in v4.4.x carries the same PMP-region and userspace linker support but does not select RISCV_PMP by default. Espressif Xtensa targets do not support Zephyr userspace, and in a non-userspace build the bad direction can only come from in-kernel application code. The impact is limited to availability: the access is a read at offset 0 of the missing stream structure, so there is no attacker-controlled offset, no write primitive and no information disclosure. With the default fatal-error handler the resulting exception halts the system, giving an unprivileged user-mode thread a system-wide denial of service. The fix adds the same pointer check the I2S_DIR_BOTH branch already performed and returns -ENOSYS for a direction the instance does not implement; the driver's other entry points (i2s_esp32_config_check(), i2s_esp32_config_get(), i2s_esp32_read(), i2s_esp32_write()) already guarded the pointers, and a static audit found no equivalent unguarded path. The driver defect is older than the affected range. The unguarded dereference is present from v4.2.0 (reached through i2s_esp32_trigger_stream(), whose if (stream) guard tests the address of a struct member and is never false) and takes its present i2s_esp32_trigger_check() form in v4.3.0. No in-tree Espressif configuration before v4.4.0 can run a user-mode thread, so in v4.2.x and v4.3.x the direction argument can only come from trusted kernel code. Those releases carry the bug but are not listed as affected; the fix has also been merged to v4.3-branch as hardening.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:07.007Z","source_hash":"content-fingerprint:fnv1a-86983d4","affected_system":{"organization":"i2sesp32triggercheck() in drivers/i2s/i2sesp32.c validates the requested direction only for I2SDIRBOTH. The I2SDIRRX and I2SDIRTX branches read devcfg->rx.data->configured / devcfg->tx.data->configured without first checking the stream pointers. The device instantiation macro I2SESP32STREAMINIT() sets both .conf and .data to NULL for a direction the devicetree does not describe, so on an instance that wires only one direction — the normal shape for audio output or a worldsemi,ws2812-i2s LED strip — the other direction dereferences a NULL pointer instead of returning an error. i2strigger() is a Zephyr syscall, and zvrfyi2strigger() in drivers/i2s/i2shandlers.c validates only the device object and the presence of the trigger API pointer; the dir argument is passed to the driver unvalidated. On a build with CONFIGUSERSPACE enabled, a user-mode thread that has been granted the I2S device can issue a single i2strigger() call naming the unwired direction and cause a load from address 0 in kernel mode. Among the Espressif parts that carry this driver, userspace is available in-tree only on RISC-V SoCs with CONFIGRISCVPMP, and v4.4.0 is the first release where that is buildable project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-19737-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"i2s_esp32_trigger_check() in drivers/i2s/i2s_esp32.c validates the requested direction only for I2S_DIR_BOTH. The I2S_DIR_RX and I2S_DIR_TX branches read dev_cfg->rx.data->configured / dev_cfg->tx.data->configured without first checking the stream pointers. The device instantiation macro I2S_ESP32_STREAM_INIT() sets both .conf and .data to NULL for a direction the devicetree does not describe, so on an instance that wires only one direction — the normal shape for audio output or a worldsemi,ws2812-i2s LED strip — the other direction dereferences a NULL pointer instead of returning an error. i2s_trigger() is a Zephyr syscall, and z_vrfy_i2s_trigger() in drivers/i2s/i2s_handlers.c validates only the device object and the presence of the trigger API pointer; the dir argument is passed to the driver unvalidated. On a build with CONFIG_USERSPACE enabled, a user-mode thread that has been granted the I2S device can issue a single i2s_trigger() call naming the unwired direction and cause a load from address 0 in kernel mode. Among the Espressif parts that carry this driver, userspace is available in-tree only on RISC-V SoCs with CONFIG_RISCV_PMP, and v4.4.0 is the first release where that is buildable: the ESP32-C6 HPCORE selects RISCV_PMP when it is not built for MCUboot. ESP32-C5 in v4.4.x carries the same PMP-region and userspace linker support but does not select RISCV_PMP by default. Espressif Xtensa targets do not support Zephyr userspace, and in a non-userspace build the bad direction can only come from in-kernel application code. The impact is limited to availability: the access is a read at offset 0 of the missing stream structure, so there is no attacker-controlled offset, no write primitive and no information disclosure. With the default fatal-error handler the resulting exception halts the system, giving an unprivileged user-mode thread a system-wide denial of service. The fix adds the same pointer check the I2S_DIR_BOTH branch already performed and returns -ENOSYS for a direction the instance does not implement; the driver's other entry points (i2s_esp32_config_check(), i2s_esp32_config_get(), i2s_esp32_read(), i2s_esp32_write()) already guarded the pointers, and a static audit found no equivalent unguarded path. The driver defect is older than the affected range. The unguarded dereference is present from v4.2.0 (reached through i2s_esp32_trigger_stream(), whose if (stream) guard tests the address of a struct member and is never false) and takes its present i2s_esp32_trigger_check() form in v4.3.0. No in-tree Espressif configuration before v4.4.0 can run a user-mode thread, so in v4.2.x and v4.3.x the direction argument can only come from trusted kernel code. Those releases carry the bug but are not listed as affected; the fix has also been merged to v4.3-branch as hardening.","source_quote_or_pointer":"Security Advisory CVE-2026-19737","fact_id":"SEA-CVE-2026-19737-F1","document_citation":"Security Advisory CVE-2026-19737"},{"id":"SEA-CVE-2026-19737-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"i2sesp32triggercheck() in drivers/i2s/i2sesp32.c validates the requested direction only for I2SDIRBOTH. The I2SDIRRX and I2SDIRTX branches read devcfg-rx.data-configured / devcfg-tx.data-configured without first checking the stream pointers.","source_quote_or_pointer":"Advisory description (CVE-2026-19737)","fact_id":"SEA-CVE-2026-19737-F2","document_citation":"Advisory description (CVE-2026-19737)"}],"source_stated_contributors":["i2sesp32triggercheck() in drivers/i2s/i2sesp32.c validates the requested direction only for I2SDIRBOTH. The I2SDIRRX and I2SDIRTX branches read devcfg-rx.data-configured / devcfg-tx.data-configured without first checking the stream pointers."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.pii","arch.async_job","arch.event_driven"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-19737","reporting_entity":"CVE-2026-19737","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-19737-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-19737-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-19737"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-107761","title":"Several Postiz endpoints return the complete database row of the record they operate on instead of only the fields the client needs. Two of them include secrets the caller is not meant to receive. The public API's channel delete returns the deleted integration row, including the channel's platform access token and refresh token. A third-party OAuth app permitted to delete a channel therefore receives that channel's social platform credentials and can use them against the connected account directly, outside Postiz. GET /user/organizations returns each organization row, including its API key, to every member of the organization. The API key is intended for admins only, so a member with a lower role can obtain it and call the public API on behalf of the organization. Both endpoints require a valid session, API key or OAuth token and are scoped to the caller's own organization. There is no anonymous access and no cross-tenant exposure.","display_title":"Software component issue could expose accounts or credentials","display_summary":"Several Postiz endpoints return the complete database row of the record they operate on instead of only the fields the client needs. Two of them include secrets the caller is not meant to receive.","display_reference":"CVE-2026-107761","display_source_type":"Security advisory","incident_date":"2026-10-11","disclosure_date":"2026-10-11","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107761","source_title":"Several Postiz endpoints return the complete database row of the record they operate on instead of only the fields the client needs. Two of them include secrets the caller is not meant to receive. The public API's channel delete returns the deleted integration row, including the channel's platform access token and refresh token. A third-party OAuth app permitted to delete a channel therefore receives that channel's social platform credentials and can use them against the connected account directly, outside Postiz. GET /user/organizations returns each organization row, including its API key, to every member of the organization. The API key is intended for admins only, so a member with a lower role can obtain it and call the public API on behalf of the organization. Both endpoints require a valid session, API key or OAuth token and are scoped to the caller's own organization. There is no anonymous access and no cross-tenant exposure.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:07.046Z","source_hash":"content-fingerprint:fnv1a-28f4c14f","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-107761-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Several Postiz endpoints return the complete database row of the record they operate on instead of only the fields the client needs. Two of them include secrets the caller is not meant to receive. The public API's channel delete returns the deleted integration row, including the channel's platform access token and refresh token. A third-party OAuth app permitted to delete a channel therefore receives that channel's social platform credentials and can use them against the connected account directly, outside Postiz. GET /user/organizations returns each organization row, including its API key, to every member of the organization. The API key is intended for admins only, so a member with a lower role can obtain it and call the public API on behalf of the organization. Both endpoints require a valid session, API key or OAuth token and are scoped to the caller's own organization. There is no anonymous access and no cross-tenant exposure.","source_quote_or_pointer":"Security Advisory CVE-2026-107761","fact_id":"SEA-CVE-2026-107761-F1","document_citation":"Security Advisory CVE-2026-107761"},{"id":"SEA-CVE-2026-107761-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Several Postiz endpoints return the complete database row of the record they operate on instead of only the fields the client needs. Two of them include secrets the caller is not meant to receive.","source_quote_or_pointer":"Advisory description (CVE-2026-107761)","fact_id":"SEA-CVE-2026-107761-F2","document_citation":"Advisory description (CVE-2026-107761)"}],"source_stated_contributors":["Several Postiz endpoints return the complete database row of the record they operate on instead of only the fields the client needs. Two of them include secrets the caller is not meant to receive."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.privileged_action","auth.write_action","auth.public_publication","data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-107761","reporting_entity":"CVE-2026-107761","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-107761-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-107761-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-107761"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108904","title":"pH7Builder (pH7 Social Dating CMS) before 18.5.0 contains an information disclosure vulnerability that allows API clients to obtain sensitive member data because UserController::users() and user() return unfiltered database rows. Attackers holding a valid private API key can retrieve bcrypt password hashes, non-expiring hashValidation reset tokens, and TOTP secrets to take over accounts and bypass two-factor authentication.","display_title":"Software component issue could expose accounts or credentials","display_summary":"pH7Builder (pH7 Social Dating CMS) before 18.5.0 contains an information disclosure vulnerability that allows API clients to obtain sensitive member data because UserController::users() and user() return unfiltered…","display_reference":"CVE-2026-108904","display_source_type":"Security advisory","incident_date":"2026-10-11","disclosure_date":"2026-10-11","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108904","source_title":"pH7Builder (pH7 Social Dating CMS) before 18.5.0 contains an information disclosure vulnerability that allows API clients to obtain sensitive member data because UserController::users() and user() return unfiltered database rows. Attackers holding a valid private API key can retrieve bcrypt password hashes, non-expiring hashValidation reset tokens, and TOTP secrets to take over accounts and bypass two-factor authentication.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:07.047Z","source_hash":"content-fingerprint:fnv1a-4090f0f5","affected_system":{"organization":"pH7Builder (pH7 Social Dating CMS) before 18.5.0 contains an information disclosure vulnerability that allows API clients to obtain sensitive member data because UserController project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108904-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"pH7Builder (pH7 Social Dating CMS) before 18.5.0 contains an information disclosure vulnerability that allows API clients to obtain sensitive member data because UserController::users() and user() return unfiltered database rows. Attackers holding a valid private API key can retrieve bcrypt password hashes, non-expiring hashValidation reset tokens, and TOTP secrets to take over accounts and bypass two-factor authentication.","source_quote_or_pointer":"Security Advisory CVE-2026-108904","fact_id":"SEA-CVE-2026-108904-F1","document_citation":"Security Advisory CVE-2026-108904"},{"id":"SEA-CVE-2026-108904-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"pH7Builder (pH7 Social Dating CMS) before 18.5.0 contains an information disclosure vulnerability that allows API clients to obtain sensitive member data because UserController::users() and user() return unfiltered database rows.","source_quote_or_pointer":"Advisory description (CVE-2026-108904)","fact_id":"SEA-CVE-2026-108904-F2","document_citation":"Advisory description (CVE-2026-108904)"}],"source_stated_contributors":["pH7Builder (pH7 Social Dating CMS) before 18.5.0 contains an information disclosure vulnerability that allows API clients to obtain sensitive member data because UserController::users() and user() return unfiltered database rows."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108904","reporting_entity":"CVE-2026-108904","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108904-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108904-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108904"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108902","title":"pH7Builder (pH7 Social Dating CMS) before 18.5.0 contains a path traversal vulnerability in the picture module deletePhoto() action that allows authenticated members to delete arbitrary files. Attackers can supply ../ sequences in the POST picture_link parameter to remove other members' photos or configuration and cache files, causing content loss and denial of service.","display_title":"Software component issue could expose restricted files","display_summary":"pH7Builder (pH7 Social Dating CMS) before 18.5.0 contains a path traversal vulnerability in the picture module deletePhoto() action that allows authenticated members to delete arbitrary files.","display_reference":"CVE-2026-108902","display_source_type":"Security advisory","incident_date":"2026-10-11","disclosure_date":"2026-10-11","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108902","source_title":"pH7Builder (pH7 Social Dating CMS) before 18.5.0 contains a path traversal vulnerability in the picture module deletePhoto() action that allows authenticated members to delete arbitrary files. Attackers can supply ../ sequences in the POST picture_link parameter to remove other members' photos or configuration and cache files, causing content loss and denial of service.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:07.047Z","source_hash":"content-fingerprint:fnv1a-6c75d2c7","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108902-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"pH7Builder (pH7 Social Dating CMS) before 18.5.0 contains a path traversal vulnerability in the picture module deletePhoto() action that allows authenticated members to delete arbitrary files. Attackers can supply ../ sequences in the POST picture_link parameter to remove other members' photos or configuration and cache files, causing content loss and denial of service.","source_quote_or_pointer":"Security Advisory CVE-2026-108902","fact_id":"SEA-CVE-2026-108902-F1","document_citation":"Security Advisory CVE-2026-108902"},{"id":"SEA-CVE-2026-108902-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"pH7Builder (pH7 Social Dating CMS) before 18.5.0 contains a path traversal vulnerability in the picture module deletePhoto() action that allows authenticated members to delete arbitrary files.","source_quote_or_pointer":"Advisory description (CVE-2026-108902)","fact_id":"SEA-CVE-2026-108902-F2","document_citation":"Advisory description (CVE-2026-108902)"}],"source_stated_contributors":["pH7Builder (pH7 Social Dating CMS) before 18.5.0 contains a path traversal vulnerability in the picture module deletePhoto() action that allows authenticated members to delete arbitrary files."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.write_action","arch.caching"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Restricted file exposure","File overwrite"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108902","reporting_entity":"CVE-2026-108902","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108902-SG1","label":"Confine file access to a fixed root","description":"Resolve paths to canonical form and reject anything outside the intended directory before opening files.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108902-SG1","label":"Confine file access to a fixed root","description":"Resolve paths to canonical form and reject anything outside the intended directory before opening files.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"File paths supplied by a caller escaped the intended directory. Canonicalise paths and confine file access to a fixed root.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108902"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108883","title":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the editThirdAppConfig handler that allows any authenticated user to modify third-party application configurations. Low-privileged attackers can replace client id, client secret, agent id and corp id of DingTalk, WeCom or Feishu integrations to redirect directory synchronisation and messaging to attacker-controlled applications or break them.","display_title":"Software component issue could expose accounts or credentials","display_summary":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the editThirdAppConfig handler that allows any authenticated user to modify third-party application configurations.","display_reference":"CVE-2026-108883","display_source_type":"Security advisory","incident_date":"2026-10-11","disclosure_date":"2026-10-11","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108883","source_title":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the editThirdAppConfig handler that allows any authenticated user to modify third-party application configurations. Low-privileged attackers can replace client id, client secret, agent id and corp id of DingTalk, WeCom or Feishu integrations to redirect directory synchronisation and messaging to attacker-controlled applications or break them.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:07.048Z","source_hash":"content-fingerprint:fnv1a-d51a6f19","affected_system":{"organization":"Software component project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108883-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the editThirdAppConfig handler that allows any authenticated user to modify third-party application configurations. Low-privileged attackers can replace client id, client secret, agent id and corp id of DingTalk, WeCom or Feishu integrations to redirect directory synchronisation and messaging to attacker-controlled applications or break them.","source_quote_or_pointer":"Security Advisory CVE-2026-108883","fact_id":"SEA-CVE-2026-108883-F1","document_citation":"Security Advisory CVE-2026-108883"},{"id":"SEA-CVE-2026-108883-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the editThirdAppConfig handler that allows any authenticated user to modify third-party application configurations.","source_quote_or_pointer":"Advisory description (CVE-2026-108883)","fact_id":"SEA-CVE-2026-108883-F2","document_citation":"Advisory description (CVE-2026-108883)"}],"source_stated_contributors":["JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the editThirdAppConfig handler that allows any authenticated user to modify third-party application configurations."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.write_action","data.pii","data.credentials_secrets","arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-003","SEA-FM-010"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108883","reporting_entity":"CVE-2026-108883","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108883-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108883-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108883"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108878","title":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragAppController queryById handler that allows low-privileged authenticated users to read any AI application configuration. Attackers can enumerate application ids via the unguarded /airag/app/listDict endpoint and query each id to obtain system prompts, memory prompts, model ids, knowledge base ids, and plugin bindings of other users' applications.","display_title":"Security issue reported in Software component","display_summary":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragAppController queryById handler that allows low-privileged authenticated users to read any AI application configuration.","display_reference":"CVE-2026-108878","display_source_type":"Security advisory","incident_date":"2026-10-11","disclosure_date":"2026-10-11","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108878","source_title":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragAppController queryById handler that allows low-privileged authenticated users to read any AI application configuration. Attackers can enumerate application ids via the unguarded /airag/app/listDict endpoint and query each id to obtain system prompts, memory prompts, model ids, knowledge base ids, and plugin bindings of other users' applications.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:07.049Z","source_hash":"content-fingerprint:fnv1a-d94dff9","affected_system":{"organization":"Software component project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108878-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragAppController queryById handler that allows low-privileged authenticated users to read any AI application configuration. Attackers can enumerate application ids via the unguarded /airag/app/listDict endpoint and query each id to obtain system prompts, memory prompts, model ids, knowledge base ids, and plugin bindings of other users' applications.","source_quote_or_pointer":"Security Advisory CVE-2026-108878","fact_id":"SEA-CVE-2026-108878-F1","document_citation":"Security Advisory CVE-2026-108878"},{"id":"SEA-CVE-2026-108878-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragAppController queryById handler that allows low-privileged authenticated users to read any AI application configuration.","source_quote_or_pointer":"Advisory description (CVE-2026-108878)","fact_id":"SEA-CVE-2026-108878-F2","document_citation":"Advisory description (CVE-2026-108878)"}],"source_stated_contributors":["JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragAppController queryById handler that allows low-privileged authenticated users to read any AI application configuration."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii","data.untrusted_external_text","arch.content_ingestion_rag"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108878","reporting_entity":"CVE-2026-108878","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108878-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108878-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108878"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108876","title":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the putCancelQuit handler of SysUserController, allowing any authenticated user to cancel user resignations. Low-privileged attackers can supply user ids and a tenantId parameter or X-Tenant-Id header to restore ended, pending, or refused tenant memberships to normal.","display_title":"Security issue reported in Software component","display_summary":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the putCancelQuit handler of SysUserController, allowing any authenticated user to cancel user resignations.","display_reference":"CVE-2026-108876","display_source_type":"Security advisory","incident_date":"2026-10-11","disclosure_date":"2026-10-11","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108876","source_title":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the putCancelQuit handler of SysUserController, allowing any authenticated user to cancel user resignations. Low-privileged attackers can supply user ids and a tenantId parameter or X-Tenant-Id header to restore ended, pending, or refused tenant memberships to normal.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:07.049Z","source_hash":"content-fingerprint:fnv1a-e3ed245f","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108876-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the putCancelQuit handler of SysUserController, allowing any authenticated user to cancel user resignations. Low-privileged attackers can supply user ids and a tenantId parameter or X-Tenant-Id header to restore ended, pending, or refused tenant memberships to normal.","source_quote_or_pointer":"Security Advisory CVE-2026-108876","fact_id":"SEA-CVE-2026-108876-F1","document_citation":"Security Advisory CVE-2026-108876"},{"id":"SEA-CVE-2026-108876-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the putCancelQuit handler of SysUserController, allowing any authenticated user to cancel user resignations.","source_quote_or_pointer":"Advisory description (CVE-2026-108876)","fact_id":"SEA-CVE-2026-108876-F2","document_citation":"Advisory description (CVE-2026-108876)"}],"source_stated_contributors":["JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the putCancelQuit handler of SysUserController, allowing any authenticated user to cancel user resignations."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108876","reporting_entity":"CVE-2026-108876","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108876-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108876-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108876"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108542","title":"A vulnerability was found in 021is elvix-sdk up to 0.10.1. Affected by this vulnerability is an unknown functionality of the file src/mcp/index.ts of the component MCP Request Handler. The manipulation of the argument path results in server-side request forgery. The attack can be executed remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.","display_title":"Software component issue could reach internal services","display_summary":"A vulnerability was found in 021is elvix-sdk up to 0.10.1. Affected by this vulnerability is an unknown functionality of the file src/mcp/index.ts of the component MCP Request Handler.","display_reference":"CVE-2026-108542","display_source_type":"Security advisory","incident_date":"2026-10-11","disclosure_date":"2026-10-11","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108542","source_title":"A vulnerability was found in 021is elvix-sdk up to 0.10.1. Affected by this vulnerability is an unknown functionality of the file src/mcp/index.ts of the component MCP Request Handler. The manipulation of the argument path results in server-side request forgery. The attack can be executed remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T12:01:21.387Z","source_hash":"content-fingerprint:fnv1a-feb1a143","affected_system":{"organization":"Software component project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108542-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability was found in 021is elvix-sdk up to 0.10.1. Affected by this vulnerability is an unknown functionality of the file src/mcp/index.ts of the component MCP Request Handler. The manipulation of the argument path results in server-side request forgery. The attack can be executed remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.","source_quote_or_pointer":"Security Advisory CVE-2026-108542","fact_id":"SEA-CVE-2026-108542-F1","document_citation":"Security Advisory CVE-2026-108542"},{"id":"SEA-CVE-2026-108542-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability was found in 021is elvix-sdk up to 0.10.1. Affected by this vulnerability is an unknown functionality of the file src/mcp/index.ts of the component MCP Request Handler. The manipulation of the argument path results in server-side request forgery. The attack can be executed remotely.","source_quote_or_pointer":"Advisory description (CVE-2026-108542)","fact_id":"SEA-CVE-2026-108542-F2","document_citation":"Advisory description (CVE-2026-108542)"}],"source_stated_contributors":["A vulnerability was found in 021is elvix-sdk up to 0.10.1. Affected by this vulnerability is an unknown functionality of the file src/mcp/index.ts of the component MCP Request Handler. The manipulation of the argument path results in server-side request forgery. The attack can be executed remotely."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.public_publication","arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-002","SEA-FM-010"],"consequences":["Internal network access","Cloud metadata or credential exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108542","reporting_entity":"CVE-2026-108542","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108542-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108542-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"The service fetched a URL chosen by the caller and could be steered at internal systems. Restrict outbound destinations and block internal address ranges.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108542"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-89305","title":"The paymendo WordPress plugin through 1.1 does not properly sanitize and escape a parameter before using it in a SQL query, allowing any authenticated user to perform SQL injection attacks.","display_title":"Software component issue could expose or alter stored data","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-89305","display_source_type":"Security advisory","incident_date":"2026-10-11","disclosure_date":"2026-10-11","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89305","source_title":"The paymendo WordPress plugin through 1.1 does not properly sanitize and escape a parameter before using it in a SQL query, allowing any authenticated user to perform SQL injection attacks.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T12:01:21.387Z","source_hash":"content-fingerprint:fnv1a-449aa0e6","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-89305-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The paymendo WordPress plugin through 1.1 does not properly sanitize and escape a parameter before using it in a SQL query, allowing any authenticated user to perform SQL injection attacks.","source_quote_or_pointer":"Security Advisory CVE-2026-89305","fact_id":"SEA-CVE-2026-89305-F1","document_citation":"Security Advisory CVE-2026-89305"},{"id":"SEA-CVE-2026-89305-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The paymendo WordPress plugin through 1.1 does not properly sanitize and escape a parameter before using it in a SQL query, allowing any authenticated user to perform SQL injection attacks.","source_quote_or_pointer":"Advisory description (CVE-2026-89305)","fact_id":"SEA-CVE-2026-89305-F2","document_citation":"Advisory description (CVE-2026-89305)"}],"source_stated_contributors":["The paymendo WordPress plugin through 1.1 does not properly sanitize and escape a parameter before using it in a SQL query, allowing any authenticated user to perform SQL injection attacks."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-89305","reporting_entity":"CVE-2026-89305","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-89305-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-89305-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-89305"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-89304","title":"The paymendo WordPress plugin through 1.1 does not properly sanitize and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform blind SQL injection attacks.","display_title":"Software component issue could expose or alter stored data","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-89304","display_source_type":"Security advisory","incident_date":"2026-10-11","disclosure_date":"2026-10-11","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89304","source_title":"The paymendo WordPress plugin through 1.1 does not properly sanitize and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform blind SQL injection attacks.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T12:01:21.387Z","source_hash":"content-fingerprint:fnv1a-f4e56025","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-89304-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The paymendo WordPress plugin through 1.1 does not properly sanitize and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform blind SQL injection attacks.","source_quote_or_pointer":"Security Advisory CVE-2026-89304","fact_id":"SEA-CVE-2026-89304-F1","document_citation":"Security Advisory CVE-2026-89304"},{"id":"SEA-CVE-2026-89304-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The paymendo WordPress plugin through 1.1 does not properly sanitize and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform blind SQL injection attacks.","source_quote_or_pointer":"Advisory description (CVE-2026-89304)","fact_id":"SEA-CVE-2026-89304-F2","document_citation":"Advisory description (CVE-2026-89304)"}],"source_stated_contributors":["The paymendo WordPress plugin through 1.1 does not properly sanitize and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform blind SQL injection attacks."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-89304","reporting_entity":"CVE-2026-89304","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-89304-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-89304-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-89304"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-89302","title":"The Post Voting System WordPress plugin through 1.0 does not properly sanitize and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks.","display_title":"Software component issue could expose or alter stored data","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-89302","display_source_type":"Security advisory","incident_date":"2026-10-11","disclosure_date":"2026-10-11","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89302","source_title":"The Post Voting System WordPress plugin through 1.0 does not properly sanitize and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T12:01:21.387Z","source_hash":"content-fingerprint:fnv1a-a2683387","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-89302-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Post Voting System WordPress plugin through 1.0 does not properly sanitize and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks.","source_quote_or_pointer":"Security Advisory CVE-2026-89302","fact_id":"SEA-CVE-2026-89302-F1","document_citation":"Security Advisory CVE-2026-89302"},{"id":"SEA-CVE-2026-89302-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Post Voting System WordPress plugin through 1.0 does not properly sanitize and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks.","source_quote_or_pointer":"Advisory description (CVE-2026-89302)","fact_id":"SEA-CVE-2026-89302-F2","document_citation":"Advisory description (CVE-2026-89302)"}],"source_stated_contributors":["The Post Voting System WordPress plugin through 1.0 does not properly sanitize and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-89302","reporting_entity":"CVE-2026-89302","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-89302-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-89302-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-89302"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-89299","title":"The WP Verify API WordPress plugin through 1.0.0 does not properly sanitize and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks.","display_title":"Software component issue could expose or alter stored data","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-89299","display_source_type":"Security advisory","incident_date":"2026-10-11","disclosure_date":"2026-10-11","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89299","source_title":"The WP Verify API WordPress plugin through 1.0.0 does not properly sanitize and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T12:01:21.387Z","source_hash":"content-fingerprint:fnv1a-31460110","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-89299-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The WP Verify API WordPress plugin through 1.0.0 does not properly sanitize and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks.","source_quote_or_pointer":"Security Advisory CVE-2026-89299","fact_id":"SEA-CVE-2026-89299-F1","document_citation":"Security Advisory CVE-2026-89299"},{"id":"SEA-CVE-2026-89299-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The WP Verify API WordPress plugin through 1.0.0 does not properly sanitize and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks.","source_quote_or_pointer":"Advisory description (CVE-2026-89299)","fact_id":"SEA-CVE-2026-89299-F2","document_citation":"Advisory description (CVE-2026-89299)"}],"source_stated_contributors":["The WP Verify API WordPress plugin through 1.0.0 does not properly sanitize and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-89299","reporting_entity":"CVE-2026-89299","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-89299-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-89299-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-89299"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-89297","title":"The Loja Automática WordPress plugin through 1.0.0 does not properly sanitize and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks.","display_title":"Software component issue could expose or alter stored data","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-89297","display_source_type":"Security advisory","incident_date":"2026-10-11","disclosure_date":"2026-10-11","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89297","source_title":"The Loja Automática WordPress plugin through 1.0.0 does not properly sanitize and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T12:01:21.387Z","source_hash":"content-fingerprint:fnv1a-382c51e","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-89297-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Loja Automática WordPress plugin through 1.0.0 does not properly sanitize and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks.","source_quote_or_pointer":"Security Advisory CVE-2026-89297","fact_id":"SEA-CVE-2026-89297-F1","document_citation":"Security Advisory CVE-2026-89297"},{"id":"SEA-CVE-2026-89297-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Loja Automática WordPress plugin through 1.0.0 does not properly sanitize and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks.","source_quote_or_pointer":"Advisory description (CVE-2026-89297)","fact_id":"SEA-CVE-2026-89297-F2","document_citation":"Advisory description (CVE-2026-89297)"}],"source_stated_contributors":["The Loja Automática WordPress plugin through 1.0.0 does not properly sanitize and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-89297","reporting_entity":"CVE-2026-89297","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-89297-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-89297-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-89297"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-89287","title":"The ASPL Product Quotation WordPress plugin through 1.1.0 does not sanitize and escape a parameter before using it in SQL statements, allowing unauthenticated attackers to perform SQL injection and read arbitrary data from the database.","display_title":"Software component issue could expose or alter stored data","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-89287","display_source_type":"Security advisory","incident_date":"2026-10-11","disclosure_date":"2026-10-11","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89287","source_title":"The ASPL Product Quotation WordPress plugin through 1.1.0 does not sanitize and escape a parameter before using it in SQL statements, allowing unauthenticated attackers to perform SQL injection and read arbitrary data from the database.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T12:01:21.387Z","source_hash":"content-fingerprint:fnv1a-15928407","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-89287-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The ASPL Product Quotation WordPress plugin through 1.1.0 does not sanitize and escape a parameter before using it in SQL statements, allowing unauthenticated attackers to perform SQL injection and read arbitrary data from the database.","source_quote_or_pointer":"Security Advisory CVE-2026-89287","fact_id":"SEA-CVE-2026-89287-F1","document_citation":"Security Advisory CVE-2026-89287"},{"id":"SEA-CVE-2026-89287-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The ASPL Product Quotation WordPress plugin through 1.1.0 does not sanitize and escape a parameter before using it in SQL statements, allowing unauthenticated attackers to perform SQL injection and read arbitrary data from the database.","source_quote_or_pointer":"Advisory description (CVE-2026-89287)","fact_id":"SEA-CVE-2026-89287-F2","document_citation":"Advisory description (CVE-2026-89287)"}],"source_stated_contributors":["The ASPL Product Quotation WordPress plugin through 1.1.0 does not sanitize and escape a parameter before using it in SQL statements, allowing unauthenticated attackers to perform SQL injection and read arbitrary data from the database."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-89287","reporting_entity":"CVE-2026-89287","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-89287-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-89287-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-89287"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-89285","title":"The Datalist it WordPress plugin through 0.0.3 does not sanitize and escape several request parameters before using them to build a SQL query, allowing unauthenticated attackers to perform SQL injection and read arbitrary data from the database.","display_title":"Software component issue could expose or alter stored data","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-89285","display_source_type":"Security advisory","incident_date":"2026-10-11","disclosure_date":"2026-10-11","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89285","source_title":"The Datalist it WordPress plugin through 0.0.3 does not sanitize and escape several request parameters before using them to build a SQL query, allowing unauthenticated attackers to perform SQL injection and read arbitrary data from the database.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T12:01:21.387Z","source_hash":"content-fingerprint:fnv1a-45c56bc7","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-89285-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Datalist it WordPress plugin through 0.0.3 does not sanitize and escape several request parameters before using them to build a SQL query, allowing unauthenticated attackers to perform SQL injection and read arbitrary data from the database.","source_quote_or_pointer":"Security Advisory CVE-2026-89285","fact_id":"SEA-CVE-2026-89285-F1","document_citation":"Security Advisory CVE-2026-89285"},{"id":"SEA-CVE-2026-89285-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Datalist it WordPress plugin through 0.0.3 does not sanitize and escape several request parameters before using them to build a SQL query, allowing unauthenticated attackers to perform SQL injection and read arbitrary data from the database.","source_quote_or_pointer":"Advisory description (CVE-2026-89285)","fact_id":"SEA-CVE-2026-89285-F2","document_citation":"Advisory description (CVE-2026-89285)"}],"source_stated_contributors":["The Datalist it WordPress plugin through 0.0.3 does not sanitize and escape several request parameters before using them to build a SQL query, allowing unauthenticated attackers to perform SQL injection and read arbitrary data from the database."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-89285","reporting_entity":"CVE-2026-89285","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-89285-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-89285-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-89285"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-89214","title":"The WpCues Basic Quiz WordPress plugin through 1.6.5 does not properly sanitise and escape values before using them in a SQL statement, which allows unauthenticated attackers to perform SQL injection attacks and read data from the database.","display_title":"Software component issue could expose or alter stored data","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-89214","display_source_type":"Security advisory","incident_date":"2026-10-11","disclosure_date":"2026-10-11","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89214","source_title":"The WpCues Basic Quiz WordPress plugin through 1.6.5 does not properly sanitise and escape values before using them in a SQL statement, which allows unauthenticated attackers to perform SQL injection attacks and read data from the database.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T12:01:21.387Z","source_hash":"content-fingerprint:fnv1a-eba30833","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-89214-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The WpCues Basic Quiz WordPress plugin through 1.6.5 does not properly sanitise and escape values before using them in a SQL statement, which allows unauthenticated attackers to perform SQL injection attacks and read data from the database.","source_quote_or_pointer":"Security Advisory CVE-2026-89214","fact_id":"SEA-CVE-2026-89214-F1","document_citation":"Security Advisory CVE-2026-89214"},{"id":"SEA-CVE-2026-89214-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The WpCues Basic Quiz WordPress plugin through 1.6.5 does not properly sanitise and escape values before using them in a SQL statement, which allows unauthenticated attackers to perform SQL injection attacks and read data from the database.","source_quote_or_pointer":"Advisory description (CVE-2026-89214)","fact_id":"SEA-CVE-2026-89214-F2","document_citation":"Advisory description (CVE-2026-89214)"}],"source_stated_contributors":["The WpCues Basic Quiz WordPress plugin through 1.6.5 does not properly sanitise and escape values before using them in a SQL statement, which allows unauthenticated attackers to perform SQL injection attacks and read data from the database."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-89214","reporting_entity":"CVE-2026-89214","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-89214-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-89214-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-89214"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-89213","title":"The Llavero.io WordPress plugin through 0.1.4 does not properly sanitise and escape a parameter before using it in a SQL statement, which allows unauthenticated attackers to perform SQL injection attacks and read data from the database.","display_title":"Software component issue could expose or alter stored data","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-89213","display_source_type":"Security advisory","incident_date":"2026-10-11","disclosure_date":"2026-10-11","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89213","source_title":"The Llavero.io WordPress plugin through 0.1.4 does not properly sanitise and escape a parameter before using it in a SQL statement, which allows unauthenticated attackers to perform SQL injection attacks and read data from the database.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T12:01:21.387Z","source_hash":"content-fingerprint:fnv1a-9a7de710","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-89213-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Llavero.io WordPress plugin through 0.1.4 does not properly sanitise and escape a parameter before using it in a SQL statement, which allows unauthenticated attackers to perform SQL injection attacks and read data from the database.","source_quote_or_pointer":"Security Advisory CVE-2026-89213","fact_id":"SEA-CVE-2026-89213-F1","document_citation":"Security Advisory CVE-2026-89213"},{"id":"SEA-CVE-2026-89213-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Llavero.io WordPress plugin through 0.1.4 does not properly sanitise and escape a parameter before using it in a SQL statement, which allows unauthenticated attackers to perform SQL injection attacks and read data from the database.","source_quote_or_pointer":"Advisory description (CVE-2026-89213)","fact_id":"SEA-CVE-2026-89213-F2","document_citation":"Advisory description (CVE-2026-89213)"}],"source_stated_contributors":["The Llavero.io WordPress plugin through 0.1.4 does not properly sanitise and escape a parameter before using it in a SQL statement, which allows unauthenticated attackers to perform SQL injection attacks and read data from the database."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-89213","reporting_entity":"CVE-2026-89213","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-89213-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-89213-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-89213"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-89195","title":"The Site Setup Wizard WordPress plugin through 1.5.8 does not properly sanitise and escape a parameter before using it in a SQL statement, which allows unauthenticated attackers to perform SQL injection attacks and read data from the database.","display_title":"Software component issue could expose or alter stored data","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-89195","display_source_type":"Security advisory","incident_date":"2026-10-11","disclosure_date":"2026-10-11","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89195","source_title":"The Site Setup Wizard WordPress plugin through 1.5.8 does not properly sanitise and escape a parameter before using it in a SQL statement, which allows unauthenticated attackers to perform SQL injection attacks and read data from the database.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T12:01:21.387Z","source_hash":"content-fingerprint:fnv1a-4c7b128f","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-89195-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Site Setup Wizard WordPress plugin through 1.5.8 does not properly sanitise and escape a parameter before using it in a SQL statement, which allows unauthenticated attackers to perform SQL injection attacks and read data from the database.","source_quote_or_pointer":"Security Advisory CVE-2026-89195","fact_id":"SEA-CVE-2026-89195-F1","document_citation":"Security Advisory CVE-2026-89195"},{"id":"SEA-CVE-2026-89195-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Site Setup Wizard WordPress plugin through 1.5.8 does not properly sanitise and escape a parameter before using it in a SQL statement, which allows unauthenticated attackers to perform SQL injection attacks and read data from the database.","source_quote_or_pointer":"Advisory description (CVE-2026-89195)","fact_id":"SEA-CVE-2026-89195-F2","document_citation":"Advisory description (CVE-2026-89195)"}],"source_stated_contributors":["The Site Setup Wizard WordPress plugin through 1.5.8 does not properly sanitise and escape a parameter before using it in a SQL statement, which allows unauthenticated attackers to perform SQL injection attacks and read data from the database."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-89195","reporting_entity":"CVE-2026-89195","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-89195-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-89195-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-89195"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-88930","title":"The Social Web Suite WordPress plugin through 4.1.12 does not require its shared secret to be set before accepting requests authorised by it, and does not sanitise and escape a parameter before using it in an SQL statement, allowing unauthenticated users to perform SQL injection attacks.","display_title":"Software component issue could expose or alter stored data","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-88930","display_source_type":"Security advisory","incident_date":"2026-10-11","disclosure_date":"2026-10-11","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-88930","source_title":"The Social Web Suite WordPress plugin through 4.1.12 does not require its shared secret to be set before accepting requests authorised by it, and does not sanitise and escape a parameter before using it in an SQL statement, allowing unauthenticated users to perform SQL injection attacks.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T12:01:21.387Z","source_hash":"content-fingerprint:fnv1a-c1d5afbd","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-88930-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Social Web Suite WordPress plugin through 4.1.12 does not require its shared secret to be set before accepting requests authorised by it, and does not sanitise and escape a parameter before using it in an SQL statement, allowing unauthenticated users to perform SQL injection attacks.","source_quote_or_pointer":"Security Advisory CVE-2026-88930","fact_id":"SEA-CVE-2026-88930-F1","document_citation":"Security Advisory CVE-2026-88930"},{"id":"SEA-CVE-2026-88930-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Social Web Suite WordPress plugin through 4.1.12 does not require its shared secret to be set before accepting requests authorised by it, and does not sanitise and escape a parameter before using it in an SQL statement, allowing unauthenticated users to perform SQL injection attacks.","source_quote_or_pointer":"Advisory description (CVE-2026-88930)","fact_id":"SEA-CVE-2026-88930-F2","document_citation":"Advisory description (CVE-2026-88930)"}],"source_stated_contributors":["The Social Web Suite WordPress plugin through 4.1.12 does not require its shared secret to be set before accepting requests authorised by it, and does not sanitise and escape a parameter before using it in an SQL statement, allowing unauthenticated users to perform SQL injection attacks."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-88930","reporting_entity":"CVE-2026-88930","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-88930-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-88930-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-88930"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-88905","title":"The KeyWord Collector WordPress plugin through 1.4 does not have any authorisation or nonce check when saving its settings, and does not escape them before output, allowing unauthenticated attackers to store malicious JavaScript that executes when an administrator opens the KeyWord Collector WordPress plugin through 1.4's settings page or when a visitor loads a page displaying its output.","display_title":"Security issue reported in Software component","display_summary":"The KeyWord Collector WordPress plugin through 1.4 does not have any authorisation or nonce check when saving its settings, and does not escape them before output, allowing unauthenticated attackers to store malicious…","display_reference":"CVE-2026-88905","display_source_type":"Security advisory","incident_date":"2026-10-11","disclosure_date":"2026-10-11","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-88905","source_title":"The KeyWord Collector WordPress plugin through 1.4 does not have any authorisation or nonce check when saving its settings, and does not escape them before output, allowing unauthenticated attackers to store malicious JavaScript that executes when an administrator opens the KeyWord Collector WordPress plugin through 1.4's settings page or when a visitor loads a page displaying its output.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T12:01:21.387Z","source_hash":"content-fingerprint:fnv1a-250d4309","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-88905-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The KeyWord Collector WordPress plugin through 1.4 does not have any authorisation or nonce check when saving its settings, and does not escape them before output, allowing unauthenticated attackers to store malicious JavaScript that executes when an administrator opens the KeyWord Collector WordPress plugin through 1.4's settings page or when a visitor loads a page displaying its output.","source_quote_or_pointer":"Security Advisory CVE-2026-88905","fact_id":"SEA-CVE-2026-88905-F1","document_citation":"Security Advisory CVE-2026-88905"},{"id":"SEA-CVE-2026-88905-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The KeyWord Collector WordPress plugin through 1.4 does not have any authorisation or nonce check when saving its settings, and does not escape them before output, allowing unauthenticated attackers to store malicious JavaScript that executes when an administrator opens the KeyWord Collector WordPress plugin through…","source_quote_or_pointer":"Advisory description (CVE-2026-88905)","fact_id":"SEA-CVE-2026-88905-F2","document_citation":"Advisory description (CVE-2026-88905)"}],"source_stated_contributors":["The KeyWord Collector WordPress plugin through 1.4 does not have any authorisation or nonce check when saving its settings, and does not escape them before output, allowing unauthenticated attackers to store malicious JavaScript that executes when an administrator opens the KeyWord Collector WordPress plugin through…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.write_action"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-88905","reporting_entity":"CVE-2026-88905","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-88905-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-88905-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-88905"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-88827","title":"The Disable Users WordPress plugin through 1.0.5 does not enforce its account-disabling control on all authentication paths, allowing the holder of an account an administrator has disabled to continue authenticating with the account's full privileges.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-88827","display_source_type":"Security advisory","incident_date":"2026-10-11","disclosure_date":"2026-10-11","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-88827","source_title":"The Disable Users WordPress plugin through 1.0.5 does not enforce its account-disabling control on all authentication paths, allowing the holder of an account an administrator has disabled to continue authenticating with the account's full privileges.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T12:01:21.387Z","source_hash":"content-fingerprint:fnv1a-207c5c22","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-88827-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Disable Users WordPress plugin through 1.0.5 does not enforce its account-disabling control on all authentication paths, allowing the holder of an account an administrator has disabled to continue authenticating with the account's full privileges.","source_quote_or_pointer":"Security Advisory CVE-2026-88827","fact_id":"SEA-CVE-2026-88827-F1","document_citation":"Security Advisory CVE-2026-88827"},{"id":"SEA-CVE-2026-88827-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Disable Users WordPress plugin through 1.0.5 does not enforce its account-disabling control on all authentication paths, allowing the holder of an account an administrator has disabled to continue authenticating with the account's full privileges.","source_quote_or_pointer":"Advisory description (CVE-2026-88827)","fact_id":"SEA-CVE-2026-88827-F2","document_citation":"Advisory description (CVE-2026-88827)"}],"source_stated_contributors":["The Disable Users WordPress plugin through 1.0.5 does not enforce its account-disabling control on all authentication paths, allowing the holder of an account an administrator has disabled to continue authenticating with the account's full privileges."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-88827","reporting_entity":"CVE-2026-88827","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-88827-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-88827-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-88827"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-88826","title":"The SmugMug Embed WordPress plugin through 3.13 does not have authorisation or CSRF checks on an AJAX action that stores gallery data, and does not sanitise or escape that data before outputting it, allowing unauthenticated users to store arbitrary web scripts that execute when an administrator views the SmugMug Embed WordPress plugin through 3.13's settings screen.","display_title":"Security issue reported in Software component","display_summary":"The SmugMug Embed WordPress plugin through 3.13 does not have authorisation or CSRF checks on an AJAX action that stores gallery data, and does not sanitise or escape that data before outputting it, allowing…","display_reference":"CVE-2026-88826","display_source_type":"Security advisory","incident_date":"2026-10-11","disclosure_date":"2026-10-11","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-88826","source_title":"The SmugMug Embed WordPress plugin through 3.13 does not have authorisation or CSRF checks on an AJAX action that stores gallery data, and does not sanitise or escape that data before outputting it, allowing unauthenticated users to store arbitrary web scripts that execute when an administrator views the SmugMug Embed WordPress plugin through 3.13's settings screen.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T12:01:21.387Z","source_hash":"content-fingerprint:fnv1a-45100677","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-88826-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The SmugMug Embed WordPress plugin through 3.13 does not have authorisation or CSRF checks on an AJAX action that stores gallery data, and does not sanitise or escape that data before outputting it, allowing unauthenticated users to store arbitrary web scripts that execute when an administrator views the SmugMug Embed WordPress plugin through 3.13's settings screen.","source_quote_or_pointer":"Security Advisory CVE-2026-88826","fact_id":"SEA-CVE-2026-88826-F1","document_citation":"Security Advisory CVE-2026-88826"},{"id":"SEA-CVE-2026-88826-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The SmugMug Embed WordPress plugin through 3.13 does not have authorisation or CSRF checks on an AJAX action that stores gallery data, and does not sanitise or escape that data before outputting it, allowing unauthenticated users to store arbitrary web scripts that execute when an administrator views the SmugMug Embed…","source_quote_or_pointer":"Advisory description (CVE-2026-88826)","fact_id":"SEA-CVE-2026-88826-F2","document_citation":"Advisory description (CVE-2026-88826)"}],"source_stated_contributors":["The SmugMug Embed WordPress plugin through 3.13 does not have authorisation or CSRF checks on an AJAX action that stores gallery data, and does not sanitise or escape that data before outputting it, allowing unauthenticated users to store arbitrary web scripts that execute when an administrator views the SmugMug Embed…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.write_action","data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-88826","reporting_entity":"CVE-2026-88826","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-88826-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-88826-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-88826"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-88785","title":"The Simple Membership WordPress plugin before 4.8.3 does not avoid transmitting a newly registered member's plaintext password in a URL query string when an optional auto-login-after-registration feature is enabled, exposing the credential in browser history and in web server, proxy, and CDN access logs to anyone able to read them.","display_title":"Software component issue could expose accounts or credentials","display_summary":"The Simple Membership WordPress plugin before 4.8.3 does not avoid transmitting a newly registered member's plaintext password in a URL query string when an optional auto-login-after-registration feature is enabled,…","display_reference":"CVE-2026-88785","display_source_type":"Security advisory","incident_date":"2026-10-11","disclosure_date":"2026-10-11","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-88785","source_title":"The Simple Membership WordPress plugin before 4.8.3 does not avoid transmitting a newly registered member's plaintext password in a URL query string when an optional auto-login-after-registration feature is enabled, exposing the credential in browser history and in web server, proxy, and CDN access logs to anyone able to read them.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T12:01:21.387Z","source_hash":"content-fingerprint:fnv1a-1cb7fcb5","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-88785-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Simple Membership WordPress plugin before 4.8.3 does not avoid transmitting a newly registered member's plaintext password in a URL query string when an optional auto-login-after-registration feature is enabled, exposing the credential in browser history and in web server, proxy, and CDN access logs to anyone able to read them.","source_quote_or_pointer":"Security Advisory CVE-2026-88785","fact_id":"SEA-CVE-2026-88785-F1","document_citation":"Security Advisory CVE-2026-88785"},{"id":"SEA-CVE-2026-88785-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Simple Membership WordPress plugin before 4.8.3 does not avoid transmitting a newly registered member's plaintext password in a URL query string when an optional auto-login-after-registration feature is enabled, exposing the credential in browser history and in web server, proxy, and CDN access logs to anyone able…","source_quote_or_pointer":"Advisory description (CVE-2026-88785)","fact_id":"SEA-CVE-2026-88785-F2","document_citation":"Advisory description (CVE-2026-88785)"}],"source_stated_contributors":["The Simple Membership WordPress plugin before 4.8.3 does not avoid transmitting a newly registered member's plaintext password in a URL query string when an optional auto-login-after-registration feature is enabled, exposing the credential in browser history and in web server, proxy, and CDN access logs to anyone able…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.infrastructure_modification","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-88785","reporting_entity":"CVE-2026-88785","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-88785-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-88785-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-88785"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-87764","title":"The BuddyPress Instant Chat WordPress plugin through 1.6 does not check that the sender of a chat message belongs to the conversation it is being added to, nor does it escape message content before outputting it back, allowing unauthenticated users to store arbitrary web scripts that will execute in the session of any member who later views that conversation.","display_title":"Security issue reported in Software component","display_summary":"The BuddyPress Instant Chat WordPress plugin through 1.6 does not check that the sender of a chat message belongs to the conversation it is being added to, nor does it escape message content before outputting it back,…","display_reference":"CVE-2026-87764","display_source_type":"Security advisory","incident_date":"2026-10-11","disclosure_date":"2026-10-11","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87764","source_title":"The BuddyPress Instant Chat WordPress plugin through 1.6 does not check that the sender of a chat message belongs to the conversation it is being added to, nor does it escape message content before outputting it back, allowing unauthenticated users to store arbitrary web scripts that will execute in the session of any member who later views that conversation.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T12:01:21.387Z","source_hash":"content-fingerprint:fnv1a-5bb9c23f","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-87764-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The BuddyPress Instant Chat WordPress plugin through 1.6 does not check that the sender of a chat message belongs to the conversation it is being added to, nor does it escape message content before outputting it back, allowing unauthenticated users to store arbitrary web scripts that will execute in the session of any member who later views that conversation.","source_quote_or_pointer":"Security Advisory CVE-2026-87764","fact_id":"SEA-CVE-2026-87764-F1","document_citation":"Security Advisory CVE-2026-87764"},{"id":"SEA-CVE-2026-87764-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The BuddyPress Instant Chat WordPress plugin through 1.6 does not check that the sender of a chat message belongs to the conversation it is being added to, nor does it escape message content before outputting it back, allowing unauthenticated users to store arbitrary web scripts that will execute in the session of any…","source_quote_or_pointer":"Advisory description (CVE-2026-87764)","fact_id":"SEA-CVE-2026-87764-F2","document_citation":"Advisory description (CVE-2026-87764)"}],"source_stated_contributors":["The BuddyPress Instant Chat WordPress plugin through 1.6 does not check that the sender of a chat message belongs to the conversation it is being added to, nor does it escape message content before outputting it back, allowing unauthenticated users to store arbitrary web scripts that will execute in the session of any…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-87764","reporting_entity":"CVE-2026-87764","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-87764-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-87764-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-87764"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-87762","title":"The Adwised Web Push Notification WordPress plugin through 2.5.7 does not have authorisation checks on several state-changing operations, and the secret comparison it uses instead can be bypassed on installations where the secret key has never been set, allowing unauthenticated users to store arbitrary JavaScript that is executed in the browser of every site visitor.","display_title":"Software component issue could expose accounts or credentials","display_summary":"The Adwised Web Push Notification WordPress plugin through 2.5.7 does not have authorisation checks on several state-changing operations, and the secret comparison it uses instead can be bypassed on installations where…","display_reference":"CVE-2026-87762","display_source_type":"Security advisory","incident_date":"2026-10-11","disclosure_date":"2026-10-11","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87762","source_title":"The Adwised Web Push Notification WordPress plugin through 2.5.7 does not have authorisation checks on several state-changing operations, and the secret comparison it uses instead can be bypassed on installations where the secret key has never been set, allowing unauthenticated users to store arbitrary JavaScript that is executed in the browser of every site visitor.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T12:01:21.387Z","source_hash":"content-fingerprint:fnv1a-637a6c5","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-87762-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Adwised Web Push Notification WordPress plugin through 2.5.7 does not have authorisation checks on several state-changing operations, and the secret comparison it uses instead can be bypassed on installations where the secret key has never been set, allowing unauthenticated users to store arbitrary JavaScript that is executed in the browser of every site visitor.","source_quote_or_pointer":"Security Advisory CVE-2026-87762","fact_id":"SEA-CVE-2026-87762-F1","document_citation":"Security Advisory CVE-2026-87762"},{"id":"SEA-CVE-2026-87762-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Adwised Web Push Notification WordPress plugin through 2.5.7 does not have authorisation checks on several state-changing operations, and the secret comparison it uses instead can be bypassed on installations where the secret key has never been set, allowing unauthenticated users to store arbitrary JavaScript that…","source_quote_or_pointer":"Advisory description (CVE-2026-87762)","fact_id":"SEA-CVE-2026-87762-F2","document_citation":"Advisory description (CVE-2026-87762)"}],"source_stated_contributors":["The Adwised Web Push Notification WordPress plugin through 2.5.7 does not have authorisation checks on several state-changing operations, and the secret comparison it uses instead can be bypassed on installations where the secret key has never been set, allowing unauthenticated users to store arbitrary JavaScript that…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-87762","reporting_entity":"CVE-2026-87762","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-87762-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-87762-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-87762"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-86798","title":"The HootBoard WordPress plugin through 3.1.4 does not perform any authorisation check on some of its REST endpoints, and does not escape the values stored through them before outputting them in a public page, allowing unauthenticated users to inject arbitrary web scripts that will execute in the browser of anyone visiting that page, including administrators.","display_title":"Security issue reported in Software component","display_summary":"The HootBoard WordPress plugin through 3.1.4 does not perform any authorisation check on some of its REST endpoints, and does not escape the values stored through them before outputting them in a public page, allowing…","display_reference":"CVE-2026-86798","display_source_type":"Security advisory","incident_date":"2026-10-11","disclosure_date":"2026-10-11","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-86798","source_title":"The HootBoard WordPress plugin through 3.1.4 does not perform any authorisation check on some of its REST endpoints, and does not escape the values stored through them before outputting them in a public page, allowing unauthenticated users to inject arbitrary web scripts that will execute in the browser of anyone visiting that page, including administrators.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T12:01:21.387Z","source_hash":"content-fingerprint:fnv1a-99615c79","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-86798-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The HootBoard WordPress plugin through 3.1.4 does not perform any authorisation check on some of its REST endpoints, and does not escape the values stored through them before outputting them in a public page, allowing unauthenticated users to inject arbitrary web scripts that will execute in the browser of anyone visiting that page, including administrators.","source_quote_or_pointer":"Security Advisory CVE-2026-86798","fact_id":"SEA-CVE-2026-86798-F1","document_citation":"Security Advisory CVE-2026-86798"},{"id":"SEA-CVE-2026-86798-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The HootBoard WordPress plugin through 3.1.4 does not perform any authorisation check on some of its REST endpoints, and does not escape the values stored through them before outputting them in a public page, allowing unauthenticated users to inject arbitrary web scripts that will execute in the browser of anyone…","source_quote_or_pointer":"Advisory description (CVE-2026-86798)","fact_id":"SEA-CVE-2026-86798-F2","document_citation":"Advisory description (CVE-2026-86798)"}],"source_stated_contributors":["The HootBoard WordPress plugin through 3.1.4 does not perform any authorisation check on some of its REST endpoints, and does not escape the values stored through them before outputting them in a public page, allowing unauthenticated users to inject arbitrary web scripts that will execute in the browser of anyone…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.public_publication","data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-86798","reporting_entity":"CVE-2026-86798","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-86798-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-86798-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-86798"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-86717","title":"The Insurify WordPress plugin through 1.0 does not have authorisation and nonce checks on one of its AJAX actions, allowing unauthenticated users to delete arbitrary WordPress options, which can take the site offline and strip every user of their role.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-86717","display_source_type":"Security advisory","incident_date":"2026-10-11","disclosure_date":"2026-10-11","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-86717","source_title":"The Insurify WordPress plugin through 1.0 does not have authorisation and nonce checks on one of its AJAX actions, allowing unauthenticated users to delete arbitrary WordPress options, which can take the site offline and strip every user of their role.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T12:01:21.387Z","source_hash":"content-fingerprint:fnv1a-aa07930c","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-86717-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Insurify WordPress plugin through 1.0 does not have authorisation and nonce checks on one of its AJAX actions, allowing unauthenticated users to delete arbitrary WordPress options, which can take the site offline and strip every user of their role.","source_quote_or_pointer":"Security Advisory CVE-2026-86717","fact_id":"SEA-CVE-2026-86717-F1","document_citation":"Security Advisory CVE-2026-86717"},{"id":"SEA-CVE-2026-86717-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Insurify WordPress plugin through 1.0 does not have authorisation and nonce checks on one of its AJAX actions, allowing unauthenticated users to delete arbitrary WordPress options, which can take the site offline and strip every user of their role.","source_quote_or_pointer":"Advisory description (CVE-2026-86717)","fact_id":"SEA-CVE-2026-86717-F2","document_citation":"Advisory description (CVE-2026-86717)"}],"source_stated_contributors":["The Insurify WordPress plugin through 1.0 does not have authorisation and nonce checks on one of its AJAX actions, allowing unauthenticated users to delete arbitrary WordPress options, which can take the site offline and strip every user of their role."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.write_action","data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-86717","reporting_entity":"CVE-2026-86717","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-86717-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-86717-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-86717"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-85126","title":"The Crowdfundly WordPress plugin through 2.2.2 does not have capability checks on some of its AJAX actions, allowing users holding one of its own low privileged roles to grant themselves the administrator role or arbitrary capabilities, leading to a full site takeover.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-85126","display_source_type":"Security advisory","incident_date":"2026-10-11","disclosure_date":"2026-10-11","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85126","source_title":"The Crowdfundly WordPress plugin through 2.2.2 does not have capability checks on some of its AJAX actions, allowing users holding one of its own low privileged roles to grant themselves the administrator role or arbitrary capabilities, leading to a full site takeover.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T12:01:21.387Z","source_hash":"content-fingerprint:fnv1a-595c2611","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-85126-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Crowdfundly WordPress plugin through 2.2.2 does not have capability checks on some of its AJAX actions, allowing users holding one of its own low privileged roles to grant themselves the administrator role or arbitrary capabilities, leading to a full site takeover.","source_quote_or_pointer":"Security Advisory CVE-2026-85126","fact_id":"SEA-CVE-2026-85126-F1","document_citation":"Security Advisory CVE-2026-85126"},{"id":"SEA-CVE-2026-85126-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Crowdfundly WordPress plugin through 2.2.2 does not have capability checks on some of its AJAX actions, allowing users holding one of its own low privileged roles to grant themselves the administrator role or arbitrary capabilities, leading to a full site takeover.","source_quote_or_pointer":"Advisory description (CVE-2026-85126)","fact_id":"SEA-CVE-2026-85126-F2","document_citation":"Advisory description (CVE-2026-85126)"}],"source_stated_contributors":["The Crowdfundly WordPress plugin through 2.2.2 does not have capability checks on some of its AJAX actions, allowing users holding one of its own low privileged roles to grant themselves the administrator role or arbitrary capabilities, leading to a full site takeover."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-85126","reporting_entity":"CVE-2026-85126","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-85126-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-85126-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-85126"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-85121","title":"The Insurify WordPress plugin through 1.0 does not have authorisation and nonce checks on one of its AJAX actions, allowing unauthenticated users to create and overwrite arbitrary WordPress options with request data, which can take the site offline and deactivate all of its Insurify WordPress plugin through 1.0.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-85121","display_source_type":"Security advisory","incident_date":"2026-10-11","disclosure_date":"2026-10-11","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85121","source_title":"The Insurify WordPress plugin through 1.0 does not have authorisation and nonce checks on one of its AJAX actions, allowing unauthenticated users to create and overwrite arbitrary WordPress options with request data, which can take the site offline and deactivate all of its Insurify WordPress plugin through 1.0.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T12:01:21.387Z","source_hash":"content-fingerprint:fnv1a-ad2fc83a","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-85121-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Insurify WordPress plugin through 1.0 does not have authorisation and nonce checks on one of its AJAX actions, allowing unauthenticated users to create and overwrite arbitrary WordPress options with request data, which can take the site offline and deactivate all of its Insurify WordPress plugin through 1.0.","source_quote_or_pointer":"Security Advisory CVE-2026-85121","fact_id":"SEA-CVE-2026-85121-F1","document_citation":"Security Advisory CVE-2026-85121"},{"id":"SEA-CVE-2026-85121-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Insurify WordPress plugin through 1.0 does not have authorisation and nonce checks on one of its AJAX actions, allowing unauthenticated users to create and overwrite arbitrary WordPress options with request data, which can take the site offline and deactivate all of its Insurify WordPress plugin through 1.0.","source_quote_or_pointer":"Advisory description (CVE-2026-85121)","fact_id":"SEA-CVE-2026-85121-F2","document_citation":"Advisory description (CVE-2026-85121)"}],"source_stated_contributors":["The Insurify WordPress plugin through 1.0 does not have authorisation and nonce checks on one of its AJAX actions, allowing unauthenticated users to create and overwrite arbitrary WordPress options with request data, which can take the site offline and deactivate all of its Insurify WordPress plugin through 1.0."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-85121","reporting_entity":"CVE-2026-85121","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-85121-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-85121-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-85121"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-84734","title":"The Mindstien Quick Login WordPress plugin through 1.0 does not correctly validate a value supplied in the request against the visitor's own session before authenticating them, allowing unauthenticated attackers to obtain a session as the administrator account the Mindstien Quick Login WordPress plugin through 1.0 is configured with.","display_title":"Security issue reported in Software component","display_summary":"The Mindstien Quick Login WordPress plugin through 1.0 does not correctly validate a value supplied in the request against the visitor's own session before authenticating them, allowing unauthenticated attackers to…","display_reference":"CVE-2026-84734","display_source_type":"Security advisory","incident_date":"2026-10-11","disclosure_date":"2026-10-11","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84734","source_title":"The Mindstien Quick Login WordPress plugin through 1.0 does not correctly validate a value supplied in the request against the visitor's own session before authenticating them, allowing unauthenticated attackers to obtain a session as the administrator account the Mindstien Quick Login WordPress plugin through 1.0 is configured with.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T12:01:21.387Z","source_hash":"content-fingerprint:fnv1a-3b8a65e5","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-84734-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Mindstien Quick Login WordPress plugin through 1.0 does not correctly validate a value supplied in the request against the visitor's own session before authenticating them, allowing unauthenticated attackers to obtain a session as the administrator account the Mindstien Quick Login WordPress plugin through 1.0 is configured with.","source_quote_or_pointer":"Security Advisory CVE-2026-84734","fact_id":"SEA-CVE-2026-84734-F1","document_citation":"Security Advisory CVE-2026-84734"},{"id":"SEA-CVE-2026-84734-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Mindstien Quick Login WordPress plugin through 1.0 does not correctly validate a value supplied in the request against the visitor's own session before authenticating them, allowing unauthenticated attackers to obtain a session as the administrator account the Mindstien Quick Login WordPress plugin through 1.0 is…","source_quote_or_pointer":"Advisory description (CVE-2026-84734)","fact_id":"SEA-CVE-2026-84734-F2","document_citation":"Advisory description (CVE-2026-84734)"}],"source_stated_contributors":["The Mindstien Quick Login WordPress plugin through 1.0 does not correctly validate a value supplied in the request against the visitor's own session before authenticating them, allowing unauthenticated attackers to obtain a session as the administrator account the Mindstien Quick Login WordPress plugin through 1.0 is…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-84734","reporting_entity":"CVE-2026-84734","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-84734-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-84734-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-84734"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-84261","title":"The click5 CRM add-on to Contact Form 7 WordPress plugin through 1.0.4 does not sanitise and escape content submitted through an unauthenticated endpoint before outputting it back in an admin page, leading to Stored XSS which could be used against high privilege users such as admin.","display_title":"Software component issue could run attacker-controlled scripts in a browser","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-84261","display_source_type":"Security advisory","incident_date":"2026-10-11","disclosure_date":"2026-10-11","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84261","source_title":"The click5 CRM add-on to Contact Form 7 WordPress plugin through 1.0.4 does not sanitise and escape content submitted through an unauthenticated endpoint before outputting it back in an admin page, leading to Stored XSS which could be used against high privilege users such as admin.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T12:01:21.387Z","source_hash":"content-fingerprint:fnv1a-64364a0e","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-84261-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The click5 CRM add-on to Contact Form 7 WordPress plugin through 1.0.4 does not sanitise and escape content submitted through an unauthenticated endpoint before outputting it back in an admin page, leading to Stored XSS which could be used against high privilege users such as admin.","source_quote_or_pointer":"Security Advisory CVE-2026-84261","fact_id":"SEA-CVE-2026-84261-F1","document_citation":"Security Advisory CVE-2026-84261"},{"id":"SEA-CVE-2026-84261-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The click5 CRM add-on to Contact Form 7 WordPress plugin through 1.0.4 does not sanitise and escape content submitted through an unauthenticated endpoint before outputting it back in an admin page, leading to Stored XSS which could be used against high privilege users such as admin.","source_quote_or_pointer":"Advisory description (CVE-2026-84261)","fact_id":"SEA-CVE-2026-84261-F2","document_citation":"Advisory description (CVE-2026-84261)"}],"source_stated_contributors":["The click5 CRM add-on to Contact Form 7 WordPress plugin through 1.0.4 does not sanitise and escape content submitted through an unauthenticated endpoint before outputting it back in an admin page, leading to Stored XSS which could be used against high privilege users such as admin."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-84261","reporting_entity":"CVE-2026-84261","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-84261-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-84261-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-84261"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-84260","title":"The click5 CRM add-on to Gravity Forms WordPress plugin through 1.0.3 does not sanitise and escape content submitted through an unauthenticated endpoint before outputting it back in an admin page, leading to Stored XSS which could be used against high privilege users such as admin.","display_title":"Software component issue could run attacker-controlled scripts in a browser","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-84260","display_source_type":"Security advisory","incident_date":"2026-10-11","disclosure_date":"2026-10-11","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84260","source_title":"The click5 CRM add-on to Gravity Forms WordPress plugin through 1.0.3 does not sanitise and escape content submitted through an unauthenticated endpoint before outputting it back in an admin page, leading to Stored XSS which could be used against high privilege users such as admin.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T12:01:21.387Z","source_hash":"content-fingerprint:fnv1a-38c15009","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-84260-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The click5 CRM add-on to Gravity Forms WordPress plugin through 1.0.3 does not sanitise and escape content submitted through an unauthenticated endpoint before outputting it back in an admin page, leading to Stored XSS which could be used against high privilege users such as admin.","source_quote_or_pointer":"Security Advisory CVE-2026-84260","fact_id":"SEA-CVE-2026-84260-F1","document_citation":"Security Advisory CVE-2026-84260"},{"id":"SEA-CVE-2026-84260-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The click5 CRM add-on to Gravity Forms WordPress plugin through 1.0.3 does not sanitise and escape content submitted through an unauthenticated endpoint before outputting it back in an admin page, leading to Stored XSS which could be used against high privilege users such as admin.","source_quote_or_pointer":"Advisory description (CVE-2026-84260)","fact_id":"SEA-CVE-2026-84260-F2","document_citation":"Advisory description (CVE-2026-84260)"}],"source_stated_contributors":["The click5 CRM add-on to Gravity Forms WordPress plugin through 1.0.3 does not sanitise and escape content submitted through an unauthenticated endpoint before outputting it back in an admin page, leading to Stored XSS which could be used against high privilege users such as admin."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-84260","reporting_entity":"CVE-2026-84260","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-84260-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-84260-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-84260"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-84259","title":"The click5 CRM add-on to WPForms WordPress plugin through 1.0.3 does not sanitise and escape content submitted through an unauthenticated endpoint before outputting it back in an admin page, leading to Stored XSS which could be used against high privilege users such as admin.","display_title":"Software component issue could run attacker-controlled scripts in a browser","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-84259","display_source_type":"Security advisory","incident_date":"2026-10-11","disclosure_date":"2026-10-11","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84259","source_title":"The click5 CRM add-on to WPForms WordPress plugin through 1.0.3 does not sanitise and escape content submitted through an unauthenticated endpoint before outputting it back in an admin page, leading to Stored XSS which could be used against high privilege users such as admin.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T12:01:21.387Z","source_hash":"content-fingerprint:fnv1a-1072c871","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-84259-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The click5 CRM add-on to WPForms WordPress plugin through 1.0.3 does not sanitise and escape content submitted through an unauthenticated endpoint before outputting it back in an admin page, leading to Stored XSS which could be used against high privilege users such as admin.","source_quote_or_pointer":"Security Advisory CVE-2026-84259","fact_id":"SEA-CVE-2026-84259-F1","document_citation":"Security Advisory CVE-2026-84259"},{"id":"SEA-CVE-2026-84259-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The click5 CRM add-on to WPForms WordPress plugin through 1.0.3 does not sanitise and escape content submitted through an unauthenticated endpoint before outputting it back in an admin page, leading to Stored XSS which could be used against high privilege users such as admin.","source_quote_or_pointer":"Advisory description (CVE-2026-84259)","fact_id":"SEA-CVE-2026-84259-F2","document_citation":"Advisory description (CVE-2026-84259)"}],"source_stated_contributors":["The click5 CRM add-on to WPForms WordPress plugin through 1.0.3 does not sanitise and escape content submitted through an unauthenticated endpoint before outputting it back in an admin page, leading to Stored XSS which could be used against high privilege users such as admin."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-84259","reporting_entity":"CVE-2026-84259","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-84259-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-84259-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-84259"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-84258","title":"The click5 CRM add-on to Ninja Forms WordPress plugin through 1.0.1 does not sanitise and escape content submitted through an unauthenticated endpoint before outputting it back in an admin page, leading to Stored XSS which could be used against high privilege users such as admin.","display_title":"Software component issue could run attacker-controlled scripts in a browser","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-84258","display_source_type":"Security advisory","incident_date":"2026-10-11","disclosure_date":"2026-10-11","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84258","source_title":"The click5 CRM add-on to Ninja Forms WordPress plugin through 1.0.1 does not sanitise and escape content submitted through an unauthenticated endpoint before outputting it back in an admin page, leading to Stored XSS which could be used against high privilege users such as admin.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T12:01:21.387Z","source_hash":"content-fingerprint:fnv1a-35fb2670","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-84258-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The click5 CRM add-on to Ninja Forms WordPress plugin through 1.0.1 does not sanitise and escape content submitted through an unauthenticated endpoint before outputting it back in an admin page, leading to Stored XSS which could be used against high privilege users such as admin.","source_quote_or_pointer":"Security Advisory CVE-2026-84258","fact_id":"SEA-CVE-2026-84258-F1","document_citation":"Security Advisory CVE-2026-84258"},{"id":"SEA-CVE-2026-84258-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The click5 CRM add-on to Ninja Forms WordPress plugin through 1.0.1 does not sanitise and escape content submitted through an unauthenticated endpoint before outputting it back in an admin page, leading to Stored XSS which could be used against high privilege users such as admin.","source_quote_or_pointer":"Advisory description (CVE-2026-84258)","fact_id":"SEA-CVE-2026-84258-F2","document_citation":"Advisory description (CVE-2026-84258)"}],"source_stated_contributors":["The click5 CRM add-on to Ninja Forms WordPress plugin through 1.0.1 does not sanitise and escape content submitted through an unauthenticated endpoint before outputting it back in an admin page, leading to Stored XSS which could be used against high privilege users such as admin."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-84258","reporting_entity":"CVE-2026-84258","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-84258-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-84258-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-84258"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-84254","title":"The click5 CRM add-on to Contact Form 7 WordPress plugin through 1.0.4 does not have authorisation and CSRF checks when updating options via a REST endpoint, and does not ensure that the option to be updated belongs to the click5 CRM add-on to Contact Form 7 WordPress plugin through 1.0.4. As a result, unauthenticated attackers could change arbitrary blog options, allowing them to create a new administrator account and take over the site.","display_title":"Security issue reported in Software component","display_summary":"The click5 CRM add-on to Contact Form 7 WordPress plugin through 1.0.4 does not have authorisation and CSRF checks when updating options via a REST endpoint, and does not ensure that the option to be updated belongs to…","display_reference":"CVE-2026-84254","display_source_type":"Security advisory","incident_date":"2026-10-11","disclosure_date":"2026-10-11","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84254","source_title":"The click5 CRM add-on to Contact Form 7 WordPress plugin through 1.0.4 does not have authorisation and CSRF checks when updating options via a REST endpoint, and does not ensure that the option to be updated belongs to the click5 CRM add-on to Contact Form 7 WordPress plugin through 1.0.4. As a result, unauthenticated attackers could change arbitrary blog options, allowing them to create a new administrator account and take over the site.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T12:01:21.387Z","source_hash":"content-fingerprint:fnv1a-63e9b110","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-84254-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The click5 CRM add-on to Contact Form 7 WordPress plugin through 1.0.4 does not have authorisation and CSRF checks when updating options via a REST endpoint, and does not ensure that the option to be updated belongs to the click5 CRM add-on to Contact Form 7 WordPress plugin through 1.0.4. As a result, unauthenticated attackers could change arbitrary blog options, allowing them to create a new administrator account and take over the site.","source_quote_or_pointer":"Security Advisory CVE-2026-84254","fact_id":"SEA-CVE-2026-84254-F1","document_citation":"Security Advisory CVE-2026-84254"},{"id":"SEA-CVE-2026-84254-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The click5 CRM add-on to Contact Form 7 WordPress plugin through 1.0.4 does not have authorisation and CSRF checks when updating options via a REST endpoint, and does not ensure that the option to be updated belongs to the click5 CRM add-on to Contact Form 7 WordPress plugin through 1.0.4.","source_quote_or_pointer":"Advisory description (CVE-2026-84254)","fact_id":"SEA-CVE-2026-84254-F2","document_citation":"Advisory description (CVE-2026-84254)"}],"source_stated_contributors":["The click5 CRM add-on to Contact Form 7 WordPress plugin through 1.0.4 does not have authorisation and CSRF checks when updating options via a REST endpoint, and does not ensure that the option to be updated belongs to the click5 CRM add-on to Contact Form 7 WordPress plugin through 1.0.4."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.public_publication"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-84254","reporting_entity":"CVE-2026-84254","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-84254-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-84254-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-84254"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-84253","title":"The click5 CRM add-on to Gravity Forms WordPress plugin through 1.0.3 does not have authorisation and CSRF checks when updating options via a REST endpoint, and does not ensure that the option to be updated belongs to the click5 CRM add-on to Gravity Forms WordPress plugin through 1.0.3. As a result, unauthenticated attackers could change arbitrary blog options, allowing them to create a new administrator account and take over the site.","display_title":"Security issue reported in Software component","display_summary":"The click5 CRM add-on to Gravity Forms WordPress plugin through 1.0.3 does not have authorisation and CSRF checks when updating options via a REST endpoint, and does not ensure that the option to be updated belongs to…","display_reference":"CVE-2026-84253","display_source_type":"Security advisory","incident_date":"2026-10-11","disclosure_date":"2026-10-11","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84253","source_title":"The click5 CRM add-on to Gravity Forms WordPress plugin through 1.0.3 does not have authorisation and CSRF checks when updating options via a REST endpoint, and does not ensure that the option to be updated belongs to the click5 CRM add-on to Gravity Forms WordPress plugin through 1.0.3. As a result, unauthenticated attackers could change arbitrary blog options, allowing them to create a new administrator account and take over the site.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T12:01:21.387Z","source_hash":"content-fingerprint:fnv1a-9e4202a3","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-84253-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The click5 CRM add-on to Gravity Forms WordPress plugin through 1.0.3 does not have authorisation and CSRF checks when updating options via a REST endpoint, and does not ensure that the option to be updated belongs to the click5 CRM add-on to Gravity Forms WordPress plugin through 1.0.3. As a result, unauthenticated attackers could change arbitrary blog options, allowing them to create a new administrator account and take over the site.","source_quote_or_pointer":"Security Advisory CVE-2026-84253","fact_id":"SEA-CVE-2026-84253-F1","document_citation":"Security Advisory CVE-2026-84253"},{"id":"SEA-CVE-2026-84253-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The click5 CRM add-on to Gravity Forms WordPress plugin through 1.0.3 does not have authorisation and CSRF checks when updating options via a REST endpoint, and does not ensure that the option to be updated belongs to the click5 CRM add-on to Gravity Forms WordPress plugin through 1.0.3.","source_quote_or_pointer":"Advisory description (CVE-2026-84253)","fact_id":"SEA-CVE-2026-84253-F2","document_citation":"Advisory description (CVE-2026-84253)"}],"source_stated_contributors":["The click5 CRM add-on to Gravity Forms WordPress plugin through 1.0.3 does not have authorisation and CSRF checks when updating options via a REST endpoint, and does not ensure that the option to be updated belongs to the click5 CRM add-on to Gravity Forms WordPress plugin through 1.0.3."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.public_publication"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-84253","reporting_entity":"CVE-2026-84253","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-84253-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-84253-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-84253"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-84252","title":"The click5 CRM add-on to WPForms WordPress plugin through 1.0.3 does not have authorisation and CSRF checks when updating options via a REST endpoint, and does not ensure that the option to be updated belongs to the click5 CRM add-on to WPForms WordPress plugin through 1.0.3. As a result, unauthenticated attackers could change arbitrary blog options, allowing them to create a new administrator account and take over the site.","display_title":"Security issue reported in Software component","display_summary":"The click5 CRM add-on to WPForms WordPress plugin through 1.0.3 does not have authorisation and CSRF checks when updating options via a REST endpoint, and does not ensure that the option to be updated belongs to the…","display_reference":"CVE-2026-84252","display_source_type":"Security advisory","incident_date":"2026-10-11","disclosure_date":"2026-10-11","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84252","source_title":"The click5 CRM add-on to WPForms WordPress plugin through 1.0.3 does not have authorisation and CSRF checks when updating options via a REST endpoint, and does not ensure that the option to be updated belongs to the click5 CRM add-on to WPForms WordPress plugin through 1.0.3. As a result, unauthenticated attackers could change arbitrary blog options, allowing them to create a new administrator account and take over the site.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T12:01:21.387Z","source_hash":"content-fingerprint:fnv1a-31eb4ce2","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-84252-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The click5 CRM add-on to WPForms WordPress plugin through 1.0.3 does not have authorisation and CSRF checks when updating options via a REST endpoint, and does not ensure that the option to be updated belongs to the click5 CRM add-on to WPForms WordPress plugin through 1.0.3. As a result, unauthenticated attackers could change arbitrary blog options, allowing them to create a new administrator account and take over the site.","source_quote_or_pointer":"Security Advisory CVE-2026-84252","fact_id":"SEA-CVE-2026-84252-F1","document_citation":"Security Advisory CVE-2026-84252"},{"id":"SEA-CVE-2026-84252-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The click5 CRM add-on to WPForms WordPress plugin through 1.0.3 does not have authorisation and CSRF checks when updating options via a REST endpoint, and does not ensure that the option to be updated belongs to the click5 CRM add-on to WPForms WordPress plugin through 1.0.3.","source_quote_or_pointer":"Advisory description (CVE-2026-84252)","fact_id":"SEA-CVE-2026-84252-F2","document_citation":"Advisory description (CVE-2026-84252)"}],"source_stated_contributors":["The click5 CRM add-on to WPForms WordPress plugin through 1.0.3 does not have authorisation and CSRF checks when updating options via a REST endpoint, and does not ensure that the option to be updated belongs to the click5 CRM add-on to WPForms WordPress plugin through 1.0.3."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.public_publication"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-84252","reporting_entity":"CVE-2026-84252","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-84252-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-84252-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-84252"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-84251","title":"The click5 CRM add-on to Ninja Forms WordPress plugin through 1.0.1 does not have authorisation and CSRF checks when updating options via a REST endpoint, and does not ensure that the option to be updated belongs to the click5 CRM add-on to Ninja Forms WordPress plugin through 1.0.1. As a result, unauthenticated attackers could change arbitrary blog options, allowing them to create a new administrator account and take over the site.","display_title":"Security issue reported in Software component","display_summary":"The click5 CRM add-on to Ninja Forms WordPress plugin through 1.0.1 does not have authorisation and CSRF checks when updating options via a REST endpoint, and does not ensure that the option to be updated belongs to the…","display_reference":"CVE-2026-84251","display_source_type":"Security advisory","incident_date":"2026-10-11","disclosure_date":"2026-10-11","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84251","source_title":"The click5 CRM add-on to Ninja Forms WordPress plugin through 1.0.1 does not have authorisation and CSRF checks when updating options via a REST endpoint, and does not ensure that the option to be updated belongs to the click5 CRM add-on to Ninja Forms WordPress plugin through 1.0.1. As a result, unauthenticated attackers could change arbitrary blog options, allowing them to create a new administrator account and take over the site.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T12:01:21.387Z","source_hash":"content-fingerprint:fnv1a-d52d5bd1","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-84251-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The click5 CRM add-on to Ninja Forms WordPress plugin through 1.0.1 does not have authorisation and CSRF checks when updating options via a REST endpoint, and does not ensure that the option to be updated belongs to the click5 CRM add-on to Ninja Forms WordPress plugin through 1.0.1. As a result, unauthenticated attackers could change arbitrary blog options, allowing them to create a new administrator account and take over the site.","source_quote_or_pointer":"Security Advisory CVE-2026-84251","fact_id":"SEA-CVE-2026-84251-F1","document_citation":"Security Advisory CVE-2026-84251"},{"id":"SEA-CVE-2026-84251-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The click5 CRM add-on to Ninja Forms WordPress plugin through 1.0.1 does not have authorisation and CSRF checks when updating options via a REST endpoint, and does not ensure that the option to be updated belongs to the click5 CRM add-on to Ninja Forms WordPress plugin through 1.0.1.","source_quote_or_pointer":"Advisory description (CVE-2026-84251)","fact_id":"SEA-CVE-2026-84251-F2","document_citation":"Advisory description (CVE-2026-84251)"}],"source_stated_contributors":["The click5 CRM add-on to Ninja Forms WordPress plugin through 1.0.1 does not have authorisation and CSRF checks when updating options via a REST endpoint, and does not ensure that the option to be updated belongs to the click5 CRM add-on to Ninja Forms WordPress plugin through 1.0.1."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.public_publication"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-84251","reporting_entity":"CVE-2026-84251","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-84251-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-84251-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-84251"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-81649","title":"The Fundiin cho WooCommerce WordPress plugin through 3.4.0 does not have proper authorisation on several of its REST API routes, relying instead on a credential that is identical on every installation, allowing unauthenticated attackers to disclose the store's payment credentials and customer order data, overwrite the payment gateway configuration so that payments are credited elsewhere, and mark unpaid orders as paid. The same missing authorisation also allows arbitrary script to be stored in a field which is output unescaped on the classic checkout, leading to unauthenticated stored XSS on stores that do not use the block-based checkout.","display_title":"Software component issue could run attacker-controlled scripts in a browser","display_summary":"The Fundiin cho WooCommerce WordPress plugin through 3.4.0 does not have proper authorisation on several of its REST API routes, relying instead on a credential that is identical on every installation, allowing…","display_reference":"CVE-2026-81649","display_source_type":"Security advisory","incident_date":"2026-10-11","disclosure_date":"2026-10-11","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-81649","source_title":"The Fundiin cho WooCommerce WordPress plugin through 3.4.0 does not have proper authorisation on several of its REST API routes, relying instead on a credential that is identical on every installation, allowing unauthenticated attackers to disclose the store's payment credentials and customer order data, overwrite the payment gateway configuration so that payments are credited elsewhere, and mark unpaid orders as paid. The same missing authorisation also allows arbitrary script to be stored in a field which is output unescaped on the classic checkout, leading to unauthenticated stored XSS on stores that do not use the block-based checkout.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T12:01:21.387Z","source_hash":"content-fingerprint:fnv1a-91ce5ae5","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-81649-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Fundiin cho WooCommerce WordPress plugin through 3.4.0 does not have proper authorisation on several of its REST API routes, relying instead on a credential that is identical on every installation, allowing unauthenticated attackers to disclose the store's payment credentials and customer order data, overwrite the payment gateway configuration so that payments are credited elsewhere, and mark unpaid orders as paid. The same missing authorisation also allows arbitrary script to be stored in a field which is output unescaped on the classic checkout, leading to unauthenticated stored XSS on stores that do not use the block-based checkout.","source_quote_or_pointer":"Security Advisory CVE-2026-81649","fact_id":"SEA-CVE-2026-81649-F1","document_citation":"Security Advisory CVE-2026-81649"},{"id":"SEA-CVE-2026-81649-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Fundiin cho WooCommerce WordPress plugin through 3.4.0 does not have proper authorisation on several of its REST API routes, relying instead on a credential that is identical on every installation, allowing unauthenticated attackers to disclose the store's payment credentials and customer order data, overwrite the…","source_quote_or_pointer":"Advisory description (CVE-2026-81649)","fact_id":"SEA-CVE-2026-81649-F2","document_citation":"Advisory description (CVE-2026-81649)"}],"source_stated_contributors":["The Fundiin cho WooCommerce WordPress plugin through 3.4.0 does not have proper authorisation on several of its REST API routes, relying instead on a credential that is identical on every installation, allowing unauthenticated attackers to disclose the store's payment credentials and customer order data, overwrite the…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.financial_action","auth.write_action","data.pii","data.credentials_secrets","arch.external_api"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-81649","reporting_entity":"CVE-2026-81649","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-81649-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-81649-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-81649"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-81420","title":"The Tcard WP WordPress plugin through 1.8.0 does not sanitise and escape a parameter before using it in a SQL statement in one of its unauthenticated AJAX actions, allowing unauthenticated users to perform SQL injection attacks.","display_title":"Software component issue could expose or alter stored data","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-81420","display_source_type":"Security advisory","incident_date":"2026-10-11","disclosure_date":"2026-10-11","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-81420","source_title":"The Tcard WP WordPress plugin through 1.8.0 does not sanitise and escape a parameter before using it in a SQL statement in one of its unauthenticated AJAX actions, allowing unauthenticated users to perform SQL injection attacks.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T12:01:21.387Z","source_hash":"content-fingerprint:fnv1a-4e1e351c","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-81420-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Tcard WP WordPress plugin through 1.8.0 does not sanitise and escape a parameter before using it in a SQL statement in one of its unauthenticated AJAX actions, allowing unauthenticated users to perform SQL injection attacks.","source_quote_or_pointer":"Security Advisory CVE-2026-81420","fact_id":"SEA-CVE-2026-81420-F1","document_citation":"Security Advisory CVE-2026-81420"},{"id":"SEA-CVE-2026-81420-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Tcard WP WordPress plugin through 1.8.0 does not sanitise and escape a parameter before using it in a SQL statement in one of its unauthenticated AJAX actions, allowing unauthenticated users to perform SQL injection attacks.","source_quote_or_pointer":"Advisory description (CVE-2026-81420)","fact_id":"SEA-CVE-2026-81420-F2","document_citation":"Advisory description (CVE-2026-81420)"}],"source_stated_contributors":["The Tcard WP WordPress plugin through 1.8.0 does not sanitise and escape a parameter before using it in a SQL statement in one of its unauthenticated AJAX actions, allowing unauthenticated users to perform SQL injection attacks."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-81420","reporting_entity":"CVE-2026-81420","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-81420-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-81420-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-81420"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-14854","title":"The WooCommerce Bookings WordPress plugin before 3.11.0 does not limit a user-supplied value before using it to allocate memory in one of its unauthenticated AJAX actions, allowing unauthenticated attackers to exhaust server memory and cause a Denial of Service with a single request.","display_title":"Software component issue could make the service unavailable","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-14854","display_source_type":"Security advisory","incident_date":"2026-10-11","disclosure_date":"2026-10-11","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-14854","source_title":"The WooCommerce Bookings WordPress plugin before 3.11.0 does not limit a user-supplied value before using it to allocate memory in one of its unauthenticated AJAX actions, allowing unauthenticated attackers to exhaust server memory and cause a Denial of Service with a single request.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T12:01:21.387Z","source_hash":"content-fingerprint:fnv1a-69ae4deb","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-14854-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The WooCommerce Bookings WordPress plugin before 3.11.0 does not limit a user-supplied value before using it to allocate memory in one of its unauthenticated AJAX actions, allowing unauthenticated attackers to exhaust server memory and cause a Denial of Service with a single request.","source_quote_or_pointer":"Security Advisory CVE-2026-14854","fact_id":"SEA-CVE-2026-14854-F1","document_citation":"Security Advisory CVE-2026-14854"},{"id":"SEA-CVE-2026-14854-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The WooCommerce Bookings WordPress plugin before 3.11.0 does not limit a user-supplied value before using it to allocate memory in one of its unauthenticated AJAX actions, allowing unauthenticated attackers to exhaust server memory and cause a Denial of Service with a single request.","source_quote_or_pointer":"Advisory description (CVE-2026-14854)","fact_id":"SEA-CVE-2026-14854-F2","document_citation":"Advisory description (CVE-2026-14854)"}],"source_stated_contributors":["The WooCommerce Bookings WordPress plugin before 3.11.0 does not limit a user-supplied value before using it to allocate memory in one of its unauthenticated AJAX actions, allowing unauthenticated attackers to exhaust server memory and cause a Denial of Service with a single request."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-14854","reporting_entity":"CVE-2026-14854","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-14854-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-14854-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-14854"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108541","title":"A vulnerability has been found in highwarden Super Store Finder up to 3.8. Affected is an unknown function of the file /products/superstorefinder/index.php. The manipulation of the argument lat/lng leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used. Upgrading to version 3.9 is able to address this issue. The affected component should be upgraded. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.","display_title":"Software component issue could expose or alter stored data","display_summary":"A vulnerability has been found in highwarden Super Store Finder up to 3.8. Affected is an unknown function of the file /products/superstorefinder/index.php.","display_reference":"CVE-2026-108541","display_source_type":"Security advisory","incident_date":"2026-10-11","disclosure_date":"2026-10-11","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108541","source_title":"A vulnerability has been found in highwarden Super Store Finder up to 3.8. Affected is an unknown function of the file /products/superstorefinder/index.php. The manipulation of the argument lat/lng leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used. Upgrading to version 3.9 is able to address this issue. The affected component should be upgraded. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T12:01:21.387Z","source_hash":"content-fingerprint:fnv1a-7c0f8f8","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108541-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability has been found in highwarden Super Store Finder up to 3.8. Affected is an unknown function of the file /products/superstorefinder/index.php. The manipulation of the argument lat/lng leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used. Upgrading to version 3.9 is able to address this issue. The affected component should be upgraded. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.","source_quote_or_pointer":"Security Advisory CVE-2026-108541","fact_id":"SEA-CVE-2026-108541-F1","document_citation":"Security Advisory CVE-2026-108541"},{"id":"SEA-CVE-2026-108541-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability has been found in highwarden Super Store Finder up to 3.8. Affected is an unknown function of the file /products/superstorefinder/index.php. The manipulation of the argument lat/lng leads to sql injection. Remote exploitation of the attack is possible.","source_quote_or_pointer":"Advisory description (CVE-2026-108541)","fact_id":"SEA-CVE-2026-108541-F2","document_citation":"Advisory description (CVE-2026-108541)"}],"source_stated_contributors":["A vulnerability has been found in highwarden Super Store Finder up to 3.8. Affected is an unknown function of the file /products/superstorefinder/index.php. The manipulation of the argument lat/lng leads to sql injection. Remote exploitation of the attack is possible."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","auth.public_publication","data.pii","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108541","reporting_entity":"CVE-2026-108541","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108541-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108541-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108541"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-106029","title":"The WeddingCity Lite WordPress plugin through 1.0.4 does not perform any authorisation or validity checks before deleting posts, pages and media attachments, allowing unauthenticated attackers to permanently delete arbitrary content site-wide.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-106029","display_source_type":"Security advisory","incident_date":"2026-10-11","disclosure_date":"2026-10-11","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-106029","source_title":"The WeddingCity Lite WordPress plugin through 1.0.4 does not perform any authorisation or validity checks before deleting posts, pages and media attachments, allowing unauthenticated attackers to permanently delete arbitrary content site-wide.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T12:01:21.387Z","source_hash":"content-fingerprint:fnv1a-2bf2b099","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-106029-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The WeddingCity Lite WordPress plugin through 1.0.4 does not perform any authorisation or validity checks before deleting posts, pages and media attachments, allowing unauthenticated attackers to permanently delete arbitrary content site-wide.","source_quote_or_pointer":"Security Advisory CVE-2026-106029","fact_id":"SEA-CVE-2026-106029-F1","document_citation":"Security Advisory CVE-2026-106029"},{"id":"SEA-CVE-2026-106029-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The WeddingCity Lite WordPress plugin through 1.0.4 does not perform any authorisation or validity checks before deleting posts, pages and media attachments, allowing unauthenticated attackers to permanently delete arbitrary content site-wide.","source_quote_or_pointer":"Advisory description (CVE-2026-106029)","fact_id":"SEA-CVE-2026-106029-F2","document_citation":"Advisory description (CVE-2026-106029)"}],"source_stated_contributors":["The WeddingCity Lite WordPress plugin through 1.0.4 does not perform any authorisation or validity checks before deleting posts, pages and media attachments, allowing unauthenticated attackers to permanently delete arbitrary content site-wide."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.write_action","data.uploaded_files"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-106029","reporting_entity":"CVE-2026-106029","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-106029-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-106029-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-106029"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-104682","title":"The Envira Gallery WordPress plugin before 1.16.2 does not correctly check authorization on its gallery-conversion feature, verifying that the requester can edit an arbitrary post they name rather than that they are allowed to create the Envira Gallery WordPress plugin before 1.16.2's own gallery content, allowing users with contributor-level access to create and publish gallery posts that the Envira Gallery WordPress plugin before 1.16.2's settings otherwise withhold from them.","display_title":"Security issue reported in Software component","display_summary":"The Envira Gallery WordPress plugin before 1.16.2 does not correctly check authorization on its gallery-conversion feature, verifying that the requester can edit an arbitrary post they name rather than that they are…","display_reference":"CVE-2026-104682","display_source_type":"Security advisory","incident_date":"2026-10-11","disclosure_date":"2026-10-11","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104682","source_title":"The Envira Gallery WordPress plugin before 1.16.2 does not correctly check authorization on its gallery-conversion feature, verifying that the requester can edit an arbitrary post they name rather than that they are allowed to create the Envira Gallery WordPress plugin before 1.16.2's own gallery content, allowing users with contributor-level access to create and publish gallery posts that the Envira Gallery WordPress plugin before 1.16.2's settings otherwise withhold from them.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T12:01:21.387Z","source_hash":"content-fingerprint:fnv1a-1dbc9dd8","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-104682-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Envira Gallery WordPress plugin before 1.16.2 does not correctly check authorization on its gallery-conversion feature, verifying that the requester can edit an arbitrary post they name rather than that they are allowed to create the Envira Gallery WordPress plugin before 1.16.2's own gallery content, allowing users with contributor-level access to create and publish gallery posts that the Envira Gallery WordPress plugin before 1.16.2's settings otherwise withhold from them.","source_quote_or_pointer":"Security Advisory CVE-2026-104682","fact_id":"SEA-CVE-2026-104682-F1","document_citation":"Security Advisory CVE-2026-104682"},{"id":"SEA-CVE-2026-104682-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Envira Gallery WordPress plugin before 1.16.2 does not correctly check authorization on its gallery-conversion feature, verifying that the requester can edit an arbitrary post they name rather than that they are allowed to create the Envira Gallery WordPress plugin before 1.16.2's own gallery content, allowing…","source_quote_or_pointer":"Advisory description (CVE-2026-104682)","fact_id":"SEA-CVE-2026-104682-F2","document_citation":"Advisory description (CVE-2026-104682)"}],"source_stated_contributors":["The Envira Gallery WordPress plugin before 1.16.2 does not correctly check authorization on its gallery-conversion feature, verifying that the requester can edit an arbitrary post they name rather than that they are allowed to create the Envira Gallery WordPress plugin before 1.16.2's own gallery content, allowing…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.public_publication","data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-104682","reporting_entity":"CVE-2026-104682","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-104682-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-104682-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-104682"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-104680","title":"The Envira Gallery WordPress plugin before 1.16.2 does not verify that a user holds the capability WordPress reserves for installing Envira Gallery WordPress plugin before 1.16.2 code before processing its setup-wizard Envira Gallery WordPress plugin before 1.16.2-installation request, and does not restrict the installation to its own curated list, allowing a Multisite subsite Administrator to install an arbitrary WordPress.org-published Envira Gallery WordPress plugin before 1.16.2 into the network-shared Envira Gallery WordPress plugin before 1.16.2 directory, a privilege Multisite reserves for the network Super Admin.","display_title":"Security issue reported in Software component","display_summary":"The Envira Gallery WordPress plugin before 1.16.2 does not verify that a user holds the capability WordPress reserves for installing Envira Gallery WordPress plugin before 1.16.2 code before processing its setup-wizard…","display_reference":"CVE-2026-104680","display_source_type":"Security advisory","incident_date":"2026-10-11","disclosure_date":"2026-10-11","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104680","source_title":"The Envira Gallery WordPress plugin before 1.16.2 does not verify that a user holds the capability WordPress reserves for installing Envira Gallery WordPress plugin before 1.16.2 code before processing its setup-wizard Envira Gallery WordPress plugin before 1.16.2-installation request, and does not restrict the installation to its own curated list, allowing a Multisite subsite Administrator to install an arbitrary WordPress.org-published Envira Gallery WordPress plugin before 1.16.2 into the network-shared Envira Gallery WordPress plugin before 1.16.2 directory, a privilege Multisite reserves for the network Super Admin.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T12:01:21.387Z","source_hash":"content-fingerprint:fnv1a-486caa9e","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-104680-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Envira Gallery WordPress plugin before 1.16.2 does not verify that a user holds the capability WordPress reserves for installing Envira Gallery WordPress plugin before 1.16.2 code before processing its setup-wizard Envira Gallery WordPress plugin before 1.16.2-installation request, and does not restrict the installation to its own curated list, allowing a Multisite subsite Administrator to install an arbitrary WordPress.org-published Envira Gallery WordPress plugin before 1.16.2 into the network-shared Envira Gallery WordPress plugin before 1.16.2 directory, a privilege Multisite reserves for the network Super Admin.","source_quote_or_pointer":"Security Advisory CVE-2026-104680","fact_id":"SEA-CVE-2026-104680-F1","document_citation":"Security Advisory CVE-2026-104680"},{"id":"SEA-CVE-2026-104680-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Envira Gallery WordPress plugin before 1.16.2 does not verify that a user holds the capability WordPress reserves for installing Envira Gallery WordPress plugin before 1.16.2 code before processing its setup-wizard Envira Gallery WordPress plugin before 1.16.2-installation request, and does not restrict the…","source_quote_or_pointer":"Advisory description (CVE-2026-104680)","fact_id":"SEA-CVE-2026-104680-F2","document_citation":"Advisory description (CVE-2026-104680)"}],"source_stated_contributors":["The Envira Gallery WordPress plugin before 1.16.2 does not verify that a user holds the capability WordPress reserves for installing Envira Gallery WordPress plugin before 1.16.2 code before processing its setup-wizard Envira Gallery WordPress plugin before 1.16.2-installation request, and does not restrict the…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-104680","reporting_entity":"CVE-2026-104680","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-104680-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-104680-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-104680"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-104028","title":"The Anton Extensions WordPress plugin through 1.2.2 does not perform any capability check, nonce verification, or file-type validation before writing attacker-supplied content to an attacker-chosen path, allowing unauthenticated attackers to upload arbitrary PHP files and achieve remote code execution.","display_title":"Software component issue could allow unintended commands to run","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-104028","display_source_type":"Security advisory","incident_date":"2026-10-11","disclosure_date":"2026-10-11","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104028","source_title":"The Anton Extensions WordPress plugin through 1.2.2 does not perform any capability check, nonce verification, or file-type validation before writing attacker-supplied content to an attacker-chosen path, allowing unauthenticated attackers to upload arbitrary PHP files and achieve remote code execution.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T12:01:21.387Z","source_hash":"content-fingerprint:fnv1a-1c91e050","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-104028-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Anton Extensions WordPress plugin through 1.2.2 does not perform any capability check, nonce verification, or file-type validation before writing attacker-supplied content to an attacker-chosen path, allowing unauthenticated attackers to upload arbitrary PHP files and achieve remote code execution.","source_quote_or_pointer":"Security Advisory CVE-2026-104028","fact_id":"SEA-CVE-2026-104028-F1","document_citation":"Security Advisory CVE-2026-104028"},{"id":"SEA-CVE-2026-104028-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Anton Extensions WordPress plugin through 1.2.2 does not perform any capability check, nonce verification, or file-type validation before writing attacker-supplied content to an attacker-chosen path, allowing unauthenticated attackers to upload arbitrary PHP files and achieve remote code execution.","source_quote_or_pointer":"Advisory description (CVE-2026-104028)","fact_id":"SEA-CVE-2026-104028-F2","document_citation":"Advisory description (CVE-2026-104028)"}],"source_stated_contributors":["The Anton Extensions WordPress plugin through 1.2.2 does not perform any capability check, nonce verification, or file-type validation before writing attacker-supplied content to an attacker-chosen path, allowing unauthenticated attackers to upload arbitrary PHP files and achieve remote code execution."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.uploaded_files"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-104028","reporting_entity":"CVE-2026-104028","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-104028-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-104028-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-104028"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-103695","title":"The Mobile builder WordPress plugin through 1.4.2 does not sanitise and escape a parameter before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks.","display_title":"Software component issue could expose or alter stored data","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-103695","display_source_type":"Security advisory","incident_date":"2026-10-11","disclosure_date":"2026-10-11","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103695","source_title":"The Mobile builder WordPress plugin through 1.4.2 does not sanitise and escape a parameter before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T12:01:21.387Z","source_hash":"content-fingerprint:fnv1a-2f8d461","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-103695-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Mobile builder WordPress plugin through 1.4.2 does not sanitise and escape a parameter before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks.","source_quote_or_pointer":"Security Advisory CVE-2026-103695","fact_id":"SEA-CVE-2026-103695-F1","document_citation":"Security Advisory CVE-2026-103695"},{"id":"SEA-CVE-2026-103695-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Mobile builder WordPress plugin through 1.4.2 does not sanitise and escape a parameter before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks.","source_quote_or_pointer":"Advisory description (CVE-2026-103695)","fact_id":"SEA-CVE-2026-103695-F2","document_citation":"Advisory description (CVE-2026-103695)"}],"source_stated_contributors":["The Mobile builder WordPress plugin through 1.4.2 does not sanitise and escape a parameter before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-103695","reporting_entity":"CVE-2026-103695","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-103695-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-103695-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-103695"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-103305","title":"The Prenotazioni WordPress plugin through 1.7.5 does not have authorisation and CSRF checks when saving its settings, and does not escape some of them when outputting them, allowing unauthenticated users to perform Stored Cross-Site Scripting attacks against administrators and site visitors.","display_title":"Software component issue could run attacker-controlled scripts in a browser","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-103305","display_source_type":"Security advisory","incident_date":"2026-10-11","disclosure_date":"2026-10-11","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103305","source_title":"The Prenotazioni WordPress plugin through 1.7.5 does not have authorisation and CSRF checks when saving its settings, and does not escape some of them when outputting them, allowing unauthenticated users to perform Stored Cross-Site Scripting attacks against administrators and site visitors.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T12:01:21.387Z","source_hash":"content-fingerprint:fnv1a-364b6441","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-103305-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Prenotazioni WordPress plugin through 1.7.5 does not have authorisation and CSRF checks when saving its settings, and does not escape some of them when outputting them, allowing unauthenticated users to perform Stored Cross-Site Scripting attacks against administrators and site visitors.","source_quote_or_pointer":"Security Advisory CVE-2026-103305","fact_id":"SEA-CVE-2026-103305-F1","document_citation":"Security Advisory CVE-2026-103305"},{"id":"SEA-CVE-2026-103305-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Prenotazioni WordPress plugin through 1.7.5 does not have authorisation and CSRF checks when saving its settings, and does not escape some of them when outputting them, allowing unauthenticated users to perform Stored Cross-Site Scripting attacks against administrators and site visitors.","source_quote_or_pointer":"Advisory description (CVE-2026-103305)","fact_id":"SEA-CVE-2026-103305-F2","document_citation":"Advisory description (CVE-2026-103305)"}],"source_stated_contributors":["The Prenotazioni WordPress plugin through 1.7.5 does not have authorisation and CSRF checks when saving its settings, and does not escape some of them when outputting them, allowing unauthenticated users to perform Stored Cross-Site Scripting attacks against administrators and site visitors."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-103305","reporting_entity":"CVE-2026-103305","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-103305-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-103305-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-103305"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108523","title":"A vulnerability was determined in Studio-Saelix Sencho up to 0.94.1. This vulnerability affects unknown code of the file outboundTarget.ts of the component git-sources Browse API Endpoint. Executing a manipulation of the argument repo_url can lead to server-side request forgery. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. The presence of this vulnerability remains uncertain at this time. This patch is called 79b86ddcd4aefdd6941f098e35990ab397b13c72. It is advisable to implement a patch to correct this issue. The vendor explains: \"Git repository access is an intentional, privileged administrative function. Sencho explicitly supports repositories hosted on private LAN, VPC, VPN, CGNAT, and IPv6 ULA networks. The report does not demonstrate a privilege-boundary bypass or access by an unprivileged user. We therefore dispute the CVE characterization of this behavior. As defense in depth, we have nevertheless hardened repository access. Git HTTPS and SSH connections now validate and pin DNS resolution, reject loopback, link-local, multicast, selected special-use and metadata targets, disable redirects and inherited proxy routing, and retain strict SSH host-key verification.\"","display_title":"Software component issue could reach internal services","display_summary":"A vulnerability was determined in Studio-Saelix Sencho up to 0.94.1. This vulnerability affects unknown code of the file outboundTarget.ts of the component git-sources Browse API Endpoint.","display_reference":"CVE-2026-108523","display_source_type":"Security advisory","incident_date":"2026-10-11","disclosure_date":"2026-10-11","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108523","source_title":"A vulnerability was determined in Studio-Saelix Sencho up to 0.94.1. This vulnerability affects unknown code of the file outboundTarget.ts of the component git-sources Browse API Endpoint. Executing a manipulation of the argument repo_url can lead to server-side request forgery. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. The presence of this vulnerability remains uncertain at this time. This patch is called 79b86ddcd4aefdd6941f098e35990ab397b13c72. It is advisable to implement a patch to correct this issue. The vendor explains: \"Git repository access is an intentional, privileged administrative function. Sencho explicitly supports repositories hosted on private LAN, VPC, VPN, CGNAT, and IPv6 ULA networks. The report does not demonstrate a privilege-boundary bypass or access by an unprivileged user. We therefore dispute the CVE characterization of this behavior. As defense in depth, we have nevertheless hardened repository access. Git HTTPS and SSH connections now validate and pin DNS resolution, reject loopback, link-local, multicast, selected special-use and metadata targets, disable redirects and inherited proxy routing, and retain strict SSH host-key verification.\"","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T12:01:21.387Z","source_hash":"content-fingerprint:fnv1a-1c966d12","affected_system":{"organization":"A vulnerability was determined in Studio-Saelix Sencho up to 0.94.1. This vulnerability affects unknown code of the file outboundTarget.ts of the component git-sources Browse API Endpoint. Executing a manipulation of the argument repourl can lead to server-side request forgery. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. The presence of this vulnerability remains uncertain at this time. This patch is called 79b86ddcd4aefdd6941f098e35990ab397b13c72. It is advisable to implement a patch to correct this issue. The vendor explains project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108523-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability was determined in Studio-Saelix Sencho up to 0.94.1. This vulnerability affects unknown code of the file outboundTarget.ts of the component git-sources Browse API Endpoint. Executing a manipulation of the argument repo_url can lead to server-side request forgery. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. The presence of this vulnerability remains uncertain at this time. This patch is called 79b86ddcd4aefdd6941f098e35990ab397b13c72. It is advisable to implement a patch to correct this issue. The vendor explains: \"Git repository access is an intentional, privileged administrative function. Sencho explicitly supports repositories hosted on private LAN, VPC, VPN, CGNAT, and IPv6 ULA networks. The report does not demonstrate a privilege-boundary bypass or access by an unprivileged user. We therefore dispute the CVE characterization of this behavior. As defense in depth, we have nevertheless hardened repository access. Git HTTPS and SSH connections now validate and pin DNS resolution, reject loopback, link-local, multicast, selected special-use and metadata targets, disable redirects and inherited proxy routing, and retain strict SSH host-key verification.\"","source_quote_or_pointer":"Security Advisory CVE-2026-108523","fact_id":"SEA-CVE-2026-108523-F1","document_citation":"Security Advisory CVE-2026-108523"},{"id":"SEA-CVE-2026-108523-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability was determined in Studio-Saelix Sencho up to 0.94.1. This vulnerability affects unknown code of the file outboundTarget.ts of the component git-sources Browse API Endpoint. Executing a manipulation of the argument repourl can lead to server-side request forgery. The attack may be performed from remote.","source_quote_or_pointer":"Advisory description (CVE-2026-108523)","fact_id":"SEA-CVE-2026-108523-F2","document_citation":"Advisory description (CVE-2026-108523)"}],"source_stated_contributors":["A vulnerability was determined in Studio-Saelix Sencho up to 0.94.1. This vulnerability affects unknown code of the file outboundTarget.ts of the component git-sources Browse API Endpoint. Executing a manipulation of the argument repourl can lead to server-side request forgery. The attack may be performed from remote."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Internal network access","Cloud metadata or credential exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108523","reporting_entity":"CVE-2026-108523","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108523-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108523-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"The service fetched a URL chosen by the caller and could be steered at internal systems. Restrict outbound destinations and block internal address ranges.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108523"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108522","title":"A vulnerability was found in Studio-Saelix Sencho up to 0.94.1. This affects an unknown part of the file /api/auth/login of the component Login Endpoint. Performing a manipulation of the argument X-Forwarded-For results in improper authentication. The attack is possible to be carried out remotely. The exploit has been made public and could be used. The patch is named 79b86ddcd4aefdd6941f098e35990ab397b13c72. To fix this issue, it is recommended to deploy a patch. The vendor confirms: \"The login limiter relied on client-supplied X-Forwarded-For data without an explicit trusted-proxy boundary, allowing an attacker to rotate the apparent client address. The remediation now ignores forwarding headers by default, accepts them only from explicitly configured proxy CIDRs, and adds a separate failed-attempt limit keyed by normalized account identity.\"","display_title":"Security issue reported in Software component","display_summary":"A vulnerability was found in Studio-Saelix Sencho up to 0.94.1. This affects an unknown part of the file /api/auth/login of the component Login Endpoint.","display_reference":"CVE-2026-108522","display_source_type":"Security advisory","incident_date":"2026-10-11","disclosure_date":"2026-10-11","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108522","source_title":"A vulnerability was found in Studio-Saelix Sencho up to 0.94.1. This affects an unknown part of the file /api/auth/login of the component Login Endpoint. Performing a manipulation of the argument X-Forwarded-For results in improper authentication. The attack is possible to be carried out remotely. The exploit has been made public and could be used. The patch is named 79b86ddcd4aefdd6941f098e35990ab397b13c72. To fix this issue, it is recommended to deploy a patch. The vendor confirms: \"The login limiter relied on client-supplied X-Forwarded-For data without an explicit trusted-proxy boundary, allowing an attacker to rotate the apparent client address. The remediation now ignores forwarding headers by default, accepts them only from explicitly configured proxy CIDRs, and adds a separate failed-attempt limit keyed by normalized account identity.\"","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T12:01:21.387Z","source_hash":"content-fingerprint:fnv1a-30f4e37f","affected_system":{"organization":"A vulnerability was found in Studio-Saelix Sencho up to 0.94.1. This affects an unknown part of the file /api/auth/login of the component Login Endpoint. Performing a manipulation of the argument X-Forwarded-For results in improper authentication. The attack is possible to be carried out remotely. The exploit has been made public and could be used. The patch is named 79b86ddcd4aefdd6941f098e35990ab397b13c72. To fix this issue, it is recommended to deploy a patch. The vendor confirms project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108522-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability was found in Studio-Saelix Sencho up to 0.94.1. This affects an unknown part of the file /api/auth/login of the component Login Endpoint. Performing a manipulation of the argument X-Forwarded-For results in improper authentication. The attack is possible to be carried out remotely. The exploit has been made public and could be used. The patch is named 79b86ddcd4aefdd6941f098e35990ab397b13c72. To fix this issue, it is recommended to deploy a patch. The vendor confirms: \"The login limiter relied on client-supplied X-Forwarded-For data without an explicit trusted-proxy boundary, allowing an attacker to rotate the apparent client address. The remediation now ignores forwarding headers by default, accepts them only from explicitly configured proxy CIDRs, and adds a separate failed-attempt limit keyed by normalized account identity.\"","source_quote_or_pointer":"Security Advisory CVE-2026-108522","fact_id":"SEA-CVE-2026-108522-F1","document_citation":"Security Advisory CVE-2026-108522"},{"id":"SEA-CVE-2026-108522-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability was found in Studio-Saelix Sencho up to 0.94.1. This affects an unknown part of the file /api/auth/login of the component Login Endpoint. Performing a manipulation of the argument X-Forwarded-For results in improper authentication. The attack is possible to be carried out remotely.","source_quote_or_pointer":"Advisory description (CVE-2026-108522)","fact_id":"SEA-CVE-2026-108522-F2","document_citation":"Advisory description (CVE-2026-108522)"}],"source_stated_contributors":["A vulnerability was found in Studio-Saelix Sencho up to 0.94.1. This affects an unknown part of the file /api/auth/login of the component Login Endpoint. Performing a manipulation of the argument X-Forwarded-For results in improper authentication. The attack is possible to be carried out remotely."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.public_publication"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108522","reporting_entity":"CVE-2026-108522","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108522-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108522-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-108522"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108521","title":"A vulnerability has been found in Studio-Saelix Sencho up to 0.97.1. Affected by this issue is the function isValidRemoteUrl of the file backend/src/utils/validation.ts of the component Add Remote Node API Endpoint. Such manipulation leads to server-side request forgery. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. The vendor confirms: \"The node API URL could be configured by an authenticated user with node-management permission and used to initiate server-side requests. [T]he report demonstrates server-side request capability but not arbitrary internal response exfiltration.\"","display_title":"Software component issue could reach internal services","display_summary":"A vulnerability has been found in Studio-Saelix Sencho up to 0.97.1. Affected by this issue is the function isValidRemoteUrl of the file backend/src/utils/validation.ts of the component Add Remote Node API Endpoint.","display_reference":"CVE-2026-108521","display_source_type":"Security advisory","incident_date":"2026-10-11","disclosure_date":"2026-10-11","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108521","source_title":"A vulnerability has been found in Studio-Saelix Sencho up to 0.97.1. Affected by this issue is the function isValidRemoteUrl of the file backend/src/utils/validation.ts of the component Add Remote Node API Endpoint. Such manipulation leads to server-side request forgery. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. The vendor confirms: \"The node API URL could be configured by an authenticated user with node-management permission and used to initiate server-side requests. [T]he report demonstrates server-side request capability but not arbitrary internal response exfiltration.\"","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T12:01:21.387Z","source_hash":"content-fingerprint:fnv1a-7a11ea4","affected_system":{"organization":"A vulnerability has been found in Studio-Saelix Sencho up to 0.97.1. Affected by this issue is the function isValidRemoteUrl of the file backend/src/utils/validation.ts of the component Add Remote Node API Endpoint. Such manipulation leads to server-side request forgery. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. The vendor confirms project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108521-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability has been found in Studio-Saelix Sencho up to 0.97.1. Affected by this issue is the function isValidRemoteUrl of the file backend/src/utils/validation.ts of the component Add Remote Node API Endpoint. Such manipulation leads to server-side request forgery. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. The vendor confirms: \"The node API URL could be configured by an authenticated user with node-management permission and used to initiate server-side requests. [T]he report demonstrates server-side request capability but not arbitrary internal response exfiltration.\"","source_quote_or_pointer":"Security Advisory CVE-2026-108521","fact_id":"SEA-CVE-2026-108521-F1","document_citation":"Security Advisory CVE-2026-108521"},{"id":"SEA-CVE-2026-108521-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability has been found in Studio-Saelix Sencho up to 0.97.1. Affected by this issue is the function isValidRemoteUrl of the file backend/src/utils/validation.ts of the component Add Remote Node API Endpoint. Such manipulation leads to server-side request forgery. The attack can be executed remotely.","source_quote_or_pointer":"Advisory description (CVE-2026-108521)","fact_id":"SEA-CVE-2026-108521-F2","document_citation":"Advisory description (CVE-2026-108521)"}],"source_stated_contributors":["A vulnerability has been found in Studio-Saelix Sencho up to 0.97.1. Affected by this issue is the function isValidRemoteUrl of the file backend/src/utils/validation.ts of the component Add Remote Node API Endpoint. Such manipulation leads to server-side request forgery. The attack can be executed remotely."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.public_publication","data.pii","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Internal network access","Cloud metadata or credential exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108521","reporting_entity":"CVE-2026-108521","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108521-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108521-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"The service fetched a URL chosen by the caller and could be steered at internal systems. Restrict outbound destinations and block internal address ranges.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108521"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108707","title":"Wukong_HRM through commit 186115e contains an authentication bypass vulnerability in ParamAspect that allows unauthenticated attackers to call every HRM API endpoint by omitting the AUTH-TOKEN header. Attackers gain HR administrator access to read payslips, salary history and employee personal data, download attachments, and modify or delete company-wide HR records.","display_title":"Software component issue could allow unauthorized access","display_summary":"WukongHRM through commit 186115e contains an authentication bypass vulnerability in ParamAspect that allows unauthenticated attackers to call every HRM API endpoint by omitting the AUTH-TOKEN header.","display_reference":"CVE-2026-108707","display_source_type":"Security advisory","incident_date":"2026-10-11","disclosure_date":"2026-10-11","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108707","source_title":"Wukong_HRM through commit 186115e contains an authentication bypass vulnerability in ParamAspect that allows unauthenticated attackers to call every HRM API endpoint by omitting the AUTH-TOKEN header. Attackers gain HR administrator access to read payslips, salary history and employee personal data, download attachments, and modify or delete company-wide HR records.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T12:01:21.387Z","source_hash":"content-fingerprint:fnv1a-cee347ae","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108707-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Wukong_HRM through commit 186115e contains an authentication bypass vulnerability in ParamAspect that allows unauthenticated attackers to call every HRM API endpoint by omitting the AUTH-TOKEN header. Attackers gain HR administrator access to read payslips, salary history and employee personal data, download attachments, and modify or delete company-wide HR records.","source_quote_or_pointer":"Security Advisory CVE-2026-108707","fact_id":"SEA-CVE-2026-108707-F1","document_citation":"Security Advisory CVE-2026-108707"},{"id":"SEA-CVE-2026-108707-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"WukongHRM through commit 186115e contains an authentication bypass vulnerability in ParamAspect that allows unauthenticated attackers to call every HRM API endpoint by omitting the AUTH-TOKEN header.","source_quote_or_pointer":"Advisory description (CVE-2026-108707)","fact_id":"SEA-CVE-2026-108707-F2","document_citation":"Advisory description (CVE-2026-108707)"}],"source_stated_contributors":["WukongHRM through commit 186115e contains an authentication bypass vulnerability in ParamAspect that allows unauthenticated attackers to call every HRM API endpoint by omitting the AUTH-TOKEN header."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.privileged_action","auth.write_action","data.pii","data.uploaded_files"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108707","reporting_entity":"CVE-2026-108707","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108707-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108707-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108707"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108706","title":"eladmin through commit 55fbf70 contains a missing authorization vulnerability in the downloadS3Storage handler that allows any authenticated user to retrieve stored object URLs without storage permissions. Attackers can enumerate sequential ids against GET /api/s3Storage/download/{id} to collect URLs of all uploaded objects, exposing file contents on publicly readable buckets.","display_title":"Security issue reported in Software component","display_summary":"eladmin through commit 55fbf70 contains a missing authorization vulnerability in the downloadS3Storage handler that allows any authenticated user to retrieve stored object URLs without storage permissions.","display_reference":"CVE-2026-108706","display_source_type":"Security advisory","incident_date":"2026-10-11","disclosure_date":"2026-10-11","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108706","source_title":"eladmin through commit 55fbf70 contains a missing authorization vulnerability in the downloadS3Storage handler that allows any authenticated user to retrieve stored object URLs without storage permissions. Attackers can enumerate sequential ids against GET /api/s3Storage/download/{id} to collect URLs of all uploaded objects, exposing file contents on publicly readable buckets.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T12:01:21.387Z","source_hash":"content-fingerprint:fnv1a-e7d3b569","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108706-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"eladmin through commit 55fbf70 contains a missing authorization vulnerability in the downloadS3Storage handler that allows any authenticated user to retrieve stored object URLs without storage permissions. Attackers can enumerate sequential ids against GET /api/s3Storage/download/{id} to collect URLs of all uploaded objects, exposing file contents on publicly readable buckets.","source_quote_or_pointer":"Security Advisory CVE-2026-108706","fact_id":"SEA-CVE-2026-108706-F1","document_citation":"Security Advisory CVE-2026-108706"},{"id":"SEA-CVE-2026-108706-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"eladmin through commit 55fbf70 contains a missing authorization vulnerability in the downloadS3Storage handler that allows any authenticated user to retrieve stored object URLs without storage permissions.","source_quote_or_pointer":"Advisory description (CVE-2026-108706)","fact_id":"SEA-CVE-2026-108706-F2","document_citation":"Advisory description (CVE-2026-108706)"}],"source_stated_contributors":["eladmin through commit 55fbf70 contains a missing authorization vulnerability in the downloadS3Storage handler that allows any authenticated user to retrieve stored object URLs without storage permissions."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.infrastructure_modification","data.pii","arch.external_api"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108706","reporting_entity":"CVE-2026-108706","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108706-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108706-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108706"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108702","title":"1Panel-dev CordysCRM through 1.9.3 lacks a PROCESS_SETTING permission check on POST /approval-flow/webhook/test, allowing any authenticated user to trigger server-side requests to attacker-supplied URLs. Attackers can redirect GET requests from a controlled host to bypass SSRFValidator and probe internal addresses through success or failure results.","display_title":"Security issue reported in Software component","display_summary":"1Panel-dev CordysCRM through 1.9.3 lacks a PROCESSSETTING permission check on POST /approval-flow/webhook/test, allowing any authenticated user to trigger server-side requests to attacker-supplied URLs.","display_reference":"CVE-2026-108702","display_source_type":"Security advisory","incident_date":"2026-10-11","disclosure_date":"2026-10-11","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108702","source_title":"1Panel-dev CordysCRM through 1.9.3 lacks a PROCESS_SETTING permission check on POST /approval-flow/webhook/test, allowing any authenticated user to trigger server-side requests to attacker-supplied URLs. Attackers can redirect GET requests from a controlled host to bypass SSRFValidator and probe internal addresses through success or failure results.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T12:01:21.387Z","source_hash":"content-fingerprint:fnv1a-38514459","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108702-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"1Panel-dev CordysCRM through 1.9.3 lacks a PROCESS_SETTING permission check on POST /approval-flow/webhook/test, allowing any authenticated user to trigger server-side requests to attacker-supplied URLs. Attackers can redirect GET requests from a controlled host to bypass SSRFValidator and probe internal addresses through success or failure results.","source_quote_or_pointer":"Security Advisory CVE-2026-108702","fact_id":"SEA-CVE-2026-108702-F1","document_citation":"Security Advisory CVE-2026-108702"},{"id":"SEA-CVE-2026-108702-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"1Panel-dev CordysCRM through 1.9.3 lacks a PROCESSSETTING permission check on POST /approval-flow/webhook/test, allowing any authenticated user to trigger server-side requests to attacker-supplied URLs.","source_quote_or_pointer":"Advisory description (CVE-2026-108702)","fact_id":"SEA-CVE-2026-108702-F2","document_citation":"Advisory description (CVE-2026-108702)"}],"source_stated_contributors":["1Panel-dev CordysCRM through 1.9.3 lacks a PROCESSSETTING permission check on POST /approval-flow/webhook/test, allowing any authenticated user to trigger server-side requests to attacker-supplied URLs."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii","arch.external_api","arch.event_driven"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108702","reporting_entity":"CVE-2026-108702","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108702-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108702-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-108702"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108695","title":"MultiVendorX WordPress plugin through 5.0.19 contains an incorrect authorization vulnerability that allows vendor accounts to modify marketplace-wide settings via the settings REST endpoint. Attackers with the store_owner role can send POST requests to /wp-json/multivendorx/v1/settings, gated only by edit_stores, to overwrite commission, payout, and onboarding settings.","display_title":"Security issue reported in Software component","display_summary":"MultiVendorX WordPress plugin through 5.0.19 contains an incorrect authorization vulnerability that allows vendor accounts to modify marketplace-wide settings via the settings REST endpoint.","display_reference":"CVE-2026-108695","display_source_type":"Security advisory","incident_date":"2026-10-11","disclosure_date":"2026-10-11","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108695","source_title":"MultiVendorX WordPress plugin through 5.0.19 contains an incorrect authorization vulnerability that allows vendor accounts to modify marketplace-wide settings via the settings REST endpoint. Attackers with the store_owner role can send POST requests to /wp-json/multivendorx/v1/settings, gated only by edit_stores, to overwrite commission, payout, and onboarding settings.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T12:01:21.387Z","source_hash":"content-fingerprint:fnv1a-73e49ae","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108695-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"MultiVendorX WordPress plugin through 5.0.19 contains an incorrect authorization vulnerability that allows vendor accounts to modify marketplace-wide settings via the settings REST endpoint. Attackers with the store_owner role can send POST requests to /wp-json/multivendorx/v1/settings, gated only by edit_stores, to overwrite commission, payout, and onboarding settings.","source_quote_or_pointer":"Security Advisory CVE-2026-108695","fact_id":"SEA-CVE-2026-108695-F1","document_citation":"Security Advisory CVE-2026-108695"},{"id":"SEA-CVE-2026-108695-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"MultiVendorX WordPress plugin through 5.0.19 contains an incorrect authorization vulnerability that allows vendor accounts to modify marketplace-wide settings via the settings REST endpoint.","source_quote_or_pointer":"Advisory description (CVE-2026-108695)","fact_id":"SEA-CVE-2026-108695-F2","document_citation":"Advisory description (CVE-2026-108695)"}],"source_stated_contributors":["MultiVendorX WordPress plugin through 5.0.19 contains an incorrect authorization vulnerability that allows vendor accounts to modify marketplace-wide settings via the settings REST endpoint."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.financial_action","auth.write_action"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108695","reporting_entity":"CVE-2026-108695","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108695-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108695-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-108695"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108694","title":"ConvertX through 0.19.0 contains an arbitrary file read vulnerability that allows authenticated users to read server files because src/converters/pandoc.ts invokes Pandoc without the --sandbox flag. Attackers can upload a reStructuredText document with an include directive naming an absolute path, convert it, and download output containing the referenced file's contents.","display_title":"Software component issue could expose restricted files","display_summary":"ConvertX through 0.19.0 contains an arbitrary file read vulnerability that allows authenticated users to read server files because src/converters/pandoc.ts invokes Pandoc without the --sandbox flag.","display_reference":"CVE-2026-108694","display_source_type":"Security advisory","incident_date":"2026-10-11","disclosure_date":"2026-10-11","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108694","source_title":"ConvertX through 0.19.0 contains an arbitrary file read vulnerability that allows authenticated users to read server files because src/converters/pandoc.ts invokes Pandoc without the --sandbox flag. Attackers can upload a reStructuredText document with an include directive naming an absolute path, convert it, and download output containing the referenced file's contents.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T12:01:21.387Z","source_hash":"content-fingerprint:fnv1a-6965b56f","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108694-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"ConvertX through 0.19.0 contains an arbitrary file read vulnerability that allows authenticated users to read server files because src/converters/pandoc.ts invokes Pandoc without the --sandbox flag. Attackers can upload a reStructuredText document with an include directive naming an absolute path, convert it, and download output containing the referenced file's contents.","source_quote_or_pointer":"Security Advisory CVE-2026-108694","fact_id":"SEA-CVE-2026-108694-F1","document_citation":"Security Advisory CVE-2026-108694"},{"id":"SEA-CVE-2026-108694-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"ConvertX through 0.19.0 contains an arbitrary file read vulnerability that allows authenticated users to read server files because src/converters/pandoc.ts invokes Pandoc without the --sandbox flag.","source_quote_or_pointer":"Advisory description (CVE-2026-108694)","fact_id":"SEA-CVE-2026-108694-F2","document_citation":"Advisory description (CVE-2026-108694)"}],"source_stated_contributors":["ConvertX through 0.19.0 contains an arbitrary file read vulnerability that allows authenticated users to read server files because src/converters/pandoc.ts invokes Pandoc without the --sandbox flag."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.code_execution","data.pii","data.uploaded_files"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Restricted file exposure","File overwrite"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108694","reporting_entity":"CVE-2026-108694","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108694-SG1","label":"Confine file access to a fixed root","description":"Resolve paths to canonical form and reject anything outside the intended directory before opening files.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108694-SG1","label":"Confine file access to a fixed root","description":"Resolve paths to canonical form and reject anything outside the intended directory before opening files.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"File paths supplied by a caller escaped the intended directory. Canonicalise paths and confine file access to a fixed root.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108694"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108692","title":"1Panel-dev CordysCRM from 1.9.0 before 1.9.2 contains a missing authorization vulnerability in eight ModuleFieldController /field/source data-source endpoints lacking permission checks. Authenticated users denied module permission can page through organization-wide leads, contacts, quotations, contracts, payment plans, payment records, orders and invoices owned by other users.","display_title":"Security issue reported in Software component","display_summary":"1Panel-dev CordysCRM from 1.9.0 before 1.9.2 contains a missing authorization vulnerability in eight ModuleFieldController /field/source data-source endpoints lacking permission checks.","display_reference":"CVE-2026-108692","display_source_type":"Security advisory","incident_date":"2026-10-11","disclosure_date":"2026-10-11","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108692","source_title":"1Panel-dev CordysCRM from 1.9.0 before 1.9.2 contains a missing authorization vulnerability in eight ModuleFieldController /field/source data-source endpoints lacking permission checks. Authenticated users denied module permission can page through organization-wide leads, contacts, quotations, contracts, payment plans, payment records, orders and invoices owned by other users.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T12:01:21.387Z","source_hash":"content-fingerprint:fnv1a-909ea9b3","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108692-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"1Panel-dev CordysCRM from 1.9.0 before 1.9.2 contains a missing authorization vulnerability in eight ModuleFieldController /field/source data-source endpoints lacking permission checks. Authenticated users denied module permission can page through organization-wide leads, contacts, quotations, contracts, payment plans, payment records, orders and invoices owned by other users.","source_quote_or_pointer":"Security Advisory CVE-2026-108692","fact_id":"SEA-CVE-2026-108692-F1","document_citation":"Security Advisory CVE-2026-108692"},{"id":"SEA-CVE-2026-108692-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"1Panel-dev CordysCRM from 1.9.0 before 1.9.2 contains a missing authorization vulnerability in eight ModuleFieldController /field/source data-source endpoints lacking permission checks.","source_quote_or_pointer":"Advisory description (CVE-2026-108692)","fact_id":"SEA-CVE-2026-108692-F2","document_citation":"Advisory description (CVE-2026-108692)"}],"source_stated_contributors":["1Panel-dev CordysCRM from 1.9.0 before 1.9.2 contains a missing authorization vulnerability in eight ModuleFieldController /field/source data-source endpoints lacking permission checks."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.financial_action","auth.privileged_action","data.pii","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108692","reporting_entity":"CVE-2026-108692","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108692-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108692-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108692"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108691","title":"mall4j through 4.0 contains an improper authorization vulnerability that allows authenticated storefront customers to delete other shoppers' cart items through an operator precedence error in the cleanExpiryProdList SQL statement. Attackers can send one DELETE request to /p/shopCart/cleanExpiryProdList to remove every user's cart entries for off-shelf products, which do not return when products are restocked.","display_title":"Software component issue could allow unauthorized access","display_summary":"mall4j through 4.0 contains an improper authorization vulnerability that allows authenticated storefront customers to delete other shoppers' cart items through an operator precedence error in the cleanExpiryProdList SQL…","display_reference":"CVE-2026-108691","display_source_type":"Security advisory","incident_date":"2026-10-11","disclosure_date":"2026-10-11","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108691","source_title":"mall4j through 4.0 contains an improper authorization vulnerability that allows authenticated storefront customers to delete other shoppers' cart items through an operator precedence error in the cleanExpiryProdList SQL statement. Attackers can send one DELETE request to /p/shopCart/cleanExpiryProdList to remove every user's cart entries for off-shelf products, which do not return when products are restocked.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T12:01:21.387Z","source_hash":"content-fingerprint:fnv1a-cc9e24dc","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108691-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"mall4j through 4.0 contains an improper authorization vulnerability that allows authenticated storefront customers to delete other shoppers' cart items through an operator precedence error in the cleanExpiryProdList SQL statement. Attackers can send one DELETE request to /p/shopCart/cleanExpiryProdList to remove every user's cart entries for off-shelf products, which do not return when products are restocked.","source_quote_or_pointer":"Security Advisory CVE-2026-108691","fact_id":"SEA-CVE-2026-108691-F1","document_citation":"Security Advisory CVE-2026-108691"},{"id":"SEA-CVE-2026-108691-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"mall4j through 4.0 contains an improper authorization vulnerability that allows authenticated storefront customers to delete other shoppers' cart items through an operator precedence error in the cleanExpiryProdList SQL statement.","source_quote_or_pointer":"Advisory description (CVE-2026-108691)","fact_id":"SEA-CVE-2026-108691-F2","document_citation":"Advisory description (CVE-2026-108691)"}],"source_stated_contributors":["mall4j through 4.0 contains an improper authorization vulnerability that allows authenticated storefront customers to delete other shoppers' cart items through an operator precedence error in the cleanExpiryProdList SQL statement."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.write_action","data.pii"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108691","reporting_entity":"CVE-2026-108691","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108691-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108691-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108691"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108688","title":"Eladmin through 2.7 contains a missing authorization vulnerability in the LocalStorageController uploadPicture handler that allows low-privileged authenticated users to bypass the storage:add permission. Attackers can send POST requests with image-named files to /api/localStorage/pictures to write files into server local storage and disclose absolute server paths.","display_title":"Security issue reported in Software component","display_summary":"Eladmin through 2.7 contains a missing authorization vulnerability in the LocalStorageController uploadPicture handler that allows low-privileged authenticated users to bypass the storage:add permission.","display_reference":"CVE-2026-108688","display_source_type":"Security advisory","incident_date":"2026-10-11","disclosure_date":"2026-10-11","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108688","source_title":"Eladmin through 2.7 contains a missing authorization vulnerability in the LocalStorageController uploadPicture handler that allows low-privileged authenticated users to bypass the storage:add permission. Attackers can send POST requests with image-named files to /api/localStorage/pictures to write files into server local storage and disclose absolute server paths.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T12:01:21.387Z","source_hash":"content-fingerprint:fnv1a-cf18bf26","affected_system":{"organization":"Eladmin through 2.7 contains a missing authorization vulnerability in the LocalStorageController uploadPicture handler that allows low-privileged authenticated users to bypass the storage project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108688-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Eladmin through 2.7 contains a missing authorization vulnerability in the LocalStorageController uploadPicture handler that allows low-privileged authenticated users to bypass the storage:add permission. Attackers can send POST requests with image-named files to /api/localStorage/pictures to write files into server local storage and disclose absolute server paths.","source_quote_or_pointer":"Security Advisory CVE-2026-108688","fact_id":"SEA-CVE-2026-108688-F1","document_citation":"Security Advisory CVE-2026-108688"},{"id":"SEA-CVE-2026-108688-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Eladmin through 2.7 contains a missing authorization vulnerability in the LocalStorageController uploadPicture handler that allows low-privileged authenticated users to bypass the storage:add permission.","source_quote_or_pointer":"Advisory description (CVE-2026-108688)","fact_id":"SEA-CVE-2026-108688-F2","document_citation":"Advisory description (CVE-2026-108688)"}],"source_stated_contributors":["Eladmin through 2.7 contains a missing authorization vulnerability in the LocalStorageController uploadPicture handler that allows low-privileged authenticated users to bypass the storage:add permission."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.write_action","data.pii"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108688","reporting_entity":"CVE-2026-108688","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108688-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108688-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108688"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108474","title":"In JetBrains Exposed before 1.5.1 sQL injection was possible via unescaped string arguments of several SQL functions","display_title":"Software component issue could expose or alter stored data","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-108474","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108474","source_title":"In JetBrains Exposed before 1.5.1 sQL injection was possible via unescaped string arguments of several SQL functions","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T01:59:40.565Z","source_hash":"content-fingerprint:fnv1a-56d5f5a3","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108474-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"In JetBrains Exposed before 1.5.1 sQL injection was possible via unescaped string arguments of several SQL functions","source_quote_or_pointer":"Security Advisory CVE-2026-108474","fact_id":"SEA-CVE-2026-108474-F1","document_citation":"Security Advisory CVE-2026-108474"},{"id":"SEA-CVE-2026-108474-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"In JetBrains Exposed before 1.5.1 sQL injection was possible via unescaped string arguments of several SQL functions","source_quote_or_pointer":"Advisory description (CVE-2026-108474)","fact_id":"SEA-CVE-2026-108474-F2","document_citation":"Advisory description (CVE-2026-108474)"}],"source_stated_contributors":["In JetBrains Exposed before 1.5.1 sQL injection was possible via unescaped string arguments of several SQL functions"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108474","reporting_entity":"CVE-2026-108474","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108474-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108474-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108474"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-97670","title":"The Avada (Fusion) Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 7.16.1. This is due to the plugin not properly verifying authorization before dispatching a WordPress action hook whose name is taken from an attacker-supplied form-field value (via the notification email_message [field] placeholder and the {action_hook,...} dynamic-data token; the 3.16.1 trust gate is_content_request_supplied() only inspects $_POST['args']/$_GET['args'], never the $_POST['formData'] the public form-submit endpoint parses). This makes it possible for unauthenticated attackers to invoke arbitrary WordPress action hooks (multiple per request), causing state changes up to permanent, irreversible destruction of site content: a verified unauthenticated request permanently deleted trashed posts, pages, and comments via the core wp_scheduled_delete action. Other non-deny-listed hooks extend the impact to denial of service (e.g. wp_maybe_auto_update) and, where vulnerable third-party handlers are installed, further privileged writes. The same unauthenticated dynamic-data pipeline additionally exposes a blind arbitrary user/post-meta read; the read result is delivered only to the site owner and is not attacker-exfiltrable through the plugin's own email/response paths. Exploitation requires a published Avada form with AJAX submission and a notification whose email_message template includes an [all_fields] or explicit [field] placeholder - the default form configuration.","display_title":"Software component issue could allow unauthorized access","display_summary":"The Avada (Fusion) Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 7.16.1.","display_reference":"CVE-2026-97670","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97670","source_title":"The Avada (Fusion) Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 7.16.1. This is due to the plugin not properly verifying authorization before dispatching a WordPress action hook whose name is taken from an attacker-supplied form-field value (via the notification email_message [field] placeholder and the {action_hook,...} dynamic-data token; the 3.16.1 trust gate is_content_request_supplied() only inspects $_POST['args']/$_GET['args'], never the $_POST['formData'] the public form-submit endpoint parses). This makes it possible for unauthenticated attackers to invoke arbitrary WordPress action hooks (multiple per request), causing state changes up to permanent, irreversible destruction of site content: a verified unauthenticated request permanently deleted trashed posts, pages, and comments via the core wp_scheduled_delete action. Other non-deny-listed hooks extend the impact to denial of service (e.g. wp_maybe_auto_update) and, where vulnerable third-party handlers are installed, further privileged writes. The same unauthenticated dynamic-data pipeline additionally exposes a blind arbitrary user/post-meta read; the read result is delivered only to the site owner and is not attacker-exfiltrable through the plugin's own email/response paths. Exploitation requires a published Avada form with AJAX submission and a notification whose email_message template includes an [all_fields] or explicit [field] placeholder - the default form configuration.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:07.009Z","source_hash":"content-fingerprint:fnv1a-8b65004a","affected_system":{"organization":"The Avada (Fusion) Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 7.16.1. This is due to the plugin not properly verifying authorization before dispatching a WordPress action hook whose name is taken from an attacker-supplied form-field value (via the notification emailmessage [field] placeholder and the {actionhook,...} dynamic-data token; the 3.16.1 trust gate iscontentrequestsupplied() only inspects $POST['args']/$GET['args'], never the $POST['formData'] the public form-submit endpoint parses). This makes it possible for unauthenticated attackers to invoke arbitrary WordPress action hooks (multiple per request), causing state changes up to permanent, irreversible destruction of site content project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-97670-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Avada (Fusion) Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 7.16.1. This is due to the plugin not properly verifying authorization before dispatching a WordPress action hook whose name is taken from an attacker-supplied form-field value (via the notification email_message [field] placeholder and the {action_hook,...} dynamic-data token; the 3.16.1 trust gate is_content_request_supplied() only inspects $_POST['args']/$_GET['args'], never the $_POST['formData'] the public form-submit endpoint parses). This makes it possible for unauthenticated attackers to invoke arbitrary WordPress action hooks (multiple per request), causing state changes up to permanent, irreversible destruction of site content: a verified unauthenticated request permanently deleted trashed posts, pages, and comments via the core wp_scheduled_delete action. Other non-deny-listed hooks extend the impact to denial of service (e.g. wp_maybe_auto_update) and, where vulnerable third-party handlers are installed, further privileged writes. The same unauthenticated dynamic-data pipeline additionally exposes a blind arbitrary user/post-meta read; the read result is delivered only to the site owner and is not attacker-exfiltrable through the plugin's own email/response paths. Exploitation requires a published Avada form with AJAX submission and a notification whose email_message template includes an [all_fields] or explicit [field] placeholder - the default form configuration.","source_quote_or_pointer":"Security Advisory CVE-2026-97670","fact_id":"SEA-CVE-2026-97670-F1","document_citation":"Security Advisory CVE-2026-97670"},{"id":"SEA-CVE-2026-97670-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Avada (Fusion) Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 7.16.1. This is due to the plugin not properly verifying authorization before dispatching a WordPress action hook whose name is taken from an attacker-supplied form-field value (via the…","source_quote_or_pointer":"Advisory description (CVE-2026-97670)","fact_id":"SEA-CVE-2026-97670-F2","document_citation":"Advisory description (CVE-2026-97670)"}],"source_stated_contributors":["The Avada (Fusion) Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 7.16.1. This is due to the plugin not properly verifying authorization before dispatching a WordPress action hook whose name is taken from an attacker-supplied form-field value (via the…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.code_execution","auth.destructive_action","auth.privileged_action","auth.write_action","auth.public_publication","data.pii"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-97670","reporting_entity":"CVE-2026-97670","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-97670-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-97670-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-97670"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-97348","title":"The SiteOrigin Widgets Bundle plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.74.3 via the get_instance_css function. This makes it possible for authenticated attackers, with contributor-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information. The widget's normal update()/sanitize_field_input() pipeline — which would reject non-hex color values — is bypassed entirely because the [siteorigin_widget] shortcode handler calls $the_widget->widget() directly on the attacker-supplied decoded JSON instance.","display_title":"Software component issue could expose restricted files","display_summary":"The SiteOrigin Widgets Bundle plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.74.3 via the getinstancecss function.","display_reference":"CVE-2026-97348","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97348","source_title":"The SiteOrigin Widgets Bundle plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.74.3 via the get_instance_css function. This makes it possible for authenticated attackers, with contributor-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information. The widget's normal update()/sanitize_field_input() pipeline — which would reject non-hex color values — is bypassed entirely because the [siteorigin_widget] shortcode handler calls $the_widget->widget() directly on the attacker-supplied decoded JSON instance.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:07.010Z","source_hash":"content-fingerprint:fnv1a-7e02ece4","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-97348-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The SiteOrigin Widgets Bundle plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.74.3 via the get_instance_css function. This makes it possible for authenticated attackers, with contributor-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information. The widget's normal update()/sanitize_field_input() pipeline — which would reject non-hex color values — is bypassed entirely because the [siteorigin_widget] shortcode handler calls $the_widget->widget() directly on the attacker-supplied decoded JSON instance.","source_quote_or_pointer":"Security Advisory CVE-2026-97348","fact_id":"SEA-CVE-2026-97348-F1","document_citation":"Security Advisory CVE-2026-97348"},{"id":"SEA-CVE-2026-97348-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The SiteOrigin Widgets Bundle plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.74.3 via the getinstancecss function.","source_quote_or_pointer":"Advisory description (CVE-2026-97348)","fact_id":"SEA-CVE-2026-97348-F2","document_citation":"Advisory description (CVE-2026-97348)"}],"source_stated_contributors":["The SiteOrigin Widgets Bundle plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.74.3 via the getinstancecss function."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.code_execution","auth.write_action"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Restricted file exposure","File overwrite"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-97348","reporting_entity":"CVE-2026-97348","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-97348-SG1","label":"Confine file access to a fixed root","description":"Resolve paths to canonical form and reject anything outside the intended directory before opening files.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-97348-SG1","label":"Confine file access to a fixed root","description":"Resolve paths to canonical form and reject anything outside the intended directory before opening files.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"File paths supplied by a caller escaped the intended directory. Canonicalise paths and confine file access to a fixed root.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-97348"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-96662","title":"The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to generic SQL Injection via 'booking[service_id]' Parameter in all versions up to, and including, 5.7.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.","display_title":"Software component issue could expose or alter stored data","display_summary":"The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to generic SQL Injection via 'booking[serviceid]' Parameter in all versions up to, and including, 5.7.2…","display_reference":"CVE-2026-96662","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-96662","source_title":"The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to generic SQL Injection via 'booking[service_id]' Parameter in all versions up to, and including, 5.7.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:07.010Z","source_hash":"content-fingerprint:fnv1a-ddc6300a","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-96662-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to generic SQL Injection via 'booking[service_id]' Parameter in all versions up to, and including, 5.7.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.","source_quote_or_pointer":"Security Advisory CVE-2026-96662","fact_id":"SEA-CVE-2026-96662-F1","document_citation":"Security Advisory CVE-2026-96662"},{"id":"SEA-CVE-2026-96662-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to generic SQL Injection via 'booking[serviceid]' Parameter in all versions up to, and including, 5.7.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on…","source_quote_or_pointer":"Advisory description (CVE-2026-96662)","fact_id":"SEA-CVE-2026-96662-F2","document_citation":"Advisory description (CVE-2026-96662)"}],"source_stated_contributors":["The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to generic SQL Injection via 'booking[serviceid]' Parameter in all versions up to, and including, 5.7.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-96662","reporting_entity":"CVE-2026-96662","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-96662-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-96662-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-96662"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-96653","title":"The WP Directory Kit plugin for WordPress is vulnerable to time-based SQL Injection via 'display_name' Profile Field (Second-Order) in all versions up to, and including, 1.5.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. This is a second-order injection: a Subscriber stores a display_name containing a single quote via their own profile, which WordPress preserves verbatim; the payload is then triggered when WdkCachedUserEditor::update_listings_user_editor() re-reads that stored value and passes it unsanitized to the SQL sink.","display_title":"Software component issue could expose or alter stored data","display_summary":"The WP Directory Kit plugin for WordPress is vulnerable to time-based SQL Injection via 'displayname' Profile Field (Second-Order) in all versions up to, and including, 1.5.9 due to insufficient escaping on the user…","display_reference":"CVE-2026-96653","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-96653","source_title":"The WP Directory Kit plugin for WordPress is vulnerable to time-based SQL Injection via 'display_name' Profile Field (Second-Order) in all versions up to, and including, 1.5.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. This is a second-order injection: a Subscriber stores a display_name containing a single quote via their own profile, which WordPress preserves verbatim; the payload is then triggered when WdkCachedUserEditor::update_listings_user_editor() re-reads that stored value and passes it unsanitized to the SQL sink.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:07.011Z","source_hash":"content-fingerprint:fnv1a-9f55faa4","affected_system":{"organization":"The WP Directory Kit plugin for WordPress is vulnerable to time-based SQL Injection via 'displayname' Profile Field (Second-Order) in all versions up to, and including, 1.5.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. This is a second-order injection project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-96653-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The WP Directory Kit plugin for WordPress is vulnerable to time-based SQL Injection via 'display_name' Profile Field (Second-Order) in all versions up to, and including, 1.5.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. This is a second-order injection: a Subscriber stores a display_name containing a single quote via their own profile, which WordPress preserves verbatim; the payload is then triggered when WdkCachedUserEditor::update_listings_user_editor() re-reads that stored value and passes it unsanitized to the SQL sink.","source_quote_or_pointer":"Security Advisory CVE-2026-96653","fact_id":"SEA-CVE-2026-96653-F1","document_citation":"Security Advisory CVE-2026-96653"},{"id":"SEA-CVE-2026-96653-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The WP Directory Kit plugin for WordPress is vulnerable to time-based SQL Injection via 'displayname' Profile Field (Second-Order) in all versions up to, and including, 1.5.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.","source_quote_or_pointer":"Advisory description (CVE-2026-96653)","fact_id":"SEA-CVE-2026-96653-F2","document_citation":"Advisory description (CVE-2026-96653)"}],"source_stated_contributors":["The WP Directory Kit plugin for WordPress is vulnerable to time-based SQL Injection via 'displayname' Profile Field (Second-Order) in all versions up to, and including, 1.5.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-96653","reporting_entity":"CVE-2026-96653","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-96653-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-96653-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-96653"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-94589","title":"The Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection) plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.4.5 via the extcf7_submit function. This is due to missing file extension, MIME type, and size validation in the signature field's validation_filter(), combined with the absence of PHP-execution guards in the upload directory and a sanitize_file_name() bypass that converts shell.php- into shell.php. This makes it possible for unauthenticated attackers to upload files that may be executable, which makes remote code execution possible.","display_title":"Software component issue could allow unintended commands to run","display_summary":"The Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection) plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.4.5 via the extcf7submit function.","display_reference":"CVE-2026-94589","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-94589","source_title":"The Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection) plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.4.5 via the extcf7_submit function. This is due to missing file extension, MIME type, and size validation in the signature field's validation_filter(), combined with the absence of PHP-execution guards in the upload directory and a sanitize_file_name() bypass that converts shell.php- into shell.php. This makes it possible for unauthenticated attackers to upload files that may be executable, which makes remote code execution possible.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:07.012Z","source_hash":"content-fingerprint:fnv1a-fe7b39c2","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-94589-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection) plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.4.5 via the extcf7_submit function. This is due to missing file extension, MIME type, and size validation in the signature field's validation_filter(), combined with the absence of PHP-execution guards in the upload directory and a sanitize_file_name() bypass that converts shell.php- into shell.php. This makes it possible for unauthenticated attackers to upload files that may be executable, which makes remote code execution possible.","source_quote_or_pointer":"Security Advisory CVE-2026-94589","fact_id":"SEA-CVE-2026-94589-F1","document_citation":"Security Advisory CVE-2026-94589"},{"id":"SEA-CVE-2026-94589-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection) plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.4.5 via the extcf7submit function.","source_quote_or_pointer":"Advisory description (CVE-2026-94589)","fact_id":"SEA-CVE-2026-94589-F2","document_citation":"Advisory description (CVE-2026-94589)"}],"source_stated_contributors":["The Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection) plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.4.5 via the extcf7submit function."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.uploaded_files"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-94589","reporting_entity":"CVE-2026-94589","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-94589-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-94589-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-94589"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-94538","title":"The WP File Download plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.3.9. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with subscriber-level access and above, to permanently delete any file managed by WP File Download, empty the entire trash, move files between categories, and publish or unpublish arbitrary files.","display_title":"Software component issue could allow unauthorized access","display_summary":"The WP File Download plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.3.9.","display_reference":"CVE-2026-94538","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-94538","source_title":"The WP File Download plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.3.9. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with subscriber-level access and above, to permanently delete any file managed by WP File Download, empty the entire trash, move files between categories, and publish or unpublish arbitrary files.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:07.013Z","source_hash":"content-fingerprint:fnv1a-e48d2fde","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-94538-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The WP File Download plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.3.9. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with subscriber-level access and above, to permanently delete any file managed by WP File Download, empty the entire trash, move files between categories, and publish or unpublish arbitrary files.","source_quote_or_pointer":"Security Advisory CVE-2026-94538","fact_id":"SEA-CVE-2026-94538-F1","document_citation":"Security Advisory CVE-2026-94538"},{"id":"SEA-CVE-2026-94538-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The WP File Download plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.3.9. This is due to the plugin not properly verifying that a user is authorized to perform an action.","source_quote_or_pointer":"Advisory description (CVE-2026-94538)","fact_id":"SEA-CVE-2026-94538-F2","document_citation":"Advisory description (CVE-2026-94538)"}],"source_stated_contributors":["The WP File Download plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.3.9. This is due to the plugin not properly verifying that a user is authorized to perform an action."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.write_action","auth.public_publication","data.pii"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-94538","reporting_entity":"CVE-2026-94538","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-94538-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-94538-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-94538"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-94375","title":"The Order Export & Order Import for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.7.8 via the get_file_path. This makes it possible for unauthenticated attackers to extract download exported order CSV files containing customer PII — including names, billing and shipping addresses, email addresses, phone numbers, and order contents — directly over HTTP with no authentication. This is exploitable whenever the .htaccess and index.php guard files are absent from wp-content/webtoffee_export/, which can occur after any uninstall/reinstall cycle, migration, backup restore, or staging sync, since the export directory persists but its guard files do not; export filenames follow a fully deterministic second-precision timestamp pattern, making them brute-forceable across any suspected export window.","display_title":"Security issue reported in Software component","display_summary":"The Order Export & Order Import for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.7.8 via the getfilepath.","display_reference":"CVE-2026-94375","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-94375","source_title":"The Order Export & Order Import for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.7.8 via the get_file_path. This makes it possible for unauthenticated attackers to extract download exported order CSV files containing customer PII — including names, billing and shipping addresses, email addresses, phone numbers, and order contents — directly over HTTP with no authentication. This is exploitable whenever the .htaccess and index.php guard files are absent from wp-content/webtoffee_export/, which can occur after any uninstall/reinstall cycle, migration, backup restore, or staging sync, since the export directory persists but its guard files do not; export filenames follow a fully deterministic second-precision timestamp pattern, making them brute-forceable across any suspected export window.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:07.014Z","source_hash":"content-fingerprint:fnv1a-ed12b183","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-94375-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Order Export & Order Import for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.7.8 via the get_file_path. This makes it possible for unauthenticated attackers to extract download exported order CSV files containing customer PII — including names, billing and shipping addresses, email addresses, phone numbers, and order contents — directly over HTTP with no authentication. This is exploitable whenever the .htaccess and index.php guard files are absent from wp-content/webtoffee_export/, which can occur after any uninstall/reinstall cycle, migration, backup restore, or staging sync, since the export directory persists but its guard files do not; export filenames follow a fully deterministic second-precision timestamp pattern, making them brute-forceable across any suspected export window.","source_quote_or_pointer":"Security Advisory CVE-2026-94375","fact_id":"SEA-CVE-2026-94375-F1","document_citation":"Security Advisory CVE-2026-94375"},{"id":"SEA-CVE-2026-94375-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Order Export & Order Import for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.7.8 via the getfilepath.","source_quote_or_pointer":"Advisory description (CVE-2026-94375)","fact_id":"SEA-CVE-2026-94375-F2","document_citation":"Advisory description (CVE-2026-94375)"}],"source_stated_contributors":["The Order Export & Order Import for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.7.8 via the getfilepath."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.financial_action","data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-94375","reporting_entity":"CVE-2026-94375","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-94375-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-94375-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-94375"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-93746","title":"The WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 5.0.2 via the 'email' parameter of the guest print_document_from_the_mail_link handler dispatched from print_window() on init. This is due to the handler authorizing access to an order's printable documents when the attacker-supplied (base64-encoded) 'email' equals the order's billing email — a non-secret identifier — instead of requiring the WooCommerce order_key. This makes it possible for unauthenticated attackers, when the site is configured to allow guest access to documents ('wt_pklist_print_button_access_for' != 'logged_in'), to retrieve any other customer's invoice, packing slip, delivery note, dispatch label or shipping label — including customer name, billing/shipping address, phone number, purchased products, prices, taxes and invoice metadata — by knowing the target order ID and the associated billing email address.","display_title":"Software component issue could expose accounts or credentials","display_summary":"The WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 5.0.2 via the 'email'…","display_reference":"CVE-2026-93746","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93746","source_title":"The WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 5.0.2 via the 'email' parameter of the guest print_document_from_the_mail_link handler dispatched from print_window() on init. This is due to the handler authorizing access to an order's printable documents when the attacker-supplied (base64-encoded) 'email' equals the order's billing email — a non-secret identifier — instead of requiring the WooCommerce order_key. This makes it possible for unauthenticated attackers, when the site is configured to allow guest access to documents ('wt_pklist_print_button_access_for' != 'logged_in'), to retrieve any other customer's invoice, packing slip, delivery note, dispatch label or shipping label — including customer name, billing/shipping address, phone number, purchased products, prices, taxes and invoice metadata — by knowing the target order ID and the associated billing email address.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:07.015Z","source_hash":"content-fingerprint:fnv1a-1aa2a3e0","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-93746-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 5.0.2 via the 'email' parameter of the guest print_document_from_the_mail_link handler dispatched from print_window() on init. This is due to the handler authorizing access to an order's printable documents when the attacker-supplied (base64-encoded) 'email' equals the order's billing email — a non-secret identifier — instead of requiring the WooCommerce order_key. This makes it possible for unauthenticated attackers, when the site is configured to allow guest access to documents ('wt_pklist_print_button_access_for' != 'logged_in'), to retrieve any other customer's invoice, packing slip, delivery note, dispatch label or shipping label — including customer name, billing/shipping address, phone number, purchased products, prices, taxes and invoice metadata — by knowing the target order ID and the associated billing email address.","source_quote_or_pointer":"Security Advisory CVE-2026-93746","fact_id":"SEA-CVE-2026-93746-F1","document_citation":"Security Advisory CVE-2026-93746"},{"id":"SEA-CVE-2026-93746-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 5.0.2 via the 'email' parameter of the guest printdocumentfromthemaillink handler dispatched from printwindow() on init.","source_quote_or_pointer":"Advisory description (CVE-2026-93746)","fact_id":"SEA-CVE-2026-93746-F2","document_citation":"Advisory description (CVE-2026-93746)"}],"source_stated_contributors":["The WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 5.0.2 via the 'email' parameter of the guest printdocumentfromthemaillink handler dispatched from printwindow() on init."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.financial_action","data.pii","data.credentials_secrets","data.uploaded_files"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-93746","reporting_entity":"CVE-2026-93746","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-93746-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-93746-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-93746"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-92975","title":"The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.8.3 via the create_support_user() function. This is due to the function identifying the support account solely by matching against publicly hardcoded constants — user_login 'groundhogg' and email addresses 'support@groundhogg.io' / 'help@groundhogg.io' — where the in_array() email-equality check at line 238 is not a security boundary because any user fully controls their own email value. This makes it possible for an attacker with an account whose user_login is 'groundhogg' and whose user_email matches one of the hardcoded support constants to have that account silently promoted to administrator — and additionally to super admin on multisite when the triggering administrator holds manage_network_options — resulting in full site takeover. Exploitation requires a two-actor flow: the attacker must first obtain or pre-plant an account with the hardcoded credentials (possible when open user registration is enabled or another account-creation path exists), after which a legitimate administrator must invoke the support-access feature via the submit_ticket or process_send_support_access entry points to trigger the promotion.","display_title":"Software component issue could expose accounts or credentials","display_summary":"The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.8.3 via the createsupportuser() function.","display_reference":"CVE-2026-92975","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92975","source_title":"The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.8.3 via the create_support_user() function. This is due to the function identifying the support account solely by matching against publicly hardcoded constants — user_login 'groundhogg' and email addresses 'support@groundhogg.io' / 'help@groundhogg.io' — where the in_array() email-equality check at line 238 is not a security boundary because any user fully controls their own email value. This makes it possible for an attacker with an account whose user_login is 'groundhogg' and whose user_email matches one of the hardcoded support constants to have that account silently promoted to administrator — and additionally to super admin on multisite when the triggering administrator holds manage_network_options — resulting in full site takeover. Exploitation requires a two-actor flow: the attacker must first obtain or pre-plant an account with the hardcoded credentials (possible when open user registration is enabled or another account-creation path exists), after which a legitimate administrator must invoke the support-access feature via the submit_ticket or process_send_support_access entry points to trigger the promotion.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:07.015Z","source_hash":"content-fingerprint:fnv1a-ff170e35","affected_system":{"organization":"The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.8.3 via the createsupportuser() function. This is due to the function identifying the support account solely by matching against publicly hardcoded constants — userlogin 'groundhogg' and email addresses 'support@groundhogg.io' / 'help@groundhogg.io' — where the inarray() email-equality check at line 238 is not a security boundary because any user fully controls their own email value. This makes it possible for an attacker with an account whose userlogin is 'groundhogg' and whose useremail matches one of the hardcoded support constants to have that account silently promoted to administrator — and additionally to super admin on multisite when the triggering administrator holds managenetworkoptions — resulting in full site takeover. Exploitation requires a two-actor flow project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-92975-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.8.3 via the create_support_user() function. This is due to the function identifying the support account solely by matching against publicly hardcoded constants — user_login 'groundhogg' and email addresses 'support@groundhogg.io' / 'help@groundhogg.io' — where the in_array() email-equality check at line 238 is not a security boundary because any user fully controls their own email value. This makes it possible for an attacker with an account whose user_login is 'groundhogg' and whose user_email matches one of the hardcoded support constants to have that account silently promoted to administrator — and additionally to super admin on multisite when the triggering administrator holds manage_network_options — resulting in full site takeover. Exploitation requires a two-actor flow: the attacker must first obtain or pre-plant an account with the hardcoded credentials (possible when open user registration is enabled or another account-creation path exists), after which a legitimate administrator must invoke the support-access feature via the submit_ticket or process_send_support_access entry points to trigger the promotion.","source_quote_or_pointer":"Security Advisory CVE-2026-92975","fact_id":"SEA-CVE-2026-92975-F1","document_citation":"Security Advisory CVE-2026-92975"},{"id":"SEA-CVE-2026-92975-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.8.3 via the createsupportuser() function.","source_quote_or_pointer":"Advisory description (CVE-2026-92975)","fact_id":"SEA-CVE-2026-92975-F2","document_citation":"Advisory description (CVE-2026-92975)"}],"source_stated_contributors":["The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.8.3 via the createsupportuser() function."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-92975","reporting_entity":"CVE-2026-92975","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-92975-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-92975-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-92975"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-91136","title":"The Divi Plus plugin for WordPress is vulnerable to Arbitrary File Read in versions up to, and including, 2.4.0 via the 'svg_image' parameter of the /wp-json/elicus/v1/dipl-modules/svg-animator REST endpoint. This is due to the endpoint's permission callback (SVGAnimatorController::index_permission) returning true unconditionally combined with insufficient validation of the 'svg_image' input — sanitize_text_field() and esc_html() do not restrict filesystem paths, the file:// stream wrapper, or arbitrary URLs — before it is passed to file_get_contents() (with a wp_remote_get() fallback) and the raw response body is returned in the JSON 'html' field. This makes it possible for unauthenticated attackers to read arbitrary files on the affected site's server which may make remote code execution possible.","display_title":"Software component issue could allow unintended commands to run","display_summary":"The Divi Plus plugin for WordPress is vulnerable to Arbitrary File Read in versions up to, and including, 2.4.0 via the 'svgimage' parameter of the /wp-json/elicus/v1/dipl-modules/svg-animator REST endpoint.","display_reference":"CVE-2026-91136","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91136","source_title":"The Divi Plus plugin for WordPress is vulnerable to Arbitrary File Read in versions up to, and including, 2.4.0 via the 'svg_image' parameter of the /wp-json/elicus/v1/dipl-modules/svg-animator REST endpoint. This is due to the endpoint's permission callback (SVGAnimatorController::index_permission) returning true unconditionally combined with insufficient validation of the 'svg_image' input — sanitize_text_field() and esc_html() do not restrict filesystem paths, the file:// stream wrapper, or arbitrary URLs — before it is passed to file_get_contents() (with a wp_remote_get() fallback) and the raw response body is returned in the JSON 'html' field. This makes it possible for unauthenticated attackers to read arbitrary files on the affected site's server which may make remote code execution possible.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:07.016Z","source_hash":"content-fingerprint:fnv1a-bab96d61","affected_system":{"organization":"The Divi Plus plugin for WordPress is vulnerable to Arbitrary File Read in versions up to, and including, 2.4.0 via the 'svgimage' parameter of the /wp-json/elicus/v1/dipl-modules/svg-animator REST endpoint. This is due to the endpoint's permission callback (SVGAnimatorController project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-91136-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Divi Plus plugin for WordPress is vulnerable to Arbitrary File Read in versions up to, and including, 2.4.0 via the 'svg_image' parameter of the /wp-json/elicus/v1/dipl-modules/svg-animator REST endpoint. This is due to the endpoint's permission callback (SVGAnimatorController::index_permission) returning true unconditionally combined with insufficient validation of the 'svg_image' input — sanitize_text_field() and esc_html() do not restrict filesystem paths, the file:// stream wrapper, or arbitrary URLs — before it is passed to file_get_contents() (with a wp_remote_get() fallback) and the raw response body is returned in the JSON 'html' field. This makes it possible for unauthenticated attackers to read arbitrary files on the affected site's server which may make remote code execution possible.","source_quote_or_pointer":"Security Advisory CVE-2026-91136","fact_id":"SEA-CVE-2026-91136-F1","document_citation":"Security Advisory CVE-2026-91136"},{"id":"SEA-CVE-2026-91136-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Divi Plus plugin for WordPress is vulnerable to Arbitrary File Read in versions up to, and including, 2.4.0 via the 'svgimage' parameter of the /wp-json/elicus/v1/dipl-modules/svg-animator REST endpoint.","source_quote_or_pointer":"Advisory description (CVE-2026-91136)","fact_id":"SEA-CVE-2026-91136-F2","document_citation":"Advisory description (CVE-2026-91136)"}],"source_stated_contributors":["The Divi Plus plugin for WordPress is vulnerable to Arbitrary File Read in versions up to, and including, 2.4.0 via the 'svgimage' parameter of the /wp-json/elicus/v1/dipl-modules/svg-animator REST endpoint."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","arch.async_job","arch.event_driven"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-91136","reporting_entity":"CVE-2026-91136","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-91136-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-91136-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-91136"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-91050","title":"The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Insecure Direct Object Reference / Missing Authorization in versions up to, and including, 5.7.2. This is due to the publicly reachable steps__start and steps__load_step routes accepting a params[presets][order_item_id] value that is copied verbatim into the booking object without verifying that the referenced order item belongs to the current customer, is a bundle item, is paid, or has remaining capacity — the is_bundle_scheduling() bundle discriminator is a mere !empty(order_item_id) truthiness check, and the code flow explicitly removes the customer and payment steps when this is truthy (the source even carries a TODO acknowledging the missing validation). This makes it possible for unauthenticated attackers to create approved appointments against other customers' order items and to read those customers' names, email addresses, and order codes returned in the booking confirmation.","display_title":"Security issue reported in Software component","display_summary":"The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Insecure Direct Object Reference / Missing Authorization in versions up to, and including, 5.7.2.","display_reference":"CVE-2026-91050","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91050","source_title":"The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Insecure Direct Object Reference / Missing Authorization in versions up to, and including, 5.7.2. This is due to the publicly reachable steps__start and steps__load_step routes accepting a params[presets][order_item_id] value that is copied verbatim into the booking object without verifying that the referenced order item belongs to the current customer, is a bundle item, is paid, or has remaining capacity — the is_bundle_scheduling() bundle discriminator is a mere !empty(order_item_id) truthiness check, and the code flow explicitly removes the customer and payment steps when this is truthy (the source even carries a TODO acknowledging the missing validation). This makes it possible for unauthenticated attackers to create approved appointments against other customers' order items and to read those customers' names, email addresses, and order codes returned in the booking confirmation.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:07.017Z","source_hash":"content-fingerprint:fnv1a-d340d6c4","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-91050-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Insecure Direct Object Reference / Missing Authorization in versions up to, and including, 5.7.2. This is due to the publicly reachable steps__start and steps__load_step routes accepting a params[presets][order_item_id] value that is copied verbatim into the booking object without verifying that the referenced order item belongs to the current customer, is a bundle item, is paid, or has remaining capacity — the is_bundle_scheduling() bundle discriminator is a mere !empty(order_item_id) truthiness check, and the code flow explicitly removes the customer and payment steps when this is truthy (the source even carries a TODO acknowledging the missing validation). This makes it possible for unauthenticated attackers to create approved appointments against other customers' order items and to read those customers' names, email addresses, and order codes returned in the booking confirmation.","source_quote_or_pointer":"Security Advisory CVE-2026-91050","fact_id":"SEA-CVE-2026-91050-F1","document_citation":"Security Advisory CVE-2026-91050"},{"id":"SEA-CVE-2026-91050-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Insecure Direct Object Reference / Missing Authorization in versions up to, and including, 5.7.2.","source_quote_or_pointer":"Advisory description (CVE-2026-91050)","fact_id":"SEA-CVE-2026-91050-F2","document_citation":"Advisory description (CVE-2026-91050)"}],"source_stated_contributors":["The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Insecure Direct Object Reference / Missing Authorization in versions up to, and including, 5.7.2."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.financial_action","auth.destructive_action","data.pii"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-91050","reporting_entity":"CVE-2026-91050","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-91050-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-91050-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-91050"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-89301","title":"The rtMedia for WordPress, BuddyPress and bbPress plugin for WordPress is vulnerable to limited file deletion due to insufficient file path validation in the process function in all versions up to, and including, 4.7.13 This makes it possible for unauthenticated attackers to delete arbitrary safe files on the server.. The public nonce (rtmedia_upload_nonce) is emitted into frontend JavaScript on any page rendering the rtMedia gallery or upload shortcode, making it retrievable by unauthenticated visitors without any prior authentication or privileged action.","display_title":"Security issue reported in Software component","display_summary":"The rtMedia for WordPress, BuddyPress and bbPress plugin for WordPress is vulnerable to limited file deletion due to insufficient file path validation in the process function in all versions up to, and including, 4.7.13…","display_reference":"CVE-2026-89301","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89301","source_title":"The rtMedia for WordPress, BuddyPress and bbPress plugin for WordPress is vulnerable to limited file deletion due to insufficient file path validation in the process function in all versions up to, and including, 4.7.13 This makes it possible for unauthenticated attackers to delete arbitrary safe files on the server.. The public nonce (rtmedia_upload_nonce) is emitted into frontend JavaScript on any page rendering the rtMedia gallery or upload shortcode, making it retrievable by unauthenticated visitors without any prior authentication or privileged action.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:07.017Z","source_hash":"content-fingerprint:fnv1a-83f83cba","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-89301-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The rtMedia for WordPress, BuddyPress and bbPress plugin for WordPress is vulnerable to limited file deletion due to insufficient file path validation in the process function in all versions up to, and including, 4.7.13 This makes it possible for unauthenticated attackers to delete arbitrary safe files on the server.. The public nonce (rtmedia_upload_nonce) is emitted into frontend JavaScript on any page rendering the rtMedia gallery or upload shortcode, making it retrievable by unauthenticated visitors without any prior authentication or privileged action.","source_quote_or_pointer":"Security Advisory CVE-2026-89301","fact_id":"SEA-CVE-2026-89301-F1","document_citation":"Security Advisory CVE-2026-89301"},{"id":"SEA-CVE-2026-89301-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The rtMedia for WordPress, BuddyPress and bbPress plugin for WordPress is vulnerable to limited file deletion due to insufficient file path validation in the process function in all versions up to, and including, 4.7.13 This makes it possible for unauthenticated attackers to delete arbitrary safe files on the server..","source_quote_or_pointer":"Advisory description (CVE-2026-89301)","fact_id":"SEA-CVE-2026-89301-F2","document_citation":"Advisory description (CVE-2026-89301)"}],"source_stated_contributors":["The rtMedia for WordPress, BuddyPress and bbPress plugin for WordPress is vulnerable to limited file deletion due to insufficient file path validation in the process function in all versions up to, and including, 4.7.13 This makes it possible for unauthenticated attackers to delete arbitrary safe files on the server.."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.privileged_action","auth.write_action","auth.public_publication","data.uploaded_files"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-89301","reporting_entity":"CVE-2026-89301","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-89301-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-89301-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-89301"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-83526","title":"The FV Player 8 plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 8.1.7 via the check_mimetype function. This is due to insufficient file type validation in check_mimetype(), which writes attacker-supplied remote file content to the public uploads directory before any MIME or extension check, combined with a missing capability check on new player creation. This makes it possible for authenticated attackers, with subscriber-level access and above, to upload files that may be executable, which makes remote code execution possible. This requires successfully exploiting a race condition.","display_title":"Software component issue could allow unintended commands to run","display_summary":"The FV Player 8 plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 8.1.7 via the checkmimetype function.","display_reference":"CVE-2026-83526","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-83526","source_title":"The FV Player 8 plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 8.1.7 via the check_mimetype function. This is due to insufficient file type validation in check_mimetype(), which writes attacker-supplied remote file content to the public uploads directory before any MIME or extension check, combined with a missing capability check on new player creation. This makes it possible for authenticated attackers, with subscriber-level access and above, to upload files that may be executable, which makes remote code execution possible. This requires successfully exploiting a race condition.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:07.018Z","source_hash":"content-fingerprint:fnv1a-4603d4dd","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-83526-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The FV Player 8 plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 8.1.7 via the check_mimetype function. This is due to insufficient file type validation in check_mimetype(), which writes attacker-supplied remote file content to the public uploads directory before any MIME or extension check, combined with a missing capability check on new player creation. This makes it possible for authenticated attackers, with subscriber-level access and above, to upload files that may be executable, which makes remote code execution possible. This requires successfully exploiting a race condition.","source_quote_or_pointer":"Security Advisory CVE-2026-83526","fact_id":"SEA-CVE-2026-83526-F1","document_citation":"Security Advisory CVE-2026-83526"},{"id":"SEA-CVE-2026-83526-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The FV Player 8 plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 8.1.7 via the checkmimetype function. This is due to insufficient file type validation in checkmimetype(), which writes attacker-supplied remote file content to the public uploads directory before any MIME…","source_quote_or_pointer":"Advisory description (CVE-2026-83526)","fact_id":"SEA-CVE-2026-83526-F2","document_citation":"Advisory description (CVE-2026-83526)"}],"source_stated_contributors":["The FV Player 8 plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 8.1.7 via the checkmimetype function. This is due to insufficient file type validation in checkmimetype(), which writes attacker-supplied remote file content to the public uploads directory before any MIME…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","auth.public_publication","data.uploaded_files"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-83526","reporting_entity":"CVE-2026-83526","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-83526-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-83526-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-83526"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-77183","title":"The FooSales – Point of Sale (POS) for WooCommerce plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.43.0. This is due to the plugin not properly validating a user's identity prior to updating their details like email. This makes it possible for authenticated attackers, with FooSales Cashier-level access and above, to change arbitrary user's email addresses, including administrators, and leverage that to reset the user's password and gain access to their account.","display_title":"Software component issue could expose accounts or credentials","display_summary":"The FooSales – Point of Sale (POS) for WooCommerce plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.43.0.","display_reference":"CVE-2026-77183","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-77183","source_title":"The FooSales – Point of Sale (POS) for WooCommerce plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.43.0. This is due to the plugin not properly validating a user's identity prior to updating their details like email. This makes it possible for authenticated attackers, with FooSales Cashier-level access and above, to change arbitrary user's email addresses, including administrators, and leverage that to reset the user's password and gain access to their account.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:07.019Z","source_hash":"content-fingerprint:fnv1a-683f6b27","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-77183-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The FooSales – Point of Sale (POS) for WooCommerce plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.43.0. This is due to the plugin not properly validating a user's identity prior to updating their details like email. This makes it possible for authenticated attackers, with FooSales Cashier-level access and above, to change arbitrary user's email addresses, including administrators, and leverage that to reset the user's password and gain access to their account.","source_quote_or_pointer":"Security Advisory CVE-2026-77183","fact_id":"SEA-CVE-2026-77183-F1","document_citation":"Security Advisory CVE-2026-77183"},{"id":"SEA-CVE-2026-77183-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The FooSales – Point of Sale (POS) for WooCommerce plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.43.0. This is due to the plugin not properly validating a user's identity prior to updating their details like email.","source_quote_or_pointer":"Advisory description (CVE-2026-77183)","fact_id":"SEA-CVE-2026-77183-F2","document_citation":"Advisory description (CVE-2026-77183)"}],"source_stated_contributors":["The FooSales – Point of Sale (POS) for WooCommerce plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.43.0. This is due to the plugin not properly validating a user's identity prior to updating their details like email."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-77183","reporting_entity":"CVE-2026-77183","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-77183-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-77183-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-77183"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-6723","title":"The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to Incorrect Authorization in all versions up to, and including, 1.6.11.11. This is due to the appointment update REST API endpoint not restricting which fields can be modified by token-authenticated customers. This makes it possible for unauthenticated attackers to modify admin-controlled fields on that appointment, including faking payment confirmation, reassigning the appointment to another user, and changing the service type.","display_title":"Security issue reported in Software component","display_summary":"The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to Incorrect Authorization in all versions up to, and including, 1.6.11.11.","display_reference":"CVE-2026-6723","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6723","source_title":"The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to Incorrect Authorization in all versions up to, and including, 1.6.11.11. This is due to the appointment update REST API endpoint not restricting which fields can be modified by token-authenticated customers. This makes it possible for unauthenticated attackers to modify admin-controlled fields on that appointment, including faking payment confirmation, reassigning the appointment to another user, and changing the service type.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:07.019Z","source_hash":"content-fingerprint:fnv1a-ea4403e7","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-6723-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to Incorrect Authorization in all versions up to, and including, 1.6.11.11. This is due to the appointment update REST API endpoint not restricting which fields can be modified by token-authenticated customers. This makes it possible for unauthenticated attackers to modify admin-controlled fields on that appointment, including faking payment confirmation, reassigning the appointment to another user, and changing the service type.","source_quote_or_pointer":"Security Advisory CVE-2026-6723","fact_id":"SEA-CVE-2026-6723-F1","document_citation":"Security Advisory CVE-2026-6723"},{"id":"SEA-CVE-2026-6723-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to Incorrect Authorization in all versions up to, and including, 1.6.11.11.","source_quote_or_pointer":"Advisory description (CVE-2026-6723)","fact_id":"SEA-CVE-2026-6723-F2","document_citation":"Advisory description (CVE-2026-6723)"}],"source_stated_contributors":["The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to Incorrect Authorization in all versions up to, and including, 1.6.11.11."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.financial_action","auth.privileged_action","auth.write_action","data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-6723","reporting_entity":"CVE-2026-6723","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-6723-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-6723-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-6723"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-5727","title":"The Hello Plus plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.7.7. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with Contributor-level access and above, to publish their own Hello+ header/footer templates and draft currently active templates owned by higher-privileged users.","display_title":"Software component issue could allow unauthorized access","display_summary":"The Hello Plus plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.7.7. This is due to the plugin not properly verifying that a user is authorized to perform an action.","display_reference":"CVE-2026-5727","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-5727","source_title":"The Hello Plus plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.7.7. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with Contributor-level access and above, to publish their own Hello+ header/footer templates and draft currently active templates owned by higher-privileged users.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:07.020Z","source_hash":"content-fingerprint:fnv1a-bcd79ce4","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-5727-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Hello Plus plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.7.7. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with Contributor-level access and above, to publish their own Hello+ header/footer templates and draft currently active templates owned by higher-privileged users.","source_quote_or_pointer":"Security Advisory CVE-2026-5727","fact_id":"SEA-CVE-2026-5727-F1","document_citation":"Security Advisory CVE-2026-5727"},{"id":"SEA-CVE-2026-5727-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Hello Plus plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.7.7. This is due to the plugin not properly verifying that a user is authorized to perform an action.","source_quote_or_pointer":"Advisory description (CVE-2026-5727)","fact_id":"SEA-CVE-2026-5727-F2","document_citation":"Advisory description (CVE-2026-5727)"}],"source_stated_contributors":["The Hello Plus plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.7.7. This is due to the plugin not properly verifying that a user is authorized to perform an action."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.public_publication","data.pii"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-5727","reporting_entity":"CVE-2026-5727","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-5727-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-5727-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-5727"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-15178","title":"The Fluent Forms plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.2.5. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with Custom-level access and above, to read private form submissions, change submission statuses, permanently delete submissions, and modify global plugin settings.","display_title":"Software component issue could allow unauthorized access","display_summary":"The Fluent Forms plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.2.5. This is due to the plugin not properly verifying that a user is authorized to perform an action.","display_reference":"CVE-2026-15178","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-15178","source_title":"The Fluent Forms plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.2.5. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with Custom-level access and above, to read private form submissions, change submission statuses, permanently delete submissions, and modify global plugin settings.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:07.021Z","source_hash":"content-fingerprint:fnv1a-baa2d1af","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-15178-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Fluent Forms plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.2.5. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with Custom-level access and above, to read private form submissions, change submission statuses, permanently delete submissions, and modify global plugin settings.","source_quote_or_pointer":"Security Advisory CVE-2026-15178","fact_id":"SEA-CVE-2026-15178-F1","document_citation":"Security Advisory CVE-2026-15178"},{"id":"SEA-CVE-2026-15178-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Fluent Forms plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.2.5. This is due to the plugin not properly verifying that a user is authorized to perform an action.","source_quote_or_pointer":"Advisory description (CVE-2026-15178)","fact_id":"SEA-CVE-2026-15178-F2","document_citation":"Advisory description (CVE-2026-15178)"}],"source_stated_contributors":["The Fluent Forms plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.2.5. This is due to the plugin not properly verifying that a user is authorized to perform an action."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.write_action","data.pii"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-15178","reporting_entity":"CVE-2026-15178","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-15178-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-15178-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-15178"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-12626","title":"The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 28.2 via deserialization of untrusted input via the ‘value’ parameter. This makes it possible for authenticated attackers, with custom-level access and above, to inject a PHP Object. No known gadget chain is available.","display_title":"Software component issue could make the application process unsafe input","display_summary":"The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 28.2 via deserialization of untrusted input via the ‘value’…","display_reference":"CVE-2026-12626","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-12626","source_title":"The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 28.2 via deserialization of untrusted input via the ‘value’ parameter. This makes it possible for authenticated attackers, with custom-level access and above, to inject a PHP Object. No known gadget chain is available.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:07.021Z","source_hash":"content-fingerprint:fnv1a-952d8dc6","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-12626-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 28.2 via deserialization of untrusted input via the ‘value’ parameter. This makes it possible for authenticated attackers, with custom-level access and above, to inject a PHP Object. No known gadget chain is available.","source_quote_or_pointer":"Security Advisory CVE-2026-12626","fact_id":"SEA-CVE-2026-12626-F1","document_citation":"Security Advisory CVE-2026-12626"},{"id":"SEA-CVE-2026-12626-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 28.2 via deserialization of untrusted input via the ‘value’ parameter.","source_quote_or_pointer":"Advisory description (CVE-2026-12626)","fact_id":"SEA-CVE-2026-12626-F2","document_citation":"Advisory description (CVE-2026-12626)"}],"source_stated_contributors":["The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 28.2 via deserialization of untrusted input via the ‘value’ parameter."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unsafe object construction","Possible code execution"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-12626","reporting_entity":"CVE-2026-12626","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-12626-SG1","label":"Use schema-validated data formats","description":"Parse untrusted input into plain data with an explicit schema; never deserialize into arbitrary types.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-12626-SG1","label":"Use schema-validated data formats","description":"Parse untrusted input into plain data with an explicit schema; never deserialize into arbitrary types.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"The application rebuilt objects from untrusted data. Use data-only formats with schema validation instead of native object deserialization.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-12626"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108504","title":"ZTE Z80 Ultra has an unauthorized information disclosure vulnerability. The access control for methods within the framework is insufficient. An attacker can exploit this method to read device-related information.","display_title":"Software component issue could allow unauthorized access","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-108504","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108504","source_title":"ZTE Z80 Ultra has an unauthorized information disclosure vulnerability. The access control for methods within the framework is insufficient. An attacker can exploit this method to read device-related information.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:07.022Z","source_hash":"content-fingerprint:fnv1a-3a396e7b","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108504-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"ZTE Z80 Ultra has an unauthorized information disclosure vulnerability. The access control for methods within the framework is insufficient. An attacker can exploit this method to read device-related information.","source_quote_or_pointer":"Security Advisory CVE-2026-108504","fact_id":"SEA-CVE-2026-108504-F1","document_citation":"Security Advisory CVE-2026-108504"},{"id":"SEA-CVE-2026-108504-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"ZTE Z80 Ultra has an unauthorized information disclosure vulnerability. The access control for methods within the framework is insufficient. An attacker can exploit this method to read device-related information.","source_quote_or_pointer":"Advisory description (CVE-2026-108504)","fact_id":"SEA-CVE-2026-108504-F2","document_citation":"Advisory description (CVE-2026-108504)"}],"source_stated_contributors":["ZTE Z80 Ultra has an unauthorized information disclosure vulnerability. The access control for methods within the framework is insufficient. An attacker can exploit this method to read device-related information."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108504","reporting_entity":"CVE-2026-108504","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108504-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108504-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108504"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-107712","title":"The WP Booking System – Booking Calendar plugin for WordPress is vulnerable to time-based SQL Injection via the 'current_month' parameter in all versions up to, and including, 2.1.0.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. This is a regression vulnerability — a capability check introduced in versions 2.0.19.11–2.0.19.14 to address CVE-2024-50425 was removed in version 2.1, meaning any authenticated subscriber-level account can reach the vulnerable handler with no nonce validation required.","display_title":"Software component issue could expose or alter stored data","display_summary":"The WP Booking System – Booking Calendar plugin for WordPress is vulnerable to time-based SQL Injection via the 'currentmonth' parameter in all versions up to, and including, 2.1.0.1 due to insufficient escaping on the…","display_reference":"CVE-2026-107712","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107712","source_title":"The WP Booking System – Booking Calendar plugin for WordPress is vulnerable to time-based SQL Injection via the 'current_month' parameter in all versions up to, and including, 2.1.0.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. This is a regression vulnerability — a capability check introduced in versions 2.0.19.11–2.0.19.14 to address CVE-2024-50425 was removed in version 2.1, meaning any authenticated subscriber-level account can reach the vulnerable handler with no nonce validation required.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:07.023Z","source_hash":"content-fingerprint:fnv1a-6cc02e2b","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-107712-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The WP Booking System – Booking Calendar plugin for WordPress is vulnerable to time-based SQL Injection via the 'current_month' parameter in all versions up to, and including, 2.1.0.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. This is a regression vulnerability — a capability check introduced in versions 2.0.19.11–2.0.19.14 to address CVE-2024-50425 was removed in version 2.1, meaning any authenticated subscriber-level account can reach the vulnerable handler with no nonce validation required.","source_quote_or_pointer":"Security Advisory CVE-2026-107712","fact_id":"SEA-CVE-2026-107712-F1","document_citation":"Security Advisory CVE-2026-107712"},{"id":"SEA-CVE-2026-107712-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The WP Booking System – Booking Calendar plugin for WordPress is vulnerable to time-based SQL Injection via the 'currentmonth' parameter in all versions up to, and including, 2.1.0.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.","source_quote_or_pointer":"Advisory description (CVE-2026-107712)","fact_id":"SEA-CVE-2026-107712-F2","document_citation":"Advisory description (CVE-2026-107712)"}],"source_stated_contributors":["The WP Booking System – Booking Calendar plugin for WordPress is vulnerable to time-based SQL Injection via the 'currentmonth' parameter in all versions up to, and including, 2.1.0.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.write_action","data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-107712","reporting_entity":"CVE-2026-107712","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-107712-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-107712-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-107712"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-107645","title":"The Blocksy Companion plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 2.1.58 This is due to the implement_user_registration() AJAX handler explicitly disabling Dokan's vendor-registration nonce check (via add_filter('dokan_register_nonce_check', '__return_false')) and then trusting an attacker-supplied $_POST['role'] value when invoking wc_create_new_customer() and wc_set_customer_auth_cookie(). This makes it possible for unauthenticated attackers to elevate their privileges to a Dokan 'seller' (vendor) account — including sites where the Dokan vendor signup is explicitly turned off — and to be auto-authenticated into that account, which grants publishing capabilities beyond those of a normal customer.","display_title":"Software component issue could grant elevated privileges","display_summary":"The Blocksy Companion plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 2.1.58 This is due to the implementuserregistration() AJAX handler explicitly disabling Dokan's…","display_reference":"CVE-2026-107645","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107645","source_title":"The Blocksy Companion plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 2.1.58 This is due to the implement_user_registration() AJAX handler explicitly disabling Dokan's vendor-registration nonce check (via add_filter('dokan_register_nonce_check', '__return_false')) and then trusting an attacker-supplied $_POST['role'] value when invoking wc_create_new_customer() and wc_set_customer_auth_cookie(). This makes it possible for unauthenticated attackers to elevate their privileges to a Dokan 'seller' (vendor) account — including sites where the Dokan vendor signup is explicitly turned off — and to be auto-authenticated into that account, which grants publishing capabilities beyond those of a normal customer.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:07.024Z","source_hash":"content-fingerprint:fnv1a-4b04326e","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-107645-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Blocksy Companion plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 2.1.58 This is due to the implement_user_registration() AJAX handler explicitly disabling Dokan's vendor-registration nonce check (via add_filter('dokan_register_nonce_check', '__return_false')) and then trusting an attacker-supplied $_POST['role'] value when invoking wc_create_new_customer() and wc_set_customer_auth_cookie(). This makes it possible for unauthenticated attackers to elevate their privileges to a Dokan 'seller' (vendor) account — including sites where the Dokan vendor signup is explicitly turned off — and to be auto-authenticated into that account, which grants publishing capabilities beyond those of a normal customer.","source_quote_or_pointer":"Security Advisory CVE-2026-107645","fact_id":"SEA-CVE-2026-107645-F1","document_citation":"Security Advisory CVE-2026-107645"},{"id":"SEA-CVE-2026-107645-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Blocksy Companion plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 2.1.58 This is due to the implementuserregistration() AJAX handler explicitly disabling Dokan's vendor-registration nonce check (via addfilter('dokanregisternoncecheck', 'returnfalse')) and then trusting…","source_quote_or_pointer":"Advisory description (CVE-2026-107645)","fact_id":"SEA-CVE-2026-107645-F2","document_citation":"Advisory description (CVE-2026-107645)"}],"source_stated_contributors":["The Blocksy Companion plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 2.1.58 This is due to the implementuserregistration() AJAX handler explicitly disabling Dokan's vendor-registration nonce check (via addfilter('dokanregisternoncecheck', 'returnfalse')) and then trusting…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.public_publication","data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Elevated privileges","Boundary bypass"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-107645","reporting_entity":"CVE-2026-107645","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-107645-SG1","label":"Enforce privilege boundaries in code","description":"Require explicit, server-verified authorization for privileged operations and isolate components with separate identities.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-107645-SG1","label":"Enforce privilege boundaries in code","description":"Require explicit, server-verified authorization for privileged operations and isolate components with separate identities.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A low-privilege actor reached a high-privilege capability. Enforce approval and privilege boundaries in deterministic code, not by convention.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-107645"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-104915","title":"The Academy LMS – AI Course Builder, Quizzes, Certificates & eLearning plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.0.3. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with custom-level access and above, to permanently delete arbitrary Academy lesson comments and their replies authored by any user, including administrators, across courses they do not instruct. This is exploitable by any user registered as an Academy instructor for at least one course, as they can supply their own course_id to pass the instructor check while targeting comments belonging to entirely different courses.","display_title":"Software component issue could allow unauthorized access","display_summary":"The Academy LMS – AI Course Builder, Quizzes, Certificates & eLearning plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.0.3.","display_reference":"CVE-2026-104915","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104915","source_title":"The Academy LMS – AI Course Builder, Quizzes, Certificates & eLearning plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.0.3. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with custom-level access and above, to permanently delete arbitrary Academy lesson comments and their replies authored by any user, including administrators, across courses they do not instruct. This is exploitable by any user registered as an Academy instructor for at least one course, as they can supply their own course_id to pass the instructor check while targeting comments belonging to entirely different courses.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:07.026Z","source_hash":"content-fingerprint:fnv1a-985e167f","affected_system":{"organization":"Software component project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-104915-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Academy LMS – AI Course Builder, Quizzes, Certificates & eLearning plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.0.3. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with custom-level access and above, to permanently delete arbitrary Academy lesson comments and their replies authored by any user, including administrators, across courses they do not instruct. This is exploitable by any user registered as an Academy instructor for at least one course, as they can supply their own course_id to pass the instructor check while targeting comments belonging to entirely different courses.","source_quote_or_pointer":"Security Advisory CVE-2026-104915","fact_id":"SEA-CVE-2026-104915-F1","document_citation":"Security Advisory CVE-2026-104915"},{"id":"SEA-CVE-2026-104915-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Academy LMS – AI Course Builder, Quizzes, Certificates & eLearning plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.0.3. This is due to the plugin not properly verifying that a user is authorized to perform an action.","source_quote_or_pointer":"Advisory description (CVE-2026-104915)","fact_id":"SEA-CVE-2026-104915-F2","document_citation":"Advisory description (CVE-2026-104915)"}],"source_stated_contributors":["The Academy LMS – AI Course Builder, Quizzes, Certificates & eLearning plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.0.3. This is due to the plugin not properly verifying that a user is authorized to perform an action."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.write_action","data.pii"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-104915","reporting_entity":"CVE-2026-104915","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-104915-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-104915-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-104915"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-104899","title":"The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.8.187 via the 'design_type' parameter parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary .php files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where .php file types can be uploaded and included. The required nonce is trivially obtainable by any anonymous visitor, as the geodir_basic_nonce value is localized to every public frontend page via the geodir_params script object, meaning no authentication, user interaction, or specific site content is required to exploit this vulnerability.","display_title":"Software component issue could allow unintended commands to run","display_summary":"The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.8.187 via the 'designtype' parameter…","display_reference":"CVE-2026-104899","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104899","source_title":"The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.8.187 via the 'design_type' parameter parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary .php files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where .php file types can be uploaded and included. The required nonce is trivially obtainable by any anonymous visitor, as the geodir_basic_nonce value is localized to every public frontend page via the geodir_params script object, meaning no authentication, user interaction, or specific site content is required to exploit this vulnerability.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:07.027Z","source_hash":"content-fingerprint:fnv1a-47604090","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-104899-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.8.187 via the 'design_type' parameter parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary .php files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where .php file types can be uploaded and included. The required nonce is trivially obtainable by any anonymous visitor, as the geodir_basic_nonce value is localized to every public frontend page via the geodir_params script object, meaning no authentication, user interaction, or specific site content is required to exploit this vulnerability.","source_quote_or_pointer":"Security Advisory CVE-2026-104899","fact_id":"SEA-CVE-2026-104899-F1","document_citation":"Security Advisory CVE-2026-104899"},{"id":"SEA-CVE-2026-104899-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.8.187 via the 'designtype' parameter parameter.","source_quote_or_pointer":"Advisory description (CVE-2026-104899)","fact_id":"SEA-CVE-2026-104899-F2","document_citation":"Advisory description (CVE-2026-104899)"}],"source_stated_contributors":["The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.8.187 via the 'designtype' parameter parameter."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.public_publication","data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-104899","reporting_entity":"CVE-2026-104899","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-104899-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-104899-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-104899"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-104898","title":"The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 28.4 via the 'id, wp_user_id' parameter due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with subscriber-level access and above, to overwrite the WordPress account binding of any Bookly staff record, including those owned by administrators, effectively hijacking a higher-privileged staff member's account association and escalating privileges. Exploitation requires the attacking user to be linked to at least one Bookly staff record, which occurs by default whenever an admin enables the bookly_gen_allow_staff_edit_profile option (active on fresh installs) and links a WordPress user to a staff entry.","display_title":"Security issue reported in Software component","display_summary":"The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 28.4 via the 'id, wpuserid' parameter due to…","display_reference":"CVE-2026-104898","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104898","source_title":"The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 28.4 via the 'id, wp_user_id' parameter due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with subscriber-level access and above, to overwrite the WordPress account binding of any Bookly staff record, including those owned by administrators, effectively hijacking a higher-privileged staff member's account association and escalating privileges. Exploitation requires the attacking user to be linked to at least one Bookly staff record, which occurs by default whenever an admin enables the bookly_gen_allow_staff_edit_profile option (active on fresh installs) and links a WordPress user to a staff entry.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:07.027Z","source_hash":"content-fingerprint:fnv1a-aec9367","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-104898-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 28.4 via the 'id, wp_user_id' parameter due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with subscriber-level access and above, to overwrite the WordPress account binding of any Bookly staff record, including those owned by administrators, effectively hijacking a higher-privileged staff member's account association and escalating privileges. Exploitation requires the attacking user to be linked to at least one Bookly staff record, which occurs by default whenever an admin enables the bookly_gen_allow_staff_edit_profile option (active on fresh installs) and links a WordPress user to a staff entry.","source_quote_or_pointer":"Security Advisory CVE-2026-104898","fact_id":"SEA-CVE-2026-104898-F1","document_citation":"Security Advisory CVE-2026-104898"},{"id":"SEA-CVE-2026-104898-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 28.4 via the 'id, wpuserid' parameter due to missing validation on a user controlled key.","source_quote_or_pointer":"Advisory description (CVE-2026-104898)","fact_id":"SEA-CVE-2026-104898-F2","document_citation":"Advisory description (CVE-2026-104898)"}],"source_stated_contributors":["The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 28.4 via the 'id, wpuserid' parameter due to missing validation on a user controlled key."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-104898","reporting_entity":"CVE-2026-104898","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-104898-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-104898-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-104898"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-104803","title":"The WPCOM Member plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.7.27 via the uuid and code parameters of the social-login callback handler registered on the init hook. The vulnerability exists because the login function's social-login flow performs no nonce validation, no OAuth state verification, and no per-visitor namespace isolation in the session store, allowing an unauthenticated attacker to issue a crafted GET request that writes an attacker-named, attacker-valued entry into the global session namespace (bypassing the per-visitor prefix by prepending an underscore), then issue a second GET request triggering weapp_new_user() to read that forged entry and resolve the attacker-supplied openid value to a bound WordPress account before wp_set_auth_cookie() establishes a fully authenticated session. This makes it possible for unauthenticated attackers to log in as any WordPress user — including administrators — whose bound social provider identifier (openid/unionid) is known or discoverable. Successful exploitation requires that the target site has at least one social provider configured (which activates the vulnerable handler) and that the attacker knows or can enumerate the victim account's bound openid or unionid.","display_title":"Software component issue could allow unauthorized access","display_summary":"The WPCOM Member plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.7.27 via the uuid and code parameters of the social-login callback handler registered on the init hook.","display_reference":"CVE-2026-104803","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104803","source_title":"The WPCOM Member plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.7.27 via the uuid and code parameters of the social-login callback handler registered on the init hook. The vulnerability exists because the login function's social-login flow performs no nonce validation, no OAuth state verification, and no per-visitor namespace isolation in the session store, allowing an unauthenticated attacker to issue a crafted GET request that writes an attacker-named, attacker-valued entry into the global session namespace (bypassing the per-visitor prefix by prepending an underscore), then issue a second GET request triggering weapp_new_user() to read that forged entry and resolve the attacker-supplied openid value to a bound WordPress account before wp_set_auth_cookie() establishes a fully authenticated session. This makes it possible for unauthenticated attackers to log in as any WordPress user — including administrators — whose bound social provider identifier (openid/unionid) is known or discoverable. Successful exploitation requires that the target site has at least one social provider configured (which activates the vulnerable handler) and that the attacker knows or can enumerate the victim account's bound openid or unionid.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:07.028Z","source_hash":"content-fingerprint:fnv1a-c739d1ef","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-104803-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The WPCOM Member plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.7.27 via the uuid and code parameters of the social-login callback handler registered on the init hook. The vulnerability exists because the login function's social-login flow performs no nonce validation, no OAuth state verification, and no per-visitor namespace isolation in the session store, allowing an unauthenticated attacker to issue a crafted GET request that writes an attacker-named, attacker-valued entry into the global session namespace (bypassing the per-visitor prefix by prepending an underscore), then issue a second GET request triggering weapp_new_user() to read that forged entry and resolve the attacker-supplied openid value to a bound WordPress account before wp_set_auth_cookie() establishes a fully authenticated session. This makes it possible for unauthenticated attackers to log in as any WordPress user — including administrators — whose bound social provider identifier (openid/unionid) is known or discoverable. Successful exploitation requires that the target site has at least one social provider configured (which activates the vulnerable handler) and that the attacker knows or can enumerate the victim account's bound openid or unionid.","source_quote_or_pointer":"Security Advisory CVE-2026-104803","fact_id":"SEA-CVE-2026-104803-F1","document_citation":"Security Advisory CVE-2026-104803"},{"id":"SEA-CVE-2026-104803-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The WPCOM Member plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.7.27 via the uuid and code parameters of the social-login callback handler registered on the init hook.","source_quote_or_pointer":"Advisory description (CVE-2026-104803)","fact_id":"SEA-CVE-2026-104803-F2","document_citation":"Advisory description (CVE-2026-104803)"}],"source_stated_contributors":["The WPCOM Member plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.7.27 via the uuid and code parameters of the social-login callback handler registered on the init hook."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.write_action","data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-104803","reporting_entity":"CVE-2026-104803","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-104803-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-104803-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-104803"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-104801","title":"The PPOM – Product Addons & Custom Fields for WooCommerce plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the rename_files function in all versions up to, and including, 34.0.10 This makes it possible for unauthenticated attackers to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php). The relocated file is moved byte-identically into the publicly accessible wp-content/uploads/ppom_files/confirmed/ directory, meaning the attack also results in arbitrary file read for any web-readable file on the server.","display_title":"Software component issue could allow unintended commands to run","display_summary":"The PPOM – Product Addons & Custom Fields for WooCommerce plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the renamefiles function in all versions up to, and…","display_reference":"CVE-2026-104801","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104801","source_title":"The PPOM – Product Addons & Custom Fields for WooCommerce plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the rename_files function in all versions up to, and including, 34.0.10 This makes it possible for unauthenticated attackers to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php). The relocated file is moved byte-identically into the publicly accessible wp-content/uploads/ppom_files/confirmed/ directory, meaning the attack also results in arbitrary file read for any web-readable file on the server.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:07.029Z","source_hash":"content-fingerprint:fnv1a-3f537347","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-104801-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The PPOM – Product Addons & Custom Fields for WooCommerce plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the rename_files function in all versions up to, and including, 34.0.10 This makes it possible for unauthenticated attackers to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php). The relocated file is moved byte-identically into the publicly accessible wp-content/uploads/ppom_files/confirmed/ directory, meaning the attack also results in arbitrary file read for any web-readable file on the server.","source_quote_or_pointer":"Security Advisory CVE-2026-104801","fact_id":"SEA-CVE-2026-104801-F1","document_citation":"Security Advisory CVE-2026-104801"},{"id":"SEA-CVE-2026-104801-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The PPOM – Product Addons & Custom Fields for WooCommerce plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the renamefiles function in all versions up to, and including, 34.0.10 This makes it possible for unauthenticated attackers to delete arbitrary files on…","source_quote_or_pointer":"Advisory description (CVE-2026-104801)","fact_id":"SEA-CVE-2026-104801-F2","document_citation":"Advisory description (CVE-2026-104801)"}],"source_stated_contributors":["The PPOM – Product Addons & Custom Fields for WooCommerce plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the renamefiles function in all versions up to, and including, 34.0.10 This makes it possible for unauthenticated attackers to delete arbitrary files on…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.write_action"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-104801","reporting_entity":"CVE-2026-104801","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-104801-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-104801-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-104801"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-104797","title":"The Advanced Form Integration — Connect Forms to 300+ Apps plugin for WordPress is vulnerable to Authentication Bypass via Unverified Password Change in all versions up to, and including, 2.9.0 The adfoin_ultimatememberac_send_data function, which powers the Ultimate Member \"Update Profile Field\" action, resolves the target WordPress user from an attacker-supplied email address and passes an attacker-controlled field key and value directly to UM()->user()->update_profile() in the account context — which explicitly bypasses Ultimate Member's banned-key validation — without performing any submitter identity verification, ownership check, capability check, current-password reauthentication, or restriction on sensitive keys such as user_pass. This makes it possible for unauthenticated attackers to change the password of any WordPress user account, including Administrator accounts, by submitting a public Contact Form 7 form with a target email and user_pass as the field key, enabling full site takeover. Exploitation requires an administrator to have pre-configured a Contact Form 7 integration that maps the target email, field key, and value from public form inputs to the Ultimate Member Update Profile Field action — the exact workflow the plugin's own UI advertises for this action type.","display_title":"Software component issue could allow unauthorized access","display_summary":"The Advanced Form Integration — Connect Forms to 300+ Apps plugin for WordPress is vulnerable to Authentication Bypass via Unverified Password Change in all versions up to, and including, 2.9.0 The…","display_reference":"CVE-2026-104797","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104797","source_title":"The Advanced Form Integration — Connect Forms to 300+ Apps plugin for WordPress is vulnerable to Authentication Bypass via Unverified Password Change in all versions up to, and including, 2.9.0 The adfoin_ultimatememberac_send_data function, which powers the Ultimate Member \"Update Profile Field\" action, resolves the target WordPress user from an attacker-supplied email address and passes an attacker-controlled field key and value directly to UM()->user()->update_profile() in the account context — which explicitly bypasses Ultimate Member's banned-key validation — without performing any submitter identity verification, ownership check, capability check, current-password reauthentication, or restriction on sensitive keys such as user_pass. This makes it possible for unauthenticated attackers to change the password of any WordPress user account, including Administrator accounts, by submitting a public Contact Form 7 form with a target email and user_pass as the field key, enabling full site takeover. Exploitation requires an administrator to have pre-configured a Contact Form 7 integration that maps the target email, field key, and value from public form inputs to the Ultimate Member Update Profile Field action — the exact workflow the plugin's own UI advertises for this action type.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:07.030Z","source_hash":"content-fingerprint:fnv1a-fc670a11","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-104797-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Advanced Form Integration — Connect Forms to 300+ Apps plugin for WordPress is vulnerable to Authentication Bypass via Unverified Password Change in all versions up to, and including, 2.9.0 The adfoin_ultimatememberac_send_data function, which powers the Ultimate Member \"Update Profile Field\" action, resolves the target WordPress user from an attacker-supplied email address and passes an attacker-controlled field key and value directly to UM()->user()->update_profile() in the account context — which explicitly bypasses Ultimate Member's banned-key validation — without performing any submitter identity verification, ownership check, capability check, current-password reauthentication, or restriction on sensitive keys such as user_pass. This makes it possible for unauthenticated attackers to change the password of any WordPress user account, including Administrator accounts, by submitting a public Contact Form 7 form with a target email and user_pass as the field key, enabling full site takeover. Exploitation requires an administrator to have pre-configured a Contact Form 7 integration that maps the target email, field key, and value from public form inputs to the Ultimate Member Update Profile Field action — the exact workflow the plugin's own UI advertises for this action type.","source_quote_or_pointer":"Security Advisory CVE-2026-104797","fact_id":"SEA-CVE-2026-104797-F1","document_citation":"Security Advisory CVE-2026-104797"},{"id":"SEA-CVE-2026-104797-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Advanced Form Integration — Connect Forms to 300+ Apps plugin for WordPress is vulnerable to Authentication Bypass via Unverified Password Change in all versions up to, and including, 2.9.0 The adfoinultimatememberacsenddata function, which powers the Ultimate Member \"Update Profile Field\" action, resolves the…","source_quote_or_pointer":"Advisory description (CVE-2026-104797)","fact_id":"SEA-CVE-2026-104797-F2","document_citation":"Advisory description (CVE-2026-104797)"}],"source_stated_contributors":["The Advanced Form Integration — Connect Forms to 300+ Apps plugin for WordPress is vulnerable to Authentication Bypass via Unverified Password Change in all versions up to, and including, 2.9.0 The adfoinultimatememberacsenddata function, which powers the Ultimate Member \"Update Profile Field\" action, resolves the…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.write_action","auth.public_publication","data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-104797","reporting_entity":"CVE-2026-104797","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-104797-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-104797-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-104797"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-104766","title":"The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 5.7.3. This is due to the OsSettingsController::update() handler iterating over attacker-supplied settings parameters without an allowlist of permitted setting names or values, and OsSettingsHelper::prepare_value() performing no role allowlist validation before persisting the default_wp_role_for_customer setting — a restriction that exists only in the UI dropdown and is never enforced server-side. This makes it possible for authenticated attackers holding a LatePoint role with the settings__edit capability (such as an agent or custom role) to overwrite the default WordPress role for new customers with administrator, causing any subsequently self-registered LatePoint customer account to be created with full WordPress administrator privileges. Exploitation requires that a WordPress administrator has granted the settings__edit capability to a LatePoint agent or custom role, and that a new customer account is registered through LatePoint after the malicious setting change is persisted.","display_title":"Software component issue could grant elevated privileges","display_summary":"The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 5.7.3.","display_reference":"CVE-2026-104766","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104766","source_title":"The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 5.7.3. This is due to the OsSettingsController::update() handler iterating over attacker-supplied settings parameters without an allowlist of permitted setting names or values, and OsSettingsHelper::prepare_value() performing no role allowlist validation before persisting the default_wp_role_for_customer setting — a restriction that exists only in the UI dropdown and is never enforced server-side. This makes it possible for authenticated attackers holding a LatePoint role with the settings__edit capability (such as an agent or custom role) to overwrite the default WordPress role for new customers with administrator, causing any subsequently self-registered LatePoint customer account to be created with full WordPress administrator privileges. Exploitation requires that a WordPress administrator has granted the settings__edit capability to a LatePoint agent or custom role, and that a new customer account is registered through LatePoint after the malicious setting change is persisted.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:07.031Z","source_hash":"content-fingerprint:fnv1a-75007f1","affected_system":{"organization":"The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 5.7.3. This is due to the OsSettingsController project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-104766-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 5.7.3. This is due to the OsSettingsController::update() handler iterating over attacker-supplied settings parameters without an allowlist of permitted setting names or values, and OsSettingsHelper::prepare_value() performing no role allowlist validation before persisting the default_wp_role_for_customer setting — a restriction that exists only in the UI dropdown and is never enforced server-side. This makes it possible for authenticated attackers holding a LatePoint role with the settings__edit capability (such as an agent or custom role) to overwrite the default WordPress role for new customers with administrator, causing any subsequently self-registered LatePoint customer account to be created with full WordPress administrator privileges. Exploitation requires that a WordPress administrator has granted the settings__edit capability to a LatePoint agent or custom role, and that a new customer account is registered through LatePoint after the malicious setting change is persisted.","source_quote_or_pointer":"Security Advisory CVE-2026-104766","fact_id":"SEA-CVE-2026-104766-F1","document_citation":"Security Advisory CVE-2026-104766"},{"id":"SEA-CVE-2026-104766-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 5.7.3.","source_quote_or_pointer":"Advisory description (CVE-2026-104766)","fact_id":"SEA-CVE-2026-104766-F2","document_citation":"Advisory description (CVE-2026-104766)"}],"source_stated_contributors":["The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 5.7.3."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.write_action","data.pii","arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-002","SEA-FM-010"],"consequences":["Elevated privileges","Boundary bypass"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-104766","reporting_entity":"CVE-2026-104766","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-104766-SG1","label":"Enforce privilege boundaries in code","description":"Require explicit, server-verified authorization for privileged operations and isolate components with separate identities.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-104766-SG1","label":"Enforce privilege boundaries in code","description":"Require explicit, server-verified authorization for privileged operations and isolate components with separate identities.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A low-privilege actor reached a high-privilege capability. Enforce approval and privilege boundaries in deterministic code, not by convention.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-104766"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-104763","title":"The Post Export Import with Media plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.17.1 via the 'file_path' parameter parameter. This makes it possible for authenticated attackers, with administrator-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information. This requires the attacker to upload a crafted ZIP archive containing a media_metadata.json file with path traversal sequences in the file_path field while specifying an allowed file extension for the destination filename to bypass the extension guard introduced in version 1.13.2.","display_title":"Software component issue could expose restricted files","display_summary":"The Post Export Import with Media plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.17.1 via the 'filepath' parameter parameter.","display_reference":"CVE-2026-104763","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104763","source_title":"The Post Export Import with Media plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.17.1 via the 'file_path' parameter parameter. This makes it possible for authenticated attackers, with administrator-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information. This requires the attacker to upload a crafted ZIP archive containing a media_metadata.json file with path traversal sequences in the file_path field while specifying an allowed file extension for the destination filename to bypass the extension guard introduced in version 1.13.2.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:07.031Z","source_hash":"content-fingerprint:fnv1a-be00966c","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-104763-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Post Export Import with Media plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.17.1 via the 'file_path' parameter parameter. This makes it possible for authenticated attackers, with administrator-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information. This requires the attacker to upload a crafted ZIP archive containing a media_metadata.json file with path traversal sequences in the file_path field while specifying an allowed file extension for the destination filename to bypass the extension guard introduced in version 1.13.2.","source_quote_or_pointer":"Security Advisory CVE-2026-104763","fact_id":"SEA-CVE-2026-104763-F1","document_citation":"Security Advisory CVE-2026-104763"},{"id":"SEA-CVE-2026-104763-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Post Export Import with Media plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.17.1 via the 'filepath' parameter parameter.","source_quote_or_pointer":"Advisory description (CVE-2026-104763)","fact_id":"SEA-CVE-2026-104763-F2","document_citation":"Advisory description (CVE-2026-104763)"}],"source_stated_contributors":["The Post Export Import with Media plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.17.1 via the 'filepath' parameter parameter."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.uploaded_files"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Restricted file exposure","File overwrite"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-104763","reporting_entity":"CVE-2026-104763","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-104763-SG1","label":"Confine file access to a fixed root","description":"Resolve paths to canonical form and reject anything outside the intended directory before opening files.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-104763-SG1","label":"Confine file access to a fixed root","description":"Resolve paths to canonical form and reject anything outside the intended directory before opening files.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"File paths supplied by a caller escaped the intended directory. Canonicalise paths and confine file access to a fixed root.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-104763"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-104759","title":"The WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN) plugin for WordPress is vulnerable to Authentication Bypass via OIDC Nonce Replay in all versions up to, and including, 44.1 This is due to Id_Token_Service_Deprecated::process_openidconnect_token() using the incompatible WordPress core wp_verify_nonce() function to validate a nonce produced by Nonce_Service::create_nonce() — a 64-character hex value that wp_verify_nonce() can never successfully verify — causing the nonce check to silently fail without terminating authentication, so execution continues into authenticate_oidc_user() with the attacker-supplied id_token. This makes it possible for unauthenticated attackers who have obtained a previously-issued, valid id_token for a target account to replay that token and authenticate as any WordPress user, including administrators, resulting in full site takeover. This vulnerability is only exploitable when the use_id_token_parser_v2 plugin option is enabled, as this is the configuration that routes token processing through the deprecated parser containing the broken nonce check.","display_title":"Software component issue could allow unauthorized access","display_summary":"The WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN) plugin for WordPress is vulnerable to Authentication Bypass via OIDC Nonce Replay in all versions up to, and including, 44.1 This is due to…","display_reference":"CVE-2026-104759","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104759","source_title":"The WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN) plugin for WordPress is vulnerable to Authentication Bypass via OIDC Nonce Replay in all versions up to, and including, 44.1 This is due to Id_Token_Service_Deprecated::process_openidconnect_token() using the incompatible WordPress core wp_verify_nonce() function to validate a nonce produced by Nonce_Service::create_nonce() — a 64-character hex value that wp_verify_nonce() can never successfully verify — causing the nonce check to silently fail without terminating authentication, so execution continues into authenticate_oidc_user() with the attacker-supplied id_token. This makes it possible for unauthenticated attackers who have obtained a previously-issued, valid id_token for a target account to replay that token and authenticate as any WordPress user, including administrators, resulting in full site takeover. This vulnerability is only exploitable when the use_id_token_parser_v2 plugin option is enabled, as this is the configuration that routes token processing through the deprecated parser containing the broken nonce check.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:07.032Z","source_hash":"content-fingerprint:fnv1a-999bf589","affected_system":{"organization":"The WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN) plugin for WordPress is vulnerable to Authentication Bypass via OIDC Nonce Replay in all versions up to, and including, 44.1 This is due to IdTokenServiceDeprecated project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-104759-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN) plugin for WordPress is vulnerable to Authentication Bypass via OIDC Nonce Replay in all versions up to, and including, 44.1 This is due to Id_Token_Service_Deprecated::process_openidconnect_token() using the incompatible WordPress core wp_verify_nonce() function to validate a nonce produced by Nonce_Service::create_nonce() — a 64-character hex value that wp_verify_nonce() can never successfully verify — causing the nonce check to silently fail without terminating authentication, so execution continues into authenticate_oidc_user() with the attacker-supplied id_token. This makes it possible for unauthenticated attackers who have obtained a previously-issued, valid id_token for a target account to replay that token and authenticate as any WordPress user, including administrators, resulting in full site takeover. This vulnerability is only exploitable when the use_id_token_parser_v2 plugin option is enabled, as this is the configuration that routes token processing through the deprecated parser containing the broken nonce check.","source_quote_or_pointer":"Security Advisory CVE-2026-104759","fact_id":"SEA-CVE-2026-104759-F1","document_citation":"Security Advisory CVE-2026-104759"},{"id":"SEA-CVE-2026-104759-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN) plugin for WordPress is vulnerable to Authentication Bypass via OIDC Nonce Replay in all versions up to, and including, 44.1 This is due to IdTokenServiceDeprecated::processopenidconnecttoken() using the incompatible WordPress core…","source_quote_or_pointer":"Advisory description (CVE-2026-104759)","fact_id":"SEA-CVE-2026-104759-F2","document_citation":"Advisory description (CVE-2026-104759)"}],"source_stated_contributors":["The WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN) plugin for WordPress is vulnerable to Authentication Bypass via OIDC Nonce Replay in all versions up to, and including, 44.1 This is due to IdTokenServiceDeprecated::processopenidconnecttoken() using the incompatible WordPress core…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","data.pii"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-104759","reporting_entity":"CVE-2026-104759","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-104759-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-104759-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-104759"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-104742","title":"The AI Puffer – Chat. Create. Automate. (formerly AI Power) plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.4.89. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with subscriber-level access and above, to modify global site-wide semantic search settings, including vector provider, embedding provider, embedding model, target ID, number of results, and no-results text stored in aipkit_options, that are otherwise restricted to administrators. Exploitation requires that an administrator has previously granted the Knowledge Base ('sources') module to the attacker's role via the Role Manager, as this access is not available to lower-privileged users by default.","display_title":"Software component issue could allow unauthorized access","display_summary":"The AI Puffer – Chat. Create. Automate. (formerly AI Power) plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.4.89.","display_reference":"CVE-2026-104742","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104742","source_title":"The AI Puffer – Chat. Create. Automate. (formerly AI Power) plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.4.89. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with subscriber-level access and above, to modify global site-wide semantic search settings, including vector provider, embedding provider, embedding model, target ID, number of results, and no-results text stored in aipkit_options, that are otherwise restricted to administrators. Exploitation requires that an administrator has previously granted the Knowledge Base ('sources') module to the attacker's role via the Role Manager, as this access is not available to lower-privileged users by default.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:07.033Z","source_hash":"content-fingerprint:fnv1a-23a18209","affected_system":{"organization":"Software component project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-104742-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The AI Puffer – Chat. Create. Automate. (formerly AI Power) plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.4.89. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with subscriber-level access and above, to modify global site-wide semantic search settings, including vector provider, embedding provider, embedding model, target ID, number of results, and no-results text stored in aipkit_options, that are otherwise restricted to administrators. Exploitation requires that an administrator has previously granted the Knowledge Base ('sources') module to the attacker's role via the Role Manager, as this access is not available to lower-privileged users by default.","source_quote_or_pointer":"Security Advisory CVE-2026-104742","fact_id":"SEA-CVE-2026-104742-F1","document_citation":"Security Advisory CVE-2026-104742"},{"id":"SEA-CVE-2026-104742-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The AI Puffer – Chat. Create. Automate. (formerly AI Power) plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.4.89. This is due to the plugin not properly verifying that a user is authorized to perform an action.","source_quote_or_pointer":"Advisory description (CVE-2026-104742)","fact_id":"SEA-CVE-2026-104742-F2","document_citation":"Advisory description (CVE-2026-104742)"}],"source_stated_contributors":["The AI Puffer – Chat. Create. Automate. (formerly AI Power) plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.4.89. This is due to the plugin not properly verifying that a user is authorized to perform an action."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.write_action","data.pii","arch.content_ingestion_rag"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-104742","reporting_entity":"CVE-2026-104742","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-104742-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-104742-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-104742"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-104741","title":"The AI Puffer – Chat. Create. Automate. (formerly AI Power) plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.4.89. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with subscriber-level access and above, to modify global plugin indexing and vector-search configuration options (aipkit_training_general_settings and aipkit_indexing_field_settings), including chunking parameters, file upload visibility, and per-CPT field indexing settings, affecting all users of the plugin. This is only exploitable in configurations where an administrator has granted 'sources' module access to a lower-privileged role via the plugin's Role Manager.","display_title":"Software component issue could allow unauthorized access","display_summary":"The AI Puffer – Chat. Create. Automate. (formerly AI Power) plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.4.89.","display_reference":"CVE-2026-104741","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104741","source_title":"The AI Puffer – Chat. Create. Automate. (formerly AI Power) plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.4.89. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with subscriber-level access and above, to modify global plugin indexing and vector-search configuration options (aipkit_training_general_settings and aipkit_indexing_field_settings), including chunking parameters, file upload visibility, and per-CPT field indexing settings, affecting all users of the plugin. This is only exploitable in configurations where an administrator has granted 'sources' module access to a lower-privileged role via the plugin's Role Manager.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:07.033Z","source_hash":"content-fingerprint:fnv1a-14ad52c","affected_system":{"organization":"Software component project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-104741-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The AI Puffer – Chat. Create. Automate. (formerly AI Power) plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.4.89. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with subscriber-level access and above, to modify global plugin indexing and vector-search configuration options (aipkit_training_general_settings and aipkit_indexing_field_settings), including chunking parameters, file upload visibility, and per-CPT field indexing settings, affecting all users of the plugin. This is only exploitable in configurations where an administrator has granted 'sources' module access to a lower-privileged role via the plugin's Role Manager.","source_quote_or_pointer":"Security Advisory CVE-2026-104741","fact_id":"SEA-CVE-2026-104741-F1","document_citation":"Security Advisory CVE-2026-104741"},{"id":"SEA-CVE-2026-104741-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The AI Puffer – Chat. Create. Automate. (formerly AI Power) plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.4.89. This is due to the plugin not properly verifying that a user is authorized to perform an action.","source_quote_or_pointer":"Advisory description (CVE-2026-104741)","fact_id":"SEA-CVE-2026-104741-F2","document_citation":"Advisory description (CVE-2026-104741)"}],"source_stated_contributors":["The AI Puffer – Chat. Create. Automate. (formerly AI Power) plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.4.89. This is due to the plugin not properly verifying that a user is authorized to perform an action."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.write_action","data.pii","data.uploaded_files","arch.content_ingestion_rag"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-104741","reporting_entity":"CVE-2026-104741","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-104741-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-104741-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-104741"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-104732","title":"The Advanced IP Blocker plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 8.13.13 The vulnerability exists because handle_login_action() performs no server-side check — via transient, session marker, or equivalent — that a requester completed step-1 password authentication before processing a step-2 TOTP submission for the POSTed user_id; compounding this, an error branch in the function unconditionally mints a fresh advaipbl-2fa-interim-{user_id} nonce and delivers it in a Location header to any unauthenticated caller, after which display_2fa_login_form_step_2() renders a valid advaipbl-2fa-verify-{user_id} nonce in HTML — both nonces computed against a fixed uid=0 empty-session context and therefore fully reusable by the attacker across subsequent requests. This makes it possible for unauthenticated attackers to bypass authentication entirely for any 2FA-enabled account, including administrators, by brute-forcing an unthrottled 6-digit TOTP code (no attempt counter, no account lockout, and no wp_login_failed firing) and receiving a fully authenticated session cookie via wp_set_auth_cookie without ever supplying the account password, resulting in complete site takeover. Exploitation requires only a known user_id for an account that has the plugin's 2FA feature enabled.","display_title":"Software component issue could allow unauthorized access","display_summary":"The Advanced IP Blocker plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 8.13.13 The vulnerability exists because handleloginaction() performs no server-side check — via…","display_reference":"CVE-2026-104732","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104732","source_title":"The Advanced IP Blocker plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 8.13.13 The vulnerability exists because handle_login_action() performs no server-side check — via transient, session marker, or equivalent — that a requester completed step-1 password authentication before processing a step-2 TOTP submission for the POSTed user_id; compounding this, an error branch in the function unconditionally mints a fresh advaipbl-2fa-interim-{user_id} nonce and delivers it in a Location header to any unauthenticated caller, after which display_2fa_login_form_step_2() renders a valid advaipbl-2fa-verify-{user_id} nonce in HTML — both nonces computed against a fixed uid=0 empty-session context and therefore fully reusable by the attacker across subsequent requests. This makes it possible for unauthenticated attackers to bypass authentication entirely for any 2FA-enabled account, including administrators, by brute-forcing an unthrottled 6-digit TOTP code (no attempt counter, no account lockout, and no wp_login_failed firing) and receiving a fully authenticated session cookie via wp_set_auth_cookie without ever supplying the account password, resulting in complete site takeover. Exploitation requires only a known user_id for an account that has the plugin's 2FA feature enabled.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:07.034Z","source_hash":"content-fingerprint:fnv1a-44dd94be","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-104732-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Advanced IP Blocker plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 8.13.13 The vulnerability exists because handle_login_action() performs no server-side check — via transient, session marker, or equivalent — that a requester completed step-1 password authentication before processing a step-2 TOTP submission for the POSTed user_id; compounding this, an error branch in the function unconditionally mints a fresh advaipbl-2fa-interim-{user_id} nonce and delivers it in a Location header to any unauthenticated caller, after which display_2fa_login_form_step_2() renders a valid advaipbl-2fa-verify-{user_id} nonce in HTML — both nonces computed against a fixed uid=0 empty-session context and therefore fully reusable by the attacker across subsequent requests. This makes it possible for unauthenticated attackers to bypass authentication entirely for any 2FA-enabled account, including administrators, by brute-forcing an unthrottled 6-digit TOTP code (no attempt counter, no account lockout, and no wp_login_failed firing) and receiving a fully authenticated session cookie via wp_set_auth_cookie without ever supplying the account password, resulting in complete site takeover. Exploitation requires only a known user_id for an account that has the plugin's 2FA feature enabled.","source_quote_or_pointer":"Security Advisory CVE-2026-104732","fact_id":"SEA-CVE-2026-104732-F1","document_citation":"Security Advisory CVE-2026-104732"},{"id":"SEA-CVE-2026-104732-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Advanced IP Blocker plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 8.13.13 The vulnerability exists because handleloginaction() performs no server-side check — via transient, session marker, or equivalent — that a requester completed step-1 password authentication…","source_quote_or_pointer":"Advisory description (CVE-2026-104732)","fact_id":"SEA-CVE-2026-104732-F2","document_citation":"Advisory description (CVE-2026-104732)"}],"source_stated_contributors":["The Advanced IP Blocker plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 8.13.13 The vulnerability exists because handleloginaction() performs no server-side check — via transient, session marker, or equivalent — that a requester completed step-1 password authentication…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.credentials_secrets"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-104732","reporting_entity":"CVE-2026-104732","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-104732-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-104732-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-104732"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-104728","title":"The AutomatorWP – No-Code Workflow Automation, Integration & Webhooks Plugin, now with AI plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 5.8.4. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with subscriber-level access and above, to enumerate all Fluent Forms records, including form IDs and titles, from the fluentform_forms database table.","display_title":"Software component issue could allow unauthorized access","display_summary":"The AutomatorWP – No-Code Workflow Automation, Integration & Webhooks Plugin, now with AI plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 5.8.4.","display_reference":"CVE-2026-104728","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104728","source_title":"The AutomatorWP – No-Code Workflow Automation, Integration & Webhooks Plugin, now with AI plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 5.8.4. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with subscriber-level access and above, to enumerate all Fluent Forms records, including form IDs and titles, from the fluentform_forms database table.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:07.035Z","source_hash":"content-fingerprint:fnv1a-d1288813","affected_system":{"organization":"Software component project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-104728-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The AutomatorWP – No-Code Workflow Automation, Integration & Webhooks Plugin, now with AI plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 5.8.4. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with subscriber-level access and above, to enumerate all Fluent Forms records, including form IDs and titles, from the fluentform_forms database table.","source_quote_or_pointer":"Security Advisory CVE-2026-104728","fact_id":"SEA-CVE-2026-104728-F1","document_citation":"Security Advisory CVE-2026-104728"},{"id":"SEA-CVE-2026-104728-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The AutomatorWP – No-Code Workflow Automation, Integration & Webhooks Plugin, now with AI plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 5.8.4. This is due to the plugin not properly verifying that a user is authorized to perform an action.","source_quote_or_pointer":"Advisory description (CVE-2026-104728)","fact_id":"SEA-CVE-2026-104728-F2","document_citation":"Advisory description (CVE-2026-104728)"}],"source_stated_contributors":["The AutomatorWP – No-Code Workflow Automation, Integration & Webhooks Plugin, now with AI plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 5.8.4. This is due to the plugin not properly verifying that a user is authorized to perform an action."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.pii","arch.event_driven"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-104728","reporting_entity":"CVE-2026-104728","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-104728-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-104728-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-104728"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-104725","title":"The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.9 This is due to a missing ownership and capability check on the user parameter within the process_edit() function, which allows any authenticated user with the edit_contacts capability to reassign a contact record's linked WordPress user ID to any arbitrary account without requiring the edit_users or promote_users capabilities. This makes it possible for authenticated attackers, with sales_rep-level access and above, to escalate their privileges to administrator by linking a contact to an administrator's WordPress user ID, then creating a note containing the {auto_login_link} replacement tag to trigger generation of a valid auto-login permissions-key URL for the administrator-linked contact, and finally visiting that URL to authenticate as the targeted administrator. The auto-login URL is stored in the note content and is readable back by the attacker via the view_notes and add_notes capabilities that the sales_rep role holds by default.","display_title":"Software component issue could grant elevated privileges","display_summary":"The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.9 This is due to a missing ownership and capability check on…","display_reference":"CVE-2026-104725","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104725","source_title":"The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.9 This is due to a missing ownership and capability check on the user parameter within the process_edit() function, which allows any authenticated user with the edit_contacts capability to reassign a contact record's linked WordPress user ID to any arbitrary account without requiring the edit_users or promote_users capabilities. This makes it possible for authenticated attackers, with sales_rep-level access and above, to escalate their privileges to administrator by linking a contact to an administrator's WordPress user ID, then creating a note containing the {auto_login_link} replacement tag to trigger generation of a valid auto-login permissions-key URL for the administrator-linked contact, and finally visiting that URL to authenticate as the targeted administrator. The auto-login URL is stored in the note content and is readable back by the attacker via the view_notes and add_notes capabilities that the sales_rep role holds by default.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:07.036Z","source_hash":"content-fingerprint:fnv1a-a8b3c02a","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-104725-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.9 This is due to a missing ownership and capability check on the user parameter within the process_edit() function, which allows any authenticated user with the edit_contacts capability to reassign a contact record's linked WordPress user ID to any arbitrary account without requiring the edit_users or promote_users capabilities. This makes it possible for authenticated attackers, with sales_rep-level access and above, to escalate their privileges to administrator by linking a contact to an administrator's WordPress user ID, then creating a note containing the {auto_login_link} replacement tag to trigger generation of a valid auto-login permissions-key URL for the administrator-linked contact, and finally visiting that URL to authenticate as the targeted administrator. The auto-login URL is stored in the note content and is readable back by the attacker via the view_notes and add_notes capabilities that the sales_rep role holds by default.","source_quote_or_pointer":"Security Advisory CVE-2026-104725","fact_id":"SEA-CVE-2026-104725-F1","document_citation":"Security Advisory CVE-2026-104725"},{"id":"SEA-CVE-2026-104725-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.9 This is due to a missing ownership and capability check on the user parameter within the processedit() function, which allows any authenticated user with the…","source_quote_or_pointer":"Advisory description (CVE-2026-104725)","fact_id":"SEA-CVE-2026-104725-F2","document_citation":"Advisory description (CVE-2026-104725)"}],"source_stated_contributors":["The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.9 This is due to a missing ownership and capability check on the user parameter within the processedit() function, which allows any authenticated user with the…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Elevated privileges","Boundary bypass"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-104725","reporting_entity":"CVE-2026-104725","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-104725-SG1","label":"Enforce privilege boundaries in code","description":"Require explicit, server-verified authorization for privileged operations and isolate components with separate identities.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-104725-SG1","label":"Enforce privilege boundaries in code","description":"Require explicit, server-verified authorization for privileged operations and isolate components with separate identities.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A low-privilege actor reached a high-privilege capability. Enforce approval and privilege boundaries in deterministic code, not by convention.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-104725"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-104724","title":"The FireBox – WooCommerce Popup Builder, Exit Intent Popup, Email Optin & Cart Abandonment plugin for WordPress is vulnerable to generic SQL Injection via FireBox Form Display Condition in all versions up to, and including, 3.1.13 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with author-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. On fresh installations of version 3.1.10 and later, exploitation requires administrator-level access; however, on sites upgraded from a version prior to 3.1.10, the preserveCampaignRoleAccess() migration grants the edit_fireboxes capability to any role that previously held edit_posts, reducing the minimum required privilege to Author-level.","display_title":"Software component issue could expose or alter stored data","display_summary":"The FireBox – WooCommerce Popup Builder, Exit Intent Popup, Email Optin & Cart Abandonment plugin for WordPress is vulnerable to generic SQL Injection via FireBox Form Display Condition in all versions up to, and…","display_reference":"CVE-2026-104724","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104724","source_title":"The FireBox – WooCommerce Popup Builder, Exit Intent Popup, Email Optin & Cart Abandonment plugin for WordPress is vulnerable to generic SQL Injection via FireBox Form Display Condition in all versions up to, and including, 3.1.13 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with author-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. On fresh installations of version 3.1.10 and later, exploitation requires administrator-level access; however, on sites upgraded from a version prior to 3.1.10, the preserveCampaignRoleAccess() migration grants the edit_fireboxes capability to any role that previously held edit_posts, reducing the minimum required privilege to Author-level.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:07.037Z","source_hash":"content-fingerprint:fnv1a-cc67df1","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-104724-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The FireBox – WooCommerce Popup Builder, Exit Intent Popup, Email Optin & Cart Abandonment plugin for WordPress is vulnerable to generic SQL Injection via FireBox Form Display Condition in all versions up to, and including, 3.1.13 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with author-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. On fresh installations of version 3.1.10 and later, exploitation requires administrator-level access; however, on sites upgraded from a version prior to 3.1.10, the preserveCampaignRoleAccess() migration grants the edit_fireboxes capability to any role that previously held edit_posts, reducing the minimum required privilege to Author-level.","source_quote_or_pointer":"Security Advisory CVE-2026-104724","fact_id":"SEA-CVE-2026-104724-F1","document_citation":"Security Advisory CVE-2026-104724"},{"id":"SEA-CVE-2026-104724-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The FireBox – WooCommerce Popup Builder, Exit Intent Popup, Email Optin & Cart Abandonment plugin for WordPress is vulnerable to generic SQL Injection via FireBox Form Display Condition in all versions up to, and including, 3.1.13 due to insufficient escaping on the user supplied parameter and lack of sufficient…","source_quote_or_pointer":"Advisory description (CVE-2026-104724)","fact_id":"SEA-CVE-2026-104724-F2","document_citation":"Advisory description (CVE-2026-104724)"}],"source_stated_contributors":["The FireBox – WooCommerce Popup Builder, Exit Intent Popup, Email Optin & Cart Abandonment plugin for WordPress is vulnerable to generic SQL Injection via FireBox Form Display Condition in all versions up to, and including, 3.1.13 due to insufficient escaping on the user supplied parameter and lack of sufficient…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.write_action","data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-104724","reporting_entity":"CVE-2026-104724","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-104724-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-104724-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-104724"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-104723","title":"The LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 10.2.1 via deserialization of untrusted input . This makes it possible for authenticated attackers, with custom-level access and above, to inject a PHP Object. No known POP chain is present in the vulnerable software, which means this vulnerability has no impact unless another plugin or theme containing a POP chain is installed on the site. If a POP chain is present via an additional plugin or theme installed on the target system, it may allow the attacker to perform actions like delete arbitrary files, retrieve sensitive data, or execute code depending on the POP chain present. This vulnerability is only exploitable during lesson creation when a temporary lesson ID triggers the custom metadata path, and requires the attacker to hold a role with the edit_course capability, such as Instructor, Instructor's Assistant, LMS Manager, or Administrator.","display_title":"Software component issue could make the application process unsafe input","display_summary":"The LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 10.2.1 via deserialization of untrusted input .","display_reference":"CVE-2026-104723","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104723","source_title":"The LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 10.2.1 via deserialization of untrusted input . This makes it possible for authenticated attackers, with custom-level access and above, to inject a PHP Object. No known POP chain is present in the vulnerable software, which means this vulnerability has no impact unless another plugin or theme containing a POP chain is installed on the site. If a POP chain is present via an additional plugin or theme installed on the target system, it may allow the attacker to perform actions like delete arbitrary files, retrieve sensitive data, or execute code depending on the POP chain present. This vulnerability is only exploitable during lesson creation when a temporary lesson ID triggers the custom metadata path, and requires the attacker to hold a role with the edit_course capability, such as Instructor, Instructor's Assistant, LMS Manager, or Administrator.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:07.037Z","source_hash":"content-fingerprint:fnv1a-427d2846","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-104723-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 10.2.1 via deserialization of untrusted input . This makes it possible for authenticated attackers, with custom-level access and above, to inject a PHP Object. No known POP chain is present in the vulnerable software, which means this vulnerability has no impact unless another plugin or theme containing a POP chain is installed on the site. If a POP chain is present via an additional plugin or theme installed on the target system, it may allow the attacker to perform actions like delete arbitrary files, retrieve sensitive data, or execute code depending on the POP chain present. This vulnerability is only exploitable during lesson creation when a temporary lesson ID triggers the custom metadata path, and requires the attacker to hold a role with the edit_course capability, such as Instructor, Instructor's Assistant, LMS Manager, or Administrator.","source_quote_or_pointer":"Security Advisory CVE-2026-104723","fact_id":"SEA-CVE-2026-104723-F1","document_citation":"Security Advisory CVE-2026-104723"},{"id":"SEA-CVE-2026-104723-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 10.2.1 via deserialization of untrusted input .","source_quote_or_pointer":"Advisory description (CVE-2026-104723)","fact_id":"SEA-CVE-2026-104723-F2","document_citation":"Advisory description (CVE-2026-104723)"}],"source_stated_contributors":["The LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 10.2.1 via deserialization of untrusted input ."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.code_execution","auth.destructive_action","auth.privileged_action","auth.write_action"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unsafe object construction","Possible code execution"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-104723","reporting_entity":"CVE-2026-104723","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-104723-SG1","label":"Use schema-validated data formats","description":"Parse untrusted input into plain data with an explicit schema; never deserialize into arbitrary types.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-104723-SG1","label":"Use schema-validated data formats","description":"Parse untrusted input into plain data with an explicit schema; never deserialize into arbitrary types.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"The application rebuilt objects from untrusted data. Use data-only formats with schema validation instead of native object deserialization.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-104723"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-104722","title":"The Listdom: AI-powered Business Directory with Classifieds Ads Listings plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the LSD_Menus_IX_CSV::import function in all versions up to, and including, 6.1.2 This makes it possible for authenticated attackers, with administrator-level access and above, to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php).","display_title":"The Listdom issue could allow unintended commands to run","display_summary":"The Listdom: AI-powered Business Directory with Classifieds Ads Listings plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the LSDMenusIXCSV::import function in all…","display_reference":"CVE-2026-104722","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104722","source_title":"The Listdom: AI-powered Business Directory with Classifieds Ads Listings plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the LSD_Menus_IX_CSV::import function in all versions up to, and including, 6.1.2 This makes it possible for authenticated attackers, with administrator-level access and above, to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php).","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:07.038Z","source_hash":"content-fingerprint:fnv1a-5e826ef7","affected_system":{"organization":"The Listdom project","product":"The Listdom","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-104722-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Listdom: AI-powered Business Directory with Classifieds Ads Listings plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the LSD_Menus_IX_CSV::import function in all versions up to, and including, 6.1.2 This makes it possible for authenticated attackers, with administrator-level access and above, to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php).","source_quote_or_pointer":"Security Advisory CVE-2026-104722","fact_id":"SEA-CVE-2026-104722-F1","document_citation":"Security Advisory CVE-2026-104722"},{"id":"SEA-CVE-2026-104722-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Listdom: AI-powered Business Directory with Classifieds Ads Listings plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the LSDMenusIXCSV::import function in all versions up to, and including, 6.1.2 This makes it possible for authenticated attackers, with…","source_quote_or_pointer":"Advisory description (CVE-2026-104722)","fact_id":"SEA-CVE-2026-104722-F2","document_citation":"Advisory description (CVE-2026-104722)"}],"source_stated_contributors":["The Listdom: AI-powered Business Directory with Classifieds Ads Listings plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the LSDMenusIXCSV::import function in all versions up to, and including, 6.1.2 This makes it possible for authenticated attackers, with…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.privileged_action","auth.write_action"],"failure_mechanisms":["SEA-FM-004","SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-104722","reporting_entity":"CVE-2026-104722","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-104722-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-104722-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-104722"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-104023","title":"The Smart Popup by Supsystic plugin for WordPress is vulnerable to generic SQL Injection via the 'sidx' parameter in all versions up to, and including, 1.13.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.","display_title":"Software component issue could expose or alter stored data","display_summary":"The Smart Popup by Supsystic plugin for WordPress is vulnerable to generic SQL Injection via the 'sidx' parameter in all versions up to, and including, 1.13.2 due to insufficient escaping on the user supplied parameter…","display_reference":"CVE-2026-104023","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104023","source_title":"The Smart Popup by Supsystic plugin for WordPress is vulnerable to generic SQL Injection via the 'sidx' parameter in all versions up to, and including, 1.13.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:07.038Z","source_hash":"content-fingerprint:fnv1a-22506741","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-104023-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Smart Popup by Supsystic plugin for WordPress is vulnerable to generic SQL Injection via the 'sidx' parameter in all versions up to, and including, 1.13.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.","source_quote_or_pointer":"Security Advisory CVE-2026-104023","fact_id":"SEA-CVE-2026-104023-F1","document_citation":"Security Advisory CVE-2026-104023"},{"id":"SEA-CVE-2026-104023-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Smart Popup by Supsystic plugin for WordPress is vulnerable to generic SQL Injection via the 'sidx' parameter in all versions up to, and including, 1.13.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.","source_quote_or_pointer":"Advisory description (CVE-2026-104023)","fact_id":"SEA-CVE-2026-104023-F2","document_citation":"Advisory description (CVE-2026-104023)"}],"source_stated_contributors":["The Smart Popup by Supsystic plugin for WordPress is vulnerable to generic SQL Injection via the 'sidx' parameter in all versions up to, and including, 1.13.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.write_action","data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-104023","reporting_entity":"CVE-2026-104023","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-104023-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-104023-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-104023"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-104022","title":"The Academy LMS – AI Course Builder, Quizzes, Certificates & eLearning plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.0.3. This is due to the add_child() function calling add_role('academy_student') on any existing account resolved from the attacker-supplied email parameter before Store::link() validates the guardian-ward relationship, and failing to roll back that role write when Store::link() returns a WP_Error. This makes it possible for authenticated attackers with the academy_guardian role or higher to elevate any existing WordPress account — including their own — to the academy_student role, gaining edit_posts (Contributor-equivalent) capabilities and, when the student file-upload setting is enabled, upload_files (Author-equivalent) capabilities not granted to the guardian role. When a guardian supplies their own email address, email_exists() resolves to their own user ID, causing Store::link() to reject the self-link, but because the add_role() call has already executed and is never reversed, the academy_student role grant on their own account persists permanently.","display_title":"Software component issue could grant elevated privileges","display_summary":"The Academy LMS – AI Course Builder, Quizzes, Certificates & eLearning plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.0.3.","display_reference":"CVE-2026-104022","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104022","source_title":"The Academy LMS – AI Course Builder, Quizzes, Certificates & eLearning plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.0.3. This is due to the add_child() function calling add_role('academy_student') on any existing account resolved from the attacker-supplied email parameter before Store::link() validates the guardian-ward relationship, and failing to roll back that role write when Store::link() returns a WP_Error. This makes it possible for authenticated attackers with the academy_guardian role or higher to elevate any existing WordPress account — including their own — to the academy_student role, gaining edit_posts (Contributor-equivalent) capabilities and, when the student file-upload setting is enabled, upload_files (Author-equivalent) capabilities not granted to the guardian role. When a guardian supplies their own email address, email_exists() resolves to their own user ID, causing Store::link() to reject the self-link, but because the add_role() call has already executed and is never reversed, the academy_student role grant on their own account persists permanently.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:07.039Z","source_hash":"content-fingerprint:fnv1a-71adaa6","affected_system":{"organization":"The Academy LMS – AI Course Builder, Quizzes, Certificates & eLearning plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.0.3. This is due to the addchild() function calling addrole('academystudent') on any existing account resolved from the attacker-supplied email parameter before Store project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-104022-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Academy LMS – AI Course Builder, Quizzes, Certificates & eLearning plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.0.3. This is due to the add_child() function calling add_role('academy_student') on any existing account resolved from the attacker-supplied email parameter before Store::link() validates the guardian-ward relationship, and failing to roll back that role write when Store::link() returns a WP_Error. This makes it possible for authenticated attackers with the academy_guardian role or higher to elevate any existing WordPress account — including their own — to the academy_student role, gaining edit_posts (Contributor-equivalent) capabilities and, when the student file-upload setting is enabled, upload_files (Author-equivalent) capabilities not granted to the guardian role. When a guardian supplies their own email address, email_exists() resolves to their own user ID, causing Store::link() to reject the self-link, but because the add_role() call has already executed and is never reversed, the academy_student role grant on their own account persists permanently.","source_quote_or_pointer":"Security Advisory CVE-2026-104022","fact_id":"SEA-CVE-2026-104022-F1","document_citation":"Security Advisory CVE-2026-104022"},{"id":"SEA-CVE-2026-104022-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Academy LMS – AI Course Builder, Quizzes, Certificates & eLearning plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.0.3.","source_quote_or_pointer":"Advisory description (CVE-2026-104022)","fact_id":"SEA-CVE-2026-104022-F2","document_citation":"Advisory description (CVE-2026-104022)"}],"source_stated_contributors":["The Academy LMS – AI Course Builder, Quizzes, Certificates & eLearning plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.0.3."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.pii","data.uploaded_files","arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Elevated privileges","Boundary bypass"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-104022","reporting_entity":"CVE-2026-104022","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-104022-SG1","label":"Enforce privilege boundaries in code","description":"Require explicit, server-verified authorization for privileged operations and isolate components with separate identities.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-104022-SG1","label":"Enforce privilege boundaries in code","description":"Require explicit, server-verified authorization for privileged operations and isolate components with separate identities.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A low-privilege actor reached a high-privilege capability. Enforce approval and privilege boundaries in deterministic code, not by convention.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-104022"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-104021","title":"The Fastcache by Host.it plugin for WordPress is vulnerable to Code Injection in all versions up to, and including, 1.7.4 via the fastcache_settings[cache_cookie_exclude][] parameter. This is due to the plugin registering the cache_cookie_exclude setting via register_setting() without a sanitize_callback, while buildSiteHtaccessRules() applies only trim() to each cookie value before interpolating it directly into an Apache RewriteCond line — a normalization that strips surrounding whitespace but leaves embedded newlines intact, allowing an attacker to break out of the capture group and append arbitrary directives. This makes it possible for authenticated attackers, with administrator-level access and above, to inject arbitrary Apache directives into the site's .htaccess file via file_put_contents(), enabling server-level configuration changes such as setting php_value auto_prepend_file to execute attacker-controlled PHP code on every request.","display_title":"Security issue reported in Software component","display_summary":"The Fastcache by Host.it plugin for WordPress is vulnerable to Code Injection in all versions up to, and including, 1.7.4 via the fastcachesettings[cachecookieexclude][] parameter.","display_reference":"CVE-2026-104021","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104021","source_title":"The Fastcache by Host.it plugin for WordPress is vulnerable to Code Injection in all versions up to, and including, 1.7.4 via the fastcache_settings[cache_cookie_exclude][] parameter. This is due to the plugin registering the cache_cookie_exclude setting via register_setting() without a sanitize_callback, while buildSiteHtaccessRules() applies only trim() to each cookie value before interpolating it directly into an Apache RewriteCond line — a normalization that strips surrounding whitespace but leaves embedded newlines intact, allowing an attacker to break out of the capture group and append arbitrary directives. This makes it possible for authenticated attackers, with administrator-level access and above, to inject arbitrary Apache directives into the site's .htaccess file via file_put_contents(), enabling server-level configuration changes such as setting php_value auto_prepend_file to execute attacker-controlled PHP code on every request.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:07.040Z","source_hash":"content-fingerprint:fnv1a-e94e21db","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-104021-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Fastcache by Host.it plugin for WordPress is vulnerable to Code Injection in all versions up to, and including, 1.7.4 via the fastcache_settings[cache_cookie_exclude][] parameter. This is due to the plugin registering the cache_cookie_exclude setting via register_setting() without a sanitize_callback, while buildSiteHtaccessRules() applies only trim() to each cookie value before interpolating it directly into an Apache RewriteCond line — a normalization that strips surrounding whitespace but leaves embedded newlines intact, allowing an attacker to break out of the capture group and append arbitrary directives. This makes it possible for authenticated attackers, with administrator-level access and above, to inject arbitrary Apache directives into the site's .htaccess file via file_put_contents(), enabling server-level configuration changes such as setting php_value auto_prepend_file to execute attacker-controlled PHP code on every request.","source_quote_or_pointer":"Security Advisory CVE-2026-104021","fact_id":"SEA-CVE-2026-104021-F1","document_citation":"Security Advisory CVE-2026-104021"},{"id":"SEA-CVE-2026-104021-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Fastcache by Host.it plugin for WordPress is vulnerable to Code Injection in all versions up to, and including, 1.7.4 via the fastcachesettings[cachecookieexclude][] parameter.","source_quote_or_pointer":"Advisory description (CVE-2026-104021)","fact_id":"SEA-CVE-2026-104021-F2","document_citation":"Advisory description (CVE-2026-104021)"}],"source_stated_contributors":["The Fastcache by Host.it plugin for WordPress is vulnerable to Code Injection in all versions up to, and including, 1.7.4 via the fastcachesettings[cachecookieexclude][] parameter."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-104021","reporting_entity":"CVE-2026-104021","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-104021-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-104021-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-104021"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-103964","title":"The Download Manager plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.3.71 via the 'first_name' parameter. This makes it possible for authenticated attackers, with subscriber-level access and above, to extract the administrator's full Cookie header, including wordpress_logged_in_ session cookies, from the suspension email sent during the administrator's authenticated request, enabling full session hijack and account takeover. Exploitation requires an administrator to perform the Suspend action against the attacker's account, which causes the plugin to synchronously compile and send the suspension email inside the administrator's authenticated HTTP request — making the administrator's session cookies available to the template engine at send time.","display_title":"Software component issue could expose accounts or credentials","display_summary":"The Download Manager plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.3.71 via the 'firstname' parameter.","display_reference":"CVE-2026-103964","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103964","source_title":"The Download Manager plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.3.71 via the 'first_name' parameter. This makes it possible for authenticated attackers, with subscriber-level access and above, to extract the administrator's full Cookie header, including wordpress_logged_in_ session cookies, from the suspension email sent during the administrator's authenticated request, enabling full session hijack and account takeover. Exploitation requires an administrator to perform the Suspend action against the attacker's account, which causes the plugin to synchronously compile and send the suspension email inside the administrator's authenticated HTTP request — making the administrator's session cookies available to the template engine at send time.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:07.040Z","source_hash":"content-fingerprint:fnv1a-a7c673bc","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-103964-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Download Manager plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.3.71 via the 'first_name' parameter. This makes it possible for authenticated attackers, with subscriber-level access and above, to extract the administrator's full Cookie header, including wordpress_logged_in_ session cookies, from the suspension email sent during the administrator's authenticated request, enabling full session hijack and account takeover. Exploitation requires an administrator to perform the Suspend action against the attacker's account, which causes the plugin to synchronously compile and send the suspension email inside the administrator's authenticated HTTP request — making the administrator's session cookies available to the template engine at send time.","source_quote_or_pointer":"Security Advisory CVE-2026-103964","fact_id":"SEA-CVE-2026-103964-F1","document_citation":"Security Advisory CVE-2026-103964"},{"id":"SEA-CVE-2026-103964-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Download Manager plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.3.71 via the 'firstname' parameter.","source_quote_or_pointer":"Advisory description (CVE-2026-103964)","fact_id":"SEA-CVE-2026-103964-F2","document_citation":"Advisory description (CVE-2026-103964)"}],"source_stated_contributors":["The Download Manager plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.3.71 via the 'firstname' parameter."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-103964","reporting_entity":"CVE-2026-103964","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-103964-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-103964-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-103964"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-103889","title":"The 3D Product configurator for WooCommerce plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.16.2 via the 'xpv_image' parameter parameter. This is due to missing authentication and nonce checks on the wp_loaded handler combined with no sanitization of the xpv_image POST parameter before it is echoed unescaped into a Dompdf-rendered HTML template with PHP execution enabled. This makes it possible for unauthenticated attackers to execute code on the server. The only nonce and authentication check in the handler is entirely enclosed in a block comment with no replacement, making the endpoint reachable via a single unauthenticated POST to any URL on the site.","display_title":"Software component issue could allow unintended commands to run","display_summary":"The 3D Product configurator for WooCommerce plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.16.2 via the 'xpvimage' parameter parameter.","display_reference":"CVE-2026-103889","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103889","source_title":"The 3D Product configurator for WooCommerce plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.16.2 via the 'xpv_image' parameter parameter. This is due to missing authentication and nonce checks on the wp_loaded handler combined with no sanitization of the xpv_image POST parameter before it is echoed unescaped into a Dompdf-rendered HTML template with PHP execution enabled. This makes it possible for unauthenticated attackers to execute code on the server. The only nonce and authentication check in the handler is entirely enclosed in a block comment with no replacement, making the endpoint reachable via a single unauthenticated POST to any URL on the site.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:07.041Z","source_hash":"content-fingerprint:fnv1a-b1bf0ec4","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-103889-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The 3D Product configurator for WooCommerce plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.16.2 via the 'xpv_image' parameter parameter. This is due to missing authentication and nonce checks on the wp_loaded handler combined with no sanitization of the xpv_image POST parameter before it is echoed unescaped into a Dompdf-rendered HTML template with PHP execution enabled. This makes it possible for unauthenticated attackers to execute code on the server. The only nonce and authentication check in the handler is entirely enclosed in a block comment with no replacement, making the endpoint reachable via a single unauthenticated POST to any URL on the site.","source_quote_or_pointer":"Security Advisory CVE-2026-103889","fact_id":"SEA-CVE-2026-103889-F1","document_citation":"Security Advisory CVE-2026-103889"},{"id":"SEA-CVE-2026-103889-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The 3D Product configurator for WooCommerce plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.16.2 via the 'xpvimage' parameter parameter.","source_quote_or_pointer":"Advisory description (CVE-2026-103889)","fact_id":"SEA-CVE-2026-103889-F2","document_citation":"Advisory description (CVE-2026-103889)"}],"source_stated_contributors":["The 3D Product configurator for WooCommerce plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.16.2 via the 'xpvimage' parameter parameter."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.code_execution"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-103889","reporting_entity":"CVE-2026-103889","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-103889-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-103889-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-103889"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-103520","title":"The HivePress – Business Directory, Listings & Classified Ads Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'custom text attribute (user-defined field name)' parameter in all versions up to, and including, 1.7.31 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This is only exploitable when an administrator has configured a Text attribute whose display format places the %value% token inside an HTML attribute (e.g., title=\"%value%\"), which is a documented HivePress pattern.","display_title":"Software component issue could run attacker-controlled scripts in a browser","display_summary":"The HivePress – Business Directory, Listings & Classified Ads Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'custom text attribute (user-defined field name)' parameter in all versions…","display_reference":"CVE-2026-103520","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103520","source_title":"The HivePress – Business Directory, Listings & Classified Ads Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'custom text attribute (user-defined field name)' parameter in all versions up to, and including, 1.7.31 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This is only exploitable when an administrator has configured a Text attribute whose display format places the %value% token inside an HTML attribute (e.g., title=\"%value%\"), which is a documented HivePress pattern.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:07.042Z","source_hash":"content-fingerprint:fnv1a-6cc16584","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-103520-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The HivePress – Business Directory, Listings & Classified Ads Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'custom text attribute (user-defined field name)' parameter in all versions up to, and including, 1.7.31 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This is only exploitable when an administrator has configured a Text attribute whose display format places the %value% token inside an HTML attribute (e.g., title=\"%value%\"), which is a documented HivePress pattern.","source_quote_or_pointer":"Security Advisory CVE-2026-103520","fact_id":"SEA-CVE-2026-103520-F1","document_citation":"Security Advisory CVE-2026-103520"},{"id":"SEA-CVE-2026-103520-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The HivePress – Business Directory, Listings & Classified Ads Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'custom text attribute (user-defined field name)' parameter in all versions up to, and including, 1.7.31 due to insufficient input sanitization and output escaping.","source_quote_or_pointer":"Advisory description (CVE-2026-103520)","fact_id":"SEA-CVE-2026-103520-F2","document_citation":"Advisory description (CVE-2026-103520)"}],"source_stated_contributors":["The HivePress – Business Directory, Listings & Classified Ads Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'custom text attribute (user-defined field name)' parameter in all versions up to, and including, 1.7.31 due to insufficient input sanitization and output escaping."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-103520","reporting_entity":"CVE-2026-103520","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-103520-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-103520-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-103520"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-103365","title":"The Bookly – Online Scheduling and Appointment Booking System plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 28.4 via the classic booking form's Details step. The endpoint bookly_render_details is registered for both wp_ajax and wp_ajax_nopriv, the module overrides csrfTokenValid() to always return true, and Bookly\\Frontend\\Components\\Booking\\InfoText::getCodes() calls UserBookingData::getCustomer() to load the persisted Customer entity keyed solely by the attacker-supplied phone (or email) with no invocation of the plugin's own customerIdentityConfirmed() predicate. When a site owner has placed the supported {client_name}, {client_email}, {client_phone}, or {client_note} placeholders into the Details step's Appearance information text, the matched customer's stored name, email, phone and internal notes are substituted into the returned HTML. This makes it possible for unauthenticated attackers who know only a registered customer's primary phone (or email) to read that customer's stored personal data.","display_title":"Security issue reported in Software component","display_summary":"The Bookly – Online Scheduling and Appointment Booking System plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 28.4 via the classic booking form's Details step.","display_reference":"CVE-2026-103365","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103365","source_title":"The Bookly – Online Scheduling and Appointment Booking System plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 28.4 via the classic booking form's Details step. The endpoint bookly_render_details is registered for both wp_ajax and wp_ajax_nopriv, the module overrides csrfTokenValid() to always return true, and Bookly\\Frontend\\Components\\Booking\\InfoText::getCodes() calls UserBookingData::getCustomer() to load the persisted Customer entity keyed solely by the attacker-supplied phone (or email) with no invocation of the plugin's own customerIdentityConfirmed() predicate. When a site owner has placed the supported {client_name}, {client_email}, {client_phone}, or {client_note} placeholders into the Details step's Appearance information text, the matched customer's stored name, email, phone and internal notes are substituted into the returned HTML. This makes it possible for unauthenticated attackers who know only a registered customer's primary phone (or email) to read that customer's stored personal data.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:07.042Z","source_hash":"content-fingerprint:fnv1a-ccc42b6f","affected_system":{"organization":"The Bookly – Online Scheduling and Appointment Booking System plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 28.4 via the classic booking form's Details step. The endpoint booklyrenderdetails is registered for both wpajax and wpajaxnopriv, the module overrides csrfTokenValid() to always return true, and Bookly\\Frontend\\Components\\Booking\\InfoText project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-103365-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Bookly – Online Scheduling and Appointment Booking System plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 28.4 via the classic booking form's Details step. The endpoint bookly_render_details is registered for both wp_ajax and wp_ajax_nopriv, the module overrides csrfTokenValid() to always return true, and Bookly\\Frontend\\Components\\Booking\\InfoText::getCodes() calls UserBookingData::getCustomer() to load the persisted Customer entity keyed solely by the attacker-supplied phone (or email) with no invocation of the plugin's own customerIdentityConfirmed() predicate. When a site owner has placed the supported {client_name}, {client_email}, {client_phone}, or {client_note} placeholders into the Details step's Appearance information text, the matched customer's stored name, email, phone and internal notes are substituted into the returned HTML. This makes it possible for unauthenticated attackers who know only a registered customer's primary phone (or email) to read that customer's stored personal data.","source_quote_or_pointer":"Security Advisory CVE-2026-103365","fact_id":"SEA-CVE-2026-103365-F1","document_citation":"Security Advisory CVE-2026-103365"},{"id":"SEA-CVE-2026-103365-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Bookly – Online Scheduling and Appointment Booking System plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 28.4 via the classic booking form's Details step.","source_quote_or_pointer":"Advisory description (CVE-2026-103365)","fact_id":"SEA-CVE-2026-103365-F2","document_citation":"Advisory description (CVE-2026-103365)"}],"source_stated_contributors":["The Bookly – Online Scheduling and Appointment Booking System plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 28.4 via the classic booking form's Details step."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-103365","reporting_entity":"CVE-2026-103365","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-103365-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-103365-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-103365"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-102291","title":"The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 6.3.1 This is due to the plugin substituting a user's display_name into the composed page markup unfiltered and then running the whole result through do_shortcode() in TheFrontend::replace_content(). Because display_name is writable by any user on their own account through the core profile form, this makes it possible for authenticated attackers with Subscriber-level access and above to execute arbitrary shortcodes. Where the page is a users collection — an ordinary team or member-directory page — the shortcode runs in the request of every visitor, including unauthenticated ones. Requires a published page with a Kirki element whose dynamic content is bound to the display_name user field.","display_title":"Software component issue could allow unintended commands to run","display_summary":"The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 6.3.1 This is due to the plugin substituting a…","display_reference":"CVE-2026-102291","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-102291","source_title":"The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 6.3.1 This is due to the plugin substituting a user's display_name into the composed page markup unfiltered and then running the whole result through do_shortcode() in TheFrontend::replace_content(). Because display_name is writable by any user on their own account through the core profile form, this makes it possible for authenticated attackers with Subscriber-level access and above to execute arbitrary shortcodes. Where the page is a users collection — an ordinary team or member-directory page — the shortcode runs in the request of every visitor, including unauthenticated ones. Requires a published page with a Kirki element whose dynamic content is bound to the display_name user field.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:07.043Z","source_hash":"content-fingerprint:fnv1a-e67669c","affected_system":{"organization":"The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 6.3.1 This is due to the plugin substituting a user's displayname into the composed page markup unfiltered and then running the whole result through doshortcode() in TheFrontend project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-102291-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 6.3.1 This is due to the plugin substituting a user's display_name into the composed page markup unfiltered and then running the whole result through do_shortcode() in TheFrontend::replace_content(). Because display_name is writable by any user on their own account through the core profile form, this makes it possible for authenticated attackers with Subscriber-level access and above to execute arbitrary shortcodes. Where the page is a users collection — an ordinary team or member-directory page — the shortcode runs in the request of every visitor, including unauthenticated ones. Requires a published page with a Kirki element whose dynamic content is bound to the display_name user field.","source_quote_or_pointer":"Security Advisory CVE-2026-102291","fact_id":"SEA-CVE-2026-102291-F1","document_citation":"Security Advisory CVE-2026-102291"},{"id":"SEA-CVE-2026-102291-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 6.3.1 This is due to the plugin substituting a user's displayname into the composed page markup unfiltered and then running the whole result through…","source_quote_or_pointer":"Advisory description (CVE-2026-102291)","fact_id":"SEA-CVE-2026-102291-F2","document_citation":"Advisory description (CVE-2026-102291)"}],"source_stated_contributors":["The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 6.3.1 This is due to the plugin substituting a user's displayname into the composed page markup unfiltered and then running the whole result through…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-102291","reporting_entity":"CVE-2026-102291","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-102291-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-102291-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-102291"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108680","title":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to send template notifications by calling POST /sys/api/sendTemplateAnnouncement. Low-privileged attackers can supply forged sender, recipients, title, and template parameters to deliver messages appearing to come from admin or system accounts.","display_title":"Security issue reported in Software component","display_summary":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to send template notifications by calling POST /sys/api/sendTemplateAnnouncement.","display_reference":"CVE-2026-108680","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108680","source_title":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to send template notifications by calling POST /sys/api/sendTemplateAnnouncement. Low-privileged attackers can supply forged sender, recipients, title, and template parameters to deliver messages appearing to come from admin or system accounts.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T12:01:21.387Z","source_hash":"content-fingerprint:fnv1a-7db0f034","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108680-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to send template notifications by calling POST /sys/api/sendTemplateAnnouncement. Low-privileged attackers can supply forged sender, recipients, title, and template parameters to deliver messages appearing to come from admin or system accounts.","source_quote_or_pointer":"Security Advisory CVE-2026-108680","fact_id":"SEA-CVE-2026-108680-F1","document_citation":"Security Advisory CVE-2026-108680"},{"id":"SEA-CVE-2026-108680-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to send template notifications by calling POST /sys/api/sendTemplateAnnouncement.","source_quote_or_pointer":"Advisory description (CVE-2026-108680)","fact_id":"SEA-CVE-2026-108680-F2","document_citation":"Advisory description (CVE-2026-108680)"}],"source_stated_contributors":["JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to send template notifications by calling POST /sys/api/sendTemplateAnnouncement."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108680","reporting_entity":"CVE-2026-108680","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108680-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108680-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108680"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108679","title":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the sendBusAnnouncement handler of SystemApiController that allows any authenticated user to send announcements without the required permissions. Low-privileged attackers can POST crafted bodies to /sys/api/sendBusAnnouncement with forged sender, recipients, title and content to deliver spoofed admin or system messages for phishing.","display_title":"Security issue reported in Software component","display_summary":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the sendBusAnnouncement handler of SystemApiController that allows any authenticated user to send announcements without the required permissions.","display_reference":"CVE-2026-108679","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108679","source_title":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the sendBusAnnouncement handler of SystemApiController that allows any authenticated user to send announcements without the required permissions. Low-privileged attackers can POST crafted bodies to /sys/api/sendBusAnnouncement with forged sender, recipients, title and content to deliver spoofed admin or system messages for phishing.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T12:01:21.387Z","source_hash":"content-fingerprint:fnv1a-a7e858fa","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108679-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the sendBusAnnouncement handler of SystemApiController that allows any authenticated user to send announcements without the required permissions. Low-privileged attackers can POST crafted bodies to /sys/api/sendBusAnnouncement with forged sender, recipients, title and content to deliver spoofed admin or system messages for phishing.","source_quote_or_pointer":"Security Advisory CVE-2026-108679","fact_id":"SEA-CVE-2026-108679-F1","document_citation":"Security Advisory CVE-2026-108679"},{"id":"SEA-CVE-2026-108679-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the sendBusAnnouncement handler of SystemApiController that allows any authenticated user to send announcements without the required permissions.","source_quote_or_pointer":"Advisory description (CVE-2026-108679)","fact_id":"SEA-CVE-2026-108679-F2","document_citation":"Advisory description (CVE-2026-108679)"}],"source_stated_contributors":["JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the sendBusAnnouncement handler of SystemApiController that allows any authenticated user to send announcements without the required permissions."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108679","reporting_entity":"CVE-2026-108679","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108679-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108679-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108679"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108678","title":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the queryUserRoles handler of SystemApiController that lets authenticated users read any user's role codes. Low-privileged attackers can send GET requests to /sys/api/queryUserRoles with an arbitrary username to enumerate role assignments and identify administrator accounts.","display_title":"Security issue reported in Software component","display_summary":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the queryUserRoles handler of SystemApiController that lets authenticated users read any user's role codes.","display_reference":"CVE-2026-108678","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108678","source_title":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the queryUserRoles handler of SystemApiController that lets authenticated users read any user's role codes. Low-privileged attackers can send GET requests to /sys/api/queryUserRoles with an arbitrary username to enumerate role assignments and identify administrator accounts.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T12:01:21.387Z","source_hash":"content-fingerprint:fnv1a-3703a2d3","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108678-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the queryUserRoles handler of SystemApiController that lets authenticated users read any user's role codes. Low-privileged attackers can send GET requests to /sys/api/queryUserRoles with an arbitrary username to enumerate role assignments and identify administrator accounts.","source_quote_or_pointer":"Security Advisory CVE-2026-108678","fact_id":"SEA-CVE-2026-108678-F1","document_citation":"Security Advisory CVE-2026-108678"},{"id":"SEA-CVE-2026-108678-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the queryUserRoles handler of SystemApiController that lets authenticated users read any user's role codes.","source_quote_or_pointer":"Advisory description (CVE-2026-108678)","fact_id":"SEA-CVE-2026-108678-F2","document_citation":"Advisory description (CVE-2026-108678)"}],"source_stated_contributors":["JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the queryUserRoles handler of SystemApiController that lets authenticated users read any user's role codes."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108678","reporting_entity":"CVE-2026-108678","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108678-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108678-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108678"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108677","title":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in GET /sys/api/getUserByName that allows low-privileged authenticated users to retrieve any user's stored password value. Attackers can decrypt the AES-CBC protected response using the hard-coded key exposed by /sys/getEncryptedString to obtain administrators' password ciphertexts for offline guessing.","display_title":"Security issue reported in Software component","display_summary":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in GET /sys/api/getUserByName that allows low-privileged authenticated users to retrieve any user's stored password value.","display_reference":"CVE-2026-108677","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108677","source_title":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in GET /sys/api/getUserByName that allows low-privileged authenticated users to retrieve any user's stored password value. Attackers can decrypt the AES-CBC protected response using the hard-coded key exposed by /sys/getEncryptedString to obtain administrators' password ciphertexts for offline guessing.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T12:01:21.387Z","source_hash":"content-fingerprint:fnv1a-599092e","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108677-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in GET /sys/api/getUserByName that allows low-privileged authenticated users to retrieve any user's stored password value. Attackers can decrypt the AES-CBC protected response using the hard-coded key exposed by /sys/getEncryptedString to obtain administrators' password ciphertexts for offline guessing.","source_quote_or_pointer":"Security Advisory CVE-2026-108677","fact_id":"SEA-CVE-2026-108677-F1","document_citation":"Security Advisory CVE-2026-108677"},{"id":"SEA-CVE-2026-108677-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in GET /sys/api/getUserByName that allows low-privileged authenticated users to retrieve any user's stored password value.","source_quote_or_pointer":"Advisory description (CVE-2026-108677)","fact_id":"SEA-CVE-2026-108677-F2","document_citation":"Advisory description (CVE-2026-108677)"}],"source_stated_contributors":["JeecgBoot through 3.9.5 contains a missing authorization vulnerability in GET /sys/api/getUserByName that allows low-privileged authenticated users to retrieve any user's stored password value."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108677","reporting_entity":"CVE-2026-108677","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108677-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108677-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108677"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108671","title":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to read MCP server configurations because the queryById permission check is commented out. Attackers can obtain record ids from the unguarded /airag/app/queryById endpoint and retrieve MCP endpoint URLs, headers, and outbound authentication tokens.","display_title":"Security issue reported in Software component","display_summary":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to read MCP server configurations because the queryById permission check is commented out.","display_reference":"CVE-2026-108671","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108671","source_title":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to read MCP server configurations because the queryById permission check is commented out. Attackers can obtain record ids from the unguarded /airag/app/queryById endpoint and retrieve MCP endpoint URLs, headers, and outbound authentication tokens.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T12:01:21.387Z","source_hash":"content-fingerprint:fnv1a-1808bf02","affected_system":{"organization":"Software component project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108671-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to read MCP server configurations because the queryById permission check is commented out. Attackers can obtain record ids from the unguarded /airag/app/queryById endpoint and retrieve MCP endpoint URLs, headers, and outbound authentication tokens.","source_quote_or_pointer":"Security Advisory CVE-2026-108671","fact_id":"SEA-CVE-2026-108671-F1","document_citation":"Security Advisory CVE-2026-108671"},{"id":"SEA-CVE-2026-108671-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to read MCP server configurations because the queryById permission check is commented out.","source_quote_or_pointer":"Advisory description (CVE-2026-108671)","fact_id":"SEA-CVE-2026-108671-F2","document_citation":"Advisory description (CVE-2026-108671)"}],"source_stated_contributors":["JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to read MCP server configurations because the queryById permission check is commented out."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii","arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-003","SEA-FM-010"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108671","reporting_entity":"CVE-2026-108671","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108671-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108671-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108671"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108663","title":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController deleteApply handler that allows any authenticated user to reject tenant administrator applications. Low-privileged attackers can send PUT requests with chosen tenantId, packId and userId values to delete pending applications in any tenant and notify applicants of rejection.","display_title":"Security issue reported in Software component","display_summary":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController deleteApply handler that allows any authenticated user to reject tenant administrator applications.","display_reference":"CVE-2026-108663","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108663","source_title":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController deleteApply handler that allows any authenticated user to reject tenant administrator applications. Low-privileged attackers can send PUT requests with chosen tenantId, packId and userId values to delete pending applications in any tenant and notify applicants of rejection.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T12:01:21.387Z","source_hash":"content-fingerprint:fnv1a-dac3d529","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108663-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController deleteApply handler that allows any authenticated user to reject tenant administrator applications. Low-privileged attackers can send PUT requests with chosen tenantId, packId and userId values to delete pending applications in any tenant and notify applicants of rejection.","source_quote_or_pointer":"Security Advisory CVE-2026-108663","fact_id":"SEA-CVE-2026-108663-F1","document_citation":"Security Advisory CVE-2026-108663"},{"id":"SEA-CVE-2026-108663-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController deleteApply handler that allows any authenticated user to reject tenant administrator applications.","source_quote_or_pointer":"Advisory description (CVE-2026-108663)","fact_id":"SEA-CVE-2026-108663-F2","document_citation":"Advisory description (CVE-2026-108663)"}],"source_stated_contributors":["JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController deleteApply handler that allows any authenticated user to reject tenant administrator applications."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.privileged_action","auth.write_action","data.pii"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108663","reporting_entity":"CVE-2026-108663","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108663-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108663-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108663"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108662","title":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to remove users from tenant product packs via PUT /sys/tenant/deleteTenantPackUser. Attackers can supply arbitrary userId and packId values in the request body to remove any user from any tenant's product pack, revoking permissions such as tenant administrator access.","display_title":"Security issue reported in Software component","display_summary":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to remove users from tenant product packs via PUT /sys/tenant/deleteTenantPackUser.","display_reference":"CVE-2026-108662","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108662","source_title":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to remove users from tenant product packs via PUT /sys/tenant/deleteTenantPackUser. Attackers can supply arbitrary userId and packId values in the request body to remove any user from any tenant's product pack, revoking permissions such as tenant administrator access.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T12:01:21.387Z","source_hash":"content-fingerprint:fnv1a-295add66","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108662-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to remove users from tenant product packs via PUT /sys/tenant/deleteTenantPackUser. Attackers can supply arbitrary userId and packId values in the request body to remove any user from any tenant's product pack, revoking permissions such as tenant administrator access.","source_quote_or_pointer":"Security Advisory CVE-2026-108662","fact_id":"SEA-CVE-2026-108662-F1","document_citation":"Security Advisory CVE-2026-108662"},{"id":"SEA-CVE-2026-108662-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to remove users from tenant product packs via PUT /sys/tenant/deleteTenantPackUser.","source_quote_or_pointer":"Advisory description (CVE-2026-108662)","fact_id":"SEA-CVE-2026-108662-F2","document_citation":"Advisory description (CVE-2026-108662)"}],"source_stated_contributors":["JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to remove users from tenant product packs via PUT /sys/tenant/deleteTenantPackUser."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.privileged_action","data.pii"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108662","reporting_entity":"CVE-2026-108662","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108662-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108662-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108662"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108661","title":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to transfer tenant ownership via POST /sys/tenant/changeOwenUserTenant. Low-privileged attackers can supply userId and tenantId parameters to reassign any tenant's owner to a member, including themselves, and strip the legitimate owner.","display_title":"Security issue reported in Software component","display_summary":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to transfer tenant ownership via POST /sys/tenant/changeOwenUserTenant.","display_reference":"CVE-2026-108661","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108661","source_title":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to transfer tenant ownership via POST /sys/tenant/changeOwenUserTenant. Low-privileged attackers can supply userId and tenantId parameters to reassign any tenant's owner to a member, including themselves, and strip the legitimate owner.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T12:01:21.387Z","source_hash":"content-fingerprint:fnv1a-f09e73ab","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108661-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to transfer tenant ownership via POST /sys/tenant/changeOwenUserTenant. Low-privileged attackers can supply userId and tenantId parameters to reassign any tenant's owner to a member, including themselves, and strip the legitimate owner.","source_quote_or_pointer":"Security Advisory CVE-2026-108661","fact_id":"SEA-CVE-2026-108661-F1","document_citation":"Security Advisory CVE-2026-108661"},{"id":"SEA-CVE-2026-108661-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to transfer tenant ownership via POST /sys/tenant/changeOwenUserTenant.","source_quote_or_pointer":"Advisory description (CVE-2026-108661)","fact_id":"SEA-CVE-2026-108661-F2","document_citation":"Advisory description (CVE-2026-108661)"}],"source_stated_contributors":["JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to transfer tenant ownership via POST /sys/tenant/changeOwenUserTenant."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108661","reporting_entity":"CVE-2026-108661","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108661-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108661-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108661"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108660","title":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to modify tenant settings by calling PUT /sys/tenant/updateApplyStatus. Low-privileged attackers can supply any tenant id to overwrite its applyStatus field, enabling or disabling tenant administrator applications across tenants.","display_title":"Security issue reported in Software component","display_summary":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to modify tenant settings by calling PUT /sys/tenant/updateApplyStatus.","display_reference":"CVE-2026-108660","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108660","source_title":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to modify tenant settings by calling PUT /sys/tenant/updateApplyStatus. Low-privileged attackers can supply any tenant id to overwrite its applyStatus field, enabling or disabling tenant administrator applications across tenants.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T10:01:16.205Z","source_hash":"content-fingerprint:fnv1a-e2d0b192","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108660-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to modify tenant settings by calling PUT /sys/tenant/updateApplyStatus. Low-privileged attackers can supply any tenant id to overwrite its applyStatus field, enabling or disabling tenant administrator applications across tenants.","source_quote_or_pointer":"Security Advisory CVE-2026-108660","fact_id":"SEA-CVE-2026-108660-F1","document_citation":"Security Advisory CVE-2026-108660"},{"id":"SEA-CVE-2026-108660-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to modify tenant settings by calling PUT /sys/tenant/updateApplyStatus.","source_quote_or_pointer":"Advisory description (CVE-2026-108660)","fact_id":"SEA-CVE-2026-108660-F2","document_citation":"Advisory description (CVE-2026-108660)"}],"source_stated_contributors":["JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to modify tenant settings by calling PUT /sys/tenant/updateApplyStatus."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.write_action","data.pii","data.cross_tenant_data"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108660","reporting_entity":"CVE-2026-108660","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108660-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108660-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108660"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108659","title":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController listPackByTenantUserId handler that allows any authenticated user to query tenant product packs. Low-privileged attackers can supply arbitrary tenantId and userId parameters to enumerate any tenant's product pack configuration and reveal which users are tenant administrators.","display_title":"Security issue reported in Software component","display_summary":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController listPackByTenantUserId handler that allows any authenticated user to query tenant product packs.","display_reference":"CVE-2026-108659","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108659","source_title":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController listPackByTenantUserId handler that allows any authenticated user to query tenant product packs. Low-privileged attackers can supply arbitrary tenantId and userId parameters to enumerate any tenant's product pack configuration and reveal which users are tenant administrators.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T10:01:16.205Z","source_hash":"content-fingerprint:fnv1a-da2529ee","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108659-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController listPackByTenantUserId handler that allows any authenticated user to query tenant product packs. Low-privileged attackers can supply arbitrary tenantId and userId parameters to enumerate any tenant's product pack configuration and reveal which users are tenant administrators.","source_quote_or_pointer":"Security Advisory CVE-2026-108659","fact_id":"SEA-CVE-2026-108659-F1","document_citation":"Security Advisory CVE-2026-108659"},{"id":"SEA-CVE-2026-108659-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController listPackByTenantUserId handler that allows any authenticated user to query tenant product packs.","source_quote_or_pointer":"Advisory description (CVE-2026-108659)","fact_id":"SEA-CVE-2026-108659-F2","document_citation":"Advisory description (CVE-2026-108659)"}],"source_stated_contributors":["JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController listPackByTenantUserId handler that allows any authenticated user to query tenant product packs."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108659","reporting_entity":"CVE-2026-108659","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108659-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108659-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108659"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108658","title":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController queryTenantAuthInfo handler that allows any authenticated user to read other tenants' records. Low-privileged attackers can iterate small integer tenant ids to retrieve full sys_tenant records, including house numbers used as tenant join codes and company profile fields.","display_title":"Security issue reported in Software component","display_summary":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController queryTenantAuthInfo handler that allows any authenticated user to read other tenants' records.","display_reference":"CVE-2026-108658","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108658","source_title":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController queryTenantAuthInfo handler that allows any authenticated user to read other tenants' records. Low-privileged attackers can iterate small integer tenant ids to retrieve full sys_tenant records, including house numbers used as tenant join codes and company profile fields.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T10:01:16.205Z","source_hash":"content-fingerprint:fnv1a-14ccff2f","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108658-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController queryTenantAuthInfo handler that allows any authenticated user to read other tenants' records. Low-privileged attackers can iterate small integer tenant ids to retrieve full sys_tenant records, including house numbers used as tenant join codes and company profile fields.","source_quote_or_pointer":"Security Advisory CVE-2026-108658","fact_id":"SEA-CVE-2026-108658-F1","document_citation":"Security Advisory CVE-2026-108658"},{"id":"SEA-CVE-2026-108658-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController queryTenantAuthInfo handler that allows any authenticated user to read other tenants' records.","source_quote_or_pointer":"Advisory description (CVE-2026-108658)","fact_id":"SEA-CVE-2026-108658-F2","document_citation":"Advisory description (CVE-2026-108658)"}],"source_stated_contributors":["JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController queryTenantAuthInfo handler that allows any authenticated user to read other tenants' records."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108658","reporting_entity":"CVE-2026-108658","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108658-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108658-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108658"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108657","title":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController passApply handler that allows any authenticated user to approve tenant administrator applications. Attackers can file a pending application via doApplyTenantPackUser and approve it through PUT /sys/tenant/passApply to gain tenant administrator pack permissions in any tenant.","display_title":"Security issue reported in Software component","display_summary":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController passApply handler that allows any authenticated user to approve tenant administrator applications.","display_reference":"CVE-2026-108657","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108657","source_title":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController passApply handler that allows any authenticated user to approve tenant administrator applications. Attackers can file a pending application via doApplyTenantPackUser and approve it through PUT /sys/tenant/passApply to gain tenant administrator pack permissions in any tenant.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T10:01:16.205Z","source_hash":"content-fingerprint:fnv1a-ebaf958e","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108657-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController passApply handler that allows any authenticated user to approve tenant administrator applications. Attackers can file a pending application via doApplyTenantPackUser and approve it through PUT /sys/tenant/passApply to gain tenant administrator pack permissions in any tenant.","source_quote_or_pointer":"Security Advisory CVE-2026-108657","fact_id":"SEA-CVE-2026-108657-F1","document_citation":"Security Advisory CVE-2026-108657"},{"id":"SEA-CVE-2026-108657-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController passApply handler that allows any authenticated user to approve tenant administrator applications.","source_quote_or_pointer":"Advisory description (CVE-2026-108657)","fact_id":"SEA-CVE-2026-108657-F2","document_citation":"Advisory description (CVE-2026-108657)"}],"source_stated_contributors":["JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController passApply handler that allows any authenticated user to approve tenant administrator applications."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108657","reporting_entity":"CVE-2026-108657","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108657-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108657-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108657"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108656","title":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController GET /sys/tenant/getTenantPackApplyUsers endpoint that allows any authenticated user to read tenant administrator applications. Low-privileged attackers can iterate the tenantId parameter to retrieve pending applicants' usernames, real names, phone numbers and departments for any tenant.","display_title":"Security issue reported in Software component","display_summary":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController GET /sys/tenant/getTenantPackApplyUsers endpoint that allows any authenticated user to read tenant administrator…","display_reference":"CVE-2026-108656","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108656","source_title":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController GET /sys/tenant/getTenantPackApplyUsers endpoint that allows any authenticated user to read tenant administrator applications. Low-privileged attackers can iterate the tenantId parameter to retrieve pending applicants' usernames, real names, phone numbers and departments for any tenant.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T10:01:16.205Z","source_hash":"content-fingerprint:fnv1a-c06c1ab9","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108656-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController GET /sys/tenant/getTenantPackApplyUsers endpoint that allows any authenticated user to read tenant administrator applications. Low-privileged attackers can iterate the tenantId parameter to retrieve pending applicants' usernames, real names, phone numbers and departments for any tenant.","source_quote_or_pointer":"Security Advisory CVE-2026-108656","fact_id":"SEA-CVE-2026-108656-F1","document_citation":"Security Advisory CVE-2026-108656"},{"id":"SEA-CVE-2026-108656-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController GET /sys/tenant/getTenantPackApplyUsers endpoint that allows any authenticated user to read tenant administrator applications.","source_quote_or_pointer":"Advisory description (CVE-2026-108656)","fact_id":"SEA-CVE-2026-108656-F2","document_citation":"Advisory description (CVE-2026-108656)"}],"source_stated_contributors":["JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController GET /sys/tenant/getTenantPackApplyUsers endpoint that allows any authenticated user to read tenant administrator applications."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108656","reporting_entity":"CVE-2026-108656","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108656-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108656-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108656"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108651","title":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the getRolesByUserId handler of SystemApiController that allows authenticated users to retrieve any user's role codes. Low-privileged attackers can supply arbitrary userId values to GET /sys/api/getRolesByUserId to enumerate role assignments and identify administrator accounts.","display_title":"Security issue reported in Software component","display_summary":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the getRolesByUserId handler of SystemApiController that allows authenticated users to retrieve any user's role codes.","display_reference":"CVE-2026-108651","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108651","source_title":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the getRolesByUserId handler of SystemApiController that allows authenticated users to retrieve any user's role codes. Low-privileged attackers can supply arbitrary userId values to GET /sys/api/getRolesByUserId to enumerate role assignments and identify administrator accounts.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T10:01:16.205Z","source_hash":"content-fingerprint:fnv1a-9235e0fa","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108651-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the getRolesByUserId handler of SystemApiController that allows authenticated users to retrieve any user's role codes. Low-privileged attackers can supply arbitrary userId values to GET /sys/api/getRolesByUserId to enumerate role assignments and identify administrator accounts.","source_quote_or_pointer":"Security Advisory CVE-2026-108651","fact_id":"SEA-CVE-2026-108651-F1","document_citation":"Security Advisory CVE-2026-108651"},{"id":"SEA-CVE-2026-108651-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the getRolesByUserId handler of SystemApiController that allows authenticated users to retrieve any user's role codes.","source_quote_or_pointer":"Advisory description (CVE-2026-108651)","fact_id":"SEA-CVE-2026-108651-F2","document_citation":"Advisory description (CVE-2026-108651)"}],"source_stated_contributors":["JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the getRolesByUserId handler of SystemApiController that allows authenticated users to retrieve any user's role codes."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108651","reporting_entity":"CVE-2026-108651","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108651-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108651-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108651"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108650","title":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the getUserPermissionSet handler of SystemApiController that allows any authenticated user to read other users' permission codes. Low-privileged attackers can supply an arbitrary userId to GET /sys/api/getUserPermissionSet to retrieve the full permission set of any account, including administrators.","display_title":"Security issue reported in Software component","display_summary":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the getUserPermissionSet handler of SystemApiController that allows any authenticated user to read other users' permission codes.","display_reference":"CVE-2026-108650","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108650","source_title":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the getUserPermissionSet handler of SystemApiController that allows any authenticated user to read other users' permission codes. Low-privileged attackers can supply an arbitrary userId to GET /sys/api/getUserPermissionSet to retrieve the full permission set of any account, including administrators.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T10:01:16.205Z","source_hash":"content-fingerprint:fnv1a-4e7b054f","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108650-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the getUserPermissionSet handler of SystemApiController that allows any authenticated user to read other users' permission codes. Low-privileged attackers can supply an arbitrary userId to GET /sys/api/getUserPermissionSet to retrieve the full permission set of any account, including administrators.","source_quote_or_pointer":"Security Advisory CVE-2026-108650","fact_id":"SEA-CVE-2026-108650-F1","document_citation":"Security Advisory CVE-2026-108650"},{"id":"SEA-CVE-2026-108650-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the getUserPermissionSet handler of SystemApiController that allows any authenticated user to read other users' permission codes.","source_quote_or_pointer":"Advisory description (CVE-2026-108650)","fact_id":"SEA-CVE-2026-108650-F2","document_citation":"Advisory description (CVE-2026-108650)"}],"source_stated_contributors":["JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the getUserPermissionSet handler of SystemApiController that allows any authenticated user to read other users' permission codes."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108650","reporting_entity":"CVE-2026-108650","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108650-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108650-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108650"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108649","title":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the queryUserRolesById handler of SystemApiController that lets authenticated users read any user's role codes. Low-privileged attackers can send a userId to GET /sys/api/queryUserRolesById to enumerate role assignments and identify administrator accounts.","display_title":"Security issue reported in Software component","display_summary":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the queryUserRolesById handler of SystemApiController that lets authenticated users read any user's role codes.","display_reference":"CVE-2026-108649","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108649","source_title":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the queryUserRolesById handler of SystemApiController that lets authenticated users read any user's role codes. Low-privileged attackers can send a userId to GET /sys/api/queryUserRolesById to enumerate role assignments and identify administrator accounts.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T10:01:16.205Z","source_hash":"content-fingerprint:fnv1a-aa6b258d","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108649-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the queryUserRolesById handler of SystemApiController that lets authenticated users read any user's role codes. Low-privileged attackers can send a userId to GET /sys/api/queryUserRolesById to enumerate role assignments and identify administrator accounts.","source_quote_or_pointer":"Security Advisory CVE-2026-108649","fact_id":"SEA-CVE-2026-108649-F1","document_citation":"Security Advisory CVE-2026-108649"},{"id":"SEA-CVE-2026-108649-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the queryUserRolesById handler of SystemApiController that lets authenticated users read any user's role codes.","source_quote_or_pointer":"Advisory description (CVE-2026-108649)","fact_id":"SEA-CVE-2026-108649-F2","document_citation":"Advisory description (CVE-2026-108649)"}],"source_stated_contributors":["JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the queryUserRolesById handler of SystemApiController that lets authenticated users read any user's role codes."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108649","reporting_entity":"CVE-2026-108649","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108649-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108649-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108649"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108648","title":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the GET /sys/api/getDynamicDbSourceByCode endpoint of SystemApiController, which lacks Shiro permission or role annotations. Any authenticated low-privileged user can supply datasource codes in the dbSourceCode parameter to retrieve JDBC URLs, usernames and decrypted cleartext database passwords.","display_title":"Security issue reported in Software component","display_summary":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the GET /sys/api/getDynamicDbSourceByCode endpoint of SystemApiController, which lacks Shiro permission or role annotations.","display_reference":"CVE-2026-108648","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108648","source_title":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the GET /sys/api/getDynamicDbSourceByCode endpoint of SystemApiController, which lacks Shiro permission or role annotations. Any authenticated low-privileged user can supply datasource codes in the dbSourceCode parameter to retrieve JDBC URLs, usernames and decrypted cleartext database passwords.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T10:01:16.205Z","source_hash":"content-fingerprint:fnv1a-34d924f2","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108648-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the GET /sys/api/getDynamicDbSourceByCode endpoint of SystemApiController, which lacks Shiro permission or role annotations. Any authenticated low-privileged user can supply datasource codes in the dbSourceCode parameter to retrieve JDBC URLs, usernames and decrypted cleartext database passwords.","source_quote_or_pointer":"Security Advisory CVE-2026-108648","fact_id":"SEA-CVE-2026-108648-F1","document_citation":"Security Advisory CVE-2026-108648"},{"id":"SEA-CVE-2026-108648-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the GET /sys/api/getDynamicDbSourceByCode endpoint of SystemApiController, which lacks Shiro permission or role annotations.","source_quote_or_pointer":"Advisory description (CVE-2026-108648)","fact_id":"SEA-CVE-2026-108648-F2","document_citation":"Advisory description (CVE-2026-108648)"}],"source_stated_contributors":["JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the GET /sys/api/getDynamicDbSourceByCode endpoint of SystemApiController, which lacks Shiro permission or role annotations."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.write_action","data.pii"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108648","reporting_entity":"CVE-2026-108648","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108648-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108648-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108648"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108638","title":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to remove group memberships via the deleteGroupUser handler in SysUserController. Attackers can send DELETE requests with arbitrary groupId and userId values to remove any user from any administrator-maintained user group without ownership or tenant checks.","display_title":"Security issue reported in Software component","display_summary":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to remove group memberships via the deleteGroupUser handler in SysUserController.","display_reference":"CVE-2026-108638","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108638","source_title":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to remove group memberships via the deleteGroupUser handler in SysUserController. Attackers can send DELETE requests with arbitrary groupId and userId values to remove any user from any administrator-maintained user group without ownership or tenant checks.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T10:01:16.205Z","source_hash":"content-fingerprint:fnv1a-87d6451b","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108638-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to remove group memberships via the deleteGroupUser handler in SysUserController. Attackers can send DELETE requests with arbitrary groupId and userId values to remove any user from any administrator-maintained user group without ownership or tenant checks.","source_quote_or_pointer":"Security Advisory CVE-2026-108638","fact_id":"SEA-CVE-2026-108638-F1","document_citation":"Security Advisory CVE-2026-108638"},{"id":"SEA-CVE-2026-108638-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to remove group memberships via the deleteGroupUser handler in SysUserController.","source_quote_or_pointer":"Advisory description (CVE-2026-108638)","fact_id":"SEA-CVE-2026-108638-F2","document_citation":"Advisory description (CVE-2026-108638)"}],"source_stated_contributors":["JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to remove group memberships via the deleteGroupUser handler in SysUserController."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.privileged_action","auth.write_action","data.pii"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108638","reporting_entity":"CVE-2026-108638","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108638-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108638-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108638"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108637","title":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to remove user group members by calling DELETE /sys/user/deleteUserGroupBatch. Attackers can supply any groupId and comma-separated userIds to delete sys_ugroup_user rows without permission or tenant checks, tampering with administrator-maintained groups.","display_title":"Security issue reported in Software component","display_summary":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to remove user group members by calling DELETE /sys/user/deleteUserGroupBatch.","display_reference":"CVE-2026-108637","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108637","source_title":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to remove user group members by calling DELETE /sys/user/deleteUserGroupBatch. Attackers can supply any groupId and comma-separated userIds to delete sys_ugroup_user rows without permission or tenant checks, tampering with administrator-maintained groups.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T10:01:16.205Z","source_hash":"content-fingerprint:fnv1a-8c95e12e","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108637-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to remove user group members by calling DELETE /sys/user/deleteUserGroupBatch. Attackers can supply any groupId and comma-separated userIds to delete sys_ugroup_user rows without permission or tenant checks, tampering with administrator-maintained groups.","source_quote_or_pointer":"Security Advisory CVE-2026-108637","fact_id":"SEA-CVE-2026-108637-F1","document_citation":"Security Advisory CVE-2026-108637"},{"id":"SEA-CVE-2026-108637-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to remove user group members by calling DELETE /sys/user/deleteUserGroupBatch.","source_quote_or_pointer":"Advisory description (CVE-2026-108637)","fact_id":"SEA-CVE-2026-108637-F2","document_citation":"Advisory description (CVE-2026-108637)"}],"source_stated_contributors":["JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to remove user group members by calling DELETE /sys/user/deleteUserGroupBatch."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.privileged_action","auth.write_action","data.pii"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108637","reporting_entity":"CVE-2026-108637","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108637-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108637-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108637"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108617","title":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to create message templates by calling POST /sys/message/sysMessageTemplate/add. Attackers holding only minimal roles can insert arbitrary notification templates with chosen codes and content into the shared sys_sms_template library used for system, e-mail, SMS and IM notifications.","display_title":"Security issue reported in Software component","display_summary":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to create message templates by calling POST /sys/message/sysMessageTemplate/add.","display_reference":"CVE-2026-108617","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108617","source_title":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to create message templates by calling POST /sys/message/sysMessageTemplate/add. Attackers holding only minimal roles can insert arbitrary notification templates with chosen codes and content into the shared sys_sms_template library used for system, e-mail, SMS and IM notifications.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T10:01:16.205Z","source_hash":"content-fingerprint:fnv1a-9054deaa","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108617-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to create message templates by calling POST /sys/message/sysMessageTemplate/add. Attackers holding only minimal roles can insert arbitrary notification templates with chosen codes and content into the shared sys_sms_template library used for system, e-mail, SMS and IM notifications.","source_quote_or_pointer":"Security Advisory CVE-2026-108617","fact_id":"SEA-CVE-2026-108617-F1","document_citation":"Security Advisory CVE-2026-108617"},{"id":"SEA-CVE-2026-108617-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to create message templates by calling POST /sys/message/sysMessageTemplate/add.","source_quote_or_pointer":"Advisory description (CVE-2026-108617)","fact_id":"SEA-CVE-2026-108617-F2","document_citation":"Advisory description (CVE-2026-108617)"}],"source_stated_contributors":["JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to create message templates by calling POST /sys/message/sysMessageTemplate/add."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.write_action","data.pii"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108617","reporting_entity":"CVE-2026-108617","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108617-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108617-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108617"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108616","title":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragExtDataController deleteBatch handler that allows any authenticated user to delete AI evaluator records. Low-privileged attackers can send comma-separated ids to DELETE /airag/extData/deleteBatch, which lacks owner or tenant checks, deleting other users' evaluator and test-tracking records.","display_title":"Security issue reported in Software component","display_summary":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragExtDataController deleteBatch handler that allows any authenticated user to delete AI evaluator records.","display_reference":"CVE-2026-108616","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108616","source_title":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragExtDataController deleteBatch handler that allows any authenticated user to delete AI evaluator records. Low-privileged attackers can send comma-separated ids to DELETE /airag/extData/deleteBatch, which lacks owner or tenant checks, deleting other users' evaluator and test-tracking records.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T10:01:16.205Z","source_hash":"content-fingerprint:fnv1a-a4d4db7","affected_system":{"organization":"Software component project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108616-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragExtDataController deleteBatch handler that allows any authenticated user to delete AI evaluator records. Low-privileged attackers can send comma-separated ids to DELETE /airag/extData/deleteBatch, which lacks owner or tenant checks, deleting other users' evaluator and test-tracking records.","source_quote_or_pointer":"Security Advisory CVE-2026-108616","fact_id":"SEA-CVE-2026-108616-F1","document_citation":"Security Advisory CVE-2026-108616"},{"id":"SEA-CVE-2026-108616-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragExtDataController deleteBatch handler that allows any authenticated user to delete AI evaluator records.","source_quote_or_pointer":"Advisory description (CVE-2026-108616)","fact_id":"SEA-CVE-2026-108616-F2","document_citation":"Advisory description (CVE-2026-108616)"}],"source_stated_contributors":["JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragExtDataController deleteBatch handler that allows any authenticated user to delete AI evaluator records."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.privileged_action","auth.write_action","data.pii"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108616","reporting_entity":"CVE-2026-108616","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108616-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108616-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108616"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108615","title":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragExtDataController delete handler that allows low-privileged authenticated users to delete AI evaluator records. Attackers can send DELETE requests to /airag/extData/delete with any id parameter to remove other users' AI evaluator or test-tracking records without owner or tenant checks.","display_title":"Security issue reported in Software component","display_summary":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragExtDataController delete handler that allows low-privileged authenticated users to delete AI evaluator records.","display_reference":"CVE-2026-108615","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108615","source_title":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragExtDataController delete handler that allows low-privileged authenticated users to delete AI evaluator records. Attackers can send DELETE requests to /airag/extData/delete with any id parameter to remove other users' AI evaluator or test-tracking records without owner or tenant checks.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T10:01:16.205Z","source_hash":"content-fingerprint:fnv1a-edfdd8fc","affected_system":{"organization":"Software component project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108615-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragExtDataController delete handler that allows low-privileged authenticated users to delete AI evaluator records. Attackers can send DELETE requests to /airag/extData/delete with any id parameter to remove other users' AI evaluator or test-tracking records without owner or tenant checks.","source_quote_or_pointer":"Security Advisory CVE-2026-108615","fact_id":"SEA-CVE-2026-108615-F1","document_citation":"Security Advisory CVE-2026-108615"},{"id":"SEA-CVE-2026-108615-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragExtDataController delete handler that allows low-privileged authenticated users to delete AI evaluator records.","source_quote_or_pointer":"Advisory description (CVE-2026-108615)","fact_id":"SEA-CVE-2026-108615-F2","document_citation":"Advisory description (CVE-2026-108615)"}],"source_stated_contributors":["JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragExtDataController delete handler that allows low-privileged authenticated users to delete AI evaluator records."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.privileged_action","auth.write_action","data.pii"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108615","reporting_entity":"CVE-2026-108615","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108615-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108615-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108615"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108612","title":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AigcWordTemplateController deleteBatch handler that allows low-privileged authenticated users to delete word templates. Attackers can send a DELETE request to /airag/word/deleteBatch with comma-separated ids to permanently delete any templates in the shared library.","display_title":"Security issue reported in Software component","display_summary":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AigcWordTemplateController deleteBatch handler that allows low-privileged authenticated users to delete word templates.","display_reference":"CVE-2026-108612","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108612","source_title":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AigcWordTemplateController deleteBatch handler that allows low-privileged authenticated users to delete word templates. Attackers can send a DELETE request to /airag/word/deleteBatch with comma-separated ids to permanently delete any templates in the shared library.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T10:01:16.205Z","source_hash":"content-fingerprint:fnv1a-596e7c7","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108612-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AigcWordTemplateController deleteBatch handler that allows low-privileged authenticated users to delete word templates. Attackers can send a DELETE request to /airag/word/deleteBatch with comma-separated ids to permanently delete any templates in the shared library.","source_quote_or_pointer":"Security Advisory CVE-2026-108612","fact_id":"SEA-CVE-2026-108612-F1","document_citation":"Security Advisory CVE-2026-108612"},{"id":"SEA-CVE-2026-108612-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AigcWordTemplateController deleteBatch handler that allows low-privileged authenticated users to delete word templates.","source_quote_or_pointer":"Advisory description (CVE-2026-108612)","fact_id":"SEA-CVE-2026-108612-F2","document_citation":"Advisory description (CVE-2026-108612)"}],"source_stated_contributors":["JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AigcWordTemplateController deleteBatch handler that allows low-privileged authenticated users to delete word templates."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.privileged_action","auth.write_action","data.pii"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108612","reporting_entity":"CVE-2026-108612","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108612-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108612-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108612"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108611","title":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AigcWordTemplateController delete handler that allows any authenticated user to delete word templates. Low-privileged attackers can send DELETE requests to /airag/word/delete with an id parameter to permanently remove any template from the shared library.","display_title":"Security issue reported in Software component","display_summary":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AigcWordTemplateController delete handler that allows any authenticated user to delete word templates.","display_reference":"CVE-2026-108611","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108611","source_title":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AigcWordTemplateController delete handler that allows any authenticated user to delete word templates. Low-privileged attackers can send DELETE requests to /airag/word/delete with an id parameter to permanently remove any template from the shared library.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T10:01:16.205Z","source_hash":"content-fingerprint:fnv1a-9aec25cc","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108611-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AigcWordTemplateController delete handler that allows any authenticated user to delete word templates. Low-privileged attackers can send DELETE requests to /airag/word/delete with an id parameter to permanently remove any template from the shared library.","source_quote_or_pointer":"Security Advisory CVE-2026-108611","fact_id":"SEA-CVE-2026-108611-F1","document_citation":"Security Advisory CVE-2026-108611"},{"id":"SEA-CVE-2026-108611-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AigcWordTemplateController delete handler that allows any authenticated user to delete word templates.","source_quote_or_pointer":"Advisory description (CVE-2026-108611)","fact_id":"SEA-CVE-2026-108611-F2","document_citation":"Advisory description (CVE-2026-108611)"}],"source_stated_contributors":["JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AigcWordTemplateController delete handler that allows any authenticated user to delete word templates."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.privileged_action","auth.write_action","data.pii"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108611","reporting_entity":"CVE-2026-108611","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108611-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108611-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108611"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108606","title":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiOcrController deleteById handler that allows any authenticated user to delete OCR records. Low-privileged attackers can obtain record ids from the unguarded GET /airag/ocr/list endpoint and repeatedly delete every shared OCR prompt record stored in Redis.","display_title":"Security issue reported in Software component","display_summary":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiOcrController deleteById handler that allows any authenticated user to delete OCR records.","display_reference":"CVE-2026-108606","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108606","source_title":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiOcrController deleteById handler that allows any authenticated user to delete OCR records. Low-privileged attackers can obtain record ids from the unguarded GET /airag/ocr/list endpoint and repeatedly delete every shared OCR prompt record stored in Redis.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T10:01:16.205Z","source_hash":"content-fingerprint:fnv1a-1d7c20be","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108606-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiOcrController deleteById handler that allows any authenticated user to delete OCR records. Low-privileged attackers can obtain record ids from the unguarded GET /airag/ocr/list endpoint and repeatedly delete every shared OCR prompt record stored in Redis.","source_quote_or_pointer":"Security Advisory CVE-2026-108606","fact_id":"SEA-CVE-2026-108606-F1","document_citation":"Security Advisory CVE-2026-108606"},{"id":"SEA-CVE-2026-108606-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiOcrController deleteById handler that allows any authenticated user to delete OCR records.","source_quote_or_pointer":"Advisory description (CVE-2026-108606)","fact_id":"SEA-CVE-2026-108606-F2","document_citation":"Advisory description (CVE-2026-108606)"}],"source_stated_contributors":["JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiOcrController deleteById handler that allows any authenticated user to delete OCR records."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.privileged_action","auth.write_action","data.pii","arch.caching"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108606","reporting_entity":"CVE-2026-108606","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108606-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108606-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108606"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108605","title":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiOcrController updateById handler that allows any authenticated user to modify global OCR templates. Low-privileged attackers can send PUT requests to /airag/ocr/edit to overwrite LLM prompts in the shared airag:ocr Redis key, corrupting OCR results for all users.","display_title":"Security issue reported in Software component","display_summary":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiOcrController updateById handler that allows any authenticated user to modify global OCR templates.","display_reference":"CVE-2026-108605","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108605","source_title":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiOcrController updateById handler that allows any authenticated user to modify global OCR templates. Low-privileged attackers can send PUT requests to /airag/ocr/edit to overwrite LLM prompts in the shared airag:ocr Redis key, corrupting OCR results for all users.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T10:01:16.205Z","source_hash":"content-fingerprint:fnv1a-4eac897b","affected_system":{"organization":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiOcrController updateById handler that allows any authenticated user to modify global OCR templates. Low-privileged attackers can send PUT requests to /airag/ocr/edit to overwrite LLM prompts in the shared airag project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108605-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiOcrController updateById handler that allows any authenticated user to modify global OCR templates. Low-privileged attackers can send PUT requests to /airag/ocr/edit to overwrite LLM prompts in the shared airag:ocr Redis key, corrupting OCR results for all users.","source_quote_or_pointer":"Security Advisory CVE-2026-108605","fact_id":"SEA-CVE-2026-108605-F1","document_citation":"Security Advisory CVE-2026-108605"},{"id":"SEA-CVE-2026-108605-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiOcrController updateById handler that allows any authenticated user to modify global OCR templates.","source_quote_or_pointer":"Advisory description (CVE-2026-108605)","fact_id":"SEA-CVE-2026-108605-F2","document_citation":"Advisory description (CVE-2026-108605)"}],"source_stated_contributors":["JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiOcrController updateById handler that allows any authenticated user to modify global OCR templates."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.write_action","data.pii","data.untrusted_external_text","arch.caching","arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108605","reporting_entity":"CVE-2026-108605","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108605-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108605-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108605"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-97853","title":"Memory Allocation with Excessive Size Value vulnerability in ericmj decimal allows Denial of Service. Decimal.round/3 builds the full result for the requested number of decimal places before the context precision (34 digits by default) is applied, so its cost grows with the places argument instead of with the size of the result. For positive places it appends places zero digits to the coefficient as a charlist before converting it to an integer, and for negative places it builds a charlist of -places zero digits. A single call such as Decimal.round(Decimal.new(\"1.5\"), -50_000_000) allocates about 5.5 GB of memory, which can exhaust available memory and get the BEAM VM killed. The oldest releases instead loop once per decimal place, consuming CPU in proportion to places. Any application that passes a user-supplied number of decimal places or scale to Decimal.round/2 or Decimal.round/3 without bounding it is exposed. The input limits added for CVE-2026-32686 do not cover the places argument. This issue affects decimal: from 0.1.0 before 3.1.2.","display_title":"Software component issue could make the service unavailable","display_summary":"Memory Allocation with Excessive Size Value vulnerability in ericmj decimal allows Denial of Service.","display_reference":"CVE-2026-97853","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97853","source_title":"Memory Allocation with Excessive Size Value vulnerability in ericmj decimal allows Denial of Service. Decimal.round/3 builds the full result for the requested number of decimal places before the context precision (34 digits by default) is applied, so its cost grows with the places argument instead of with the size of the result. For positive places it appends places zero digits to the coefficient as a charlist before converting it to an integer, and for negative places it builds a charlist of -places zero digits. A single call such as Decimal.round(Decimal.new(\"1.5\"), -50_000_000) allocates about 5.5 GB of memory, which can exhaust available memory and get the BEAM VM killed. The oldest releases instead loop once per decimal place, consuming CPU in proportion to places. Any application that passes a user-supplied number of decimal places or scale to Decimal.round/2 or Decimal.round/3 without bounding it is exposed. The input limits added for CVE-2026-32686 do not cover the places argument. This issue affects decimal: from 0.1.0 before 3.1.2.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T10:01:16.205Z","source_hash":"content-fingerprint:fnv1a-560a68a7","affected_system":{"organization":"Memory Allocation with Excessive Size Value vulnerability in ericmj decimal allows Denial of Service. Decimal.round/3 builds the full result for the requested number of decimal places before the context precision (34 digits by default) is applied, so its cost grows with the places argument instead of with the size of the result. For positive places it appends places zero digits to the coefficient as a charlist before converting it to an integer, and for negative places it builds a charlist of -places zero digits. A single call such as Decimal.round(Decimal.new(\"1.5\"), -50000000) allocates about 5.5 GB of memory, which can exhaust available memory and get the BEAM VM killed. The oldest releases instead loop once per decimal place, consuming CPU in proportion to places. Any application that passes a user-supplied number of decimal places or scale to Decimal.round/2 or Decimal.round/3 without bounding it is exposed. The input limits added for CVE-2026-32686 do not cover the places argument. This issue affects decimal project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-97853-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Memory Allocation with Excessive Size Value vulnerability in ericmj decimal allows Denial of Service. Decimal.round/3 builds the full result for the requested number of decimal places before the context precision (34 digits by default) is applied, so its cost grows with the places argument instead of with the size of the result. For positive places it appends places zero digits to the coefficient as a charlist before converting it to an integer, and for negative places it builds a charlist of -places zero digits. A single call such as Decimal.round(Decimal.new(\"1.5\"), -50_000_000) allocates about 5.5 GB of memory, which can exhaust available memory and get the BEAM VM killed. The oldest releases instead loop once per decimal place, consuming CPU in proportion to places. Any application that passes a user-supplied number of decimal places or scale to Decimal.round/2 or Decimal.round/3 without bounding it is exposed. The input limits added for CVE-2026-32686 do not cover the places argument. This issue affects decimal: from 0.1.0 before 3.1.2.","source_quote_or_pointer":"Security Advisory CVE-2026-97853","fact_id":"SEA-CVE-2026-97853-F1","document_citation":"Security Advisory CVE-2026-97853"},{"id":"SEA-CVE-2026-97853-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Memory Allocation with Excessive Size Value vulnerability in ericmj decimal allows Denial of Service.","source_quote_or_pointer":"Advisory description (CVE-2026-97853)","fact_id":"SEA-CVE-2026-97853-F2","document_citation":"Advisory description (CVE-2026-97853)"}],"source_stated_contributors":["Memory Allocation with Excessive Size Value vulnerability in ericmj decimal allows Denial of Service."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-97853","reporting_entity":"CVE-2026-97853","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-97853-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-97853-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-97853"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-81797","title":"Unauthenticated PHP Object Injection in Buzz Stone | Magazine & Viral Blog WordPress Theme <= 1.0.2 versions.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-81797","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-81797","source_title":"Unauthenticated PHP Object Injection in Buzz Stone | Magazine & Viral Blog WordPress Theme <= 1.0.2 versions.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T10:01:16.205Z","source_hash":"content-fingerprint:fnv1a-ddfbed8b","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-81797-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Unauthenticated PHP Object Injection in Buzz Stone | Magazine & Viral Blog WordPress Theme <= 1.0.2 versions.","source_quote_or_pointer":"Security Advisory CVE-2026-81797","fact_id":"SEA-CVE-2026-81797-F1","document_citation":"Security Advisory CVE-2026-81797"},{"id":"SEA-CVE-2026-81797-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Unauthenticated PHP Object Injection in Buzz Stone | Magazine & Viral Blog WordPress Theme <= 1.0.2 versions.","source_quote_or_pointer":"Advisory description (CVE-2026-81797)","fact_id":"SEA-CVE-2026-81797-F2","document_citation":"Advisory description (CVE-2026-81797)"}],"source_stated_contributors":["Unauthenticated PHP Object Injection in Buzz Stone | Magazine & Viral Blog WordPress Theme <= 1.0.2 versions."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.public_publication"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-81797","reporting_entity":"CVE-2026-81797","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-81797-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-81797-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-81797"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-78535","title":"Unauthenticated PHP Object Injection in Photolia <= 1.0.3 versions.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-78535","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-78535","source_title":"Unauthenticated PHP Object Injection in Photolia <= 1.0.3 versions.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T10:01:16.205Z","source_hash":"content-fingerprint:fnv1a-fbaae041","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-78535-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Unauthenticated PHP Object Injection in Photolia <= 1.0.3 versions.","source_quote_or_pointer":"Security Advisory CVE-2026-78535","fact_id":"SEA-CVE-2026-78535-F1","document_citation":"Security Advisory CVE-2026-78535"},{"id":"SEA-CVE-2026-78535-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Unauthenticated PHP Object Injection in Photolia <= 1.0.3 versions.","source_quote_or_pointer":"Advisory description (CVE-2026-78535)","fact_id":"SEA-CVE-2026-78535-F2","document_citation":"Advisory description (CVE-2026-78535)"}],"source_stated_contributors":["Unauthenticated PHP Object Injection in Photolia <= 1.0.3 versions."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-78535","reporting_entity":"CVE-2026-78535","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-78535-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-78535-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-78535"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-78533","title":"Unauthenticated PHP Object Injection in Qwery <= 3.6.1 versions.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-78533","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-78533","source_title":"Unauthenticated PHP Object Injection in Qwery <= 3.6.1 versions.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T10:01:16.205Z","source_hash":"content-fingerprint:fnv1a-c47c57c9","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-78533-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Unauthenticated PHP Object Injection in Qwery <= 3.6.1 versions.","source_quote_or_pointer":"Security Advisory CVE-2026-78533","fact_id":"SEA-CVE-2026-78533-F1","document_citation":"Security Advisory CVE-2026-78533"},{"id":"SEA-CVE-2026-78533-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Unauthenticated PHP Object Injection in Qwery <= 3.6.1 versions.","source_quote_or_pointer":"Advisory description (CVE-2026-78533)","fact_id":"SEA-CVE-2026-78533-F2","document_citation":"Advisory description (CVE-2026-78533)"}],"source_stated_contributors":["Unauthenticated PHP Object Injection in Qwery <= 3.6.1 versions."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-78533","reporting_entity":"CVE-2026-78533","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-78533-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-78533-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-78533"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-78531","title":"Unauthenticated PHP Object Injection in Jacqueline <= 2.22 versions.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-78531","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-78531","source_title":"Unauthenticated PHP Object Injection in Jacqueline <= 2.22 versions.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T10:01:16.205Z","source_hash":"content-fingerprint:fnv1a-2ee4dccf","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-78531-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Unauthenticated PHP Object Injection in Jacqueline <= 2.22 versions.","source_quote_or_pointer":"Security Advisory CVE-2026-78531","fact_id":"SEA-CVE-2026-78531-F1","document_citation":"Security Advisory CVE-2026-78531"},{"id":"SEA-CVE-2026-78531-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Unauthenticated PHP Object Injection in Jacqueline <= 2.22 versions.","source_quote_or_pointer":"Advisory description (CVE-2026-78531)","fact_id":"SEA-CVE-2026-78531-F2","document_citation":"Advisory description (CVE-2026-78531)"}],"source_stated_contributors":["Unauthenticated PHP Object Injection in Jacqueline <= 2.22 versions."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-78531","reporting_entity":"CVE-2026-78531","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-78531-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-78531-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-78531"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-78529","title":"Unauthenticated PHP Object Injection in Alliance <= 3.11 versions.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-78529","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-78529","source_title":"Unauthenticated PHP Object Injection in Alliance <= 3.11 versions.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T10:01:16.205Z","source_hash":"content-fingerprint:fnv1a-5ac385dc","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-78529-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Unauthenticated PHP Object Injection in Alliance <= 3.11 versions.","source_quote_or_pointer":"Security Advisory CVE-2026-78529","fact_id":"SEA-CVE-2026-78529-F1","document_citation":"Security Advisory CVE-2026-78529"},{"id":"SEA-CVE-2026-78529-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Unauthenticated PHP Object Injection in Alliance <= 3.11 versions.","source_quote_or_pointer":"Advisory description (CVE-2026-78529)","fact_id":"SEA-CVE-2026-78529-F2","document_citation":"Advisory description (CVE-2026-78529)"}],"source_stated_contributors":["Unauthenticated PHP Object Injection in Alliance <= 3.11 versions."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-78529","reporting_entity":"CVE-2026-78529","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-78529-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-78529-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-78529"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-66569","title":"Unauthenticated PHP Object Injection in Kicker <= 2.2.1 versions.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-66569","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-66569","source_title":"Unauthenticated PHP Object Injection in Kicker <= 2.2.1 versions.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T10:01:16.205Z","source_hash":"content-fingerprint:fnv1a-4a43dcdd","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-66569-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Unauthenticated PHP Object Injection in Kicker <= 2.2.1 versions.","source_quote_or_pointer":"Security Advisory CVE-2026-66569","fact_id":"SEA-CVE-2026-66569-F1","document_citation":"Security Advisory CVE-2026-66569"},{"id":"SEA-CVE-2026-66569-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Unauthenticated PHP Object Injection in Kicker <= 2.2.1 versions.","source_quote_or_pointer":"Advisory description (CVE-2026-66569)","fact_id":"SEA-CVE-2026-66569-F2","document_citation":"Advisory description (CVE-2026-66569)"}],"source_stated_contributors":["Unauthenticated PHP Object Injection in Kicker <= 2.2.1 versions."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-66569","reporting_entity":"CVE-2026-66569","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-66569-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-66569-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-66569"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-66568","title":"Unauthenticated PHP Object Injection in Original <= 1.9.0 versions.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-66568","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-66568","source_title":"Unauthenticated PHP Object Injection in Original <= 1.9.0 versions.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T10:01:16.205Z","source_hash":"content-fingerprint:fnv1a-15a08d58","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-66568-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Unauthenticated PHP Object Injection in Original <= 1.9.0 versions.","source_quote_or_pointer":"Security Advisory CVE-2026-66568","fact_id":"SEA-CVE-2026-66568-F1","document_citation":"Security Advisory CVE-2026-66568"},{"id":"SEA-CVE-2026-66568-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Unauthenticated PHP Object Injection in Original <= 1.9.0 versions.","source_quote_or_pointer":"Advisory description (CVE-2026-66568)","fact_id":"SEA-CVE-2026-66568-F2","document_citation":"Advisory description (CVE-2026-66568)"}],"source_stated_contributors":["Unauthenticated PHP Object Injection in Original <= 1.9.0 versions."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-66568","reporting_entity":"CVE-2026-66568","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-66568-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-66568-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-66568"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-66567","title":"Unauthenticated PHP Object Injection in Anesta <= 1.5.3 versions.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-66567","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-66567","source_title":"Unauthenticated PHP Object Injection in Anesta <= 1.5.3 versions.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T10:01:16.205Z","source_hash":"content-fingerprint:fnv1a-6f0117ef","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-66567-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Unauthenticated PHP Object Injection in Anesta <= 1.5.3 versions.","source_quote_or_pointer":"Security Advisory CVE-2026-66567","fact_id":"SEA-CVE-2026-66567-F1","document_citation":"Security Advisory CVE-2026-66567"},{"id":"SEA-CVE-2026-66567-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Unauthenticated PHP Object Injection in Anesta <= 1.5.3 versions.","source_quote_or_pointer":"Advisory description (CVE-2026-66567)","fact_id":"SEA-CVE-2026-66567-F2","document_citation":"Advisory description (CVE-2026-66567)"}],"source_stated_contributors":["Unauthenticated PHP Object Injection in Anesta <= 1.5.3 versions."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-66567","reporting_entity":"CVE-2026-66567","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-66567-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-66567-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-66567"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-66565","title":"Unauthenticated PHP Object Injection in FC United <= 1.1.1 versions.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-66565","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-66565","source_title":"Unauthenticated PHP Object Injection in FC United <= 1.1.1 versions.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T10:01:16.205Z","source_hash":"content-fingerprint:fnv1a-1844f44b","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-66565-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Unauthenticated PHP Object Injection in FC United <= 1.1.1 versions.","source_quote_or_pointer":"Security Advisory CVE-2026-66565","fact_id":"SEA-CVE-2026-66565-F1","document_citation":"Security Advisory CVE-2026-66565"},{"id":"SEA-CVE-2026-66565-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Unauthenticated PHP Object Injection in FC United <= 1.1.1 versions.","source_quote_or_pointer":"Advisory description (CVE-2026-66565)","fact_id":"SEA-CVE-2026-66565-F2","document_citation":"Advisory description (CVE-2026-66565)"}],"source_stated_contributors":["Unauthenticated PHP Object Injection in FC United <= 1.1.1 versions."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-66565","reporting_entity":"CVE-2026-66565","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-66565-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-66565-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-66565"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-66564","title":"Unauthenticated PHP Object Injection in ShiftCV <= 3.0.14 versions.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-66564","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-66564","source_title":"Unauthenticated PHP Object Injection in ShiftCV <= 3.0.14 versions.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T10:01:16.205Z","source_hash":"content-fingerprint:fnv1a-2ced678c","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-66564-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Unauthenticated PHP Object Injection in ShiftCV <= 3.0.14 versions.","source_quote_or_pointer":"Security Advisory CVE-2026-66564","fact_id":"SEA-CVE-2026-66564-F1","document_citation":"Security Advisory CVE-2026-66564"},{"id":"SEA-CVE-2026-66564-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Unauthenticated PHP Object Injection in ShiftCV <= 3.0.14 versions.","source_quote_or_pointer":"Advisory description (CVE-2026-66564)","fact_id":"SEA-CVE-2026-66564-F2","document_citation":"Advisory description (CVE-2026-66564)"}],"source_stated_contributors":["Unauthenticated PHP Object Injection in ShiftCV <= 3.0.14 versions."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-66564","reporting_entity":"CVE-2026-66564","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-66564-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-66564-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-66564"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-66563","title":"Unauthenticated PHP Object Injection in Windsor <= 2.10 versions.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-66563","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-66563","source_title":"Unauthenticated PHP Object Injection in Windsor <= 2.10 versions.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T10:01:16.205Z","source_hash":"content-fingerprint:fnv1a-2529fb13","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-66563-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Unauthenticated PHP Object Injection in Windsor <= 2.10 versions.","source_quote_or_pointer":"Security Advisory CVE-2026-66563","fact_id":"SEA-CVE-2026-66563-F1","document_citation":"Security Advisory CVE-2026-66563"},{"id":"SEA-CVE-2026-66563-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Unauthenticated PHP Object Injection in Windsor <= 2.10 versions.","source_quote_or_pointer":"Advisory description (CVE-2026-66563)","fact_id":"SEA-CVE-2026-66563-F2","document_citation":"Advisory description (CVE-2026-66563)"}],"source_stated_contributors":["Unauthenticated PHP Object Injection in Windsor <= 2.10 versions."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-66563","reporting_entity":"CVE-2026-66563","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-66563-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-66563-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-66563"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-66483","title":"Unauthenticated PHP Object Injection in Education Center <= 3.6.12 versions.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-66483","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-66483","source_title":"Unauthenticated PHP Object Injection in Education Center <= 3.6.12 versions.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T10:01:16.205Z","source_hash":"content-fingerprint:fnv1a-ed60dba","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-66483-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Unauthenticated PHP Object Injection in Education Center <= 3.6.12 versions.","source_quote_or_pointer":"Security Advisory CVE-2026-66483","fact_id":"SEA-CVE-2026-66483-F1","document_citation":"Security Advisory CVE-2026-66483"},{"id":"SEA-CVE-2026-66483-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Unauthenticated PHP Object Injection in Education Center <= 3.6.12 versions.","source_quote_or_pointer":"Advisory description (CVE-2026-66483)","fact_id":"SEA-CVE-2026-66483-F2","document_citation":"Advisory description (CVE-2026-66483)"}],"source_stated_contributors":["Unauthenticated PHP Object Injection in Education Center <= 3.6.12 versions."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-66483","reporting_entity":"CVE-2026-66483","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-66483-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-66483-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-66483"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-66482","title":"Unauthenticated PHP Object Injection in Drone Media <= 2.2.0 versions.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-66482","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-66482","source_title":"Unauthenticated PHP Object Injection in Drone Media <= 2.2.0 versions.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T10:01:16.205Z","source_hash":"content-fingerprint:fnv1a-b75970ff","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-66482-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Unauthenticated PHP Object Injection in Drone Media <= 2.2.0 versions.","source_quote_or_pointer":"Security Advisory CVE-2026-66482","fact_id":"SEA-CVE-2026-66482-F1","document_citation":"Security Advisory CVE-2026-66482"},{"id":"SEA-CVE-2026-66482-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Unauthenticated PHP Object Injection in Drone Media <= 2.2.0 versions.","source_quote_or_pointer":"Advisory description (CVE-2026-66482)","fact_id":"SEA-CVE-2026-66482-F2","document_citation":"Advisory description (CVE-2026-66482)"}],"source_stated_contributors":["Unauthenticated PHP Object Injection in Drone Media <= 2.2.0 versions."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-66482","reporting_entity":"CVE-2026-66482","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-66482-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-66482-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-66482"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-62130","title":"Shop manager PHP Object Injection in WooCommerce Multilingual & Multicurrency <= 5.5.8 versions.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-62130","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-62130","source_title":"Shop manager PHP Object Injection in WooCommerce Multilingual & Multicurrency <= 5.5.8 versions.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T10:01:16.205Z","source_hash":"content-fingerprint:fnv1a-ae137865","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-62130-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Shop manager PHP Object Injection in WooCommerce Multilingual & Multicurrency <= 5.5.8 versions.","source_quote_or_pointer":"Security Advisory CVE-2026-62130","fact_id":"SEA-CVE-2026-62130-F1","document_citation":"Security Advisory CVE-2026-62130"},{"id":"SEA-CVE-2026-62130-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Shop manager PHP Object Injection in WooCommerce Multilingual & Multicurrency <= 5.5.8 versions.","source_quote_or_pointer":"Advisory description (CVE-2026-62130)","fact_id":"SEA-CVE-2026-62130-F2","document_citation":"Advisory description (CVE-2026-62130)"}],"source_stated_contributors":["Shop manager PHP Object Injection in WooCommerce Multilingual & Multicurrency <= 5.5.8 versions."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-62130","reporting_entity":"CVE-2026-62130","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-62130-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-62130-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-62130"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-62125","title":"Unauthenticated PHP Object Injection in Asia Garden <= 1.3.1 versions.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-62125","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-62125","source_title":"Unauthenticated PHP Object Injection in Asia Garden <= 1.3.1 versions.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T10:01:16.205Z","source_hash":"content-fingerprint:fnv1a-65f41fbf","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-62125-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Unauthenticated PHP Object Injection in Asia Garden <= 1.3.1 versions.","source_quote_or_pointer":"Security Advisory CVE-2026-62125","fact_id":"SEA-CVE-2026-62125-F1","document_citation":"Security Advisory CVE-2026-62125"},{"id":"SEA-CVE-2026-62125-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Unauthenticated PHP Object Injection in Asia Garden <= 1.3.1 versions.","source_quote_or_pointer":"Advisory description (CVE-2026-62125)","fact_id":"SEA-CVE-2026-62125-F2","document_citation":"Advisory description (CVE-2026-62125)"}],"source_stated_contributors":["Unauthenticated PHP Object Injection in Asia Garden <= 1.3.1 versions."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-62125","reporting_entity":"CVE-2026-62125","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-62125-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-62125-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-62125"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-62124","title":"Unauthenticated PHP Object Injection in N7 | Golf Club Sports & Events <= 2.21 versions.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-62124","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-62124","source_title":"Unauthenticated PHP Object Injection in N7 | Golf Club Sports & Events <= 2.21 versions.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T10:01:16.205Z","source_hash":"content-fingerprint:fnv1a-d78623c2","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-62124-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Unauthenticated PHP Object Injection in N7 | Golf Club Sports & Events <= 2.21 versions.","source_quote_or_pointer":"Security Advisory CVE-2026-62124","fact_id":"SEA-CVE-2026-62124-F1","document_citation":"Security Advisory CVE-2026-62124"},{"id":"SEA-CVE-2026-62124-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Unauthenticated PHP Object Injection in N7 | Golf Club Sports & Events <= 2.21 versions.","source_quote_or_pointer":"Advisory description (CVE-2026-62124)","fact_id":"SEA-CVE-2026-62124-F2","document_citation":"Advisory description (CVE-2026-62124)"}],"source_stated_contributors":["Unauthenticated PHP Object Injection in N7 | Golf Club Sports & Events <= 2.21 versions."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["arch.event_driven"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-62124","reporting_entity":"CVE-2026-62124","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-62124-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-62124-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-62124"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-62123","title":"Unauthenticated PHP Object Injection in Invetex <= 2.18 versions.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-62123","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-62123","source_title":"Unauthenticated PHP Object Injection in Invetex <= 2.18 versions.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T10:01:16.205Z","source_hash":"content-fingerprint:fnv1a-80841bb","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-62123-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Unauthenticated PHP Object Injection in Invetex <= 2.18 versions.","source_quote_or_pointer":"Security Advisory CVE-2026-62123","fact_id":"SEA-CVE-2026-62123-F1","document_citation":"Security Advisory CVE-2026-62123"},{"id":"SEA-CVE-2026-62123-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Unauthenticated PHP Object Injection in Invetex <= 2.18 versions.","source_quote_or_pointer":"Advisory description (CVE-2026-62123)","fact_id":"SEA-CVE-2026-62123-F2","document_citation":"Advisory description (CVE-2026-62123)"}],"source_stated_contributors":["Unauthenticated PHP Object Injection in Invetex <= 2.18 versions."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-62123","reporting_entity":"CVE-2026-62123","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-62123-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-62123-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-62123"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-62120","title":"Unauthenticated PHP Object Injection in Law Office <= 3.20 versions.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-62120","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-62120","source_title":"Unauthenticated PHP Object Injection in Law Office <= 3.20 versions.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T10:01:16.205Z","source_hash":"content-fingerprint:fnv1a-f678566e","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-62120-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Unauthenticated PHP Object Injection in Law Office <= 3.20 versions.","source_quote_or_pointer":"Security Advisory CVE-2026-62120","fact_id":"SEA-CVE-2026-62120-F1","document_citation":"Security Advisory CVE-2026-62120"},{"id":"SEA-CVE-2026-62120-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Unauthenticated PHP Object Injection in Law Office <= 3.20 versions.","source_quote_or_pointer":"Advisory description (CVE-2026-62120)","fact_id":"SEA-CVE-2026-62120-F2","document_citation":"Advisory description (CVE-2026-62120)"}],"source_stated_contributors":["Unauthenticated PHP Object Injection in Law Office <= 3.20 versions."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-62120","reporting_entity":"CVE-2026-62120","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-62120-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-62120-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-62120"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-62117","title":"Subscriber SQL Injection in Barcode Scanner with Inventory & Order Manager <= 1.13.1 versions.","display_title":"Software component issue could expose or alter stored data","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-62117","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-62117","source_title":"Subscriber SQL Injection in Barcode Scanner with Inventory & Order Manager <= 1.13.1 versions.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T10:01:16.205Z","source_hash":"content-fingerprint:fnv1a-a957e8cc","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-62117-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Subscriber SQL Injection in Barcode Scanner with Inventory & Order Manager <= 1.13.1 versions.","source_quote_or_pointer":"Security Advisory CVE-2026-62117","fact_id":"SEA-CVE-2026-62117-F1","document_citation":"Security Advisory CVE-2026-62117"},{"id":"SEA-CVE-2026-62117-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Subscriber SQL Injection in Barcode Scanner with Inventory & Order Manager <= 1.13.1 versions.","source_quote_or_pointer":"Advisory description (CVE-2026-62117)","fact_id":"SEA-CVE-2026-62117-F2","document_citation":"Advisory description (CVE-2026-62117)"}],"source_stated_contributors":["Subscriber SQL Injection in Barcode Scanner with Inventory & Order Manager <= 1.13.1 versions."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-62117","reporting_entity":"CVE-2026-62117","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-62117-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-62117-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-62117"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-62090","title":"Unauthenticated PHP Object Injection in WineShop <= 3.20 versions.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-62090","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-62090","source_title":"Unauthenticated PHP Object Injection in WineShop <= 3.20 versions.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T10:01:16.205Z","source_hash":"content-fingerprint:fnv1a-9aefcf72","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-62090-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Unauthenticated PHP Object Injection in WineShop <= 3.20 versions.","source_quote_or_pointer":"Security Advisory CVE-2026-62090","fact_id":"SEA-CVE-2026-62090-F1","document_citation":"Security Advisory CVE-2026-62090"},{"id":"SEA-CVE-2026-62090-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Unauthenticated PHP Object Injection in WineShop <= 3.20 versions.","source_quote_or_pointer":"Advisory description (CVE-2026-62090)","fact_id":"SEA-CVE-2026-62090-F2","document_citation":"Advisory description (CVE-2026-62090)"}],"source_stated_contributors":["Unauthenticated PHP Object Injection in WineShop <= 3.20 versions."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-62090","reporting_entity":"CVE-2026-62090","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-62090-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-62090-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-62090"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-62087","title":"Unauthenticated PHP Object Injection in Equadio <= 1.1.4 versions.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-62087","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-62087","source_title":"Unauthenticated PHP Object Injection in Equadio <= 1.1.4 versions.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T10:01:16.205Z","source_hash":"content-fingerprint:fnv1a-8403e58a","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-62087-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Unauthenticated PHP Object Injection in Equadio <= 1.1.4 versions.","source_quote_or_pointer":"Security Advisory CVE-2026-62087","fact_id":"SEA-CVE-2026-62087-F1","document_citation":"Security Advisory CVE-2026-62087"},{"id":"SEA-CVE-2026-62087-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Unauthenticated PHP Object Injection in Equadio <= 1.1.4 versions.","source_quote_or_pointer":"Advisory description (CVE-2026-62087)","fact_id":"SEA-CVE-2026-62087-F2","document_citation":"Advisory description (CVE-2026-62087)"}],"source_stated_contributors":["Unauthenticated PHP Object Injection in Equadio <= 1.1.4 versions."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-62087","reporting_entity":"CVE-2026-62087","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-62087-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-62087-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-62087"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-62086","title":"Unauthenticated PHP Object Injection in Juno <= 2.25 versions.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-62086","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-62086","source_title":"Unauthenticated PHP Object Injection in Juno <= 2.25 versions.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T10:01:16.205Z","source_hash":"content-fingerprint:fnv1a-1692f4db","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-62086-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Unauthenticated PHP Object Injection in Juno <= 2.25 versions.","source_quote_or_pointer":"Security Advisory CVE-2026-62086","fact_id":"SEA-CVE-2026-62086-F1","document_citation":"Security Advisory CVE-2026-62086"},{"id":"SEA-CVE-2026-62086-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Unauthenticated PHP Object Injection in Juno <= 2.25 versions.","source_quote_or_pointer":"Advisory description (CVE-2026-62086)","fact_id":"SEA-CVE-2026-62086-F2","document_citation":"Advisory description (CVE-2026-62086)"}],"source_stated_contributors":["Unauthenticated PHP Object Injection in Juno <= 2.25 versions."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-62086","reporting_entity":"CVE-2026-62086","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-62086-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-62086-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-62086"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-62077","title":"Unauthenticated PHP Object Injection in Avala <= 1.1.4 versions.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-62077","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-62077","source_title":"Unauthenticated PHP Object Injection in Avala <= 1.1.4 versions.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T10:01:16.205Z","source_hash":"content-fingerprint:fnv1a-9deb722f","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-62077-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Unauthenticated PHP Object Injection in Avala <= 1.1.4 versions.","source_quote_or_pointer":"Security Advisory CVE-2026-62077","fact_id":"SEA-CVE-2026-62077-F1","document_citation":"Security Advisory CVE-2026-62077"},{"id":"SEA-CVE-2026-62077-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Unauthenticated PHP Object Injection in Avala <= 1.1.4 versions.","source_quote_or_pointer":"Advisory description (CVE-2026-62077)","fact_id":"SEA-CVE-2026-62077-F2","document_citation":"Advisory description (CVE-2026-62077)"}],"source_stated_contributors":["Unauthenticated PHP Object Injection in Avala <= 1.1.4 versions."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-62077","reporting_entity":"CVE-2026-62077","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-62077-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-62077-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-62077"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-62076","title":"Unauthenticated PHP Object Injection in Kalles <= 1.1.7.1 versions.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-62076","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-62076","source_title":"Unauthenticated PHP Object Injection in Kalles <= 1.1.7.1 versions.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T04:02:16.319Z","source_hash":"content-fingerprint:fnv1a-6b59c88","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-62076-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Unauthenticated PHP Object Injection in Kalles <= 1.1.7.1 versions.","source_quote_or_pointer":"Security Advisory CVE-2026-62076","fact_id":"SEA-CVE-2026-62076-F1","document_citation":"Security Advisory CVE-2026-62076"},{"id":"SEA-CVE-2026-62076-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Unauthenticated PHP Object Injection in Kalles <= 1.1.7.1 versions.","source_quote_or_pointer":"Advisory description (CVE-2026-62076)","fact_id":"SEA-CVE-2026-62076-F2","document_citation":"Advisory description (CVE-2026-62076)"}],"source_stated_contributors":["Unauthenticated PHP Object Injection in Kalles <= 1.1.7.1 versions."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-62076","reporting_entity":"CVE-2026-62076","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-62076-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-62076-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-62076"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-62054","title":"Unauthenticated PHP Object Injection in Yacht Rental <= 2.6 versions.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-62054","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-62054","source_title":"Unauthenticated PHP Object Injection in Yacht Rental <= 2.6 versions.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T04:02:16.319Z","source_hash":"content-fingerprint:fnv1a-f699f118","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-62054-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Unauthenticated PHP Object Injection in Yacht Rental <= 2.6 versions.","source_quote_or_pointer":"Security Advisory CVE-2026-62054","fact_id":"SEA-CVE-2026-62054-F1","document_citation":"Security Advisory CVE-2026-62054"},{"id":"SEA-CVE-2026-62054-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Unauthenticated PHP Object Injection in Yacht Rental <= 2.6 versions.","source_quote_or_pointer":"Advisory description (CVE-2026-62054)","fact_id":"SEA-CVE-2026-62054-F2","document_citation":"Advisory description (CVE-2026-62054)"}],"source_stated_contributors":["Unauthenticated PHP Object Injection in Yacht Rental <= 2.6 versions."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-62054","reporting_entity":"CVE-2026-62054","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-62054-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-62054-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-62054"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-62053","title":"Unauthenticated PHP Object Injection in Wine House <= 3.20 versions.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-62053","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-62053","source_title":"Unauthenticated PHP Object Injection in Wine House <= 3.20 versions.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T04:02:16.319Z","source_hash":"content-fingerprint:fnv1a-761cf669","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-62053-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Unauthenticated PHP Object Injection in Wine House <= 3.20 versions.","source_quote_or_pointer":"Security Advisory CVE-2026-62053","fact_id":"SEA-CVE-2026-62053-F1","document_citation":"Security Advisory CVE-2026-62053"},{"id":"SEA-CVE-2026-62053-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Unauthenticated PHP Object Injection in Wine House <= 3.20 versions.","source_quote_or_pointer":"Advisory description (CVE-2026-62053)","fact_id":"SEA-CVE-2026-62053-F2","document_citation":"Advisory description (CVE-2026-62053)"}],"source_stated_contributors":["Unauthenticated PHP Object Injection in Wine House <= 3.20 versions."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-62053","reporting_entity":"CVE-2026-62053","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-62053-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-62053-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-62053"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-62052","title":"Unauthenticated PHP Object Injection in Tipsy <= 1.6 versions.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-62052","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-62052","source_title":"Unauthenticated PHP Object Injection in Tipsy <= 1.6 versions.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T04:02:16.319Z","source_hash":"content-fingerprint:fnv1a-ce0e8f64","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-62052-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Unauthenticated PHP Object Injection in Tipsy <= 1.6 versions.","source_quote_or_pointer":"Security Advisory CVE-2026-62052","fact_id":"SEA-CVE-2026-62052-F1","document_citation":"Security Advisory CVE-2026-62052"},{"id":"SEA-CVE-2026-62052-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Unauthenticated PHP Object Injection in Tipsy <= 1.6 versions.","source_quote_or_pointer":"Advisory description (CVE-2026-62052)","fact_id":"SEA-CVE-2026-62052-F2","document_citation":"Advisory description (CVE-2026-62052)"}],"source_stated_contributors":["Unauthenticated PHP Object Injection in Tipsy <= 1.6 versions."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-62052","reporting_entity":"CVE-2026-62052","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-62052-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-62052-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-62052"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-62051","title":"Unauthenticated PHP Object Injection in Stargaze <= 1.10 versions.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-62051","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-62051","source_title":"Unauthenticated PHP Object Injection in Stargaze <= 1.10 versions.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T04:02:16.319Z","source_hash":"content-fingerprint:fnv1a-f4853f5b","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-62051-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Unauthenticated PHP Object Injection in Stargaze <= 1.10 versions.","source_quote_or_pointer":"Security Advisory CVE-2026-62051","fact_id":"SEA-CVE-2026-62051-F1","document_citation":"Security Advisory CVE-2026-62051"},{"id":"SEA-CVE-2026-62051-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Unauthenticated PHP Object Injection in Stargaze <= 1.10 versions.","source_quote_or_pointer":"Advisory description (CVE-2026-62051)","fact_id":"SEA-CVE-2026-62051-F2","document_citation":"Advisory description (CVE-2026-62051)"}],"source_stated_contributors":["Unauthenticated PHP Object Injection in Stargaze <= 1.10 versions."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-62051","reporting_entity":"CVE-2026-62051","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-62051-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-62051-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-62051"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-62050","title":"Unauthenticated PHP Object Injection in Splendour <= 1.23 versions.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-62050","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-62050","source_title":"Unauthenticated PHP Object Injection in Splendour <= 1.23 versions.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T04:02:16.319Z","source_hash":"content-fingerprint:fnv1a-422fcf08","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-62050-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Unauthenticated PHP Object Injection in Splendour <= 1.23 versions.","source_quote_or_pointer":"Security Advisory CVE-2026-62050","fact_id":"SEA-CVE-2026-62050-F1","document_citation":"Security Advisory CVE-2026-62050"},{"id":"SEA-CVE-2026-62050-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Unauthenticated PHP Object Injection in Splendour <= 1.23 versions.","source_quote_or_pointer":"Advisory description (CVE-2026-62050)","fact_id":"SEA-CVE-2026-62050-F2","document_citation":"Advisory description (CVE-2026-62050)"}],"source_stated_contributors":["Unauthenticated PHP Object Injection in Splendour <= 1.23 versions."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-62050","reporting_entity":"CVE-2026-62050","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-62050-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-62050-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-62050"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-62035","title":"Subscriber Broken Access Control in AWS S3 for WordPress Plugin – Upcasted <= 3.1.0 versions.","display_title":"Software component issue could allow unauthorized access","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-62035","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-62035","source_title":"Subscriber Broken Access Control in AWS S3 for WordPress Plugin – Upcasted <= 3.1.0 versions.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T04:02:16.319Z","source_hash":"content-fingerprint:fnv1a-8979b813","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-62035-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Subscriber Broken Access Control in AWS S3 for WordPress Plugin – Upcasted <= 3.1.0 versions.","source_quote_or_pointer":"Security Advisory CVE-2026-62035","fact_id":"SEA-CVE-2026-62035-F1","document_citation":"Security Advisory CVE-2026-62035"},{"id":"SEA-CVE-2026-62035-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Subscriber Broken Access Control in AWS S3 for WordPress Plugin – Upcasted <= 3.1.0 versions.","source_quote_or_pointer":"Advisory description (CVE-2026-62035)","fact_id":"SEA-CVE-2026-62035-F2","document_citation":"Advisory description (CVE-2026-62035)"}],"source_stated_contributors":["Subscriber Broken Access Control in AWS S3 for WordPress Plugin – Upcasted <= 3.1.0 versions."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.infrastructure_modification","arch.external_api"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-62035","reporting_entity":"CVE-2026-62035","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-62035-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-62035-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-62035"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-62031","title":"Unauthenticated SQL Injection in uListing <= 2.2.0 versions.","display_title":"Software component issue could expose or alter stored data","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-62031","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-62031","source_title":"Unauthenticated SQL Injection in uListing <= 2.2.0 versions.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T04:02:16.319Z","source_hash":"content-fingerprint:fnv1a-436432d9","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-62031-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Unauthenticated SQL Injection in uListing <= 2.2.0 versions.","source_quote_or_pointer":"Security Advisory CVE-2026-62031","fact_id":"SEA-CVE-2026-62031-F1","document_citation":"Security Advisory CVE-2026-62031"},{"id":"SEA-CVE-2026-62031-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Unauthenticated SQL Injection in uListing <= 2.2.0 versions.","source_quote_or_pointer":"Advisory description (CVE-2026-62031)","fact_id":"SEA-CVE-2026-62031-F2","document_citation":"Advisory description (CVE-2026-62031)"}],"source_stated_contributors":["Unauthenticated SQL Injection in uListing <= 2.2.0 versions."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-62031","reporting_entity":"CVE-2026-62031","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-62031-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-62031-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-62031"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-62030","title":"Unauthenticated Server Side Request Forgery (SSRF) in StreamCast <= 2.4.5 versions.","display_title":"Software component issue could reach internal services","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-62030","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-62030","source_title":"Unauthenticated Server Side Request Forgery (SSRF) in StreamCast <= 2.4.5 versions.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T04:02:16.319Z","source_hash":"content-fingerprint:fnv1a-c9c6df82","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-62030-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Unauthenticated Server Side Request Forgery (SSRF) in StreamCast <= 2.4.5 versions.","source_quote_or_pointer":"Security Advisory CVE-2026-62030","fact_id":"SEA-CVE-2026-62030-F1","document_citation":"Security Advisory CVE-2026-62030"},{"id":"SEA-CVE-2026-62030-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Unauthenticated Server Side Request Forgery (SSRF) in StreamCast <= 2.4.5 versions.","source_quote_or_pointer":"Advisory description (CVE-2026-62030)","fact_id":"SEA-CVE-2026-62030-F2","document_citation":"Advisory description (CVE-2026-62030)"}],"source_stated_contributors":["Unauthenticated Server Side Request Forgery (SSRF) in StreamCast <= 2.4.5 versions."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Internal network access","Cloud metadata or credential exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-62030","reporting_entity":"CVE-2026-62030","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-62030-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-62030-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"The service fetched a URL chosen by the caller and could be steered at internal systems. Restrict outbound destinations and block internal address ranges.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-62030"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-62021","title":"Subscriber PHP Object Injection in Angio <= 1.1.1 versions.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-62021","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-62021","source_title":"Subscriber PHP Object Injection in Angio <= 1.1.1 versions.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T04:02:16.319Z","source_hash":"content-fingerprint:fnv1a-8ab8198c","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-62021-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Subscriber PHP Object Injection in Angio <= 1.1.1 versions.","source_quote_or_pointer":"Security Advisory CVE-2026-62021","fact_id":"SEA-CVE-2026-62021-F1","document_citation":"Security Advisory CVE-2026-62021"},{"id":"SEA-CVE-2026-62021-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Subscriber PHP Object Injection in Angio <= 1.1.1 versions.","source_quote_or_pointer":"Advisory description (CVE-2026-62021)","fact_id":"SEA-CVE-2026-62021-F2","document_citation":"Advisory description (CVE-2026-62021)"}],"source_stated_contributors":["Subscriber PHP Object Injection in Angio <= 1.1.1 versions."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-62021","reporting_entity":"CVE-2026-62021","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-62021-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-62021-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-62021"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-45440","title":"Administrator SQL Injection in WP Ultimate CSV Importer <= 9.2 versions.","display_title":"Software component issue could expose or alter stored data","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-45440","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-45440","source_title":"Administrator SQL Injection in WP Ultimate CSV Importer <= 9.2 versions.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T00:01:20.964Z","source_hash":"content-fingerprint:fnv1a-1f413a36","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-45440-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Administrator SQL Injection in WP Ultimate CSV Importer <= 9.2 versions.","source_quote_or_pointer":"Security Advisory CVE-2026-45440","fact_id":"SEA-CVE-2026-45440-F1","document_citation":"Security Advisory CVE-2026-45440"},{"id":"SEA-CVE-2026-45440-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Administrator SQL Injection in WP Ultimate CSV Importer <= 9.2 versions.","source_quote_or_pointer":"Advisory description (CVE-2026-45440)","fact_id":"SEA-CVE-2026-45440-F2","document_citation":"Advisory description (CVE-2026-45440)"}],"source_stated_contributors":["Administrator SQL Injection in WP Ultimate CSV Importer <= 9.2 versions."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-45440","reporting_entity":"CVE-2026-45440","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-45440-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-45440-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-45440"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-42723","title":"Unauthenticated PHP Object Injection in CleanSkin <= 1.5.0 versions.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-42723","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42723","source_title":"Unauthenticated PHP Object Injection in CleanSkin <= 1.5.0 versions.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T00:01:20.964Z","source_hash":"content-fingerprint:fnv1a-b621e951","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-42723-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Unauthenticated PHP Object Injection in CleanSkin <= 1.5.0 versions.","source_quote_or_pointer":"Security Advisory CVE-2026-42723","fact_id":"SEA-CVE-2026-42723-F1","document_citation":"Security Advisory CVE-2026-42723"},{"id":"SEA-CVE-2026-42723-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Unauthenticated PHP Object Injection in CleanSkin <= 1.5.0 versions.","source_quote_or_pointer":"Advisory description (CVE-2026-42723)","fact_id":"SEA-CVE-2026-42723-F2","document_citation":"Advisory description (CVE-2026-42723)"}],"source_stated_contributors":["Unauthenticated PHP Object Injection in CleanSkin <= 1.5.0 versions."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-42723","reporting_entity":"CVE-2026-42723","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-42723-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-42723-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-42723"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-42722","title":"Administrator SQL Injection in Frontend Admin by DynamiApps <= 3.29.13 versions.","display_title":"Software component issue could expose or alter stored data","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-42722","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42722","source_title":"Administrator SQL Injection in Frontend Admin by DynamiApps <= 3.29.13 versions.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T00:01:20.964Z","source_hash":"content-fingerprint:fnv1a-15784dac","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-42722-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Administrator SQL Injection in Frontend Admin by DynamiApps <= 3.29.13 versions.","source_quote_or_pointer":"Security Advisory CVE-2026-42722","fact_id":"SEA-CVE-2026-42722-F1","document_citation":"Security Advisory CVE-2026-42722"},{"id":"SEA-CVE-2026-42722-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Administrator SQL Injection in Frontend Admin by DynamiApps <= 3.29.13 versions.","source_quote_or_pointer":"Advisory description (CVE-2026-42722)","fact_id":"SEA-CVE-2026-42722-F2","document_citation":"Advisory description (CVE-2026-42722)"}],"source_stated_contributors":["Administrator SQL Injection in Frontend Admin by DynamiApps <= 3.29.13 versions."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-42722","reporting_entity":"CVE-2026-42722","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-42722-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-42722-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-42722"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-42719","title":"Subscriber PHP Object Injection in Dynamic User Directory <= 2.4 versions.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-42719","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42719","source_title":"Subscriber PHP Object Injection in Dynamic User Directory <= 2.4 versions.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T00:01:20.964Z","source_hash":"content-fingerprint:fnv1a-921d03aa","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-42719-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Subscriber PHP Object Injection in Dynamic User Directory <= 2.4 versions.","source_quote_or_pointer":"Security Advisory CVE-2026-42719","fact_id":"SEA-CVE-2026-42719-F1","document_citation":"Security Advisory CVE-2026-42719"},{"id":"SEA-CVE-2026-42719-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Subscriber PHP Object Injection in Dynamic User Directory <= 2.4 versions.","source_quote_or_pointer":"Advisory description (CVE-2026-42719)","fact_id":"SEA-CVE-2026-42719-F2","document_citation":"Advisory description (CVE-2026-42719)"}],"source_stated_contributors":["Subscriber PHP Object Injection in Dynamic User Directory <= 2.4 versions."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-42719","reporting_entity":"CVE-2026-42719","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-42719-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-42719-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-42719"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-42718","title":"Unauthenticated PHP Object Injection in Booster for WooCommerce <= 8.4.0 versions.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-42718","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42718","source_title":"Unauthenticated PHP Object Injection in Booster for WooCommerce <= 8.4.0 versions.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T00:01:20.964Z","source_hash":"content-fingerprint:fnv1a-8e01284f","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-42718-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Unauthenticated PHP Object Injection in Booster for WooCommerce <= 8.4.0 versions.","source_quote_or_pointer":"Security Advisory CVE-2026-42718","fact_id":"SEA-CVE-2026-42718-F1","document_citation":"Security Advisory CVE-2026-42718"},{"id":"SEA-CVE-2026-42718-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Unauthenticated PHP Object Injection in Booster for WooCommerce <= 8.4.0 versions.","source_quote_or_pointer":"Advisory description (CVE-2026-42718)","fact_id":"SEA-CVE-2026-42718-F2","document_citation":"Advisory description (CVE-2026-42718)"}],"source_stated_contributors":["Unauthenticated PHP Object Injection in Booster for WooCommerce <= 8.4.0 versions."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-42718","reporting_entity":"CVE-2026-42718","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-42718-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-42718-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-42718"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-42717","title":"Administrator SQL Injection in Leyka <= 3.32.3 versions.","display_title":"Software component issue could expose or alter stored data","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-42717","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42717","source_title":"Administrator SQL Injection in Leyka <= 3.32.3 versions.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T00:01:20.964Z","source_hash":"content-fingerprint:fnv1a-8da2a1f4","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-42717-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Administrator SQL Injection in Leyka <= 3.32.3 versions.","source_quote_or_pointer":"Security Advisory CVE-2026-42717","fact_id":"SEA-CVE-2026-42717-F1","document_citation":"Security Advisory CVE-2026-42717"},{"id":"SEA-CVE-2026-42717-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Administrator SQL Injection in Leyka <= 3.32.3 versions.","source_quote_or_pointer":"Advisory description (CVE-2026-42717)","fact_id":"SEA-CVE-2026-42717-F2","document_citation":"Advisory description (CVE-2026-42717)"}],"source_stated_contributors":["Administrator SQL Injection in Leyka <= 3.32.3 versions."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-42717","reporting_entity":"CVE-2026-42717","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-42717-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-42717-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-42717"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-42716","title":"Unauthenticated PHP Object Injection in Payever - WooCommerce Gateway <= 4.8.2 versions.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-42716","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42716","source_title":"Unauthenticated PHP Object Injection in Payever - WooCommerce Gateway <= 4.8.2 versions.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T00:01:20.964Z","source_hash":"content-fingerprint:fnv1a-85041085","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-42716-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Unauthenticated PHP Object Injection in Payever - WooCommerce Gateway <= 4.8.2 versions.","source_quote_or_pointer":"Security Advisory CVE-2026-42716","fact_id":"SEA-CVE-2026-42716-F1","document_citation":"Security Advisory CVE-2026-42716"},{"id":"SEA-CVE-2026-42716-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Unauthenticated PHP Object Injection in Payever - WooCommerce Gateway <= 4.8.2 versions.","source_quote_or_pointer":"Advisory description (CVE-2026-42716)","fact_id":"SEA-CVE-2026-42716-F2","document_citation":"Advisory description (CVE-2026-42716)"}],"source_stated_contributors":["Unauthenticated PHP Object Injection in Payever - WooCommerce Gateway <= 4.8.2 versions."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-42716","reporting_entity":"CVE-2026-42716","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-42716-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-42716-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-42716"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-42712","title":"Subscriber SQL Injection in Qode Tours <= 3.1.3.2 versions.","display_title":"Software component issue could expose or alter stored data","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-42712","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42712","source_title":"Subscriber SQL Injection in Qode Tours <= 3.1.3.2 versions.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T00:01:20.964Z","source_hash":"content-fingerprint:fnv1a-125ea5f","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-42712-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Subscriber SQL Injection in Qode Tours <= 3.1.3.2 versions.","source_quote_or_pointer":"Security Advisory CVE-2026-42712","fact_id":"SEA-CVE-2026-42712-F1","document_citation":"Security Advisory CVE-2026-42712"},{"id":"SEA-CVE-2026-42712-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Subscriber SQL Injection in Qode Tours <= 3.1.3.2 versions.","source_quote_or_pointer":"Advisory description (CVE-2026-42712)","fact_id":"SEA-CVE-2026-42712-F2","document_citation":"Advisory description (CVE-2026-42712)"}],"source_stated_contributors":["Subscriber SQL Injection in Qode Tours <= 3.1.3.2 versions."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-42712","reporting_entity":"CVE-2026-42712","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-42712-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-42712-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-42712"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-42633","title":"Subscriber SQL Injection in Events Manager <= 7.4.6 versions.","display_title":"Software component issue could expose or alter stored data","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-42633","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42633","source_title":"Subscriber SQL Injection in Events Manager <= 7.4.6 versions.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T00:01:20.964Z","source_hash":"content-fingerprint:fnv1a-62e22dcd","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-42633-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Subscriber SQL Injection in Events Manager <= 7.4.6 versions.","source_quote_or_pointer":"Security Advisory CVE-2026-42633","fact_id":"SEA-CVE-2026-42633-F1","document_citation":"Security Advisory CVE-2026-42633"},{"id":"SEA-CVE-2026-42633-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Subscriber SQL Injection in Events Manager <= 7.4.6 versions.","source_quote_or_pointer":"Advisory description (CVE-2026-42633)","fact_id":"SEA-CVE-2026-42633-F2","document_citation":"Advisory description (CVE-2026-42633)"}],"source_stated_contributors":["Subscriber SQL Injection in Events Manager <= 7.4.6 versions."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["arch.event_driven"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-42633","reporting_entity":"CVE-2026-42633","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-42633-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-42633-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-42633"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-40800","title":"Subscriber SQL Injection in ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes <= 1.5.3 versions.","display_title":"Software component issue could expose or alter stored data","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-40800","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-40800","source_title":"Subscriber SQL Injection in ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes <= 1.5.3 versions.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T00:01:20.964Z","source_hash":"content-fingerprint:fnv1a-a1e92ad5","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-40800-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Subscriber SQL Injection in ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes <= 1.5.3 versions.","source_quote_or_pointer":"Security Advisory CVE-2026-40800","fact_id":"SEA-CVE-2026-40800-F1","document_citation":"Security Advisory CVE-2026-40800"},{"id":"SEA-CVE-2026-40800-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Subscriber SQL Injection in ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes <= 1.5.3 versions.","source_quote_or_pointer":"Advisory description (CVE-2026-40800)","fact_id":"SEA-CVE-2026-40800-F2","document_citation":"Advisory description (CVE-2026-40800)"}],"source_stated_contributors":["Subscriber SQL Injection in ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes <= 1.5.3 versions."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-40800","reporting_entity":"CVE-2026-40800","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-40800-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-40800-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-40800"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-27350","title":"Server-Side Request Forgery (SSRF) vulnerability in Builderius.io Builderius allows Server Side Request Forgery. This issue affects Builderius: from 1.4 through 1.4-beta.","display_title":"Software component issue could reach internal services","display_summary":"Server-Side Request Forgery (SSRF) vulnerability in Builderius.io Builderius allows Server Side Request Forgery.","display_reference":"CVE-2026-27350","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-27350","source_title":"Server-Side Request Forgery (SSRF) vulnerability in Builderius.io Builderius allows Server Side Request Forgery. This issue affects Builderius: from 1.4 through 1.4-beta.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T00:01:20.964Z","source_hash":"content-fingerprint:fnv1a-ac90401c","affected_system":{"organization":"Server-Side Request Forgery (SSRF) vulnerability in Builderius.io Builderius allows Server Side Request Forgery. This issue affects Builderius project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-27350-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Server-Side Request Forgery (SSRF) vulnerability in Builderius.io Builderius allows Server Side Request Forgery. This issue affects Builderius: from 1.4 through 1.4-beta.","source_quote_or_pointer":"Security Advisory CVE-2026-27350","fact_id":"SEA-CVE-2026-27350-F1","document_citation":"Security Advisory CVE-2026-27350"},{"id":"SEA-CVE-2026-27350-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Server-Side Request Forgery (SSRF) vulnerability in Builderius.io Builderius allows Server Side Request Forgery.","source_quote_or_pointer":"Advisory description (CVE-2026-27350)","fact_id":"SEA-CVE-2026-27350-F2","document_citation":"Advisory description (CVE-2026-27350)"}],"source_stated_contributors":["Server-Side Request Forgery (SSRF) vulnerability in Builderius.io Builderius allows Server Side Request Forgery."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Internal network access","Cloud metadata or credential exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-27350","reporting_entity":"CVE-2026-27350","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-27350-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-27350-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"The service fetched a URL chosen by the caller and could be steered at internal systems. Restrict outbound destinations and block internal address ranges.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-27350"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108604","title":"Tabularis through 0.27.0 contains an incorrect authorization vulnerability in the MCP run_query safety gate that allows prompt-injected agents or untrusted MCP clients to bypass read-only mode by submitting side-effecting SELECT statements. Attackers can run statements like SELECT setval, nextval, or PostgreSQL query_to_xml with embedded DELETE to modify data without approval prompts.","display_title":"Security issue reported in Software component","display_summary":"Tabularis through 0.27.0 contains an incorrect authorization vulnerability in the MCP runquery safety gate that allows prompt-injected agents or untrusted MCP clients to bypass read-only mode by submitting side-effecting…","display_reference":"CVE-2026-108604","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108604","source_title":"Tabularis through 0.27.0 contains an incorrect authorization vulnerability in the MCP run_query safety gate that allows prompt-injected agents or untrusted MCP clients to bypass read-only mode by submitting side-effecting SELECT statements. Attackers can run statements like SELECT setval, nextval, or PostgreSQL query_to_xml with embedded DELETE to modify data without approval prompts.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T00:01:20.964Z","source_hash":"content-fingerprint:fnv1a-800cc27c","affected_system":{"organization":"Software component project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108604-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Tabularis through 0.27.0 contains an incorrect authorization vulnerability in the MCP run_query safety gate that allows prompt-injected agents or untrusted MCP clients to bypass read-only mode by submitting side-effecting SELECT statements. Attackers can run statements like SELECT setval, nextval, or PostgreSQL query_to_xml with embedded DELETE to modify data without approval prompts.","source_quote_or_pointer":"Security Advisory CVE-2026-108604","fact_id":"SEA-CVE-2026-108604-F1","document_citation":"Security Advisory CVE-2026-108604"},{"id":"SEA-CVE-2026-108604-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Tabularis through 0.27.0 contains an incorrect authorization vulnerability in the MCP runquery safety gate that allows prompt-injected agents or untrusted MCP clients to bypass read-only mode by submitting side-effecting SELECT statements.","source_quote_or_pointer":"Advisory description (CVE-2026-108604)","fact_id":"SEA-CVE-2026-108604-F2","document_citation":"Advisory description (CVE-2026-108604)"}],"source_stated_contributors":["Tabularis through 0.27.0 contains an incorrect authorization vulnerability in the MCP runquery safety gate that allows prompt-injected agents or untrusted MCP clients to bypass read-only mode by submitting side-effecting SELECT statements."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.write_action","data.untrusted_external_text","arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-010"],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108604","reporting_entity":"CVE-2026-108604","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108604-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108604-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-108604"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108602","title":"Helicone through v2025.08.21-1 contains a server-side request forgery vulnerability in the Jawn webhook sender that allows authenticated organization users to reach internal services by using hostnames resolving to private addresses. Attackers can create webhooks with public hostnames that resolve or DNS-rebind to loopback or internal addresses, causing blind POST requests to internal HTTPS services.","display_title":"Software component issue could reach internal services","display_summary":"Helicone through v2025.08.21-1 contains a server-side request forgery vulnerability in the Jawn webhook sender that allows authenticated organization users to reach internal services by using hostnames resolving to…","display_reference":"CVE-2026-108602","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108602","source_title":"Helicone through v2025.08.21-1 contains a server-side request forgery vulnerability in the Jawn webhook sender that allows authenticated organization users to reach internal services by using hostnames resolving to private addresses. Attackers can create webhooks with public hostnames that resolve or DNS-rebind to loopback or internal addresses, causing blind POST requests to internal HTTPS services.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T00:01:20.964Z","source_hash":"content-fingerprint:fnv1a-e1ec1416","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108602-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Helicone through v2025.08.21-1 contains a server-side request forgery vulnerability in the Jawn webhook sender that allows authenticated organization users to reach internal services by using hostnames resolving to private addresses. Attackers can create webhooks with public hostnames that resolve or DNS-rebind to loopback or internal addresses, causing blind POST requests to internal HTTPS services.","source_quote_or_pointer":"Security Advisory CVE-2026-108602","fact_id":"SEA-CVE-2026-108602-F1","document_citation":"Security Advisory CVE-2026-108602"},{"id":"SEA-CVE-2026-108602-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Helicone through v2025.08.21-1 contains a server-side request forgery vulnerability in the Jawn webhook sender that allows authenticated organization users to reach internal services by using hostnames resolving to private addresses.","source_quote_or_pointer":"Advisory description (CVE-2026-108602)","fact_id":"SEA-CVE-2026-108602-F2","document_citation":"Advisory description (CVE-2026-108602)"}],"source_stated_contributors":["Helicone through v2025.08.21-1 contains a server-side request forgery vulnerability in the Jawn webhook sender that allows authenticated organization users to reach internal services by using hostnames resolving to private addresses."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.public_publication","data.pii","arch.external_api","arch.event_driven"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Internal network access","Cloud metadata or credential exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108602","reporting_entity":"CVE-2026-108602","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108602-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108602-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"The service fetched a URL chosen by the caller and could be steered at internal systems. Restrict outbound destinations and block internal address ranges.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108602"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108600","title":"open-multi-agent (@open-multi-agent/core) 1.5.0 through 1.21.2 contains a link following vulnerability in the file_write tool sandbox that allows attackers to create files outside the workspace root by using dangling symlinks. Attackers can plant a dangling symlink in the workspace and steer the agent via prompt injection to write attacker-influenced content anywhere the agent process can write.","display_title":"Security issue reported in Software component","display_summary":"open-multi-agent (@open-multi-agent/core) 1.5.0 through 1.21.2 contains a link following vulnerability in the filewrite tool sandbox that allows attackers to create files outside the workspace root by using dangling…","display_reference":"CVE-2026-108600","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108600","source_title":"open-multi-agent (@open-multi-agent/core) 1.5.0 through 1.21.2 contains a link following vulnerability in the file_write tool sandbox that allows attackers to create files outside the workspace root by using dangling symlinks. Attackers can plant a dangling symlink in the workspace and steer the agent via prompt injection to write attacker-influenced content anywhere the agent process can write.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T00:01:20.964Z","source_hash":"content-fingerprint:fnv1a-c3646eda","affected_system":{"organization":"Software component project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108600-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"open-multi-agent (@open-multi-agent/core) 1.5.0 through 1.21.2 contains a link following vulnerability in the file_write tool sandbox that allows attackers to create files outside the workspace root by using dangling symlinks. Attackers can plant a dangling symlink in the workspace and steer the agent via prompt injection to write attacker-influenced content anywhere the agent process can write.","source_quote_or_pointer":"Security Advisory CVE-2026-108600","fact_id":"SEA-CVE-2026-108600-F1","document_citation":"Security Advisory CVE-2026-108600"},{"id":"SEA-CVE-2026-108600-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"open-multi-agent (@open-multi-agent/core) 1.5.0 through 1.21.2 contains a link following vulnerability in the filewrite tool sandbox that allows attackers to create files outside the workspace root by using dangling symlinks.","source_quote_or_pointer":"Advisory description (CVE-2026-108600)","fact_id":"SEA-CVE-2026-108600-F2","document_citation":"Advisory description (CVE-2026-108600)"}],"source_stated_contributors":["open-multi-agent (@open-multi-agent/core) 1.5.0 through 1.21.2 contains a link following vulnerability in the filewrite tool sandbox that allows attackers to create files outside the workspace root by using dangling symlinks."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.code_execution","auth.privileged_action","auth.write_action","arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-004","SEA-FM-002","SEA-FM-010"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108600","reporting_entity":"CVE-2026-108600","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108600-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108600-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108600"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108598","title":"Floci 1.1.0 before 2.2.0 contains a code injection vulnerability in VtlTemplateEngine that allows unauthenticated attackers to execute commands via unrestricted Velocity mapping templates. Attackers can create a REST API with a MOCK integration whose template uses $util reflection to reach Runtime or ProcessBuilder, executing OS commands in the Floci JVM.","display_title":"Security issue reported in Software component","display_summary":"Floci 1.1.0 before 2.2.0 contains a code injection vulnerability in VtlTemplateEngine that allows unauthenticated attackers to execute commands via unrestricted Velocity mapping templates.","display_reference":"CVE-2026-108598","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108598","source_title":"Floci 1.1.0 before 2.2.0 contains a code injection vulnerability in VtlTemplateEngine that allows unauthenticated attackers to execute commands via unrestricted Velocity mapping templates. Attackers can create a REST API with a MOCK integration whose template uses $util reflection to reach Runtime or ProcessBuilder, executing OS commands in the Floci JVM.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T00:01:20.964Z","source_hash":"content-fingerprint:fnv1a-c7c5fc02","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108598-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Floci 1.1.0 before 2.2.0 contains a code injection vulnerability in VtlTemplateEngine that allows unauthenticated attackers to execute commands via unrestricted Velocity mapping templates. Attackers can create a REST API with a MOCK integration whose template uses $util reflection to reach Runtime or ProcessBuilder, executing OS commands in the Floci JVM.","source_quote_or_pointer":"Security Advisory CVE-2026-108598","fact_id":"SEA-CVE-2026-108598-F1","document_citation":"Security Advisory CVE-2026-108598"},{"id":"SEA-CVE-2026-108598-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Floci 1.1.0 before 2.2.0 contains a code injection vulnerability in VtlTemplateEngine that allows unauthenticated attackers to execute commands via unrestricted Velocity mapping templates.","source_quote_or_pointer":"Advisory description (CVE-2026-108598)","fact_id":"SEA-CVE-2026-108598-F2","document_citation":"Advisory description (CVE-2026-108598)"}],"source_stated_contributors":["Floci 1.1.0 before 2.2.0 contains a code injection vulnerability in VtlTemplateEngine that allows unauthenticated attackers to execute commands via unrestricted Velocity mapping templates."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108598","reporting_entity":"CVE-2026-108598","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108598-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108598-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-108598"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108597","title":"Cohere Python SDK 5.11.0 through 7.2.0 contains a path traversal (tar slip) vulnerability in _s3_models_dir_to_tarfile that allows arbitrary file write via unvalidated tarfile.extractall calls. Attackers who can write model archives to the victim's S3 prefix can include absolute paths or ../ members to overwrite files on the SDK host.","display_title":"Software component issue could expose restricted files","display_summary":"Cohere Python SDK 5.11.0 through 7.2.0 contains a path traversal (tar slip) vulnerability in s3modelsdirtotarfile that allows arbitrary file write via unvalidated tarfile.extractall calls.","display_reference":"CVE-2026-108597","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108597","source_title":"Cohere Python SDK 5.11.0 through 7.2.0 contains a path traversal (tar slip) vulnerability in _s3_models_dir_to_tarfile that allows arbitrary file write via unvalidated tarfile.extractall calls. Attackers who can write model archives to the victim's S3 prefix can include absolute paths or ../ members to overwrite files on the SDK host.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T00:01:20.964Z","source_hash":"content-fingerprint:fnv1a-ad0f2f65","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108597-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Cohere Python SDK 5.11.0 through 7.2.0 contains a path traversal (tar slip) vulnerability in _s3_models_dir_to_tarfile that allows arbitrary file write via unvalidated tarfile.extractall calls. Attackers who can write model archives to the victim's S3 prefix can include absolute paths or ../ members to overwrite files on the SDK host.","source_quote_or_pointer":"Security Advisory CVE-2026-108597","fact_id":"SEA-CVE-2026-108597-F1","document_citation":"Security Advisory CVE-2026-108597"},{"id":"SEA-CVE-2026-108597-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Cohere Python SDK 5.11.0 through 7.2.0 contains a path traversal (tar slip) vulnerability in s3modelsdirtotarfile that allows arbitrary file write via unvalidated tarfile.extractall calls.","source_quote_or_pointer":"Advisory description (CVE-2026-108597)","fact_id":"SEA-CVE-2026-108597-F2","document_citation":"Advisory description (CVE-2026-108597)"}],"source_stated_contributors":["Cohere Python SDK 5.11.0 through 7.2.0 contains a path traversal (tar slip) vulnerability in s3modelsdirtotarfile that allows arbitrary file write via unvalidated tarfile.extractall calls."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.infrastructure_modification","auth.write_action","arch.external_api"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Restricted file exposure","File overwrite"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108597","reporting_entity":"CVE-2026-108597","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108597-SG1","label":"Confine file access to a fixed root","description":"Resolve paths to canonical form and reject anything outside the intended directory before opening files.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108597-SG1","label":"Confine file access to a fixed root","description":"Resolve paths to canonical form and reject anything outside the intended directory before opening files.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"File paths supplied by a caller escaped the intended directory. Canonicalise paths and confine file access to a fixed root.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108597"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108596","title":"OpenLIT 2.1.0 contains an authorization bypass vulnerability that allows authenticated users to read other projects' telemetry by supplying a forged x-openlit-project-id header. Attackers who know a victim project id and database config id can query the trace read API to obtain traces including LLM prompts and completions.","display_title":"Software component issue could allow unauthorized access","display_summary":"OpenLIT 2.1.0 contains an authorization bypass vulnerability that allows authenticated users to read other projects' telemetry by supplying a forged x-openlit-project-id header.","display_reference":"CVE-2026-108596","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108596","source_title":"OpenLIT 2.1.0 contains an authorization bypass vulnerability that allows authenticated users to read other projects' telemetry by supplying a forged x-openlit-project-id header. Attackers who know a victim project id and database config id can query the trace read API to obtain traces including LLM prompts and completions.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T00:01:20.964Z","source_hash":"content-fingerprint:fnv1a-7f026f9c","affected_system":{"organization":"Software component project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108596-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"OpenLIT 2.1.0 contains an authorization bypass vulnerability that allows authenticated users to read other projects' telemetry by supplying a forged x-openlit-project-id header. Attackers who know a victim project id and database config id can query the trace read API to obtain traces including LLM prompts and completions.","source_quote_or_pointer":"Security Advisory CVE-2026-108596","fact_id":"SEA-CVE-2026-108596-F1","document_citation":"Security Advisory CVE-2026-108596"},{"id":"SEA-CVE-2026-108596-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"OpenLIT 2.1.0 contains an authorization bypass vulnerability that allows authenticated users to read other projects' telemetry by supplying a forged x-openlit-project-id header.","source_quote_or_pointer":"Advisory description (CVE-2026-108596)","fact_id":"SEA-CVE-2026-108596-F2","document_citation":"Advisory description (CVE-2026-108596)"}],"source_stated_contributors":["OpenLIT 2.1.0 contains an authorization bypass vulnerability that allows authenticated users to read other projects' telemetry by supplying a forged x-openlit-project-id header."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.pii","data.untrusted_external_text","arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108596","reporting_entity":"CVE-2026-108596","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108596-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108596-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108596"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108595","title":"Phi 0.3.0 through 0.28.4 contains a permission bypass vulnerability that allows spawned sub-agents to escape workspace_only_writes and readonly mode by supplying an unchecked workdir to agent_spawn. Attackers can plant prompt-injected instructions in processed content so the agent spawns a worker rooted elsewhere, causing unapproved file writes anywhere the user can write.","display_title":"Security issue reported in Software component","display_summary":"Phi 0.3.0 through 0.28.4 contains a permission bypass vulnerability that allows spawned sub-agents to escape workspaceonlywrites and readonly mode by supplying an unchecked workdir to agentspawn.","display_reference":"CVE-2026-108595","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108595","source_title":"Phi 0.3.0 through 0.28.4 contains a permission bypass vulnerability that allows spawned sub-agents to escape workspace_only_writes and readonly mode by supplying an unchecked workdir to agent_spawn. Attackers can plant prompt-injected instructions in processed content so the agent spawns a worker rooted elsewhere, causing unapproved file writes anywhere the user can write.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T00:01:20.964Z","source_hash":"content-fingerprint:fnv1a-5dd9cb2f","affected_system":{"organization":"Software component project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108595-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Phi 0.3.0 through 0.28.4 contains a permission bypass vulnerability that allows spawned sub-agents to escape workspace_only_writes and readonly mode by supplying an unchecked workdir to agent_spawn. Attackers can plant prompt-injected instructions in processed content so the agent spawns a worker rooted elsewhere, causing unapproved file writes anywhere the user can write.","source_quote_or_pointer":"Security Advisory CVE-2026-108595","fact_id":"SEA-CVE-2026-108595-F1","document_citation":"Security Advisory CVE-2026-108595"},{"id":"SEA-CVE-2026-108595-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Phi 0.3.0 through 0.28.4 contains a permission bypass vulnerability that allows spawned sub-agents to escape workspaceonlywrites and readonly mode by supplying an unchecked workdir to agentspawn.","source_quote_or_pointer":"Advisory description (CVE-2026-108595)","fact_id":"SEA-CVE-2026-108595-F2","document_citation":"Advisory description (CVE-2026-108595)"}],"source_stated_contributors":["Phi 0.3.0 through 0.28.4 contains a permission bypass vulnerability that allows spawned sub-agents to escape workspaceonlywrites and readonly mode by supplying an unchecked workdir to agentspawn."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.write_action","data.pii","arch.async_job","arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-010"],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108595","reporting_entity":"CVE-2026-108595","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108595-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108595-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-108595"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108594","title":"Mealie 3.26.0 through 3.28.0 contains a server-side request forgery vulnerability in the OpenID Connect avatar fetch that ignores ports when allowlisting the identity provider hostname. Authenticated OIDC users who control their picture URL can make the server send GET requests to arbitrary ports on the provider's internal address on each login.","display_title":"Software component issue could reach internal services","display_summary":"Mealie 3.26.0 through 3.28.0 contains a server-side request forgery vulnerability in the OpenID Connect avatar fetch that ignores ports when allowlisting the identity provider hostname.","display_reference":"CVE-2026-108594","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108594","source_title":"Mealie 3.26.0 through 3.28.0 contains a server-side request forgery vulnerability in the OpenID Connect avatar fetch that ignores ports when allowlisting the identity provider hostname. Authenticated OIDC users who control their picture URL can make the server send GET requests to arbitrary ports on the provider's internal address on each login.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T00:01:20.964Z","source_hash":"content-fingerprint:fnv1a-eac7ad28","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108594-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Mealie 3.26.0 through 3.28.0 contains a server-side request forgery vulnerability in the OpenID Connect avatar fetch that ignores ports when allowlisting the identity provider hostname. Authenticated OIDC users who control their picture URL can make the server send GET requests to arbitrary ports on the provider's internal address on each login.","source_quote_or_pointer":"Security Advisory CVE-2026-108594","fact_id":"SEA-CVE-2026-108594-F1","document_citation":"Security Advisory CVE-2026-108594"},{"id":"SEA-CVE-2026-108594-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Mealie 3.26.0 through 3.28.0 contains a server-side request forgery vulnerability in the OpenID Connect avatar fetch that ignores ports when allowlisting the identity provider hostname.","source_quote_or_pointer":"Advisory description (CVE-2026-108594)","fact_id":"SEA-CVE-2026-108594-F2","document_citation":"Advisory description (CVE-2026-108594)"}],"source_stated_contributors":["Mealie 3.26.0 through 3.28.0 contains a server-side request forgery vulnerability in the OpenID Connect avatar fetch that ignores ports when allowlisting the identity provider hostname."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Internal network access","Cloud metadata or credential exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108594","reporting_entity":"CVE-2026-108594","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108594-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108594-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"The service fetched a URL chosen by the caller and could be steered at internal systems. Restrict outbound destinations and block internal address ranges.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108594"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108593","title":"9router 0.4.1 through 0.5.99 contains a configuration injection vulnerability in the POST /api/cli-tools/hermes-settings endpoint that allows authenticated dashboard users to inject arbitrary keys into the Hermes Agent config.yaml file. Attackers can submit a baseUrl containing double quotes and newlines to add hooks_auto_accept and a hooks.post_llm_call shell command, which Hermes Agent executes without approval after an LLM call.","display_title":"Security issue reported in Software component","display_summary":"9router 0.4.1 through 0.5.99 contains a configuration injection vulnerability in the POST /api/cli-tools/hermes-settings endpoint that allows authenticated dashboard users to inject arbitrary keys into the Hermes Agent…","display_reference":"CVE-2026-108593","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108593","source_title":"9router 0.4.1 through 0.5.99 contains a configuration injection vulnerability in the POST /api/cli-tools/hermes-settings endpoint that allows authenticated dashboard users to inject arbitrary keys into the Hermes Agent config.yaml file. Attackers can submit a baseUrl containing double quotes and newlines to add hooks_auto_accept and a hooks.post_llm_call shell command, which Hermes Agent executes without approval after an LLM call.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T00:01:20.964Z","source_hash":"content-fingerprint:fnv1a-ea443389","affected_system":{"organization":"Software component project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108593-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"9router 0.4.1 through 0.5.99 contains a configuration injection vulnerability in the POST /api/cli-tools/hermes-settings endpoint that allows authenticated dashboard users to inject arbitrary keys into the Hermes Agent config.yaml file. Attackers can submit a baseUrl containing double quotes and newlines to add hooks_auto_accept and a hooks.post_llm_call shell command, which Hermes Agent executes without approval after an LLM call.","source_quote_or_pointer":"Security Advisory CVE-2026-108593","fact_id":"SEA-CVE-2026-108593-F1","document_citation":"Security Advisory CVE-2026-108593"},{"id":"SEA-CVE-2026-108593-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"9router 0.4.1 through 0.5.99 contains a configuration injection vulnerability in the POST /api/cli-tools/hermes-settings endpoint that allows authenticated dashboard users to inject arbitrary keys into the Hermes Agent config.yaml file.","source_quote_or_pointer":"Advisory description (CVE-2026-108593)","fact_id":"SEA-CVE-2026-108593-F2","document_citation":"Advisory description (CVE-2026-108593)"}],"source_stated_contributors":["9router 0.4.1 through 0.5.99 contains a configuration injection vulnerability in the POST /api/cli-tools/hermes-settings endpoint that allows authenticated dashboard users to inject arbitrary keys into the Hermes Agent config.yaml file."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.code_execution","data.pii","arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-010"],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108593","reporting_entity":"CVE-2026-108593","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108593-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108593-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-108593"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108592","title":"mini-swe-agent 1.10.0 through 2.4.6 contains an information exposure vulnerability in BubblewrapEnvironment because bwrap omits --clearenv, so sandboxed commands inherit the host environment. Attackers using prompt injection in processed task content can make the agent read API keys from the environment and exfiltrate them over the shared network.","display_title":"Security issue reported in Software component","display_summary":"mini-swe-agent 1.10.0 through 2.4.6 contains an information exposure vulnerability in BubblewrapEnvironment because bwrap omits --clearenv, so sandboxed commands inherit the host environment.","display_reference":"CVE-2026-108592","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108592","source_title":"mini-swe-agent 1.10.0 through 2.4.6 contains an information exposure vulnerability in BubblewrapEnvironment because bwrap omits --clearenv, so sandboxed commands inherit the host environment. Attackers using prompt injection in processed task content can make the agent read API keys from the environment and exfiltrate them over the shared network.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T00:01:20.964Z","source_hash":"content-fingerprint:fnv1a-e47c738a","affected_system":{"organization":"Software component project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108592-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"mini-swe-agent 1.10.0 through 2.4.6 contains an information exposure vulnerability in BubblewrapEnvironment because bwrap omits --clearenv, so sandboxed commands inherit the host environment. Attackers using prompt injection in processed task content can make the agent read API keys from the environment and exfiltrate them over the shared network.","source_quote_or_pointer":"Security Advisory CVE-2026-108592","fact_id":"SEA-CVE-2026-108592-F1","document_citation":"Security Advisory CVE-2026-108592"},{"id":"SEA-CVE-2026-108592-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"mini-swe-agent 1.10.0 through 2.4.6 contains an information exposure vulnerability in BubblewrapEnvironment because bwrap omits --clearenv, so sandboxed commands inherit the host environment.","source_quote_or_pointer":"Advisory description (CVE-2026-108592)","fact_id":"SEA-CVE-2026-108592-F2","document_citation":"Advisory description (CVE-2026-108592)"}],"source_stated_contributors":["mini-swe-agent 1.10.0 through 2.4.6 contains an information exposure vulnerability in BubblewrapEnvironment because bwrap omits --clearenv, so sandboxed commands inherit the host environment."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.code_execution","arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-004","SEA-FM-002","SEA-FM-010"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108592","reporting_entity":"CVE-2026-108592","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108592-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108592-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108592"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108591","title":"InnoShop 0.9.2 contains a local file disclosure vulnerability that allows authenticated administrators with files_create permission to read server files by abusing the AI Core MCP file_upload tool's source argument. Attackers can supply file:// or php:// stream wrappers passed to file_get_contents(), storing contents on the public media disk to expose the .env file with APP_KEY and database credentials.","display_title":"Software component issue could expose accounts or credentials","display_summary":"InnoShop 0.9.2 contains a local file disclosure vulnerability that allows authenticated administrators with filescreate permission to read server files by abusing the AI Core MCP fileupload tool's source argument.","display_reference":"CVE-2026-108591","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108591","source_title":"InnoShop 0.9.2 contains a local file disclosure vulnerability that allows authenticated administrators with files_create permission to read server files by abusing the AI Core MCP file_upload tool's source argument. Attackers can supply file:// or php:// stream wrappers passed to file_get_contents(), storing contents on the public media disk to expose the .env file with APP_KEY and database credentials.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T00:01:20.964Z","source_hash":"content-fingerprint:fnv1a-dfd3825","affected_system":{"organization":"InnoShop 0.9.2 contains a local file disclosure vulnerability that allows authenticated administrators with filescreate permission to read server files by abusing the AI Core MCP fileupload tool's source argument. Attackers can supply file project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108591-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"InnoShop 0.9.2 contains a local file disclosure vulnerability that allows authenticated administrators with files_create permission to read server files by abusing the AI Core MCP file_upload tool's source argument. Attackers can supply file:// or php:// stream wrappers passed to file_get_contents(), storing contents on the public media disk to expose the .env file with APP_KEY and database credentials.","source_quote_or_pointer":"Security Advisory CVE-2026-108591","fact_id":"SEA-CVE-2026-108591-F1","document_citation":"Security Advisory CVE-2026-108591"},{"id":"SEA-CVE-2026-108591-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"InnoShop 0.9.2 contains a local file disclosure vulnerability that allows authenticated administrators with filescreate permission to read server files by abusing the AI Core MCP fileupload tool's source argument.","source_quote_or_pointer":"Advisory description (CVE-2026-108591)","fact_id":"SEA-CVE-2026-108591-F2","document_citation":"Advisory description (CVE-2026-108591)"}],"source_stated_contributors":["InnoShop 0.9.2 contains a local file disclosure vulnerability that allows authenticated administrators with filescreate permission to read server files by abusing the AI Core MCP fileupload tool's source argument."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.write_action","auth.public_publication","data.credentials_secrets","arch.async_job","arch.event_driven","arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-012","SEA-FM-010"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108591","reporting_entity":"CVE-2026-108591","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108591-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108591-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108591"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108586","title":"1MCP Agent (@1mcp/agent) 0.20.0 through 0.39.0 contains an incorrect authorization vulnerability that allows authenticated clients to bypass OAuth tag-scope enforcement using negated advanced tag-filter expressions. Attackers holding a single-tag token can send a filter like not <granted-tag> to list and invoke tools on backend MCP servers outside their granted scopes.","display_title":"Security issue reported in Software component","display_summary":"1MCP Agent (@1mcp/agent) 0.20.0 through 0.39.0 contains an incorrect authorization vulnerability that allows authenticated clients to bypass OAuth tag-scope enforcement using negated advanced tag-filter expressions.","display_reference":"CVE-2026-108586","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108586","source_title":"1MCP Agent (@1mcp/agent) 0.20.0 through 0.39.0 contains an incorrect authorization vulnerability that allows authenticated clients to bypass OAuth tag-scope enforcement using negated advanced tag-filter expressions. Attackers holding a single-tag token can send a filter like not <granted-tag> to list and invoke tools on backend MCP servers outside their granted scopes.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T00:01:20.964Z","source_hash":"content-fingerprint:fnv1a-4f8a0dd3","affected_system":{"organization":"Software component project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108586-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"1MCP Agent (@1mcp/agent) 0.20.0 through 0.39.0 contains an incorrect authorization vulnerability that allows authenticated clients to bypass OAuth tag-scope enforcement using negated advanced tag-filter expressions. Attackers holding a single-tag token can send a filter like not <granted-tag> to list and invoke tools on backend MCP servers outside their granted scopes.","source_quote_or_pointer":"Security Advisory CVE-2026-108586","fact_id":"SEA-CVE-2026-108586-F1","document_citation":"Security Advisory CVE-2026-108586"},{"id":"SEA-CVE-2026-108586-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"1MCP Agent (@1mcp/agent) 0.20.0 through 0.39.0 contains an incorrect authorization vulnerability that allows authenticated clients to bypass OAuth tag-scope enforcement using negated advanced tag-filter expressions.","source_quote_or_pointer":"Advisory description (CVE-2026-108586)","fact_id":"SEA-CVE-2026-108586-F2","document_citation":"Advisory description (CVE-2026-108586)"}],"source_stated_contributors":["1MCP Agent (@1mcp/agent) 0.20.0 through 0.39.0 contains an incorrect authorization vulnerability that allows authenticated clients to bypass OAuth tag-scope enforcement using negated advanced tag-filter expressions."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.credentials_secrets","arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-010"],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108586","reporting_entity":"CVE-2026-108586","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108586-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108586-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-108586"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108585","title":"argocd-mcp (Argo CD MCP Server) through 0.9.0 contains a path traversal vulnerability in the delete_application tool that allows MCP clients to reach unintended API endpoints via unvalidated applicationName values. Attackers or prompt-injected models can supply dot-segment values like ../repositories/ to send authenticated DELETE requests deleting repositories, clusters, or projects within the token's RBAC permissions.","display_title":"Software component issue could expose restricted files","display_summary":"argocd-mcp (Argo CD MCP Server) through 0.9.0 contains a path traversal vulnerability in the deleteapplication tool that allows MCP clients to reach unintended API endpoints via unvalidated applicationName values.","display_reference":"CVE-2026-108585","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108585","source_title":"argocd-mcp (Argo CD MCP Server) through 0.9.0 contains a path traversal vulnerability in the delete_application tool that allows MCP clients to reach unintended API endpoints via unvalidated applicationName values. Attackers or prompt-injected models can supply dot-segment values like ../repositories/ to send authenticated DELETE requests deleting repositories, clusters, or projects within the token's RBAC permissions.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T00:01:20.964Z","source_hash":"content-fingerprint:fnv1a-150ea346","affected_system":{"organization":"Software component project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108585-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"argocd-mcp (Argo CD MCP Server) through 0.9.0 contains a path traversal vulnerability in the delete_application tool that allows MCP clients to reach unintended API endpoints via unvalidated applicationName values. Attackers or prompt-injected models can supply dot-segment values like ../repositories/ to send authenticated DELETE requests deleting repositories, clusters, or projects within the token's RBAC permissions.","source_quote_or_pointer":"Security Advisory CVE-2026-108585","fact_id":"SEA-CVE-2026-108585-F1","document_citation":"Security Advisory CVE-2026-108585"},{"id":"SEA-CVE-2026-108585-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"argocd-mcp (Argo CD MCP Server) through 0.9.0 contains a path traversal vulnerability in the deleteapplication tool that allows MCP clients to reach unintended API endpoints via unvalidated applicationName values.","source_quote_or_pointer":"Advisory description (CVE-2026-108585)","fact_id":"SEA-CVE-2026-108585-F2","document_citation":"Advisory description (CVE-2026-108585)"}],"source_stated_contributors":["argocd-mcp (Argo CD MCP Server) through 0.9.0 contains a path traversal vulnerability in the deleteapplication tool that allows MCP clients to reach unintended API endpoints via unvalidated applicationName values."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.infrastructure_modification","auth.write_action","arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-002","SEA-FM-010"],"consequences":["Restricted file exposure","File overwrite"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108585","reporting_entity":"CVE-2026-108585","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108585-SG1","label":"Confine file access to a fixed root","description":"Resolve paths to canonical form and reject anything outside the intended directory before opening files.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108585-SG1","label":"Confine file access to a fixed root","description":"Resolve paths to canonical form and reject anything outside the intended directory before opening files.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"File paths supplied by a caller escaped the intended directory. Canonicalise paths and confine file access to a fixed root.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108585"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-105889","title":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tickera Tickera tickera-event-ticketing-system allows Blind SQL Injection.This issue affects Tickera: from n/a through 3.6.0.6.","display_title":"Software component issue could expose or alter stored data","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-105889","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105889","source_title":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tickera Tickera tickera-event-ticketing-system allows Blind SQL Injection.This issue affects Tickera: from n/a through 3.6.0.6.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T00:01:20.964Z","source_hash":"content-fingerprint:fnv1a-257d83ac","affected_system":{"organization":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tickera Tickera tickera-event-ticketing-system allows Blind SQL Injection.This issue affects Tickera project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-105889-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tickera Tickera tickera-event-ticketing-system allows Blind SQL Injection.This issue affects Tickera: from n/a through 3.6.0.6.","source_quote_or_pointer":"Security Advisory CVE-2026-105889","fact_id":"SEA-CVE-2026-105889-F1","document_citation":"Security Advisory CVE-2026-105889"},{"id":"SEA-CVE-2026-105889-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tickera Tickera tickera-event-ticketing-system allows Blind SQL Injection.This issue affects Tickera: from n/a through 3.6.0.6.","source_quote_or_pointer":"Advisory description (CVE-2026-105889)","fact_id":"SEA-CVE-2026-105889-F2","document_citation":"Advisory description (CVE-2026-105889)"}],"source_stated_contributors":["Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tickera Tickera tickera-event-ticketing-system allows Blind SQL Injection.This issue affects Tickera: from n/a through 3.6.0.6."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["arch.event_driven"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-105889","reporting_entity":"CVE-2026-105889","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-105889-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-105889-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-105889"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108583","title":"zotero-mcp 0.10.0 through 0.14.1 contains a server-side request forgery vulnerability that allows attackers to reach internal services because _fetch_embedded_metadata fetches URLs without destination validation. Attackers can steer the agent via prompt injection into calling zotero_add_by_url, causing requests to loopback, private, or link-local hosts directly or via redirects, leaking citation meta-tags and error details.","display_title":"Software component issue could reach internal services","display_summary":"zotero-mcp 0.10.0 through 0.14.1 contains a server-side request forgery vulnerability that allows attackers to reach internal services because fetchembeddedmetadata fetches URLs without destination validation.","display_reference":"CVE-2026-108583","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108583","source_title":"zotero-mcp 0.10.0 through 0.14.1 contains a server-side request forgery vulnerability that allows attackers to reach internal services because _fetch_embedded_metadata fetches URLs without destination validation. Attackers can steer the agent via prompt injection into calling zotero_add_by_url, causing requests to loopback, private, or link-local hosts directly or via redirects, leaking citation meta-tags and error details.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T00:01:20.964Z","source_hash":"content-fingerprint:fnv1a-77e7e120","affected_system":{"organization":"Software component project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108583-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"zotero-mcp 0.10.0 through 0.14.1 contains a server-side request forgery vulnerability that allows attackers to reach internal services because _fetch_embedded_metadata fetches URLs without destination validation. Attackers can steer the agent via prompt injection into calling zotero_add_by_url, causing requests to loopback, private, or link-local hosts directly or via redirects, leaking citation meta-tags and error details.","source_quote_or_pointer":"Security Advisory CVE-2026-108583","fact_id":"SEA-CVE-2026-108583-F1","document_citation":"Security Advisory CVE-2026-108583"},{"id":"SEA-CVE-2026-108583-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"zotero-mcp 0.10.0 through 0.14.1 contains a server-side request forgery vulnerability that allows attackers to reach internal services because fetchembeddedmetadata fetches URLs without destination validation.","source_quote_or_pointer":"Advisory description (CVE-2026-108583)","fact_id":"SEA-CVE-2026-108583-F2","document_citation":"Advisory description (CVE-2026-108583)"}],"source_stated_contributors":["zotero-mcp 0.10.0 through 0.14.1 contains a server-side request forgery vulnerability that allows attackers to reach internal services because fetchembeddedmetadata fetches URLs without destination validation."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-004","SEA-FM-002","SEA-FM-010"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108583","reporting_entity":"CVE-2026-108583","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108583-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108583-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108583"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108582","title":"GenOffice through 0.11.505 contains an incorrect permissions vulnerability in its HTTP MCP server file store that allows local unprivileged users to read uploaded and generated documents. Attackers can list the world-readable genoffice-mcp-http directory under the system temporary directory to read client uploads and converted outputs, bypassing the HTTP bearer token.","display_title":"Security issue reported in Software component","display_summary":"GenOffice through 0.11.505 contains an incorrect permissions vulnerability in its HTTP MCP server file store that allows local unprivileged users to read uploaded and generated documents.","display_reference":"CVE-2026-108582","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108582","source_title":"GenOffice through 0.11.505 contains an incorrect permissions vulnerability in its HTTP MCP server file store that allows local unprivileged users to read uploaded and generated documents. Attackers can list the world-readable genoffice-mcp-http directory under the system temporary directory to read client uploads and converted outputs, bypassing the HTTP bearer token.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-10T20:00:54.468Z","source_hash":"content-fingerprint:fnv1a-a9d1e805","affected_system":{"organization":"Software component project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108582-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"GenOffice through 0.11.505 contains an incorrect permissions vulnerability in its HTTP MCP server file store that allows local unprivileged users to read uploaded and generated documents. Attackers can list the world-readable genoffice-mcp-http directory under the system temporary directory to read client uploads and converted outputs, bypassing the HTTP bearer token.","source_quote_or_pointer":"Security Advisory CVE-2026-108582","fact_id":"SEA-CVE-2026-108582-F1","document_citation":"Security Advisory CVE-2026-108582"},{"id":"SEA-CVE-2026-108582-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"GenOffice through 0.11.505 contains an incorrect permissions vulnerability in its HTTP MCP server file store that allows local unprivileged users to read uploaded and generated documents.","source_quote_or_pointer":"Advisory description (CVE-2026-108582)","fact_id":"SEA-CVE-2026-108582-F2","document_citation":"Advisory description (CVE-2026-108582)"}],"source_stated_contributors":["GenOffice through 0.11.505 contains an incorrect permissions vulnerability in its HTTP MCP server file store that allows local unprivileged users to read uploaded and generated documents."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.pii","data.credentials_secrets","data.uploaded_files","arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-012","SEA-FM-010"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108582","reporting_entity":"CVE-2026-108582","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108582-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108582-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108582"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108581","title":"TencentCloud Octop through 1.0.2b6 contains a missing authorization vulnerability that allows authenticated low-privileged users to read stored provider API keys via GET /api/providers and GET /api/voice/providers. Attackers can query these endpoints, which only validate the JWT, to obtain plaintext LLM and voice provider API keys and abuse the upstream provider accounts.","display_title":"Security issue reported in Software component","display_summary":"TencentCloud Octop through 1.0.2b6 contains a missing authorization vulnerability that allows authenticated low-privileged users to read stored provider API keys via GET /api/providers and GET /api/voice/providers.","display_reference":"CVE-2026-108581","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108581","source_title":"TencentCloud Octop through 1.0.2b6 contains a missing authorization vulnerability that allows authenticated low-privileged users to read stored provider API keys via GET /api/providers and GET /api/voice/providers. Attackers can query these endpoints, which only validate the JWT, to obtain plaintext LLM and voice provider API keys and abuse the upstream provider accounts.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-10T20:00:54.468Z","source_hash":"content-fingerprint:fnv1a-d7169854","affected_system":{"organization":"Software component project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108581-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"TencentCloud Octop through 1.0.2b6 contains a missing authorization vulnerability that allows authenticated low-privileged users to read stored provider API keys via GET /api/providers and GET /api/voice/providers. Attackers can query these endpoints, which only validate the JWT, to obtain plaintext LLM and voice provider API keys and abuse the upstream provider accounts.","source_quote_or_pointer":"Security Advisory CVE-2026-108581","fact_id":"SEA-CVE-2026-108581-F1","document_citation":"Security Advisory CVE-2026-108581"},{"id":"SEA-CVE-2026-108581-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"TencentCloud Octop through 1.0.2b6 contains a missing authorization vulnerability that allows authenticated low-privileged users to read stored provider API keys via GET /api/providers and GET /api/voice/providers.","source_quote_or_pointer":"Advisory description (CVE-2026-108581)","fact_id":"SEA-CVE-2026-108581-F2","document_citation":"Advisory description (CVE-2026-108581)"}],"source_stated_contributors":["TencentCloud Octop through 1.0.2b6 contains a missing authorization vulnerability that allows authenticated low-privileged users to read stored provider API keys via GET /api/providers and GET /api/voice/providers."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii","data.credentials_secrets","arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108581","reporting_entity":"CVE-2026-108581","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108581-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108581-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108581"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108554","title":"PDFMathTranslate (pdf2zh) through 1.9.11 contains a server-side request forgery vulnerability that allows unauthenticated attackers to make the server fetch arbitrary URLs via the Link input. The translate_file handler passes user URLs to download_with_limit without scheme or address validation, letting attackers reach internal services and cloud metadata endpoints and retrieve returned PDFs.","display_title":"Software component issue could reach internal services","display_summary":"PDFMathTranslate (pdf2zh) through 1.9.11 contains a server-side request forgery vulnerability that allows unauthenticated attackers to make the server fetch arbitrary URLs via the Link input.","display_reference":"CVE-2026-108554","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108554","source_title":"PDFMathTranslate (pdf2zh) through 1.9.11 contains a server-side request forgery vulnerability that allows unauthenticated attackers to make the server fetch arbitrary URLs via the Link input. The translate_file handler passes user URLs to download_with_limit without scheme or address validation, letting attackers reach internal services and cloud metadata endpoints and retrieve returned PDFs.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-10T20:00:54.468Z","source_hash":"content-fingerprint:fnv1a-ef56aab0","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Cloud & container infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108554-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"PDFMathTranslate (pdf2zh) through 1.9.11 contains a server-side request forgery vulnerability that allows unauthenticated attackers to make the server fetch arbitrary URLs via the Link input. The translate_file handler passes user URLs to download_with_limit without scheme or address validation, letting attackers reach internal services and cloud metadata endpoints and retrieve returned PDFs.","source_quote_or_pointer":"Security Advisory CVE-2026-108554","fact_id":"SEA-CVE-2026-108554-F1","document_citation":"Security Advisory CVE-2026-108554"},{"id":"SEA-CVE-2026-108554-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"PDFMathTranslate (pdf2zh) through 1.9.11 contains a server-side request forgery vulnerability that allows unauthenticated attackers to make the server fetch arbitrary URLs via the Link input.","source_quote_or_pointer":"Advisory description (CVE-2026-108554)","fact_id":"SEA-CVE-2026-108554-F2","document_citation":"Advisory description (CVE-2026-108554)"}],"source_stated_contributors":["PDFMathTranslate (pdf2zh) through 1.9.11 contains a server-side request forgery vulnerability that allows unauthenticated attackers to make the server fetch arbitrary URLs via the Link input."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Internal network access","Cloud metadata or credential exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108554","reporting_entity":"CVE-2026-108554","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108554-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108554-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"The service fetched a URL chosen by the caller and could be steered at internal systems. Restrict outbound destinations and block internal address ranges.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108554"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108551","title":"openapi-typescript-codegen through 0.31.0 contains a code injection vulnerability that allows attackers controlling an OpenAPI document to inject JavaScript by supplying unescaped values interpolated into single-quoted string literals. Attackers can embed a single quote in path keys, parameter names, servers[0].url, or info.version to execute arbitrary JavaScript when generated clients are imported or service methods called.","display_title":"Security issue reported in Software component","display_summary":"openapi-typescript-codegen through 0.31.0 contains a code injection vulnerability that allows attackers controlling an OpenAPI document to inject JavaScript by supplying unescaped values interpolated into single-quoted…","display_reference":"CVE-2026-108551","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108551","source_title":"openapi-typescript-codegen through 0.31.0 contains a code injection vulnerability that allows attackers controlling an OpenAPI document to inject JavaScript by supplying unescaped values interpolated into single-quoted string literals. Attackers can embed a single quote in path keys, parameter names, servers[0].url, or info.version to execute arbitrary JavaScript when generated clients are imported or service methods called.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-10T20:00:54.468Z","source_hash":"content-fingerprint:fnv1a-7c310195","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108551-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"openapi-typescript-codegen through 0.31.0 contains a code injection vulnerability that allows attackers controlling an OpenAPI document to inject JavaScript by supplying unescaped values interpolated into single-quoted string literals. Attackers can embed a single quote in path keys, parameter names, servers[0].url, or info.version to execute arbitrary JavaScript when generated clients are imported or service methods called.","source_quote_or_pointer":"Security Advisory CVE-2026-108551","fact_id":"SEA-CVE-2026-108551-F1","document_citation":"Security Advisory CVE-2026-108551"},{"id":"SEA-CVE-2026-108551-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"openapi-typescript-codegen through 0.31.0 contains a code injection vulnerability that allows attackers controlling an OpenAPI document to inject JavaScript by supplying unescaped values interpolated into single-quoted string literals.","source_quote_or_pointer":"Advisory description (CVE-2026-108551)","fact_id":"SEA-CVE-2026-108551-F2","document_citation":"Advisory description (CVE-2026-108551)"}],"source_stated_contributors":["openapi-typescript-codegen through 0.31.0 contains a code injection vulnerability that allows attackers controlling an OpenAPI document to inject JavaScript by supplying unescaped values interpolated into single-quoted string literals."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108551","reporting_entity":"CVE-2026-108551","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108551-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108551-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-108551"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108550","title":"SkillHub before 0.2.22 contains an incorrect authorization vulnerability in AccountMergeService and AccountMergeController that allows authenticated attackers to take over other accounts by abusing the merge flow. Attackers can call the merge initiate endpoint with a target username or OAuth identity, receive the verification token directly, and confirm the merge to inherit the victim's API tokens, roles and namespace ownership.","display_title":"Security issue reported in Software component","display_summary":"SkillHub before 0.2.22 contains an incorrect authorization vulnerability in AccountMergeService and AccountMergeController that allows authenticated attackers to take over other accounts by abusing the merge flow.","display_reference":"CVE-2026-108550","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108550","source_title":"SkillHub before 0.2.22 contains an incorrect authorization vulnerability in AccountMergeService and AccountMergeController that allows authenticated attackers to take over other accounts by abusing the merge flow. Attackers can call the merge initiate endpoint with a target username or OAuth identity, receive the verification token directly, and confirm the merge to inherit the victim's API tokens, roles and namespace ownership.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-10T20:00:54.468Z","source_hash":"content-fingerprint:fnv1a-7c4bfcde","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108550-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"SkillHub before 0.2.22 contains an incorrect authorization vulnerability in AccountMergeService and AccountMergeController that allows authenticated attackers to take over other accounts by abusing the merge flow. Attackers can call the merge initiate endpoint with a target username or OAuth identity, receive the verification token directly, and confirm the merge to inherit the victim's API tokens, roles and namespace ownership.","source_quote_or_pointer":"Security Advisory CVE-2026-108550","fact_id":"SEA-CVE-2026-108550-F1","document_citation":"Security Advisory CVE-2026-108550"},{"id":"SEA-CVE-2026-108550-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"SkillHub before 0.2.22 contains an incorrect authorization vulnerability in AccountMergeService and AccountMergeController that allows authenticated attackers to take over other accounts by abusing the merge flow.","source_quote_or_pointer":"Advisory description (CVE-2026-108550)","fact_id":"SEA-CVE-2026-108550-F2","document_citation":"Advisory description (CVE-2026-108550)"}],"source_stated_contributors":["SkillHub before 0.2.22 contains an incorrect authorization vulnerability in AccountMergeService and AccountMergeController that allows authenticated attackers to take over other accounts by abusing the merge flow."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.credentials_secrets"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108550","reporting_entity":"CVE-2026-108550","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108550-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108550-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-108550"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108549","title":"cc-connect through 1.5.0 contains a missing authentication vulnerability in the MAX platform adapter webhook mode in platform/max/max.go that accepts unauthenticated updates when no webhook_secret is configured. Remote attackers reaching the webhook listener on port 8080 can forge updates with an allowed or admin user_id to run privileged commands like /shell on the host.","display_title":"Software component issue could expose accounts or credentials","display_summary":"cc-connect through 1.5.0 contains a missing authentication vulnerability in the MAX platform adapter webhook mode in platform/max/max.go that accepts unauthenticated updates when no webhooksecret is configured.","display_reference":"CVE-2026-108549","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108549","source_title":"cc-connect through 1.5.0 contains a missing authentication vulnerability in the MAX platform adapter webhook mode in platform/max/max.go that accepts unauthenticated updates when no webhook_secret is configured. Remote attackers reaching the webhook listener on port 8080 can forge updates with an allowed or admin user_id to run privileged commands like /shell on the host.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-10T20:00:54.468Z","source_hash":"content-fingerprint:fnv1a-6a704a6c","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108549-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"cc-connect through 1.5.0 contains a missing authentication vulnerability in the MAX platform adapter webhook mode in platform/max/max.go that accepts unauthenticated updates when no webhook_secret is configured. Remote attackers reaching the webhook listener on port 8080 can forge updates with an allowed or admin user_id to run privileged commands like /shell on the host.","source_quote_or_pointer":"Security Advisory CVE-2026-108549","fact_id":"SEA-CVE-2026-108549-F1","document_citation":"Security Advisory CVE-2026-108549"},{"id":"SEA-CVE-2026-108549-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"cc-connect through 1.5.0 contains a missing authentication vulnerability in the MAX platform adapter webhook mode in platform/max/max.go that accepts unauthenticated updates when no webhooksecret is configured.","source_quote_or_pointer":"Advisory description (CVE-2026-108549)","fact_id":"SEA-CVE-2026-108549-F2","document_citation":"Advisory description (CVE-2026-108549)"}],"source_stated_contributors":["cc-connect through 1.5.0 contains a missing authentication vulnerability in the MAX platform adapter webhook mode in platform/max/max.go that accepts unauthenticated updates when no webhooksecret is configured."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.write_action","arch.external_api","arch.event_driven"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108549","reporting_entity":"CVE-2026-108549","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108549-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108549-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108549"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108548","title":"AstronRPA through 1.1.6 contains an authentication bypass vulnerability in the OpenResty gateway's auth_handler.lua that accepts any Bearer token without validation. Unauthenticated attackers can send arbitrary Bearer values to reach /api/resource/ and /api/rpa-ai-service/ routes and spoof X-User-Id or user_id headers to act as any user.","display_title":"Software component issue could allow unauthorized access","display_summary":"AstronRPA through 1.1.6 contains an authentication bypass vulnerability in the OpenResty gateway's authhandler.lua that accepts any Bearer token without validation.","display_reference":"CVE-2026-108548","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108548","source_title":"AstronRPA through 1.1.6 contains an authentication bypass vulnerability in the OpenResty gateway's auth_handler.lua that accepts any Bearer token without validation. Unauthenticated attackers can send arbitrary Bearer values to reach /api/resource/ and /api/rpa-ai-service/ routes and spoof X-User-Id or user_id headers to act as any user.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-10T20:00:54.468Z","source_hash":"content-fingerprint:fnv1a-66c3a635","affected_system":{"organization":"Software component project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108548-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"AstronRPA through 1.1.6 contains an authentication bypass vulnerability in the OpenResty gateway's auth_handler.lua that accepts any Bearer token without validation. Unauthenticated attackers can send arbitrary Bearer values to reach /api/resource/ and /api/rpa-ai-service/ routes and spoof X-User-Id or user_id headers to act as any user.","source_quote_or_pointer":"Security Advisory CVE-2026-108548","fact_id":"SEA-CVE-2026-108548-F1","document_citation":"Security Advisory CVE-2026-108548"},{"id":"SEA-CVE-2026-108548-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"AstronRPA through 1.1.6 contains an authentication bypass vulnerability in the OpenResty gateway's authhandler.lua that accepts any Bearer token without validation.","source_quote_or_pointer":"Advisory description (CVE-2026-108548)","fact_id":"SEA-CVE-2026-108548-F2","document_citation":"Advisory description (CVE-2026-108548)"}],"source_stated_contributors":["AstronRPA through 1.1.6 contains an authentication bypass vulnerability in the OpenResty gateway's authhandler.lua that accepts any Bearer token without validation."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108548","reporting_entity":"CVE-2026-108548","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108548-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108548-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108548"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108547","title":"AstronRPA through 1.1.6 contains a missing tenant authorization check in robot-service that allows authenticated users to read other tenants' shared variables via the get-batch-shared-var endpoint. Attackers can enumerate sequential shared variable IDs and decrypt all-users variables re-encrypted with their own tenant key to recover other tenants' credentials in plaintext.","display_title":"Software component issue could expose accounts or credentials","display_summary":"AstronRPA through 1.1.6 contains a missing tenant authorization check in robot-service that allows authenticated users to read other tenants' shared variables via the get-batch-shared-var endpoint.","display_reference":"CVE-2026-108547","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108547","source_title":"AstronRPA through 1.1.6 contains a missing tenant authorization check in robot-service that allows authenticated users to read other tenants' shared variables via the get-batch-shared-var endpoint. Attackers can enumerate sequential shared variable IDs and decrypt all-users variables re-encrypted with their own tenant key to recover other tenants' credentials in plaintext.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-10T20:00:54.468Z","source_hash":"content-fingerprint:fnv1a-55048ee8","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108547-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"AstronRPA through 1.1.6 contains a missing tenant authorization check in robot-service that allows authenticated users to read other tenants' shared variables via the get-batch-shared-var endpoint. Attackers can enumerate sequential shared variable IDs and decrypt all-users variables re-encrypted with their own tenant key to recover other tenants' credentials in plaintext.","source_quote_or_pointer":"Security Advisory CVE-2026-108547","fact_id":"SEA-CVE-2026-108547-F1","document_citation":"Security Advisory CVE-2026-108547"},{"id":"SEA-CVE-2026-108547-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"AstronRPA through 1.1.6 contains a missing tenant authorization check in robot-service that allows authenticated users to read other tenants' shared variables via the get-batch-shared-var endpoint.","source_quote_or_pointer":"Advisory description (CVE-2026-108547)","fact_id":"SEA-CVE-2026-108547-F2","document_citation":"Advisory description (CVE-2026-108547)"}],"source_stated_contributors":["AstronRPA through 1.1.6 contains a missing tenant authorization check in robot-service that allows authenticated users to read other tenants' shared variables via the get-batch-shared-var endpoint."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","data.credentials_secrets","arch.async_job"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108547","reporting_entity":"CVE-2026-108547","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108547-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108547-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108547"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108546","title":"Spotweb through 1.5.8 contains an OS command injection vulnerability in the runcommand NZB handler that allows remote attackers to execute commands by publishing spots with malicious titles. Attackers can post self-signed spots over Usenet with shell metacharacters in the title, which are substituted unescaped for $SPOTTITLE and passed to exec() when a user downloads the spot, running commands as the Spotweb PHP process.","display_title":"Software component issue could allow unintended commands to run","display_summary":"Spotweb through 1.5.8 contains an OS command injection vulnerability in the runcommand NZB handler that allows remote attackers to execute commands by publishing spots with malicious titles.","display_reference":"CVE-2026-108546","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108546","source_title":"Spotweb through 1.5.8 contains an OS command injection vulnerability in the runcommand NZB handler that allows remote attackers to execute commands by publishing spots with malicious titles. Attackers can post self-signed spots over Usenet with shell metacharacters in the title, which are substituted unescaped for $SPOTTITLE and passed to exec() when a user downloads the spot, running commands as the Spotweb PHP process.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-10T20:00:54.468Z","source_hash":"content-fingerprint:fnv1a-62b176e1","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108546-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Spotweb through 1.5.8 contains an OS command injection vulnerability in the runcommand NZB handler that allows remote attackers to execute commands by publishing spots with malicious titles. Attackers can post self-signed spots over Usenet with shell metacharacters in the title, which are substituted unescaped for $SPOTTITLE and passed to exec() when a user downloads the spot, running commands as the Spotweb PHP process.","source_quote_or_pointer":"Security Advisory CVE-2026-108546","fact_id":"SEA-CVE-2026-108546-F1","document_citation":"Security Advisory CVE-2026-108546"},{"id":"SEA-CVE-2026-108546-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Spotweb through 1.5.8 contains an OS command injection vulnerability in the runcommand NZB handler that allows remote attackers to execute commands by publishing spots with malicious titles.","source_quote_or_pointer":"Advisory description (CVE-2026-108546)","fact_id":"SEA-CVE-2026-108546-F2","document_citation":"Advisory description (CVE-2026-108546)"}],"source_stated_contributors":["Spotweb through 1.5.8 contains an OS command injection vulnerability in the runcommand NZB handler that allows remote attackers to execute commands by publishing spots with malicious titles."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.public_publication","data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108546","reporting_entity":"CVE-2026-108546","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108546-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108546-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108546"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108545","title":"SillyTavern 1.12.13 through 1.19.0 contains a denial of service vulnerability that allows unauthenticated remote attackers to exhaust resources because body-parser middleware runs before authentication and whitelist checks. Attackers can send large or compressed JSON or urlencoded bodies up to 500 MB, optionally in parallel, to exhaust memory and CPU and deny service.","display_title":"Software component issue could make the service unavailable","display_summary":"SillyTavern 1.12.13 through 1.19.0 contains a denial of service vulnerability that allows unauthenticated remote attackers to exhaust resources because body-parser middleware runs before authentication and whitelist…","display_reference":"CVE-2026-108545","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108545","source_title":"SillyTavern 1.12.13 through 1.19.0 contains a denial of service vulnerability that allows unauthenticated remote attackers to exhaust resources because body-parser middleware runs before authentication and whitelist checks. Attackers can send large or compressed JSON or urlencoded bodies up to 500 MB, optionally in parallel, to exhaust memory and CPU and deny service.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-10T20:00:54.468Z","source_hash":"content-fingerprint:fnv1a-c2892d12","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108545-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"SillyTavern 1.12.13 through 1.19.0 contains a denial of service vulnerability that allows unauthenticated remote attackers to exhaust resources because body-parser middleware runs before authentication and whitelist checks. Attackers can send large or compressed JSON or urlencoded bodies up to 500 MB, optionally in parallel, to exhaust memory and CPU and deny service.","source_quote_or_pointer":"Security Advisory CVE-2026-108545","fact_id":"SEA-CVE-2026-108545-F1","document_citation":"Security Advisory CVE-2026-108545"},{"id":"SEA-CVE-2026-108545-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"SillyTavern 1.12.13 through 1.19.0 contains a denial of service vulnerability that allows unauthenticated remote attackers to exhaust resources because body-parser middleware runs before authentication and whitelist checks.","source_quote_or_pointer":"Advisory description (CVE-2026-108545)","fact_id":"SEA-CVE-2026-108545-F2","document_citation":"Advisory description (CVE-2026-108545)"}],"source_stated_contributors":["SillyTavern 1.12.13 through 1.19.0 contains a denial of service vulnerability that allows unauthenticated remote attackers to exhaust resources because body-parser middleware runs before authentication and whitelist checks."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108545","reporting_entity":"CVE-2026-108545","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108545-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108545-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108545"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108115","title":"Kortix Suna 0.10.7 before 0.13.52 contains a server-side request forgery vulnerability that allows project managers to bypass the isPrivateIp guard by supplying IPv6 6to4 or Teredo addresses that embed private IPv4 destinations. Attackers holding project.connector.write can set connector base_url, OpenAPI, Postman, or MCP URLs to reach internal services and cloud metadata endpoints and read responses.","display_title":"Software component issue could reach internal services","display_summary":"Kortix Suna 0.10.7 before 0.13.52 contains a server-side request forgery vulnerability that allows project managers to bypass the isPrivateIp guard by supplying IPv6 6to4 or Teredo addresses that embed private IPv4…","display_reference":"CVE-2026-108115","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108115","source_title":"Kortix Suna 0.10.7 before 0.13.52 contains a server-side request forgery vulnerability that allows project managers to bypass the isPrivateIp guard by supplying IPv6 6to4 or Teredo addresses that embed private IPv4 destinations. Attackers holding project.connector.write can set connector base_url, OpenAPI, Postman, or MCP URLs to reach internal services and cloud metadata endpoints and read responses.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-10T20:00:54.468Z","source_hash":"content-fingerprint:fnv1a-c47700ed","affected_system":{"organization":"Software component project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108115-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Kortix Suna 0.10.7 before 0.13.52 contains a server-side request forgery vulnerability that allows project managers to bypass the isPrivateIp guard by supplying IPv6 6to4 or Teredo addresses that embed private IPv4 destinations. Attackers holding project.connector.write can set connector base_url, OpenAPI, Postman, or MCP URLs to reach internal services and cloud metadata endpoints and read responses.","source_quote_or_pointer":"Security Advisory CVE-2026-108115","fact_id":"SEA-CVE-2026-108115-F1","document_citation":"Security Advisory CVE-2026-108115"},{"id":"SEA-CVE-2026-108115-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Kortix Suna 0.10.7 before 0.13.52 contains a server-side request forgery vulnerability that allows project managers to bypass the isPrivateIp guard by supplying IPv6 6to4 or Teredo addresses that embed private IPv4 destinations.","source_quote_or_pointer":"Advisory description (CVE-2026-108115)","fact_id":"SEA-CVE-2026-108115-F2","document_citation":"Advisory description (CVE-2026-108115)"}],"source_stated_contributors":["Kortix Suna 0.10.7 before 0.13.52 contains a server-side request forgery vulnerability that allows project managers to bypass the isPrivateIp guard by supplying IPv6 6to4 or Teredo addresses that embed private IPv4 destinations."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-002","SEA-FM-010"],"consequences":["Internal network access","Cloud metadata or credential exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108115","reporting_entity":"CVE-2026-108115","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108115-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108115-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"The service fetched a URL chosen by the caller and could be steered at internal systems. Restrict outbound destinations and block internal address ranges.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108115"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108114","title":"Strapi 5.47.0 through 5.57.0 contains an improper authorization vulnerability that allows admin API tokens to retain all-field Content Manager access after the owner's role is field-restricted. Because reconcileTokenPermissionsToUserCeiling ignores token permissions with omitted or null fields, token holders can keep reading content fields an administrator removed from the role.","display_title":"Software component issue could allow unauthorized access","display_summary":"Strapi 5.47.0 through 5.57.0 contains an improper authorization vulnerability that allows admin API tokens to retain all-field Content Manager access after the owner's role is field-restricted.","display_reference":"CVE-2026-108114","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108114","source_title":"Strapi 5.47.0 through 5.57.0 contains an improper authorization vulnerability that allows admin API tokens to retain all-field Content Manager access after the owner's role is field-restricted. Because reconcileTokenPermissionsToUserCeiling ignores token permissions with omitted or null fields, token holders can keep reading content fields an administrator removed from the role.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-10T20:00:54.468Z","source_hash":"content-fingerprint:fnv1a-e13cbc84","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108114-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Strapi 5.47.0 through 5.57.0 contains an improper authorization vulnerability that allows admin API tokens to retain all-field Content Manager access after the owner's role is field-restricted. Because reconcileTokenPermissionsToUserCeiling ignores token permissions with omitted or null fields, token holders can keep reading content fields an administrator removed from the role.","source_quote_or_pointer":"Security Advisory CVE-2026-108114","fact_id":"SEA-CVE-2026-108114-F1","document_citation":"Security Advisory CVE-2026-108114"},{"id":"SEA-CVE-2026-108114-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Strapi 5.47.0 through 5.57.0 contains an improper authorization vulnerability that allows admin API tokens to retain all-field Content Manager access after the owner's role is field-restricted.","source_quote_or_pointer":"Advisory description (CVE-2026-108114)","fact_id":"SEA-CVE-2026-108114-F2","document_citation":"Advisory description (CVE-2026-108114)"}],"source_stated_contributors":["Strapi 5.47.0 through 5.57.0 contains an improper authorization vulnerability that allows admin API tokens to retain all-field Content Manager access after the owner's role is field-restricted."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.privileged_action"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108114","reporting_entity":"CVE-2026-108114","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108114-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108114-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108114"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108163","title":"Pingvin Share X before 1.22.0 contains an ineffective rate limiting vulnerability because throttler TTL values specified in seconds are interpreted as milliseconds. Unauthenticated attackers can send effectively unthrottled requests to /api/auth/signIn, /api/auth/signIn/totp and /api/auth/resetPassword to brute-force passwords and TOTP codes.","display_title":"Security issue reported in Software component","display_summary":"Pingvin Share X before 1.22.0 contains an ineffective rate limiting vulnerability because throttler TTL values specified in seconds are interpreted as milliseconds.","display_reference":"CVE-2026-108163","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108163","source_title":"Pingvin Share X before 1.22.0 contains an ineffective rate limiting vulnerability because throttler TTL values specified in seconds are interpreted as milliseconds. Unauthenticated attackers can send effectively unthrottled requests to /api/auth/signIn, /api/auth/signIn/totp and /api/auth/resetPassword to brute-force passwords and TOTP codes.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-10T20:00:54.468Z","source_hash":"content-fingerprint:fnv1a-dacb00fe","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108163-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Pingvin Share X before 1.22.0 contains an ineffective rate limiting vulnerability because throttler TTL values specified in seconds are interpreted as milliseconds. Unauthenticated attackers can send effectively unthrottled requests to /api/auth/signIn, /api/auth/signIn/totp and /api/auth/resetPassword to brute-force passwords and TOTP codes.","source_quote_or_pointer":"Security Advisory CVE-2026-108163","fact_id":"SEA-CVE-2026-108163-F1","document_citation":"Security Advisory CVE-2026-108163"},{"id":"SEA-CVE-2026-108163-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Pingvin Share X before 1.22.0 contains an ineffective rate limiting vulnerability because throttler TTL values specified in seconds are interpreted as milliseconds.","source_quote_or_pointer":"Advisory description (CVE-2026-108163)","fact_id":"SEA-CVE-2026-108163-F2","document_citation":"Advisory description (CVE-2026-108163)"}],"source_stated_contributors":["Pingvin Share X before 1.22.0 contains an ineffective rate limiting vulnerability because throttler TTL values specified in seconds are interpreted as milliseconds."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108163","reporting_entity":"CVE-2026-108163","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108163-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108163-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108163"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108162","title":"Pingvin Share X before 1.22.0 contains a rate limit bypass vulnerability that allows unauthenticated remote attackers to evade per-IP throttling because backend/src/main.ts unconditionally trusts proxy headers. Attackers can rotate spoofed X-Forwarded-For values against /api/auth/signIn, /api/auth/signIn/totp, and /api/auth/resetPassword to brute-force passwords and TOTP codes and forge logged client IP addresses.","display_title":"Security issue reported in Software component","display_summary":"Pingvin Share X before 1.22.0 contains a rate limit bypass vulnerability that allows unauthenticated remote attackers to evade per-IP throttling because backend/src/main.ts unconditionally trusts proxy headers.","display_reference":"CVE-2026-108162","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108162","source_title":"Pingvin Share X before 1.22.0 contains a rate limit bypass vulnerability that allows unauthenticated remote attackers to evade per-IP throttling because backend/src/main.ts unconditionally trusts proxy headers. Attackers can rotate spoofed X-Forwarded-For values against /api/auth/signIn, /api/auth/signIn/totp, and /api/auth/resetPassword to brute-force passwords and TOTP codes and forge logged client IP addresses.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-10T20:00:54.468Z","source_hash":"content-fingerprint:fnv1a-609c4311","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108162-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Pingvin Share X before 1.22.0 contains a rate limit bypass vulnerability that allows unauthenticated remote attackers to evade per-IP throttling because backend/src/main.ts unconditionally trusts proxy headers. Attackers can rotate spoofed X-Forwarded-For values against /api/auth/signIn, /api/auth/signIn/totp, and /api/auth/resetPassword to brute-force passwords and TOTP codes and forge logged client IP addresses.","source_quote_or_pointer":"Security Advisory CVE-2026-108162","fact_id":"SEA-CVE-2026-108162-F1","document_citation":"Security Advisory CVE-2026-108162"},{"id":"SEA-CVE-2026-108162-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Pingvin Share X before 1.22.0 contains a rate limit bypass vulnerability that allows unauthenticated remote attackers to evade per-IP throttling because backend/src/main.ts unconditionally trusts proxy headers.","source_quote_or_pointer":"Advisory description (CVE-2026-108162)","fact_id":"SEA-CVE-2026-108162-F2","document_citation":"Advisory description (CVE-2026-108162)"}],"source_stated_contributors":["Pingvin Share X before 1.22.0 contains a rate limit bypass vulnerability that allows unauthenticated remote attackers to evade per-IP throttling because backend/src/main.ts unconditionally trusts proxy headers."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108162","reporting_entity":"CVE-2026-108162","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108162-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108162-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108162"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108161","title":"FusionPBX through 5.6.5 contains an OS command injection vulnerability in call_recordings::download() that allows unauthenticated attackers to execute commands by placing calls with malicious caller ID values. When the record_name filename template is enabled, attackers can embed shell metacharacters like $(...) in the Caller-ID name or number, executing commands as the web server user once a privileged user downloads multiple recordings as a ZIP.","display_title":"Software component issue could allow unintended commands to run","display_summary":"FusionPBX through 5.6.5 contains an OS command injection vulnerability in callrecordings::download() that allows unauthenticated attackers to execute commands by placing calls with malicious caller ID values.","display_reference":"CVE-2026-108161","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108161","source_title":"FusionPBX through 5.6.5 contains an OS command injection vulnerability in call_recordings::download() that allows unauthenticated attackers to execute commands by placing calls with malicious caller ID values. When the record_name filename template is enabled, attackers can embed shell metacharacters like $(...) in the Caller-ID name or number, executing commands as the web server user once a privileged user downloads multiple recordings as a ZIP.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-10T20:00:54.468Z","source_hash":"content-fingerprint:fnv1a-4372adfa","affected_system":{"organization":"FusionPBX through 5.6.5 contains an OS command injection vulnerability in callrecordings project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108161-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"FusionPBX through 5.6.5 contains an OS command injection vulnerability in call_recordings::download() that allows unauthenticated attackers to execute commands by placing calls with malicious caller ID values. When the record_name filename template is enabled, attackers can embed shell metacharacters like $(...) in the Caller-ID name or number, executing commands as the web server user once a privileged user downloads multiple recordings as a ZIP.","source_quote_or_pointer":"Security Advisory CVE-2026-108161","fact_id":"SEA-CVE-2026-108161-F1","document_citation":"Security Advisory CVE-2026-108161"},{"id":"SEA-CVE-2026-108161-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"FusionPBX through 5.6.5 contains an OS command injection vulnerability in callrecordings::download() that allows unauthenticated attackers to execute commands by placing calls with malicious caller ID values.","source_quote_or_pointer":"Advisory description (CVE-2026-108161)","fact_id":"SEA-CVE-2026-108161-F2","document_citation":"Advisory description (CVE-2026-108161)"}],"source_stated_contributors":["FusionPBX through 5.6.5 contains an OS command injection vulnerability in callrecordings::download() that allows unauthenticated attackers to execute commands by placing calls with malicious caller ID values."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108161","reporting_entity":"CVE-2026-108161","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108161-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108161-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108161"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-103636","title":"Out-of-bounds read in the VarOpt union deserialization of Apache DataSketches C++ (repo: datasketches-cpp). var_opt_union::deserialize() read the 32-byte preamble of a non-empty union after checking that only 8 bytes were available, so a truncated serialized union could cause a read of up to 24 bytes past the end of the input. For such inputs, the size remaining for the embedded sketch was also computed by an unsigned subtraction that could wrap around, so the embedded sketch's own size checks no longer limited reads to the input. The bytes read can become part of the deserialized union's state. This can cause a crash (denial of service) and could expose adjacent memory contents. This issue affects Apache DataSketches C++: from 2.0.0-incubating before 5.3.0. Only applications that deserialize VarOpt unions from untrusted sources are affected. Users are recommended to upgrade to version 5.3.0, which fixes this issue.","display_title":"Software component issue could make the service unavailable","display_summary":"Out-of-bounds read in the VarOpt union deserialization of Apache DataSketches C++ (repo: datasketches-cpp).","display_reference":"CVE-2026-103636","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103636","source_title":"Out-of-bounds read in the VarOpt union deserialization of Apache DataSketches C++ (repo: datasketches-cpp). var_opt_union::deserialize() read the 32-byte preamble of a non-empty union after checking that only 8 bytes were available, so a truncated serialized union could cause a read of up to 24 bytes past the end of the input. For such inputs, the size remaining for the embedded sketch was also computed by an unsigned subtraction that could wrap around, so the embedded sketch's own size checks no longer limited reads to the input. The bytes read can become part of the deserialized union's state. This can cause a crash (denial of service) and could expose adjacent memory contents. This issue affects Apache DataSketches C++: from 2.0.0-incubating before 5.3.0. Only applications that deserialize VarOpt unions from untrusted sources are affected. Users are recommended to upgrade to version 5.3.0, which fixes this issue.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-10T20:00:54.468Z","source_hash":"content-fingerprint:fnv1a-2a75cc0e","affected_system":{"organization":"Out-of-bounds read in the VarOpt union deserialization of Apache DataSketches C++ (repo project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-103636-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Out-of-bounds read in the VarOpt union deserialization of Apache DataSketches C++ (repo: datasketches-cpp). var_opt_union::deserialize() read the 32-byte preamble of a non-empty union after checking that only 8 bytes were available, so a truncated serialized union could cause a read of up to 24 bytes past the end of the input. For such inputs, the size remaining for the embedded sketch was also computed by an unsigned subtraction that could wrap around, so the embedded sketch's own size checks no longer limited reads to the input. The bytes read can become part of the deserialized union's state. This can cause a crash (denial of service) and could expose adjacent memory contents. This issue affects Apache DataSketches C++: from 2.0.0-incubating before 5.3.0. Only applications that deserialize VarOpt unions from untrusted sources are affected. Users are recommended to upgrade to version 5.3.0, which fixes this issue.","source_quote_or_pointer":"Security Advisory CVE-2026-103636","fact_id":"SEA-CVE-2026-103636-F1","document_citation":"Security Advisory CVE-2026-103636"},{"id":"SEA-CVE-2026-103636-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Out-of-bounds read in the VarOpt union deserialization of Apache DataSketches C++ (repo: datasketches-cpp).","source_quote_or_pointer":"Advisory description (CVE-2026-103636)","fact_id":"SEA-CVE-2026-103636-F2","document_citation":"Advisory description (CVE-2026-103636)"}],"source_stated_contributors":["Out-of-bounds read in the VarOpt union deserialization of Apache DataSketches C++ (repo: datasketches-cpp)."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","data.pii"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-103636","reporting_entity":"CVE-2026-103636","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-103636-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-103636-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-103636"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-103635","title":"Out-of-bounds read in the compact Theta sketch deserialization of Apache DataSketches C++ (repo: datasketches-cpp). compact_theta_sketch::deserialize() and wrapped_compact_theta_sketch::wrap() read header fields before checking that the input was long enough. For the compressed format, the size check could be defeated by a 32-bit overflow, and two header fields that control decoding were not validated; this also affected deserialization from a stream. A crafted or truncated sketch could cause a read past the end of the input. In the compressed case the over-read can be large, and the bytes read can become part of the deserialized sketch. This can cause a crash (denial of service) and could expose adjacent memory contents. This issue affects Apache DataSketches C++: from 3.1.0 before 5.3.0. Only applications that deserialize Theta sketches from untrusted sources are affected. Users are recommended to upgrade to version 5.3.0, which fixes this issue.","display_title":"Software component issue could make the service unavailable","display_summary":"Out-of-bounds read in the compact Theta sketch deserialization of Apache DataSketches C++ (repo: datasketches-cpp).","display_reference":"CVE-2026-103635","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103635","source_title":"Out-of-bounds read in the compact Theta sketch deserialization of Apache DataSketches C++ (repo: datasketches-cpp). compact_theta_sketch::deserialize() and wrapped_compact_theta_sketch::wrap() read header fields before checking that the input was long enough. For the compressed format, the size check could be defeated by a 32-bit overflow, and two header fields that control decoding were not validated; this also affected deserialization from a stream. A crafted or truncated sketch could cause a read past the end of the input. In the compressed case the over-read can be large, and the bytes read can become part of the deserialized sketch. This can cause a crash (denial of service) and could expose adjacent memory contents. This issue affects Apache DataSketches C++: from 3.1.0 before 5.3.0. Only applications that deserialize Theta sketches from untrusted sources are affected. Users are recommended to upgrade to version 5.3.0, which fixes this issue.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-10T20:00:54.468Z","source_hash":"content-fingerprint:fnv1a-a4d60375","affected_system":{"organization":"Out-of-bounds read in the compact Theta sketch deserialization of Apache DataSketches C++ (repo project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-103635-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Out-of-bounds read in the compact Theta sketch deserialization of Apache DataSketches C++ (repo: datasketches-cpp). compact_theta_sketch::deserialize() and wrapped_compact_theta_sketch::wrap() read header fields before checking that the input was long enough. For the compressed format, the size check could be defeated by a 32-bit overflow, and two header fields that control decoding were not validated; this also affected deserialization from a stream. A crafted or truncated sketch could cause a read past the end of the input. In the compressed case the over-read can be large, and the bytes read can become part of the deserialized sketch. This can cause a crash (denial of service) and could expose adjacent memory contents. This issue affects Apache DataSketches C++: from 3.1.0 before 5.3.0. Only applications that deserialize Theta sketches from untrusted sources are affected. Users are recommended to upgrade to version 5.3.0, which fixes this issue.","source_quote_or_pointer":"Security Advisory CVE-2026-103635","fact_id":"SEA-CVE-2026-103635-F1","document_citation":"Security Advisory CVE-2026-103635"},{"id":"SEA-CVE-2026-103635-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Out-of-bounds read in the compact Theta sketch deserialization of Apache DataSketches C++ (repo: datasketches-cpp).","source_quote_or_pointer":"Advisory description (CVE-2026-103635)","fact_id":"SEA-CVE-2026-103635-F2","document_citation":"Advisory description (CVE-2026-103635)"}],"source_stated_contributors":["Out-of-bounds read in the compact Theta sketch deserialization of Apache DataSketches C++ (repo: datasketches-cpp)."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","data.pii","arch.async_job","arch.event_driven"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-103635","reporting_entity":"CVE-2026-103635","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-103635-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-103635-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-103635"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-87781","title":"The LTL Freight Quotes WordPress plugin before 4.2.19 does not sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users.","display_title":"Software component issue could expose or alter stored data","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-87781","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87781","source_title":"The LTL Freight Quotes WordPress plugin before 4.2.19 does not sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-10T20:00:54.468Z","source_hash":"content-fingerprint:fnv1a-47e81d58","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-87781-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The LTL Freight Quotes WordPress plugin before 4.2.19 does not sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users.","source_quote_or_pointer":"Security Advisory CVE-2026-87781","fact_id":"SEA-CVE-2026-87781-F1","document_citation":"Security Advisory CVE-2026-87781"},{"id":"SEA-CVE-2026-87781-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The LTL Freight Quotes WordPress plugin before 4.2.19 does not sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users.","source_quote_or_pointer":"Advisory description (CVE-2026-87781)","fact_id":"SEA-CVE-2026-87781-F2","document_citation":"Advisory description (CVE-2026-87781)"}],"source_stated_contributors":["The LTL Freight Quotes WordPress plugin before 4.2.19 does not sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-87781","reporting_entity":"CVE-2026-87781","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-87781-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-87781-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-87781"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-87780","title":"The LTL Freight Quotes WordPress plugin before 4.2.19 does not sanitise and escape values submitted through an unauthenticated endpoint before storing them and outputting them back in an administrative page, leading to Stored XSS which will execute in the session of any administrator viewing it.","display_title":"Software component issue could run attacker-controlled scripts in a browser","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-87780","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87780","source_title":"The LTL Freight Quotes WordPress plugin before 4.2.19 does not sanitise and escape values submitted through an unauthenticated endpoint before storing them and outputting them back in an administrative page, leading to Stored XSS which will execute in the session of any administrator viewing it.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-10T20:00:54.468Z","source_hash":"content-fingerprint:fnv1a-cb6c5b03","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-87780-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The LTL Freight Quotes WordPress plugin before 4.2.19 does not sanitise and escape values submitted through an unauthenticated endpoint before storing them and outputting them back in an administrative page, leading to Stored XSS which will execute in the session of any administrator viewing it.","source_quote_or_pointer":"Security Advisory CVE-2026-87780","fact_id":"SEA-CVE-2026-87780-F1","document_citation":"Security Advisory CVE-2026-87780"},{"id":"SEA-CVE-2026-87780-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The LTL Freight Quotes WordPress plugin before 4.2.19 does not sanitise and escape values submitted through an unauthenticated endpoint before storing them and outputting them back in an administrative page, leading to Stored XSS which will execute in the session of any administrator viewing it.","source_quote_or_pointer":"Advisory description (CVE-2026-87780)","fact_id":"SEA-CVE-2026-87780-F2","document_citation":"Advisory description (CVE-2026-87780)"}],"source_stated_contributors":["The LTL Freight Quotes WordPress plugin before 4.2.19 does not sanitise and escape values submitted through an unauthenticated endpoint before storing them and outputting them back in an administrative page, leading to Stored XSS which will execute in the session of any administrator viewing it."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.write_action"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-87780","reporting_entity":"CVE-2026-87780","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-87780-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-87780-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-87780"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-107120","title":"The Contest Gallery WordPress plugin before 33.0.1 does not limit the number of attempts against its front-end registration email-verification step, which relies on a short numeric PIN, allowing unauthenticated attackers to brute-force the PIN and create and activate a WordPress account bound to an email address they do not own, gaining an authenticated session.","display_title":"Security issue reported in Software component","display_summary":"The Contest Gallery WordPress plugin before 33.0.1 does not limit the number of attempts against its front-end registration email-verification step, which relies on a short numeric PIN, allowing unauthenticated attackers…","display_reference":"CVE-2026-107120","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107120","source_title":"The Contest Gallery WordPress plugin before 33.0.1 does not limit the number of attempts against its front-end registration email-verification step, which relies on a short numeric PIN, allowing unauthenticated attackers to brute-force the PIN and create and activate a WordPress account bound to an email address they do not own, gaining an authenticated session.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-10T20:00:54.468Z","source_hash":"content-fingerprint:fnv1a-d3b143dc","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-107120-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Contest Gallery WordPress plugin before 33.0.1 does not limit the number of attempts against its front-end registration email-verification step, which relies on a short numeric PIN, allowing unauthenticated attackers to brute-force the PIN and create and activate a WordPress account bound to an email address they do not own, gaining an authenticated session.","source_quote_or_pointer":"Security Advisory CVE-2026-107120","fact_id":"SEA-CVE-2026-107120-F1","document_citation":"Security Advisory CVE-2026-107120"},{"id":"SEA-CVE-2026-107120-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Contest Gallery WordPress plugin before 33.0.1 does not limit the number of attempts against its front-end registration email-verification step, which relies on a short numeric PIN, allowing unauthenticated attackers to brute-force the PIN and create and activate a WordPress account bound to an email address they…","source_quote_or_pointer":"Advisory description (CVE-2026-107120)","fact_id":"SEA-CVE-2026-107120-F2","document_citation":"Advisory description (CVE-2026-107120)"}],"source_stated_contributors":["The Contest Gallery WordPress plugin before 33.0.1 does not limit the number of attempts against its front-end registration email-verification step, which relies on a short numeric PIN, allowing unauthenticated attackers to brute-force the PIN and create and activate a WordPress account bound to an email address they…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-107120","reporting_entity":"CVE-2026-107120","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-107120-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-107120-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-107120"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-105995","title":"The Booking Package WordPress plugin before 1.7.30 does not perform authorization checks before returning stored reservation data, allowing unauthenticated users to disclose other customers' personal information and booking cancellation tokens.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-105995","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105995","source_title":"The Booking Package WordPress plugin before 1.7.30 does not perform authorization checks before returning stored reservation data, allowing unauthenticated users to disclose other customers' personal information and booking cancellation tokens.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-10T20:00:54.468Z","source_hash":"content-fingerprint:fnv1a-474c9574","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-105995-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Booking Package WordPress plugin before 1.7.30 does not perform authorization checks before returning stored reservation data, allowing unauthenticated users to disclose other customers' personal information and booking cancellation tokens.","source_quote_or_pointer":"Security Advisory CVE-2026-105995","fact_id":"SEA-CVE-2026-105995-F1","document_citation":"Security Advisory CVE-2026-105995"},{"id":"SEA-CVE-2026-105995-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Booking Package WordPress plugin before 1.7.30 does not perform authorization checks before returning stored reservation data, allowing unauthenticated users to disclose other customers' personal information and booking cancellation tokens.","source_quote_or_pointer":"Advisory description (CVE-2026-105995)","fact_id":"SEA-CVE-2026-105995-F2","document_citation":"Advisory description (CVE-2026-105995)"}],"source_stated_contributors":["The Booking Package WordPress plugin before 1.7.30 does not perform authorization checks before returning stored reservation data, allowing unauthenticated users to disclose other customers' personal information and booking cancellation tokens."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-105995","reporting_entity":"CVE-2026-105995","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-105995-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-105995-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-105995"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-105990","title":"The Accept PayPal Payments using Contact Form 7 WordPress plugin before 4.0.7 does not perform any authorization checks before exporting stored form submissions, allowing unauthenticated attackers to download the personal data (name, email, telephone, postal address, message) and payment metadata of everyone who submitted a payment form.","display_title":"Security issue reported in Software component","display_summary":"The Accept PayPal Payments using Contact Form 7 WordPress plugin before 4.0.7 does not perform any authorization checks before exporting stored form submissions, allowing unauthenticated attackers to download the…","display_reference":"CVE-2026-105990","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105990","source_title":"The Accept PayPal Payments using Contact Form 7 WordPress plugin before 4.0.7 does not perform any authorization checks before exporting stored form submissions, allowing unauthenticated attackers to download the personal data (name, email, telephone, postal address, message) and payment metadata of everyone who submitted a payment form.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-10T20:00:54.468Z","source_hash":"content-fingerprint:fnv1a-7a024109","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-105990-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Accept PayPal Payments using Contact Form 7 WordPress plugin before 4.0.7 does not perform any authorization checks before exporting stored form submissions, allowing unauthenticated attackers to download the personal data (name, email, telephone, postal address, message) and payment metadata of everyone who submitted a payment form.","source_quote_or_pointer":"Security Advisory CVE-2026-105990","fact_id":"SEA-CVE-2026-105990-F1","document_citation":"Security Advisory CVE-2026-105990"},{"id":"SEA-CVE-2026-105990-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Accept PayPal Payments using Contact Form 7 WordPress plugin before 4.0.7 does not perform any authorization checks before exporting stored form submissions, allowing unauthenticated attackers to download the personal data (name, email, telephone, postal address, message) and payment metadata of everyone who…","source_quote_or_pointer":"Advisory description (CVE-2026-105990)","fact_id":"SEA-CVE-2026-105990-F2","document_citation":"Advisory description (CVE-2026-105990)"}],"source_stated_contributors":["The Accept PayPal Payments using Contact Form 7 WordPress plugin before 4.0.7 does not perform any authorization checks before exporting stored form submissions, allowing unauthenticated attackers to download the personal data (name, email, telephone, postal address, message) and payment metadata of everyone who…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.financial_action","data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-105990","reporting_entity":"CVE-2026-105990","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-105990-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-105990-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-105990"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-105989","title":"The Accept PayPal Payments using Contact Form 7 WordPress plugin before 4.0.7 does not perform any authorization or request-validation checks on one of its AJAX actions, allowing unauthenticated attackers to forge the stored transaction status of records and to write the Accept PayPal Payments using Contact Form 7 WordPress plugin before 4.0.7's status metadata onto arbitrary posts.","display_title":"Security issue reported in Software component","display_summary":"The Accept PayPal Payments using Contact Form 7 WordPress plugin before 4.0.7 does not perform any authorization or request-validation checks on one of its AJAX actions, allowing unauthenticated attackers to forge the…","display_reference":"CVE-2026-105989","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105989","source_title":"The Accept PayPal Payments using Contact Form 7 WordPress plugin before 4.0.7 does not perform any authorization or request-validation checks on one of its AJAX actions, allowing unauthenticated attackers to forge the stored transaction status of records and to write the Accept PayPal Payments using Contact Form 7 WordPress plugin before 4.0.7's status metadata onto arbitrary posts.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-10T20:00:54.468Z","source_hash":"content-fingerprint:fnv1a-6f215d97","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-105989-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Accept PayPal Payments using Contact Form 7 WordPress plugin before 4.0.7 does not perform any authorization or request-validation checks on one of its AJAX actions, allowing unauthenticated attackers to forge the stored transaction status of records and to write the Accept PayPal Payments using Contact Form 7 WordPress plugin before 4.0.7's status metadata onto arbitrary posts.","source_quote_or_pointer":"Security Advisory CVE-2026-105989","fact_id":"SEA-CVE-2026-105989-F1","document_citation":"Security Advisory CVE-2026-105989"},{"id":"SEA-CVE-2026-105989-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Accept PayPal Payments using Contact Form 7 WordPress plugin before 4.0.7 does not perform any authorization or request-validation checks on one of its AJAX actions, allowing unauthenticated attackers to forge the stored transaction status of records and to write the Accept PayPal Payments using Contact Form 7…","source_quote_or_pointer":"Advisory description (CVE-2026-105989)","fact_id":"SEA-CVE-2026-105989-F2","document_citation":"Advisory description (CVE-2026-105989)"}],"source_stated_contributors":["The Accept PayPal Payments using Contact Form 7 WordPress plugin before 4.0.7 does not perform any authorization or request-validation checks on one of its AJAX actions, allowing unauthenticated attackers to forge the stored transaction status of records and to write the Accept PayPal Payments using Contact Form 7…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.financial_action","auth.write_action"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-105989","reporting_entity":"CVE-2026-105989","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-105989-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-105989-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-105989"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-105977","title":"The Portfolio Filter Gallery WordPress plugin before 2.2.1 does not perform a per-object authorization check before deleting an attachment, allowing users with the Contributor role and above to permanently delete certain media attachments belonging to other users, including administrators.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-105977","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105977","source_title":"The Portfolio Filter Gallery WordPress plugin before 2.2.1 does not perform a per-object authorization check before deleting an attachment, allowing users with the Contributor role and above to permanently delete certain media attachments belonging to other users, including administrators.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-10T20:00:54.468Z","source_hash":"content-fingerprint:fnv1a-5d8f1f8","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-105977-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Portfolio Filter Gallery WordPress plugin before 2.2.1 does not perform a per-object authorization check before deleting an attachment, allowing users with the Contributor role and above to permanently delete certain media attachments belonging to other users, including administrators.","source_quote_or_pointer":"Security Advisory CVE-2026-105977","fact_id":"SEA-CVE-2026-105977-F1","document_citation":"Security Advisory CVE-2026-105977"},{"id":"SEA-CVE-2026-105977-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Portfolio Filter Gallery WordPress plugin before 2.2.1 does not perform a per-object authorization check before deleting an attachment, allowing users with the Contributor role and above to permanently delete certain media attachments belonging to other users, including administrators.","source_quote_or_pointer":"Advisory description (CVE-2026-105977)","fact_id":"SEA-CVE-2026-105977-F2","document_citation":"Advisory description (CVE-2026-105977)"}],"source_stated_contributors":["The Portfolio Filter Gallery WordPress plugin before 2.2.1 does not perform a per-object authorization check before deleting an attachment, allowing users with the Contributor role and above to permanently delete certain media attachments belonging to other users, including administrators."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.write_action","data.pii","data.uploaded_files"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-105977","reporting_entity":"CVE-2026-105977","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-105977-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-105977-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-105977"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-105976","title":"The Portfolio Filter Gallery WordPress plugin before 2.2.1 does not perform proper authorization checks in a set of AJAX actions, allowing users with at least the Contributor role to read, modify and delete other users' galleries as well as site-wide gallery filters.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-105976","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105976","source_title":"The Portfolio Filter Gallery WordPress plugin before 2.2.1 does not perform proper authorization checks in a set of AJAX actions, allowing users with at least the Contributor role to read, modify and delete other users' galleries as well as site-wide gallery filters.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-10T20:00:54.468Z","source_hash":"content-fingerprint:fnv1a-7d240825","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-105976-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Portfolio Filter Gallery WordPress plugin before 2.2.1 does not perform proper authorization checks in a set of AJAX actions, allowing users with at least the Contributor role to read, modify and delete other users' galleries as well as site-wide gallery filters.","source_quote_or_pointer":"Security Advisory CVE-2026-105976","fact_id":"SEA-CVE-2026-105976-F1","document_citation":"Security Advisory CVE-2026-105976"},{"id":"SEA-CVE-2026-105976-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Portfolio Filter Gallery WordPress plugin before 2.2.1 does not perform proper authorization checks in a set of AJAX actions, allowing users with at least the Contributor role to read, modify and delete other users' galleries as well as site-wide gallery filters.","source_quote_or_pointer":"Advisory description (CVE-2026-105976)","fact_id":"SEA-CVE-2026-105976-F2","document_citation":"Advisory description (CVE-2026-105976)"}],"source_stated_contributors":["The Portfolio Filter Gallery WordPress plugin before 2.2.1 does not perform proper authorization checks in a set of AJAX actions, allowing users with at least the Contributor role to read, modify and delete other users' galleries as well as site-wide gallery filters."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.write_action","data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-105976","reporting_entity":"CVE-2026-105976","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-105976-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-105976-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-105976"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-104754","title":"The Rank Math SEO WordPress plugin before 1.0.280 does not escape a stored redirection source value before outputting it in an administrative list view, allowing users who can manage redirections (Administrators by default) to store JavaScript that executes in the session of any user who later opens that view, including a Super Administrator on multisite.","display_title":"Security issue reported in Software component","display_summary":"The Rank Math SEO WordPress plugin before 1.0.280 does not escape a stored redirection source value before outputting it in an administrative list view, allowing users who can manage redirections (Administrators by…","display_reference":"CVE-2026-104754","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104754","source_title":"The Rank Math SEO WordPress plugin before 1.0.280 does not escape a stored redirection source value before outputting it in an administrative list view, allowing users who can manage redirections (Administrators by default) to store JavaScript that executes in the session of any user who later opens that view, including a Super Administrator on multisite.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-10T20:00:54.468Z","source_hash":"content-fingerprint:fnv1a-6cc649a8","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-104754-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Rank Math SEO WordPress plugin before 1.0.280 does not escape a stored redirection source value before outputting it in an administrative list view, allowing users who can manage redirections (Administrators by default) to store JavaScript that executes in the session of any user who later opens that view, including a Super Administrator on multisite.","source_quote_or_pointer":"Security Advisory CVE-2026-104754","fact_id":"SEA-CVE-2026-104754-F1","document_citation":"Security Advisory CVE-2026-104754"},{"id":"SEA-CVE-2026-104754-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Rank Math SEO WordPress plugin before 1.0.280 does not escape a stored redirection source value before outputting it in an administrative list view, allowing users who can manage redirections (Administrators by default) to store JavaScript that executes in the session of any user who later opens that view,…","source_quote_or_pointer":"Advisory description (CVE-2026-104754)","fact_id":"SEA-CVE-2026-104754-F2","document_citation":"Advisory description (CVE-2026-104754)"}],"source_stated_contributors":["The Rank Math SEO WordPress plugin before 1.0.280 does not escape a stored redirection source value before outputting it in an administrative list view, allowing users who can manage redirections (Administrators by default) to store JavaScript that executes in the session of any user who later opens that view,…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.write_action","data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-104754","reporting_entity":"CVE-2026-104754","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-104754-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-104754-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-104754"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-104753","title":"The Rank Math SEO WordPress plugin before 1.0.280 does not properly sanitise and escape a parameter before using it in a SQL query, allowing high-privilege users such as administrators to perform SQL injection attacks.","display_title":"Software component issue could expose or alter stored data","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-104753","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104753","source_title":"The Rank Math SEO WordPress plugin before 1.0.280 does not properly sanitise and escape a parameter before using it in a SQL query, allowing high-privilege users such as administrators to perform SQL injection attacks.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-10T20:00:54.468Z","source_hash":"content-fingerprint:fnv1a-402bbfd1","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-104753-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Rank Math SEO WordPress plugin before 1.0.280 does not properly sanitise and escape a parameter before using it in a SQL query, allowing high-privilege users such as administrators to perform SQL injection attacks.","source_quote_or_pointer":"Security Advisory CVE-2026-104753","fact_id":"SEA-CVE-2026-104753-F1","document_citation":"Security Advisory CVE-2026-104753"},{"id":"SEA-CVE-2026-104753-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Rank Math SEO WordPress plugin before 1.0.280 does not properly sanitise and escape a parameter before using it in a SQL query, allowing high-privilege users such as administrators to perform SQL injection attacks.","source_quote_or_pointer":"Advisory description (CVE-2026-104753)","fact_id":"SEA-CVE-2026-104753-F2","document_citation":"Advisory description (CVE-2026-104753)"}],"source_stated_contributors":["The Rank Math SEO WordPress plugin before 1.0.280 does not properly sanitise and escape a parameter before using it in a SQL query, allowing high-privilege users such as administrators to perform SQL injection attacks."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-104753","reporting_entity":"CVE-2026-104753","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-104753-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-104753-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-104753"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-104752","title":"The Rank Math SEO WordPress plugin before 1.0.280 does not correctly validate the type of a file uploaded through its settings import feature, allowing users with administrator-level access to upload a PHP file and achieve remote code execution.","display_title":"Software component issue could allow unintended commands to run","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-104752","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104752","source_title":"The Rank Math SEO WordPress plugin before 1.0.280 does not correctly validate the type of a file uploaded through its settings import feature, allowing users with administrator-level access to upload a PHP file and achieve remote code execution.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-10T20:00:54.468Z","source_hash":"content-fingerprint:fnv1a-dfdfcb8","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-104752-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Rank Math SEO WordPress plugin before 1.0.280 does not correctly validate the type of a file uploaded through its settings import feature, allowing users with administrator-level access to upload a PHP file and achieve remote code execution.","source_quote_or_pointer":"Security Advisory CVE-2026-104752","fact_id":"SEA-CVE-2026-104752-F1","document_citation":"Security Advisory CVE-2026-104752"},{"id":"SEA-CVE-2026-104752-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Rank Math SEO WordPress plugin before 1.0.280 does not correctly validate the type of a file uploaded through its settings import feature, allowing users with administrator-level access to upload a PHP file and achieve remote code execution.","source_quote_or_pointer":"Advisory description (CVE-2026-104752)","fact_id":"SEA-CVE-2026-104752-F2","document_citation":"Advisory description (CVE-2026-104752)"}],"source_stated_contributors":["The Rank Math SEO WordPress plugin before 1.0.280 does not correctly validate the type of a file uploaded through its settings import feature, allowing users with administrator-level access to upload a PHP file and achieve remote code execution."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii","data.uploaded_files"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-104752","reporting_entity":"CVE-2026-104752","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-104752-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-104752-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-104752"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-96765","title":"The WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id_token' parameter in all versions up to, and including, 44.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The payload is stored in the wpo365_errors transient for up to three days by submitting a crafted unauthenticated request with a forged id_token whose base64url-decoded unique_name or iss claim contains malicious HTML, requiring no prior authentication or user interaction beyond an administrator later visiting the WPO365 wizard page.","display_title":"Software component issue could run attacker-controlled scripts in a browser","display_summary":"The WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'idtoken' parameter in all versions up to, and including, 44.1 due to…","display_reference":"CVE-2026-96765","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-96765","source_title":"The WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id_token' parameter in all versions up to, and including, 44.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The payload is stored in the wpo365_errors transient for up to three days by submitting a crafted unauthenticated request with a forged id_token whose base64url-decoded unique_name or iss claim contains malicious HTML, requiring no prior authentication or user interaction beyond an administrator later visiting the WPO365 wizard page.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-10T20:00:54.468Z","source_hash":"content-fingerprint:fnv1a-5dbde28","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-96765-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id_token' parameter in all versions up to, and including, 44.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The payload is stored in the wpo365_errors transient for up to three days by submitting a crafted unauthenticated request with a forged id_token whose base64url-decoded unique_name or iss claim contains malicious HTML, requiring no prior authentication or user interaction beyond an administrator later visiting the WPO365 wizard page.","source_quote_or_pointer":"Security Advisory CVE-2026-96765","fact_id":"SEA-CVE-2026-96765-F1","document_citation":"Security Advisory CVE-2026-96765"},{"id":"SEA-CVE-2026-96765-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'idtoken' parameter in all versions up to, and including, 44.1 due to insufficient input sanitization and output escaping.","source_quote_or_pointer":"Advisory description (CVE-2026-96765)","fact_id":"SEA-CVE-2026-96765-F2","document_citation":"Advisory description (CVE-2026-96765)"}],"source_stated_contributors":["The WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'idtoken' parameter in all versions up to, and including, 44.1 due to insufficient input sanitization and output escaping."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-96765","reporting_entity":"CVE-2026-96765","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-96765-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-96765-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-96765"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-96278","title":"The WP Photo Album Plus plugin for WordPress is vulnerable to Stored Cross-Site Scripting via REQUEST_URI Session History in all versions up to, and including, 9.3.03.002 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The bypass works because esc_url_raw() strips literal angle brackets but retains HTML entities, which wppaEntityDecode() silently converts back to live HTML tags before jQuery('wppa-modal-container').html() renders them.","display_title":"Software component issue could run attacker-controlled scripts in a browser","display_summary":"The WP Photo Album Plus plugin for WordPress is vulnerable to Stored Cross-Site Scripting via REQUESTURI Session History in all versions up to, and including, 9.3.03.002 due to insufficient input sanitization and output…","display_reference":"CVE-2026-96278","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-96278","source_title":"The WP Photo Album Plus plugin for WordPress is vulnerable to Stored Cross-Site Scripting via REQUEST_URI Session History in all versions up to, and including, 9.3.03.002 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The bypass works because esc_url_raw() strips literal angle brackets but retains HTML entities, which wppaEntityDecode() silently converts back to live HTML tags before jQuery('wppa-modal-container').html() renders them.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-10T20:00:54.468Z","source_hash":"content-fingerprint:fnv1a-3ee39cb7","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Cloud & container infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-96278-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The WP Photo Album Plus plugin for WordPress is vulnerable to Stored Cross-Site Scripting via REQUEST_URI Session History in all versions up to, and including, 9.3.03.002 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The bypass works because esc_url_raw() strips literal angle brackets but retains HTML entities, which wppaEntityDecode() silently converts back to live HTML tags before jQuery('wppa-modal-container').html() renders them.","source_quote_or_pointer":"Security Advisory CVE-2026-96278","fact_id":"SEA-CVE-2026-96278-F1","document_citation":"Security Advisory CVE-2026-96278"},{"id":"SEA-CVE-2026-96278-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The WP Photo Album Plus plugin for WordPress is vulnerable to Stored Cross-Site Scripting via REQUESTURI Session History in all versions up to, and including, 9.3.03.002 due to insufficient input sanitization and output escaping.","source_quote_or_pointer":"Advisory description (CVE-2026-96278)","fact_id":"SEA-CVE-2026-96278-F2","document_citation":"Advisory description (CVE-2026-96278)"}],"source_stated_contributors":["The WP Photo Album Plus plugin for WordPress is vulnerable to Stored Cross-Site Scripting via REQUESTURI Session History in all versions up to, and including, 9.3.03.002 due to insufficient input sanitization and output escaping."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-96278","reporting_entity":"CVE-2026-96278","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-96278-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-96278-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-96278"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-96558","title":"The Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'qsm_hidden_questions' parameter in all versions up to, and including, 11.2.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This requires the attacker to force the mlw_results INSERT to fail by submitting an over-length or duplicate qsm_unique_key value, which triggers the audit trail code branch that writes the unescaped payload to wp_mlw_qm_audit_trail.form_data.","display_title":"Software component issue could run attacker-controlled scripts in a browser","display_summary":"The Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'qsmhiddenquestions' parameter in all versions up to, and including, 11.2.6…","display_reference":"CVE-2026-96558","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-96558","source_title":"The Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'qsm_hidden_questions' parameter in all versions up to, and including, 11.2.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This requires the attacker to force the mlw_results INSERT to fail by submitting an over-length or duplicate qsm_unique_key value, which triggers the audit trail code branch that writes the unescaped payload to wp_mlw_qm_audit_trail.form_data.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-10T20:00:54.468Z","source_hash":"content-fingerprint:fnv1a-a8ba94fe","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-96558-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'qsm_hidden_questions' parameter in all versions up to, and including, 11.2.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This requires the attacker to force the mlw_results INSERT to fail by submitting an over-length or duplicate qsm_unique_key value, which triggers the audit trail code branch that writes the unescaped payload to wp_mlw_qm_audit_trail.form_data.","source_quote_or_pointer":"Security Advisory CVE-2026-96558","fact_id":"SEA-CVE-2026-96558-F1","document_citation":"Security Advisory CVE-2026-96558"},{"id":"SEA-CVE-2026-96558-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'qsmhiddenquestions' parameter in all versions up to, and including, 11.2.6 due to insufficient input sanitization and output escaping.","source_quote_or_pointer":"Advisory description (CVE-2026-96558)","fact_id":"SEA-CVE-2026-96558-F2","document_citation":"Advisory description (CVE-2026-96558)"}],"source_stated_contributors":["The Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'qsmhiddenquestions' parameter in all versions up to, and including, 11.2.6 due to insufficient input sanitization and output escaping."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-96558","reporting_entity":"CVE-2026-96558","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-96558-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-96558-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-96558"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-100161","title":"The Photo Reviews for WooCommerce plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'wcpr_image_upload_id' parameter in all versions up to, and including, 1.2.30 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The publicly-emitted wcpr_image_upload nonce printed on every product review form is the only gate, and no capability, authentication, or attachment ownership check is performed, allowing the payload to be stored in comment meta — which is not subject to wp_kses — by any unauthenticated visitor; the XSS fires once the review is visible on the frontend.","display_title":"Software component issue could run attacker-controlled scripts in a browser","display_summary":"The Photo Reviews for WooCommerce plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'wcprimageuploadid' parameter in all versions up to, and including, 1.2.30 due to insufficient input…","display_reference":"CVE-2026-100161","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100161","source_title":"The Photo Reviews for WooCommerce plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'wcpr_image_upload_id' parameter in all versions up to, and including, 1.2.30 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The publicly-emitted wcpr_image_upload nonce printed on every product review form is the only gate, and no capability, authentication, or attachment ownership check is performed, allowing the payload to be stored in comment meta — which is not subject to wp_kses — by any unauthenticated visitor; the XSS fires once the review is visible on the frontend.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-10T20:00:54.468Z","source_hash":"content-fingerprint:fnv1a-c2eaca2a","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-100161-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Photo Reviews for WooCommerce plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'wcpr_image_upload_id' parameter in all versions up to, and including, 1.2.30 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The publicly-emitted wcpr_image_upload nonce printed on every product review form is the only gate, and no capability, authentication, or attachment ownership check is performed, allowing the payload to be stored in comment meta — which is not subject to wp_kses — by any unauthenticated visitor; the XSS fires once the review is visible on the frontend.","source_quote_or_pointer":"Security Advisory CVE-2026-100161","fact_id":"SEA-CVE-2026-100161-F1","document_citation":"Security Advisory CVE-2026-100161"},{"id":"SEA-CVE-2026-100161-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Photo Reviews for WooCommerce plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'wcprimageuploadid' parameter in all versions up to, and including, 1.2.30 due to insufficient input sanitization and output escaping.","source_quote_or_pointer":"Advisory description (CVE-2026-100161)","fact_id":"SEA-CVE-2026-100161-F2","document_citation":"Advisory description (CVE-2026-100161)"}],"source_stated_contributors":["The Photo Reviews for WooCommerce plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'wcprimageuploadid' parameter in all versions up to, and including, 1.2.30 due to insufficient input sanitization and output escaping."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-100161","reporting_entity":"CVE-2026-100161","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-100161-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-100161-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-100161"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-96667","title":"The Real Estate Manager – Property Listing and Agent Management plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'first_name' parameter in all versions up to, and including, 7.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The reCAPTCHA check is trivially bypassed by omitting the g-recaptcha-response parameter entirely, since validation only runs when that parameter is present.","display_title":"Software component issue could run attacker-controlled scripts in a browser","display_summary":"The Real Estate Manager – Property Listing and Agent Management plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'firstname' parameter in all versions up to, and including, 7.3 due to…","display_reference":"CVE-2026-96667","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-96667","source_title":"The Real Estate Manager – Property Listing and Agent Management plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'first_name' parameter in all versions up to, and including, 7.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The reCAPTCHA check is trivially bypassed by omitting the g-recaptcha-response parameter entirely, since validation only runs when that parameter is present.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-10T20:00:54.468Z","source_hash":"content-fingerprint:fnv1a-ab894857","affected_system":{"organization":"Software component project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-96667-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Real Estate Manager – Property Listing and Agent Management plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'first_name' parameter in all versions up to, and including, 7.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The reCAPTCHA check is trivially bypassed by omitting the g-recaptcha-response parameter entirely, since validation only runs when that parameter is present.","source_quote_or_pointer":"Security Advisory CVE-2026-96667","fact_id":"SEA-CVE-2026-96667-F1","document_citation":"Security Advisory CVE-2026-96667"},{"id":"SEA-CVE-2026-96667-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Real Estate Manager – Property Listing and Agent Management plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'firstname' parameter in all versions up to, and including, 7.3 due to insufficient input sanitization and output escaping.","source_quote_or_pointer":"Advisory description (CVE-2026-96667)","fact_id":"SEA-CVE-2026-96667-F2","document_citation":"Advisory description (CVE-2026-96667)"}],"source_stated_contributors":["The Real Estate Manager – Property Listing and Agent Management plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'firstname' parameter in all versions up to, and including, 7.3 due to insufficient input sanitization and output escaping."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-010"],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-96667","reporting_entity":"CVE-2026-96667","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-96667-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-96667-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-96667"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-93775","title":"The Podlove Podcast Publisher plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Auphonic Webhook in all versions up to, and including, 4.5.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The injection is triggered by submitting a request to the Auphonic webhook endpoint with any POST body where the status_string field is not the literal string 'Done', causing the full raw POST superglobal to be stored in the plugin log before any authentication key validation is performed.","display_title":"Software component issue could run attacker-controlled scripts in a browser","display_summary":"The Podlove Podcast Publisher plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Auphonic Webhook in all versions up to, and including, 4.5.6 due to insufficient input sanitization and output escaping.","display_reference":"CVE-2026-93775","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93775","source_title":"The Podlove Podcast Publisher plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Auphonic Webhook in all versions up to, and including, 4.5.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The injection is triggered by submitting a request to the Auphonic webhook endpoint with any POST body where the status_string field is not the literal string 'Done', causing the full raw POST superglobal to be stored in the plugin log before any authentication key validation is performed.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-10T20:00:54.468Z","source_hash":"content-fingerprint:fnv1a-5fe6d948","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-93775-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Podlove Podcast Publisher plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Auphonic Webhook in all versions up to, and including, 4.5.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The injection is triggered by submitting a request to the Auphonic webhook endpoint with any POST body where the status_string field is not the literal string 'Done', causing the full raw POST superglobal to be stored in the plugin log before any authentication key validation is performed.","source_quote_or_pointer":"Security Advisory CVE-2026-93775","fact_id":"SEA-CVE-2026-93775-F1","document_citation":"Security Advisory CVE-2026-93775"},{"id":"SEA-CVE-2026-93775-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Podlove Podcast Publisher plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Auphonic Webhook in all versions up to, and including, 4.5.6 due to insufficient input sanitization and output escaping.","source_quote_or_pointer":"Advisory description (CVE-2026-93775)","fact_id":"SEA-CVE-2026-93775-F2","document_citation":"Advisory description (CVE-2026-93775)"}],"source_stated_contributors":["The Podlove Podcast Publisher plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Auphonic Webhook in all versions up to, and including, 4.5.6 due to insufficient input sanitization and output escaping."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","arch.external_api","arch.event_driven"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-93775","reporting_entity":"CVE-2026-93775","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-93775-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-93775-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-93775"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-103482","title":"The Simple Newsletter Plugin – Noptin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'noptin_fields[<custom_field_merge_tag>] (e.g. first_name)' parameter in all versions up to, and including, 4.3.10 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The attack chain requires a published campaign post whose body contains a [[subscriber.]] merge tag; the unauthenticated attacker first POSTs the entity-encoded payload to the public manage_preferences form (which issues its own nonce on the same page), then pivots execution by embedding their confirm_key in a campaign preview URL sent to a privileged user via social engineering.","display_title":"Software component issue could run attacker-controlled scripts in a browser","display_summary":"The Simple Newsletter Plugin – Noptin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'noptinfields[] (e.g.","display_reference":"CVE-2026-103482","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103482","source_title":"The Simple Newsletter Plugin – Noptin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'noptin_fields[<custom_field_merge_tag>] (e.g. first_name)' parameter in all versions up to, and including, 4.3.10 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The attack chain requires a published campaign post whose body contains a [[subscriber.]] merge tag; the unauthenticated attacker first POSTs the entity-encoded payload to the public manage_preferences form (which issues its own nonce on the same page), then pivots execution by embedding their confirm_key in a campaign preview URL sent to a privileged user via social engineering.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-10T16:01:09.292Z","source_hash":"content-fingerprint:fnv1a-89f9cb63","affected_system":{"organization":"Software component project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-103482-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Simple Newsletter Plugin – Noptin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'noptin_fields[<custom_field_merge_tag>] (e.g. first_name)' parameter in all versions up to, and including, 4.3.10 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The attack chain requires a published campaign post whose body contains a [[subscriber.]] merge tag; the unauthenticated attacker first POSTs the entity-encoded payload to the public manage_preferences form (which issues its own nonce on the same page), then pivots execution by embedding their confirm_key in a campaign preview URL sent to a privileged user via social engineering.","source_quote_or_pointer":"Security Advisory CVE-2026-103482","fact_id":"SEA-CVE-2026-103482-F1","document_citation":"Security Advisory CVE-2026-103482"},{"id":"SEA-CVE-2026-103482-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Simple Newsletter Plugin – Noptin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'noptinfields[] (e.g. firstname)' parameter in all versions up to, and including, 4.3.10 due to insufficient input sanitization and output escaping.","source_quote_or_pointer":"Advisory description (CVE-2026-103482)","fact_id":"SEA-CVE-2026-103482-F2","document_citation":"Advisory description (CVE-2026-103482)"}],"source_stated_contributors":["The Simple Newsletter Plugin – Noptin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'noptinfields[] (e.g. firstname)' parameter in all versions up to, and including, 4.3.10 due to insufficient input sanitization and output escaping."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.public_publication","data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-103482","reporting_entity":"CVE-2026-103482","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-103482-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-103482-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-103482"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-96648","title":"The Data Tables Generator by Supsystic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Table Cell 'data' Value via updateRows Action in all versions up to, and including, 1.15.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This is only exploitable by Subscriber-level users when an administrator has added their role to the plugin's 'access_roles' setting, which is a documented and explicitly supported plugin feature that grants lower-privileged users access to the dtgs_nonce required to reach the vulnerable updateRows action handler.","display_title":"Software component issue could run attacker-controlled scripts in a browser","display_summary":"The Data Tables Generator by Supsystic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Table Cell 'data' Value via updateRows Action in all versions up to, and including, 1.15.1 due to insufficient…","display_reference":"CVE-2026-96648","display_source_type":"Security advisory","incident_date":"2026-10-10","disclosure_date":"2026-10-10","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-96648","source_title":"The Data Tables Generator by Supsystic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Table Cell 'data' Value via updateRows Action in all versions up to, and including, 1.15.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This is only exploitable by Subscriber-level users when an administrator has added their role to the plugin's 'access_roles' setting, which is a documented and explicitly supported plugin feature that grants lower-privileged users access to the dtgs_nonce required to reach the vulnerable updateRows action handler.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-10T16:01:09.292Z","source_hash":"content-fingerprint:fnv1a-304bb836","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-96648-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Data Tables Generator by Supsystic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Table Cell 'data' Value via updateRows Action in all versions up to, and including, 1.15.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This is only exploitable by Subscriber-level users when an administrator has added their role to the plugin's 'access_roles' setting, which is a documented and explicitly supported plugin feature that grants lower-privileged users access to the dtgs_nonce required to reach the vulnerable updateRows action handler.","source_quote_or_pointer":"Security Advisory CVE-2026-96648","fact_id":"SEA-CVE-2026-96648-F1","document_citation":"Security Advisory CVE-2026-96648"},{"id":"SEA-CVE-2026-96648-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Data Tables Generator by Supsystic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Table Cell 'data' Value via updateRows Action in all versions up to, and including, 1.15.1 due to insufficient input sanitization and output escaping.","source_quote_or_pointer":"Advisory description (CVE-2026-96648)","fact_id":"SEA-CVE-2026-96648-F2","document_citation":"Advisory description (CVE-2026-96648)"}],"source_stated_contributors":["The Data Tables Generator by Supsystic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Table Cell 'data' Value via updateRows Action in all versions up to, and including, 1.15.1 due to insufficient input sanitization and output escaping."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-96648","reporting_entity":"CVE-2026-96648","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-96648-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-96648-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-96648"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-m687-p538-r5hp","title":"Vikunja: Permissive Cross-domain Security Policy trusts every localhost origin which should not be trusted","display_title":"Security issue reported in code.vikunja.io/api","display_summary":"Vikunja ships with cors.origins defaulting to http://127.0.0.1: and http://localhost:, and sends Access-Control-Allow-Credentials: true, so a page served from any port on the user's own machine may make credentialed…","display_reference":"GHSA-m687-p538-r5hp","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-m687-p538-r5hp","source_title":"Vikunja: Permissive Cross-domain Security Policy trusts every localhost origin which should not be trusted","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T16:55:27.136Z","source_hash":"content-fingerprint:fnv1a-fcb3e640","affected_system":{"organization":"code.vikunja.io/api project","product":"code.vikunja.io/api","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Go"},"documented_facts":[{"id":"SEA-GHSA-m687-p538-r5hp-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Vikunja: Permissive Cross-domain Security Policy trusts every localhost origin which should not be trusted","source_quote_or_pointer":"Security Advisory GHSA-m687-p538-r5hp","fact_id":"SEA-GHSA-m687-p538-r5hp-F1","document_citation":"Security Advisory GHSA-m687-p538-r5hp"},{"id":"SEA-GHSA-m687-p538-r5hp-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Vikunja ships with cors.origins defaulting to http://127.0.0.1: and http://localhost:, and sends Access-Control-Allow-Credentials: true, so a page served from any port on the user's own machine may make credentialed cross-origin requests to the API and read the responses.","source_quote_or_pointer":"Advisory description (GHSA-m687-p538-r5hp)","fact_id":"SEA-GHSA-m687-p538-r5hp-F2","document_citation":"Advisory description (GHSA-m687-p538-r5hp)"}],"source_stated_contributors":["Vikunja ships with cors.origins defaulting to http://127.0.0.1: and http://localhost:, and sends Access-Control-Allow-Credentials: true, so a page served from any port on the user's own machine may make credentialed cross-origin requests to the API and read the responses."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-m687-p538-r5hp","reporting_entity":"GitHub Security Advisory Database","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-m687-p538-r5hp-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-m687-p538-r5hp-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":[],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-fmmf-xq98-g327","title":"Vikunja: Write-level project members can delete admin-tier link shares through an unloaded permission check","display_title":"Security issue reported in code.vikunja.io/api","display_summary":"A project member with Write permission can delete an admin-tier link share on that project. The deletion authorization check reads the permission from an object populated only with URL IDs, rather than from the stored…","display_reference":"GHSA-fmmf-xq98-g327","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-fmmf-xq98-g327","source_title":"Vikunja: Write-level project members can delete admin-tier link shares through an unloaded permission check","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T16:55:27.142Z","source_hash":"content-fingerprint:fnv1a-d8ab6d50","affected_system":{"organization":"code.vikunja.io/api project","product":"code.vikunja.io/api","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Go"},"documented_facts":[{"id":"SEA-GHSA-fmmf-xq98-g327-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Vikunja: Write-level project members can delete admin-tier link shares through an unloaded permission check","source_quote_or_pointer":"Security Advisory GHSA-fmmf-xq98-g327","fact_id":"SEA-GHSA-fmmf-xq98-g327-F1","document_citation":"Security Advisory GHSA-fmmf-xq98-g327"},{"id":"SEA-GHSA-fmmf-xq98-g327-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A project member with Write permission can delete an admin-tier link share on that project. The deletion authorization check reads the permission from an object populated only with URL IDs, rather than from the stored share.","source_quote_or_pointer":"Advisory description (GHSA-fmmf-xq98-g327)","fact_id":"SEA-GHSA-fmmf-xq98-g327-F2","document_citation":"Advisory description (GHSA-fmmf-xq98-g327)"}],"source_stated_contributors":["A project member with Write permission can delete an admin-tier link share on that project. The deletion authorization check reads the permission from an object populated only with URL IDs, rather than from the stored share."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.privileged_action","auth.write_action"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-fmmf-xq98-g327","reporting_entity":"GitHub Security Advisory Database","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-fmmf-xq98-g327-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-fmmf-xq98-g327-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-hjx8-qv73-f7cm","title":"Vikunja: Webhooks and link shares survive every revocation path, so a removed collaborator keeps a live feed","display_title":"Security issue reported in code.vikunja.io/api","display_summary":"A collaborator removed from a project keeps a live, automatic feed of that project's contents, because nothing on any revocation path deletes the webhook they created while they had access.","display_reference":"GHSA-hjx8-qv73-f7cm","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-hjx8-qv73-f7cm","source_title":"Vikunja: Webhooks and link shares survive every revocation path, so a removed collaborator keeps a live feed","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T16:55:27.145Z","source_hash":"content-fingerprint:fnv1a-d8490a1","affected_system":{"organization":"code.vikunja.io/api project","product":"code.vikunja.io/api","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Go"},"documented_facts":[{"id":"SEA-GHSA-hjx8-qv73-f7cm-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Vikunja: Webhooks and link shares survive every revocation path, so a removed collaborator keeps a live feed","source_quote_or_pointer":"Security Advisory GHSA-hjx8-qv73-f7cm","fact_id":"SEA-GHSA-hjx8-qv73-f7cm-F1","document_citation":"Security Advisory GHSA-hjx8-qv73-f7cm"},{"id":"SEA-GHSA-hjx8-qv73-f7cm-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A collaborator removed from a project keeps a live, automatic feed of that project's contents, because nothing on any revocation path deletes the webhook they created while they had access.","source_quote_or_pointer":"Advisory description (GHSA-hjx8-qv73-f7cm)","fact_id":"SEA-GHSA-hjx8-qv73-f7cm-F2","document_citation":"Advisory description (GHSA-hjx8-qv73-f7cm)"}],"source_stated_contributors":["A collaborator removed from a project keeps a live, automatic feed of that project's contents, because nothing on any revocation path deletes the webhook they created while they had access."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","arch.external_api","arch.event_driven"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-hjx8-qv73-f7cm","reporting_entity":"GitHub Security Advisory Database","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-hjx8-qv73-f7cm-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-hjx8-qv73-f7cm-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-fprf-r6rv-xg99","title":"Vikunja: Saved filter creation with an empty filter string recalculates task positions across all tenants","display_title":"Security issue reported in code.vikunja.io/api","display_summary":"In Vikunja v2.6.0 the task position recalculation that runs when a saved filter view is created fails open when the requesting user has no accessible projects.","display_reference":"GHSA-fprf-r6rv-xg99","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-fprf-r6rv-xg99","source_title":"Vikunja: Saved filter creation with an empty filter string recalculates task positions across all tenants","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T16:55:27.146Z","source_hash":"content-fingerprint:fnv1a-a2428114","affected_system":{"organization":"code.vikunja.io/api project","product":"code.vikunja.io/api","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Go"},"documented_facts":[{"id":"SEA-GHSA-fprf-r6rv-xg99-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Vikunja: Saved filter creation with an empty filter string recalculates task positions across all tenants","source_quote_or_pointer":"Security Advisory GHSA-fprf-r6rv-xg99","fact_id":"SEA-GHSA-fprf-r6rv-xg99-F1","document_citation":"Security Advisory GHSA-fprf-r6rv-xg99"},{"id":"SEA-GHSA-fprf-r6rv-xg99-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"In Vikunja v2.6.0 the task position recalculation that runs when a saved filter view is created fails open when the requesting user has no accessible projects. Instead of aborting, the search that feeds the recalculation loses its project scope entirely and returns every task in the instance.","source_quote_or_pointer":"Advisory description (GHSA-fprf-r6rv-xg99)","fact_id":"SEA-GHSA-fprf-r6rv-xg99-F2","document_citation":"Advisory description (GHSA-fprf-r6rv-xg99)"}],"source_stated_contributors":["In Vikunja v2.6.0 the task position recalculation that runs when a saved filter view is created fails open when the requesting user has no accessible projects. Instead of aborting, the search that feeds the recalculation loses its project scope entirely and returns every task in the instance."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-fprf-r6rv-xg99","reporting_entity":"GitHub Security Advisory Database","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-fprf-r6rv-xg99-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-fprf-r6rv-xg99-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-4hv6-xc92-j86g","title":"Vikunja: WebSocket authentication ignores server-side session state, so revoked sessions keep receiving live pushes","display_title":"Security issue reported in code.vikunja.io/api","display_summary":"Vikunja v2.6.0 introduced server-side sessions with revocation semantics: DELETE /api/v2/user/sessions/{id} documents \"Revokes a specific session by its UUID\", and enabling TOTP calls DeleteAllUserSessions to invalidate…","display_reference":"GHSA-4hv6-xc92-j86g","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-4hv6-xc92-j86g","source_title":"Vikunja: WebSocket authentication ignores server-side session state, so revoked sessions keep receiving live pushes","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T16:55:27.146Z","source_hash":"content-fingerprint:fnv1a-2097f24","affected_system":{"organization":"code.vikunja.io/api project","product":"code.vikunja.io/api","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Go"},"documented_facts":[{"id":"SEA-GHSA-4hv6-xc92-j86g-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Vikunja: WebSocket authentication ignores server-side session state, so revoked sessions keep receiving live pushes","source_quote_or_pointer":"Security Advisory GHSA-4hv6-xc92-j86g","fact_id":"SEA-GHSA-4hv6-xc92-j86g-F1","document_citation":"Security Advisory GHSA-4hv6-xc92-j86g"},{"id":"SEA-GHSA-4hv6-xc92-j86g-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Vikunja v2.6.0 introduced server-side sessions with revocation semantics: DELETE /api/v2/user/sessions/{id} documents \"Revokes a specific session by its UUID\", and enabling TOTP calls DeleteAllUserSessions to invalidate all sessions.","source_quote_or_pointer":"Advisory description (GHSA-4hv6-xc92-j86g)","fact_id":"SEA-GHSA-4hv6-xc92-j86g-F2","document_citation":"Advisory description (GHSA-4hv6-xc92-j86g)"}],"source_stated_contributors":["Vikunja v2.6.0 introduced server-side sessions with revocation semantics: DELETE /api/v2/user/sessions/{id} documents \"Revokes a specific session by its UUID\", and enabling TOTP calls DeleteAllUserSessions to invalidate all sessions."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.write_action","data.pii","data.uploaded_files","arch.event_driven"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-4hv6-xc92-j86g","reporting_entity":"GitHub Security Advisory Database","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-4hv6-xc92-j86g-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-4hv6-xc92-j86g-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-j3hg-9rp3-5hw9","title":"Nginx UI: Unauthenticated signed-request body staging can exhaust temporary storage","display_title":"Security issue reported in github.com/0xJacky/Nginx-UI","display_summary":"In Nginx UI versions 2.5.0 through 2.5.x, the node-signature authentication path staged an attacker-controlled request body in a temporary file and synchronized it to disk before validating the body digest and…","display_reference":"CVE-2026-107805","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-j3hg-9rp3-5hw9","source_title":"Nginx UI: Unauthenticated signed-request body staging can exhaust temporary storage","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T16:55:27.147Z","source_hash":"content-fingerprint:fnv1a-8ff5ef1e","affected_system":{"organization":"github.com/0xJacky/Nginx-UI project","product":"github.com/0xJacky/Nginx-UI","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Go"},"documented_facts":[{"id":"SEA-GHSA-j3hg-9rp3-5hw9-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Nginx UI: Unauthenticated signed-request body staging can exhaust temporary storage","source_quote_or_pointer":"Security Advisory GHSA-j3hg-9rp3-5hw9","fact_id":"SEA-GHSA-j3hg-9rp3-5hw9-F1","document_citation":"Security Advisory GHSA-j3hg-9rp3-5hw9"},{"id":"SEA-GHSA-j3hg-9rp3-5hw9-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"In Nginx UI versions 2.5.0 through 2.5.x, the node-signature authentication path staged an attacker-controlled request body in a temporary file and synchronized it to disk before validating the body digest and cryptographic signature.","source_quote_or_pointer":"Advisory description (GHSA-j3hg-9rp3-5hw9)","fact_id":"SEA-GHSA-j3hg-9rp3-5hw9-F2","document_citation":"Advisory description (GHSA-j3hg-9rp3-5hw9)"}],"source_stated_contributors":["In Nginx UI versions 2.5.0 through 2.5.x, the node-signature authentication path staged an attacker-controlled request body in a temporary file and synchronized it to disk before validating the body digest and cryptographic signature."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-j3hg-9rp3-5hw9","reporting_entity":"CVE-2026-107805","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-j3hg-9rp3-5hw9-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-j3hg-9rp3-5hw9-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-107805"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-9h23-53f4-q947","title":"Nginx UI: Bundled reverse proxy can bypass IP allowlists and enable shared login lockout","display_title":"Security issue reported in github.com/0xJacky/Nginx-UI","display_summary":"In Nginx UI versions 2.2.0 through 2.5.x, the official bundled reverse-proxy topology did not preserve the external client identity used by Gin.","display_reference":"CVE-2026-107804","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-9h23-53f4-q947","source_title":"Nginx UI: Bundled reverse proxy can bypass IP allowlists and enable shared login lockout","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T16:55:27.147Z","source_hash":"content-fingerprint:fnv1a-f781eb98","affected_system":{"organization":"github.com/0xJacky/Nginx-UI project","product":"github.com/0xJacky/Nginx-UI","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Go"},"documented_facts":[{"id":"SEA-GHSA-9h23-53f4-q947-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Nginx UI: Bundled reverse proxy can bypass IP allowlists and enable shared login lockout","source_quote_or_pointer":"Security Advisory GHSA-9h23-53f4-q947","fact_id":"SEA-GHSA-9h23-53f4-q947-F1","document_citation":"Security Advisory GHSA-9h23-53f4-q947"},{"id":"SEA-GHSA-9h23-53f4-q947-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"In Nginx UI versions 2.2.0 through 2.5.x, the official bundled reverse-proxy topology did not preserve the external client identity used by Gin. The backend treated the local proxy peer as the client because no trusted proxy was configured, while the proxy supplied the actual address in forwarding headers.","source_quote_or_pointer":"Advisory description (GHSA-9h23-53f4-q947)","fact_id":"SEA-GHSA-9h23-53f4-q947-F2","document_citation":"Advisory description (GHSA-9h23-53f4-q947)"}],"source_stated_contributors":["In Nginx UI versions 2.2.0 through 2.5.x, the official bundled reverse-proxy topology did not preserve the external client identity used by Gin. The backend treated the local proxy peer as the client because no trusted proxy was configured, while the proxy supplied the actual address in forwarding headers."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.infrastructure_modification"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-9h23-53f4-q947","reporting_entity":"CVE-2026-107804","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-9h23-53f4-q947-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-9h23-53f4-q947-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-107804"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-c42q-qvc3-j6vg","title":"@tinacms/web-components: tina-markdown writes rich-text link URLs into href without scheme validation, allowing stored XSS","display_title":"@tinacms/web-components issue could run attacker-controlled scripts in a browser","display_summary":"renders a rich-text AST into the DOM and, for a nodes, assigns the node's URL straight to the anchor's href with no scheme check.","display_reference":"CVE-2026-108260","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-c42q-qvc3-j6vg","source_title":"@tinacms/web-components: tina-markdown writes rich-text link URLs into href without scheme validation, allowing stored XSS","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T16:55:27.165Z","source_hash":"content-fingerprint:fnv1a-2cf708d9","affected_system":{"organization":"@tinacms/web-components project","product":"@tinacms/web-components","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"JavaScript / TypeScript"},"documented_facts":[{"id":"SEA-GHSA-c42q-qvc3-j6vg-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"@tinacms/web-components: tina-markdown writes rich-text link URLs into href without scheme validation, allowing stored XSS","source_quote_or_pointer":"Security Advisory GHSA-c42q-qvc3-j6vg","fact_id":"SEA-GHSA-c42q-qvc3-j6vg-F1","document_citation":"Security Advisory GHSA-c42q-qvc3-j6vg"},{"id":"SEA-GHSA-c42q-qvc3-j6vg-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"renders a rich-text AST into the DOM and, for a nodes, assigns the node's URL straight to the anchor's href with no scheme check. A link authored in the CMS as javascript:… renders as a live javascript: anchor, so a visitor who clicks it executes attacker-supplied script in the site's origin.","source_quote_or_pointer":"Advisory description (GHSA-c42q-qvc3-j6vg)","fact_id":"SEA-GHSA-c42q-qvc3-j6vg-F2","document_citation":"Advisory description (GHSA-c42q-qvc3-j6vg)"}],"source_stated_contributors":["renders a rich-text AST into the DOM and, for a nodes, assigns the node's URL straight to the anchor's href with no scheme check. A link authored in the CMS as javascript:… renders as a live javascript: anchor, so a visitor who clicks it executes attacker-supplied script in the site's origin."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.infrastructure_modification","auth.write_action"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-c42q-qvc3-j6vg","reporting_entity":"CVE-2026-108260","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-c42q-qvc3-j6vg-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-c42q-qvc3-j6vg-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-108260"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-47c3-hpmg-7j6p","title":"Shiny for Python has path traversal in bookmark restore","display_title":"shiny issue could expose restricted files","display_summary":"Shiny for Python's bookmark-restore path accepted a client-supplied stateid","display_reference":"CVE-2026-108258","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-47c3-hpmg-7j6p","source_title":"Shiny for Python has path traversal in bookmark restore","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T16:55:27.166Z","source_hash":"content-fingerprint:fnv1a-c907ab7b","affected_system":{"organization":"shiny project","product":"shiny","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Python"},"documented_facts":[{"id":"SEA-GHSA-47c3-hpmg-7j6p-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Shiny for Python has path traversal in bookmark restore","source_quote_or_pointer":"Security Advisory GHSA-47c3-hpmg-7j6p","fact_id":"SEA-GHSA-47c3-hpmg-7j6p-F1","document_citation":"Security Advisory GHSA-47c3-hpmg-7j6p"},{"id":"SEA-GHSA-47c3-hpmg-7j6p-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Shiny for Python's bookmark-restore path accepted a client-supplied stateid","source_quote_or_pointer":"Advisory description (GHSA-47c3-hpmg-7j6p)","fact_id":"SEA-GHSA-47c3-hpmg-7j6p-F2","document_citation":"Advisory description (GHSA-47c3-hpmg-7j6p)"}],"source_stated_contributors":["Shiny for Python's bookmark-restore path accepted a client-supplied stateid"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Restricted file exposure","File overwrite"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-47c3-hpmg-7j6p","reporting_entity":"CVE-2026-108258","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-47c3-hpmg-7j6p-SG1","label":"Confine file access to a fixed root","description":"Resolve paths to canonical form and reject anything outside the intended directory before opening files.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-47c3-hpmg-7j6p-SG1","label":"Confine file access to a fixed root","description":"Resolve paths to canonical form and reject anything outside the intended directory before opening files.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"File paths supplied by a caller escaped the intended directory. Canonicalise paths and confine file access to a fixed root.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108258"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-w2ch-4xgr-22ww","title":"Vikunja: Task relation deletion does not check read access to the other task, allowing cross-project relation removal","display_title":"Security issue reported in code.vikunja.io/api","display_summary":"Deleting a task relation only requires write access on the base task. Unlike relation creation, it does not verify that the caller can read the other task.","display_reference":"GHSA-w2ch-4xgr-22ww","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-w2ch-4xgr-22ww","source_title":"Vikunja: Task relation deletion does not check read access to the other task, allowing cross-project relation removal","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T16:55:27.166Z","source_hash":"content-fingerprint:fnv1a-233556ba","affected_system":{"organization":"code.vikunja.io/api project","product":"code.vikunja.io/api","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Go"},"documented_facts":[{"id":"SEA-GHSA-w2ch-4xgr-22ww-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Vikunja: Task relation deletion does not check read access to the other task, allowing cross-project relation removal","source_quote_or_pointer":"Security Advisory GHSA-w2ch-4xgr-22ww","fact_id":"SEA-GHSA-w2ch-4xgr-22ww-F1","document_citation":"Security Advisory GHSA-w2ch-4xgr-22ww"},{"id":"SEA-GHSA-w2ch-4xgr-22ww-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Deleting a task relation only requires write access on the base task. Unlike relation creation, it does not verify that the caller can read the other task. A user with write access to one project can therefore delete relations whose other end lives in a project they have no access to.","source_quote_or_pointer":"Advisory description (GHSA-w2ch-4xgr-22ww)","fact_id":"SEA-GHSA-w2ch-4xgr-22ww-F2","document_citation":"Advisory description (GHSA-w2ch-4xgr-22ww)"}],"source_stated_contributors":["Deleting a task relation only requires write access on the base task. Unlike relation creation, it does not verify that the caller can read the other task. A user with write access to one project can therefore delete relations whose other end lives in a project they have no access to."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.write_action","data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-w2ch-4xgr-22ww","reporting_entity":"GitHub Security Advisory Database","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-w2ch-4xgr-22ww-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-w2ch-4xgr-22ww-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-8wvg-r2j4-3737","title":"Vikunja: Assignee email addresses disclosed to read-only project members via the task assignees endpoint","display_title":"Security issue reported in code.vikunja.io/api","display_summary":"TaskAssginee.ReadAll returns assignee user objects without blanking the Email field, disclosing assignee email addresses to any read-only project member. Every sibling path that returns user objects obfuscates the email;","display_reference":"GHSA-8wvg-r2j4-3737","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-8wvg-r2j4-3737","source_title":"Vikunja: Assignee email addresses disclosed to read-only project members via the task assignees endpoint","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T16:55:27.167Z","source_hash":"content-fingerprint:fnv1a-8da005cf","affected_system":{"organization":"code.vikunja.io/api project","product":"code.vikunja.io/api","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Go"},"documented_facts":[{"id":"SEA-GHSA-8wvg-r2j4-3737-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Vikunja: Assignee email addresses disclosed to read-only project members via the task assignees endpoint","source_quote_or_pointer":"Security Advisory GHSA-8wvg-r2j4-3737","fact_id":"SEA-GHSA-8wvg-r2j4-3737-F1","document_citation":"Security Advisory GHSA-8wvg-r2j4-3737"},{"id":"SEA-GHSA-8wvg-r2j4-3737-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"TaskAssginee.ReadAll returns assignee user objects without blanking the Email field, disclosing assignee email addresses to any read-only project member. Every sibling path that returns user objects obfuscates the email; this one does not.","source_quote_or_pointer":"Advisory description (GHSA-8wvg-r2j4-3737)","fact_id":"SEA-GHSA-8wvg-r2j4-3737-F2","document_citation":"Advisory description (GHSA-8wvg-r2j4-3737)"}],"source_stated_contributors":["TaskAssginee.ReadAll returns assignee user objects without blanking the Email field, disclosing assignee email addresses to any read-only project member. Every sibling path that returns user objects obfuscates the email; this one does not."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-8wvg-r2j4-3737","reporting_entity":"GitHub Security Advisory Database","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-8wvg-r2j4-3737-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-8wvg-r2j4-3737-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-3hc7-r24j-rpwc","title":"Vikunja: Cross-project task disclosure through subtask expansion","display_title":"Security issue reported in code.vikunja.io/api","display_summary":"Vikunja lets a task in one project have a subtask that lives in a different project. When listing a project's tasks, an option pulls in those subtasks (?expand%5B%5D=subtasks).","display_reference":"GHSA-3hc7-r24j-rpwc","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-3hc7-r24j-rpwc","source_title":"Vikunja: Cross-project task disclosure through subtask expansion","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T16:55:27.167Z","source_hash":"content-fingerprint:fnv1a-400d82fc","affected_system":{"organization":"code.vikunja.io/api project","product":"code.vikunja.io/api","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Go"},"documented_facts":[{"id":"SEA-GHSA-3hc7-r24j-rpwc-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Vikunja: Cross-project task disclosure through subtask expansion","source_quote_or_pointer":"Security Advisory GHSA-3hc7-r24j-rpwc","fact_id":"SEA-GHSA-3hc7-r24j-rpwc-F1","document_citation":"Security Advisory GHSA-3hc7-r24j-rpwc"},{"id":"SEA-GHSA-3hc7-r24j-rpwc-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Vikunja lets a task in one project have a subtask that lives in a different project. When listing a project's tasks, an option pulls in those subtasks (?expand%5B%5D=subtasks).","source_quote_or_pointer":"Advisory description (GHSA-3hc7-r24j-rpwc)","fact_id":"SEA-GHSA-3hc7-r24j-rpwc-F2","document_citation":"Advisory description (GHSA-3hc7-r24j-rpwc)"}],"source_stated_contributors":["Vikunja lets a task in one project have a subtask that lives in a different project. When listing a project's tasks, an option pulls in those subtasks (?expand%5B%5D=subtasks)."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-3hc7-r24j-rpwc","reporting_entity":"GitHub Security Advisory Database","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-3hc7-r24j-rpwc-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-3hc7-r24j-rpwc-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-g38j-7v97-x298","title":"Vikunja: CalDAV relation creation bypasses TaskRelation.CanCreate, allowing an unauthorized write into any task by known UID","display_title":"Security issue reported in code.vikunja.io/api","display_summary":"Creating a task relation over CalDAV does not run the TaskRelation.CanCreate permission check that the REST API enforces. An attacker can attach a relation to any task whose UID they know, including tasks in projects…","display_reference":"GHSA-g38j-7v97-x298","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-g38j-7v97-x298","source_title":"Vikunja: CalDAV relation creation bypasses TaskRelation.CanCreate, allowing an unauthorized write into any task by known UID","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T16:55:27.168Z","source_hash":"content-fingerprint:fnv1a-b41c27af","affected_system":{"organization":"code.vikunja.io/api project","product":"code.vikunja.io/api","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Go"},"documented_facts":[{"id":"SEA-GHSA-g38j-7v97-x298-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Vikunja: CalDAV relation creation bypasses TaskRelation.CanCreate, allowing an unauthorized write into any task by known UID","source_quote_or_pointer":"Security Advisory GHSA-g38j-7v97-x298","fact_id":"SEA-GHSA-g38j-7v97-x298-F1","document_citation":"Security Advisory GHSA-g38j-7v97-x298"},{"id":"SEA-GHSA-g38j-7v97-x298-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Creating a task relation over CalDAV does not run the TaskRelation.CanCreate permission check that the REST API enforces. An attacker can attach a relation to any task whose UID they know, including tasks in projects they have no access to. The identical operation over REST is correctly refused with 403.","source_quote_or_pointer":"Advisory description (GHSA-g38j-7v97-x298)","fact_id":"SEA-GHSA-g38j-7v97-x298-F2","document_citation":"Advisory description (GHSA-g38j-7v97-x298)"}],"source_stated_contributors":["Creating a task relation over CalDAV does not run the TaskRelation.CanCreate permission check that the REST API enforces. An attacker can attach a relation to any task whose UID they know, including tasks in projects they have no access to. The identical operation over REST is correctly refused with 403."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.write_action"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-g38j-7v97-x298","reporting_entity":"GitHub Security Advisory Database","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-g38j-7v97-x298-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-g38j-7v97-x298-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-628f-v4f6-p37r","title":"Contao: Cross-site scripting in the comments bundle","display_title":"contao/comments-bundle issue could run attacker-controlled scripts in a browser","display_summary":"An unauthenticated front end visitor can post a comment containing a XSS injection. The victim is any back end user who opens the Comments module, and moderation makes exposure certain rather than preventing it.","display_reference":"CVE-2026-107845","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-628f-v4f6-p37r","source_title":"Contao: Cross-site scripting in the comments bundle","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T16:55:27.168Z","source_hash":"content-fingerprint:fnv1a-3aac89f5","affected_system":{"organization":"contao/comments-bundle project","product":"contao/comments-bundle","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"PHP"},"documented_facts":[{"id":"SEA-GHSA-628f-v4f6-p37r-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Contao: Cross-site scripting in the comments bundle","source_quote_or_pointer":"Security Advisory GHSA-628f-v4f6-p37r","fact_id":"SEA-GHSA-628f-v4f6-p37r-F1","document_citation":"Security Advisory GHSA-628f-v4f6-p37r"},{"id":"SEA-GHSA-628f-v4f6-p37r-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"An unauthenticated front end visitor can post a comment containing a XSS injection. The victim is any back end user who opens the Comments module, and moderation makes exposure certain rather than preventing it. No Content-Security-Policy header is sent on the Contao back end, so nothing mitigates the inline handler.","source_quote_or_pointer":"Advisory description (GHSA-628f-v4f6-p37r)","fact_id":"SEA-GHSA-628f-v4f6-p37r-F2","document_citation":"Advisory description (GHSA-628f-v4f6-p37r)"}],"source_stated_contributors":["An unauthenticated front end visitor can post a comment containing a XSS injection. The victim is any back end user who opens the Comments module, and moderation makes exposure certain rather than preventing it. No Content-Security-Policy header is sent on the Contao back end, so nothing mitigates the inline handler."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-628f-v4f6-p37r","reporting_entity":"CVE-2026-107845","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-628f-v4f6-p37r-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-628f-v4f6-p37r-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-107845"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-q6wp-fr43-gm9v","title":"Contao: Improper access control in the preview links module","display_title":"contao/core-bundle issue could allow unauthorized access","display_summary":"core-bundle/config/services.yaml registers the preview access voter with the class Contao\\CoreBundle\\Security\\Voter\\DataContainer\\PreviewAccessVoter, but the class shipped on disk is named PreviewVoter.","display_reference":"CVE-2026-107850","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-q6wp-fr43-gm9v","source_title":"Contao: Improper access control in the preview links module","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T16:55:27.168Z","source_hash":"content-fingerprint:fnv1a-40cf8f93","affected_system":{"organization":"contao/core-bundle project","product":"contao/core-bundle","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"PHP"},"documented_facts":[{"id":"SEA-GHSA-q6wp-fr43-gm9v-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Contao: Improper access control in the preview links module","source_quote_or_pointer":"Security Advisory GHSA-q6wp-fr43-gm9v","fact_id":"SEA-GHSA-q6wp-fr43-gm9v-F1","document_citation":"Security Advisory GHSA-q6wp-fr43-gm9v"},{"id":"SEA-GHSA-q6wp-fr43-gm9v-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"core-bundle/config/services.yaml registers the preview access voter with the class Contao\\CoreBundle\\Security\\Voter\\DataContainer\\PreviewAccessVoter, but the class shipped on disk is named PreviewVoter.","source_quote_or_pointer":"Advisory description (GHSA-q6wp-fr43-gm9v)","fact_id":"SEA-GHSA-q6wp-fr43-gm9v-F2","document_citation":"Advisory description (GHSA-q6wp-fr43-gm9v)"}],"source_stated_contributors":["core-bundle/config/services.yaml registers the preview access voter with the class Contao\\CoreBundle\\Security\\Voter\\DataContainer\\PreviewAccessVoter, but the class shipped on disk is named PreviewVoter."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-q6wp-fr43-gm9v","reporting_entity":"CVE-2026-107850","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-q6wp-fr43-gm9v-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-q6wp-fr43-gm9v-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-107850"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-wq92-8x3r-fm38","title":"Vikunja: Planka migration retains an unbounded aggregate of attacker-served attachments and can OOM the API","display_title":"Security issue reported in code.vikunja.io/api","display_summary":"The always-registered Planka migration lets any ordinary user select a Planka server. Although Vikunja caps each JSON response, pagination loop, and attachment independently, it has no aggregate job budget.","display_reference":"CVE-2026-91970","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-wq92-8x3r-fm38","source_title":"Vikunja: Planka migration retains an unbounded aggregate of attacker-served attachments and can OOM the API","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T16:55:27.170Z","source_hash":"content-fingerprint:fnv1a-9d396769","affected_system":{"organization":"code.vikunja.io/api project","product":"code.vikunja.io/api","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Go"},"documented_facts":[{"id":"SEA-GHSA-wq92-8x3r-fm38-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Vikunja: Planka migration retains an unbounded aggregate of attacker-served attachments and can OOM the API","source_quote_or_pointer":"Security Advisory GHSA-wq92-8x3r-fm38","fact_id":"SEA-GHSA-wq92-8x3r-fm38-F1","document_citation":"Security Advisory GHSA-wq92-8x3r-fm38"},{"id":"SEA-GHSA-wq92-8x3r-fm38-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The always-registered Planka migration lets any ordinary user select a Planka server. Although Vikunja caps each JSON response, pagination loop, and attachment independently, it has no aggregate job budget.","source_quote_or_pointer":"Advisory description (GHSA-wq92-8x3r-fm38)","fact_id":"SEA-GHSA-wq92-8x3r-fm38-F2","document_citation":"Advisory description (GHSA-wq92-8x3r-fm38)"}],"source_stated_contributors":["The always-registered Planka migration lets any ordinary user select a Planka server. Although Vikunja caps each JSON response, pagination loop, and attachment independently, it has no aggregate job budget."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","data.uploaded_files"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-wq92-8x3r-fm38","reporting_entity":"CVE-2026-91970","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-wq92-8x3r-fm38-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-wq92-8x3r-fm38-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-91970"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-pqf9-h8g4-8gmh","title":"Vikunja: Unbounded CSV row cardinality permits API process termination","display_title":"Security issue reported in code.vikunja.io/api","display_summary":"The authenticated v2 CSV migration route caps upload bytes but not parsed row cardinality. It reads every record into a [][]string and then materializes a full task object for every row before insertion.","display_reference":"CVE-2026-91969","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-pqf9-h8g4-8gmh","source_title":"Vikunja: Unbounded CSV row cardinality permits API process termination","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T16:55:27.170Z","source_hash":"content-fingerprint:fnv1a-2786e1ea","affected_system":{"organization":"code.vikunja.io/api project","product":"code.vikunja.io/api","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Go"},"documented_facts":[{"id":"SEA-GHSA-pqf9-h8g4-8gmh-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Vikunja: Unbounded CSV row cardinality permits API process termination","source_quote_or_pointer":"Security Advisory GHSA-pqf9-h8g4-8gmh","fact_id":"SEA-GHSA-pqf9-h8g4-8gmh-F1","document_citation":"Security Advisory GHSA-pqf9-h8g4-8gmh"},{"id":"SEA-GHSA-pqf9-h8g4-8gmh-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The authenticated v2 CSV migration route caps upload bytes but not parsed row cardinality. It reads every record into a [][]string and then materializes a full task object for every row before insertion. Two million one-cell rows fit in a roughly 4 MB multipart request yet exhaust a 512 MiB API process.","source_quote_or_pointer":"Advisory description (GHSA-pqf9-h8g4-8gmh)","fact_id":"SEA-GHSA-pqf9-h8g4-8gmh-F2","document_citation":"Advisory description (GHSA-pqf9-h8g4-8gmh)"}],"source_stated_contributors":["The authenticated v2 CSV migration route caps upload bytes but not parsed row cardinality. It reads every record into a [][]string and then materializes a full task object for every row before insertion. Two million one-cell rows fit in a roughly 4 MB multipart request yet exhaust a 512 MiB API process."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.uploaded_files"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-pqf9-h8g4-8gmh","reporting_entity":"CVE-2026-91969","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-pqf9-h8g4-8gmh-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-pqf9-h8g4-8gmh-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-91969"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-xxc3-xpmc-vmvr","title":"Vikunja: Unbounded nested task-filter recursion permits API process termination","display_title":"Security issue reported in code.vikunja.io/api","display_summary":"Authenticated task-list routes accept a filter expression without a length or nesting-depth bound, preprocess it, parse it recursively through fexpr, and recursively convert the resulting expression tree.","display_reference":"CVE-2026-91968","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-xxc3-xpmc-vmvr","source_title":"Vikunja: Unbounded nested task-filter recursion permits API process termination","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T16:55:27.170Z","source_hash":"content-fingerprint:fnv1a-2f1754bc","affected_system":{"organization":"code.vikunja.io/api project","product":"code.vikunja.io/api","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Go"},"documented_facts":[{"id":"SEA-GHSA-xxc3-xpmc-vmvr-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Vikunja: Unbounded nested task-filter recursion permits API process termination","source_quote_or_pointer":"Security Advisory GHSA-xxc3-xpmc-vmvr","fact_id":"SEA-GHSA-xxc3-xpmc-vmvr-F1","document_citation":"Security Advisory GHSA-xxc3-xpmc-vmvr"},{"id":"SEA-GHSA-xxc3-xpmc-vmvr-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Authenticated task-list routes accept a filter expression without a length or nesting-depth bound, preprocess it, parse it recursively through fexpr, and recursively convert the resulting expression tree.","source_quote_or_pointer":"Advisory description (GHSA-xxc3-xpmc-vmvr)","fact_id":"SEA-GHSA-xxc3-xpmc-vmvr-F2","document_citation":"Advisory description (GHSA-xxc3-xpmc-vmvr)"}],"source_stated_contributors":["Authenticated task-list routes accept a filter expression without a length or nesting-depth bound, preprocess it, parse it recursively through fexpr, and recursively convert the resulting expression tree."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-xxc3-xpmc-vmvr","reporting_entity":"CVE-2026-91968","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-xxc3-xpmc-vmvr-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-xxc3-xpmc-vmvr-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-91968"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-w7jp-mf2v-8342","title":"Vikunja: Denial of service via decompression bomb in the data import","display_title":"code.vikunja.io/api issue could make the service unavailable","display_summary":"Vikunja lets you export your data as a zip and import it back. The import doesn't limit how large the archive expands to, how many files it contains, or how much storage one user can consume, and it appears to hold the…","display_reference":"CVE-2026-91979","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-w7jp-mf2v-8342","source_title":"Vikunja: Denial of service via decompression bomb in the data import","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T16:55:27.171Z","source_hash":"content-fingerprint:fnv1a-c77c1409","affected_system":{"organization":"code.vikunja.io/api project","product":"code.vikunja.io/api","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Go"},"documented_facts":[{"id":"SEA-GHSA-w7jp-mf2v-8342-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Vikunja: Denial of service via decompression bomb in the data import","source_quote_or_pointer":"Security Advisory GHSA-w7jp-mf2v-8342","fact_id":"SEA-GHSA-w7jp-mf2v-8342-F1","document_citation":"Security Advisory GHSA-w7jp-mf2v-8342"},{"id":"SEA-GHSA-w7jp-mf2v-8342-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Vikunja lets you export your data as a zip and import it back. The import doesn't limit how large the archive expands to, how many files it contains, or how much storage one user can consume, and it appears to hold the whole archive in memory while processing it.","source_quote_or_pointer":"Advisory description (GHSA-w7jp-mf2v-8342)","fact_id":"SEA-GHSA-w7jp-mf2v-8342-F2","document_citation":"Advisory description (GHSA-w7jp-mf2v-8342)"}],"source_stated_contributors":["Vikunja lets you export your data as a zip and import it back. The import doesn't limit how large the archive expands to, how many files it contains, or how much storage one user can consume, and it appears to hold the whole archive in memory while processing it."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-w7jp-mf2v-8342","reporting_entity":"CVE-2026-91979","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-w7jp-mf2v-8342-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-w7jp-mf2v-8342-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-91979"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-vfxw-3x8p-2vjr","title":"Vikunja: Link-share token can enumerate users through the v2 API","display_title":"Security issue reported in code.vikunja.io/api","display_summary":"A link-share token, the credential you hand out to let someone view a shared project, can call the v2 user-search endpoints, which it was never meant to reach.","display_reference":"CVE-2026-91981","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-vfxw-3x8p-2vjr","source_title":"Vikunja: Link-share token can enumerate users through the v2 API","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T16:55:27.171Z","source_hash":"content-fingerprint:fnv1a-32b460c3","affected_system":{"organization":"code.vikunja.io/api project","product":"code.vikunja.io/api","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Go"},"documented_facts":[{"id":"SEA-GHSA-vfxw-3x8p-2vjr-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Vikunja: Link-share token can enumerate users through the v2 API","source_quote_or_pointer":"Security Advisory GHSA-vfxw-3x8p-2vjr","fact_id":"SEA-GHSA-vfxw-3x8p-2vjr-F1","document_citation":"Security Advisory GHSA-vfxw-3x8p-2vjr"},{"id":"SEA-GHSA-vfxw-3x8p-2vjr-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A link-share token, the credential you hand out to let someone view a shared project, can call the v2 user-search endpoints, which it was never meant to reach. The v1 versions of the same endpoints correctly reject link-share tokens; the v2 versions don't.","source_quote_or_pointer":"Advisory description (GHSA-vfxw-3x8p-2vjr)","fact_id":"SEA-GHSA-vfxw-3x8p-2vjr-F2","document_citation":"Advisory description (GHSA-vfxw-3x8p-2vjr)"}],"source_stated_contributors":["A link-share token, the credential you hand out to let someone view a shared project, can call the v2 user-search endpoints, which it was never meant to reach. The v1 versions of the same endpoints correctly reject link-share tokens; the v2 versions don't."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-vfxw-3x8p-2vjr","reporting_entity":"CVE-2026-91981","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-vfxw-3x8p-2vjr-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-vfxw-3x8p-2vjr-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-91981"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-m469-88xx-8rx2","title":"Vikunja: CalDAV and feeds BasicAuth endpoints have no rate limit, bypassing the anti-brute-force floor on account passwords","display_title":"Security issue reported in code.vikunja.io/api","display_summary":"The /dav, /.well-known, and /feeds groups are registered on the root Echo instance with only BasicAuth and no rate limiter.","display_reference":"CVE-2026-91973","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-m469-88xx-8rx2","source_title":"Vikunja: CalDAV and feeds BasicAuth endpoints have no rate limit, bypassing the anti-brute-force floor on account passwords","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T16:55:27.172Z","source_hash":"content-fingerprint:fnv1a-9b0ffc9b","affected_system":{"organization":"code.vikunja.io/api project","product":"code.vikunja.io/api","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Go"},"documented_facts":[{"id":"SEA-GHSA-m469-88xx-8rx2-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Vikunja: CalDAV and feeds BasicAuth endpoints have no rate limit, bypassing the anti-brute-force floor on account passwords","source_quote_or_pointer":"Security Advisory GHSA-m469-88xx-8rx2","fact_id":"SEA-GHSA-m469-88xx-8rx2-F1","document_citation":"Security Advisory GHSA-m469-88xx-8rx2"},{"id":"SEA-GHSA-m469-88xx-8rx2-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The /dav, /.well-known, and /feeds groups are registered on the root Echo instance with only BasicAuth and no rate limiter. CalDAV BasicAuth accepts the plain account password, so password guessing over /dav is unbounded and never returns 429, while /api/v1/login is throttled from the tenth attempt.","source_quote_or_pointer":"Advisory description (GHSA-m469-88xx-8rx2)","fact_id":"SEA-GHSA-m469-88xx-8rx2-F2","document_citation":"Advisory description (GHSA-m469-88xx-8rx2)"}],"source_stated_contributors":["The /dav, /.well-known, and /feeds groups are registered on the root Echo instance with only BasicAuth and no rate limiter. CalDAV BasicAuth accepts the plain account password, so password guessing over /dav is unbounded and never returns 429, while /api/v1/login is throttled from the tenth attempt."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-m469-88xx-8rx2","reporting_entity":"CVE-2026-91973","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-m469-88xx-8rx2-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-m469-88xx-8rx2-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-91973"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-9rg3-v78m-26q8","title":"Vikunja: API token scopes bypassed via task expand parameter (comments, reactions, time entry counts)","display_title":"Security issue reported in code.vikunja.io/api","display_summary":"API token permission checks only match the HTTP method and route path. The expand query parameter on task read endpoints embeds data from other permission groups (task comments, reactions, time entry counts) without…","display_reference":"CVE-2026-91983","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-9rg3-v78m-26q8","source_title":"Vikunja: API token scopes bypassed via task expand parameter (comments, reactions, time entry counts)","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T16:55:27.172Z","source_hash":"content-fingerprint:fnv1a-b8552353","affected_system":{"organization":"code.vikunja.io/api project","product":"code.vikunja.io/api","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Go"},"documented_facts":[{"id":"SEA-GHSA-9rg3-v78m-26q8-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Vikunja: API token scopes bypassed via task expand parameter (comments, reactions, time entry counts)","source_quote_or_pointer":"Security Advisory GHSA-9rg3-v78m-26q8","fact_id":"SEA-GHSA-9rg3-v78m-26q8-F1","document_citation":"Security Advisory GHSA-9rg3-v78m-26q8"},{"id":"SEA-GHSA-9rg3-v78m-26q8-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"API token permission checks only match the HTTP method and route path. The expand query parameter on task read endpoints embeds data from other permission groups (task comments, reactions, time entry counts) without checking whether the token holds those scopes.","source_quote_or_pointer":"Advisory description (GHSA-9rg3-v78m-26q8)","fact_id":"SEA-GHSA-9rg3-v78m-26q8-F2","document_citation":"Advisory description (GHSA-9rg3-v78m-26q8)"}],"source_stated_contributors":["API token permission checks only match the HTTP method and route path. The expand query parameter on task read endpoints embeds data from other permission groups (task comments, reactions, time entry counts) without checking whether the token holds those scopes."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.credentials_secrets"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-9rg3-v78m-26q8","reporting_entity":"CVE-2026-91983","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-9rg3-v78m-26q8-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-9rg3-v78m-26q8-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-91983"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-w39f-h553-h2mx","title":"Vikunja: Cross-tenant task-position rows can be injected into arbitrary project views via the unvalidated project_view_id in the task position endpoint (v1 and v2)","display_title":"Security issue reported in code.vikunja.io/api","display_summary":"The task-position endpoint authorizes only the task side of the write: TaskPosition.CanUpdate delegates to Task.CanUpdate (write access to the task's own project) and the request body's projectviewid is never validated…","display_reference":"CVE-2026-91984","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-w39f-h553-h2mx","source_title":"Vikunja: Cross-tenant task-position rows can be injected into arbitrary project views via the unvalidated project_view_id in the task position endpoint (v1 and v2)","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T16:55:27.172Z","source_hash":"content-fingerprint:fnv1a-4e169b9e","affected_system":{"organization":"code.vikunja.io/api project","product":"code.vikunja.io/api","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Go"},"documented_facts":[{"id":"SEA-GHSA-w39f-h553-h2mx-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Vikunja: Cross-tenant task-position rows can be injected into arbitrary project views via the unvalidated project_view_id in the task position endpoint (v1 and v2)","source_quote_or_pointer":"Security Advisory GHSA-w39f-h553-h2mx","fact_id":"SEA-GHSA-w39f-h553-h2mx-F1","document_citation":"Security Advisory GHSA-w39f-h553-h2mx"},{"id":"SEA-GHSA-w39f-h553-h2mx-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The task-position endpoint authorizes only the task side of the write: TaskPosition.CanUpdate delegates to Task.CanUpdate (write access to the task's own project) and the request body's projectviewid is never validated to belong to the task's project, nor is any access to that view required.","source_quote_or_pointer":"Advisory description (GHSA-w39f-h553-h2mx)","fact_id":"SEA-GHSA-w39f-h553-h2mx-F2","document_citation":"Advisory description (GHSA-w39f-h553-h2mx)"}],"source_stated_contributors":["The task-position endpoint authorizes only the task side of the write: TaskPosition.CanUpdate delegates to Task.CanUpdate (write access to the task's own project) and the request body's projectviewid is never validated to belong to the task's project, nor is any access to that view required."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-w39f-h553-h2mx","reporting_entity":"CVE-2026-91984","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-w39f-h553-h2mx-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-w39f-h553-h2mx-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-91984"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-qfwc-vx6f-3g6g","title":"Vikunja: Read-only project members can obtain any link share's access hash via the single-share read endpoint (v1 and v2) and escalate to the share's permission level","display_title":"Security issue reported in code.vikunja.io/api","display_summary":"A user who has only read permission on a project can call the single link-share read endpoint and receive the share's hash field — the secret credential that the anonymous POST /shares/{share}/auth endpoint exchanges for…","display_reference":"CVE-2026-91985","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-qfwc-vx6f-3g6g","source_title":"Vikunja: Read-only project members can obtain any link share's access hash via the single-share read endpoint (v1 and v2) and escalate to the share's permission level","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T16:55:27.173Z","source_hash":"content-fingerprint:fnv1a-dc4052c5","affected_system":{"organization":"code.vikunja.io/api project","product":"code.vikunja.io/api","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Go"},"documented_facts":[{"id":"SEA-GHSA-qfwc-vx6f-3g6g-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Vikunja: Read-only project members can obtain any link share's access hash via the single-share read endpoint (v1 and v2) and escalate to the share's permission level","source_quote_or_pointer":"Security Advisory GHSA-qfwc-vx6f-3g6g","fact_id":"SEA-GHSA-qfwc-vx6f-3g6g-F1","document_citation":"Security Advisory GHSA-qfwc-vx6f-3g6g"},{"id":"SEA-GHSA-qfwc-vx6f-3g6g-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A user who has only read permission on a project can call the single link-share read endpoint and receive the share's hash field — the secret credential that the anonymous POST /shares/{share}/auth endpoint exchanges for a link-share JWT carrying the share's permission (read / read-write / admin).","source_quote_or_pointer":"Advisory description (GHSA-qfwc-vx6f-3g6g)","fact_id":"SEA-GHSA-qfwc-vx6f-3g6g-F2","document_citation":"Advisory description (GHSA-qfwc-vx6f-3g6g)"}],"source_stated_contributors":["A user who has only read permission on a project can call the single link-share read endpoint and receive the share's hash field — the secret credential that the anonymous POST /shares/{share}/auth endpoint exchanges for a link-share JWT carrying the share's permission (read / read-write / admin)."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.write_action","data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-qfwc-vx6f-3g6g","reporting_entity":"CVE-2026-91985","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-qfwc-vx6f-3g6g-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-qfwc-vx6f-3g6g-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-91985"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-88f6-4rjv-x774","title":"Vikunja: TOTP secret is readable after enrollment, no step-up auth","display_title":"code.vikunja.io/api issue could expose accounts or credentials","display_summary":"Once a user has TOTP enabled, the API still hands back the raw shared secret to anyone holding that account's access token. Reading it doesn't ask for the password, even though disabling TOTP does.","display_reference":"CVE-2026-91982","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-88f6-4rjv-x774","source_title":"Vikunja: TOTP secret is readable after enrollment, no step-up auth","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T16:55:27.173Z","source_hash":"content-fingerprint:fnv1a-3409657f","affected_system":{"organization":"code.vikunja.io/api project","product":"code.vikunja.io/api","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Go"},"documented_facts":[{"id":"SEA-GHSA-88f6-4rjv-x774-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Vikunja: TOTP secret is readable after enrollment, no step-up auth","source_quote_or_pointer":"Security Advisory GHSA-88f6-4rjv-x774","fact_id":"SEA-GHSA-88f6-4rjv-x774-F1","document_citation":"Security Advisory GHSA-88f6-4rjv-x774"},{"id":"SEA-GHSA-88f6-4rjv-x774-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Once a user has TOTP enabled, the API still hands back the raw shared secret to anyone holding that account's access token. Reading it doesn't ask for the password, even though disabling TOTP does.","source_quote_or_pointer":"Advisory description (GHSA-88f6-4rjv-x774)","fact_id":"SEA-GHSA-88f6-4rjv-x774-F2","document_citation":"Advisory description (GHSA-88f6-4rjv-x774)"}],"source_stated_contributors":["Once a user has TOTP enabled, the API still hands back the raw shared secret to anyone holding that account's access token. Reading it doesn't ask for the password, even though disabling TOTP does."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-88f6-4rjv-x774","reporting_entity":"CVE-2026-91982","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-88f6-4rjv-x774-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-88f6-4rjv-x774-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-91982"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-6rvj-qwjf-3m4q","title":"Vikunja: Every /api/v2 pre-auth endpoint is unthrottled on a stock install while its /api/v1 twin is rate limited","display_title":"Security issue reported in code.vikunja.io/api","display_summary":"registerAPIRoutesV2 never applies the unconditional pre-auth rate-limit floor (unauthRateLimit()) to the v2 public routes — it passes that limiter only to /api/v2/ws — and otherwise relies on setupRateLimit, which…","display_reference":"CVE-2026-91972","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-6rvj-qwjf-3m4q","source_title":"Vikunja: Every /api/v2 pre-auth endpoint is unthrottled on a stock install while its /api/v1 twin is rate limited","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T16:55:27.173Z","source_hash":"content-fingerprint:fnv1a-a81ef568","affected_system":{"organization":"code.vikunja.io/api project","product":"code.vikunja.io/api","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Go"},"documented_facts":[{"id":"SEA-GHSA-6rvj-qwjf-3m4q-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Vikunja: Every /api/v2 pre-auth endpoint is unthrottled on a stock install while its /api/v1 twin is rate limited","source_quote_or_pointer":"Security Advisory GHSA-6rvj-qwjf-3m4q","fact_id":"SEA-GHSA-6rvj-qwjf-3m4q-F1","document_citation":"Security Advisory GHSA-6rvj-qwjf-3m4q"},{"id":"SEA-GHSA-6rvj-qwjf-3m4q-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"registerAPIRoutesV2 never applies the unconditional pre-auth rate-limit floor (unauthRateLimit()) to the v2 public routes — it passes that limiter only to /api/v2/ws — and otherwise relies on setupRateLimit, which registers nothing when ratelimit.enabled is false (the default).","source_quote_or_pointer":"Advisory description (GHSA-6rvj-qwjf-3m4q)","fact_id":"SEA-GHSA-6rvj-qwjf-3m4q-F2","document_citation":"Advisory description (GHSA-6rvj-qwjf-3m4q)"}],"source_stated_contributors":["registerAPIRoutesV2 never applies the unconditional pre-auth rate-limit floor (unauthRateLimit()) to the v2 public routes — it passes that limiter only to /api/v2/ws — and otherwise relies on setupRateLimit, which registers nothing when ratelimit.enabled is false (the default)."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.public_publication"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-6rvj-qwjf-3m4q","reporting_entity":"CVE-2026-91972","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-6rvj-qwjf-3m4q-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-6rvj-qwjf-3m4q-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-91972"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-32r8-5843-4qw2","title":"Vikunja: Link-share principal-type confusion enables cross-account team removal, bot takeover, and roster disclosure","display_title":"Security issue reported in code.vikunja.io/api","display_summary":"Vikunja's web.Auth interface (pkg/web/web.go, single method GetID() int64) is satisfied by BOTH user.User and models.LinkSharing.","display_reference":"CVE-2026-76216","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-32r8-5843-4qw2","source_title":"Vikunja: Link-share principal-type confusion enables cross-account team removal, bot takeover, and roster disclosure","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T16:55:27.175Z","source_hash":"content-fingerprint:fnv1a-b6310278","affected_system":{"organization":"code.vikunja.io/api project","product":"code.vikunja.io/api","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Go"},"documented_facts":[{"id":"SEA-GHSA-32r8-5843-4qw2-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Vikunja: Link-share principal-type confusion enables cross-account team removal, bot takeover, and roster disclosure","source_quote_or_pointer":"Security Advisory GHSA-32r8-5843-4qw2","fact_id":"SEA-GHSA-32r8-5843-4qw2-F1","document_citation":"Security Advisory GHSA-32r8-5843-4qw2"},{"id":"SEA-GHSA-32r8-5843-4qw2-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Vikunja's web.Auth interface (pkg/web/web.go, single method GetID() int64) is satisfied by BOTH user.User and models.LinkSharing. A link-share's GetID() returns the raw positive share.ID (pkg/models/linksharing.go:83-85), which lives in the same positive autoincrement ID space as users.id.","source_quote_or_pointer":"Advisory description (GHSA-32r8-5843-4qw2)","fact_id":"SEA-GHSA-32r8-5843-4qw2-F2","document_citation":"Advisory description (GHSA-32r8-5843-4qw2)"}],"source_stated_contributors":["Vikunja's web.Auth interface (pkg/web/web.go, single method GetID() int64) is satisfied by BOTH user.User and models.LinkSharing. A link-share's GetID() returns the raw positive share.ID (pkg/models/linksharing.go:83-85), which lives in the same positive autoincrement ID space as users.id."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-32r8-5843-4qw2","reporting_entity":"CVE-2026-76216","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-32r8-5843-4qw2-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-32r8-5843-4qw2-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-76216"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-3hj7-6vmj-h8v4","title":"pacioli: A submit consent marker licensed cancellation of caller-named pre-existing documents","display_title":"Security issue reported in pacioli-guard","display_summary":"pacioli-guard's document-layer consent gate requires a human-minted, single-use, document-bound and act-bound marker before a credential carrying API Key Scope.requireconsent may submit or cancel a document.","display_reference":"CVE-2026-107841","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-3hj7-6vmj-h8v4","source_title":"pacioli: A submit consent marker licensed cancellation of caller-named pre-existing documents","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T16:55:27.175Z","source_hash":"content-fingerprint:fnv1a-1817bee","affected_system":{"organization":"pacioli-guard project","product":"pacioli-guard","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Python"},"documented_facts":[{"id":"SEA-GHSA-3hj7-6vmj-h8v4-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"pacioli: A submit consent marker licensed cancellation of caller-named pre-existing documents","source_quote_or_pointer":"Security Advisory GHSA-3hj7-6vmj-h8v4","fact_id":"SEA-GHSA-3hj7-6vmj-h8v4-F1","document_citation":"Security Advisory GHSA-3hj7-6vmj-h8v4"},{"id":"SEA-GHSA-3hj7-6vmj-h8v4-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"pacioli-guard's document-layer consent gate requires a human-minted, single-use, document-bound and act-bound marker before a credential carrying API Key Scope.requireconsent may submit or cancel a document.","source_quote_or_pointer":"Advisory description (GHSA-3hj7-6vmj-h8v4)","fact_id":"SEA-GHSA-3hj7-6vmj-h8v4-F2","document_citation":"Advisory description (GHSA-3hj7-6vmj-h8v4)"}],"source_stated_contributors":["pacioli-guard's document-layer consent gate requires a human-minted, single-use, document-bound and act-bound marker before a credential carrying API Key Scope.requireconsent may submit or cancel a document."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.credentials_secrets","data.uploaded_files"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-3hj7-6vmj-h8v4","reporting_entity":"CVE-2026-107841","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-3hj7-6vmj-h8v4-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-3hj7-6vmj-h8v4-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-107841"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-rj9j-8772-4h6c","title":"Vikunja: Link-share token reads any tenant's kanban buckets and enumerates usernames/IDs instance-wide (BOLA)","display_title":"Security issue reported in code.vikunja.io/api","display_summary":"The task-collection endpoint GET /api/v1/projects/{project}/views/{view}/tasks loads the requested project view straight from the URL path without verifying the caller is authorized for it.","display_reference":"CVE-2026-68582","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-rj9j-8772-4h6c","source_title":"Vikunja: Link-share token reads any tenant's kanban buckets and enumerates usernames/IDs instance-wide (BOLA)","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T16:55:27.176Z","source_hash":"content-fingerprint:fnv1a-2af75b37","affected_system":{"organization":"code.vikunja.io/api project","product":"code.vikunja.io/api","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Go"},"documented_facts":[{"id":"SEA-GHSA-rj9j-8772-4h6c-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Vikunja: Link-share token reads any tenant's kanban buckets and enumerates usernames/IDs instance-wide (BOLA)","source_quote_or_pointer":"Security Advisory GHSA-rj9j-8772-4h6c","fact_id":"SEA-GHSA-rj9j-8772-4h6c-F1","document_citation":"Security Advisory GHSA-rj9j-8772-4h6c"},{"id":"SEA-GHSA-rj9j-8772-4h6c-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The task-collection endpoint GET /api/v1/projects/{project}/views/{view}/tasks loads the requested project view straight from the URL path without verifying the caller is authorized for it.","source_quote_or_pointer":"Advisory description (GHSA-rj9j-8772-4h6c)","fact_id":"SEA-GHSA-rj9j-8772-4h6c-F2","document_citation":"Advisory description (GHSA-rj9j-8772-4h6c)"}],"source_stated_contributors":["The task-collection endpoint GET /api/v1/projects/{project}/views/{view}/tasks loads the requested project view straight from the URL path without verifying the caller is authorized for it."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.infrastructure_modification","arch.external_api"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-rj9j-8772-4h6c","reporting_entity":"CVE-2026-68582","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-rj9j-8772-4h6c-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-rj9j-8772-4h6c-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-68582"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-68w4-83fh-f2w8","title":"pyload-ng: getUserData/get_userdata exposed at Perms.ANY allow any authenticated account to brute-force the administrator password","display_title":"Security issue reported in pyload-ng","display_summary":"Api.getUserData (legacy) and Api.getuserdata are declared with @permission(Perms.ANY) and are reachable at /api/getUserData and /api/getuserdata.","display_reference":"GHSA-68w4-83fh-f2w8","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-68w4-83fh-f2w8","source_title":"pyload-ng: getUserData/get_userdata exposed at Perms.ANY allow any authenticated account to brute-force the administrator password","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T16:55:27.176Z","source_hash":"content-fingerprint:fnv1a-a4df286","affected_system":{"organization":"pyload-ng project","product":"pyload-ng","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Python"},"documented_facts":[{"id":"SEA-GHSA-68w4-83fh-f2w8-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"pyload-ng: getUserData/get_userdata exposed at Perms.ANY allow any authenticated account to brute-force the administrator password","source_quote_or_pointer":"Security Advisory GHSA-68w4-83fh-f2w8","fact_id":"SEA-GHSA-68w4-83fh-f2w8-F1","document_citation":"Security Advisory GHSA-68w4-83fh-f2w8"},{"id":"SEA-GHSA-68w4-83fh-f2w8-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Api.getUserData (legacy) and Api.getuserdata are declared with @permission(Perms.ANY) and are reachable at /api/getUserData and /api/getuserdata. Because Perms.ANY == 0 and pyLoad's permission check is a bitmask AND, that gate is a no-op: every authenticated account passes, including one holding zero permission bits.","source_quote_or_pointer":"Advisory description (GHSA-68w4-83fh-f2w8)","fact_id":"SEA-GHSA-68w4-83fh-f2w8-F2","document_citation":"Advisory description (GHSA-68w4-83fh-f2w8)"}],"source_stated_contributors":["Api.getUserData (legacy) and Api.getuserdata are declared with @permission(Perms.ANY) and are reachable at /api/getUserData and /api/getuserdata. Because Perms.ANY == 0 and pyLoad's permission check is a bitmask AND, that gate is a no-op: every authenticated account passes, including one holding zero permission bits."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-68w4-83fh-f2w8","reporting_entity":"GitHub Security Advisory Database","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-68w4-83fh-f2w8-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-68w4-83fh-f2w8-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":[],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-9q47-3cm2-2rp8","title":"pyLoad: Rate-Limit Bypass and Audit-Log Spoofing via Trusted Client-Controlled X-Forwarded-For Header","display_title":"Security issue reported in pyload-ng","display_summary":"pyLoad determines the \"client IP\" used for its rate-limiting decorator and for its","display_reference":"GHSA-9q47-3cm2-2rp8","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-9q47-3cm2-2rp8","source_title":"pyLoad: Rate-Limit Bypass and Audit-Log Spoofing via Trusted Client-Controlled X-Forwarded-For Header","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T16:55:27.176Z","source_hash":"content-fingerprint:fnv1a-e1c88b7","affected_system":{"organization":"pyload-ng project","product":"pyload-ng","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Python"},"documented_facts":[{"id":"SEA-GHSA-9q47-3cm2-2rp8-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"pyLoad: Rate-Limit Bypass and Audit-Log Spoofing via Trusted Client-Controlled X-Forwarded-For Header","source_quote_or_pointer":"Security Advisory GHSA-9q47-3cm2-2rp8","fact_id":"SEA-GHSA-9q47-3cm2-2rp8-F1","document_citation":"Security Advisory GHSA-9q47-3cm2-2rp8"},{"id":"SEA-GHSA-9q47-3cm2-2rp8-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"pyLoad determines the \"client IP\" used for its rate-limiting decorator and for its","source_quote_or_pointer":"Advisory description (GHSA-9q47-3cm2-2rp8)","fact_id":"SEA-GHSA-9q47-3cm2-2rp8-F2","document_citation":"Advisory description (GHSA-9q47-3cm2-2rp8)"}],"source_stated_contributors":["pyLoad determines the \"client IP\" used for its rate-limiting decorator and for its"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-9q47-3cm2-2rp8","reporting_entity":"GitHub Security Advisory Database","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-9q47-3cm2-2rp8-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-9q47-3cm2-2rp8-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-jq7h-wrvp-3rgx","title":"pyLoad: Privilege revocation and password change through the REST API do not invalidate the user's session","display_title":"Security issue reported in pyload-ng","display_summary":"An admin who revokes a user's privileges through the REST API does not actually revoke them, because the session carrying those privileges is never invalidated.","display_reference":"GHSA-jq7h-wrvp-3rgx","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-jq7h-wrvp-3rgx","source_title":"pyLoad: Privilege revocation and password change through the REST API do not invalidate the user's session","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T16:55:27.176Z","source_hash":"content-fingerprint:fnv1a-b23e63ec","affected_system":{"organization":"pyload-ng project","product":"pyload-ng","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Python"},"documented_facts":[{"id":"SEA-GHSA-jq7h-wrvp-3rgx-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"pyLoad: Privilege revocation and password change through the REST API do not invalidate the user's session","source_quote_or_pointer":"Security Advisory GHSA-jq7h-wrvp-3rgx","fact_id":"SEA-GHSA-jq7h-wrvp-3rgx-F1","document_citation":"Security Advisory GHSA-jq7h-wrvp-3rgx"},{"id":"SEA-GHSA-jq7h-wrvp-3rgx-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"An admin who revokes a user's privileges through the REST API does not actually revoke them, because the session carrying those privileges is never invalidated.","source_quote_or_pointer":"Advisory description (GHSA-jq7h-wrvp-3rgx)","fact_id":"SEA-GHSA-jq7h-wrvp-3rgx-F2","document_citation":"Advisory description (GHSA-jq7h-wrvp-3rgx)"}],"source_stated_contributors":["An admin who revokes a user's privileges through the REST API does not actually revoke them, because the session carrying those privileges is never invalidated."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-jq7h-wrvp-3rgx","reporting_entity":"GitHub Security Advisory Database","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-jq7h-wrvp-3rgx-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-jq7h-wrvp-3rgx-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":[],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-889w-m37p-88m5","title":"pyLoad: Api.set_user_permission never invalidates the target's session","display_title":"Security issue reported in pyload-ng","display_summary":"An admin who revokes or downgrades a non-admin user's permissions through pyLoad's own documented","display_reference":"GHSA-889w-m37p-88m5","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-889w-m37p-88m5","source_title":"pyLoad: Api.set_user_permission never invalidates the target's session","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T16:55:27.177Z","source_hash":"content-fingerprint:fnv1a-b7792710","affected_system":{"organization":"pyload-ng project","product":"pyload-ng","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Python"},"documented_facts":[{"id":"SEA-GHSA-889w-m37p-88m5-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"pyLoad: Api.set_user_permission never invalidates the target's session","source_quote_or_pointer":"Security Advisory GHSA-889w-m37p-88m5","fact_id":"SEA-GHSA-889w-m37p-88m5-F1","document_citation":"Security Advisory GHSA-889w-m37p-88m5"},{"id":"SEA-GHSA-889w-m37p-88m5-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"An admin who revokes or downgrades a non-admin user's permissions through pyLoad's own documented","source_quote_or_pointer":"Advisory description (GHSA-889w-m37p-88m5)","fact_id":"SEA-GHSA-889w-m37p-88m5-F2","document_citation":"Advisory description (GHSA-889w-m37p-88m5)"}],"source_stated_contributors":["An admin who revokes or downgrades a non-admin user's permissions through pyLoad's own documented"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-889w-m37p-88m5","reporting_entity":"GitHub Security Advisory Database","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-889w-m37p-88m5-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-889w-m37p-88m5-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-p3pr-8f3m-4qp8","title":"pyLoad WindowsPhoneNotify addon: non-admin SETTINGS user triggers SSRF via unguarded http.client notification host","display_title":"pyload-ng issue could reach internal services","display_summary":"pyLoad ships the WindowsPhoneNotify addon, whose send() method opens an HTTP connection to a host taken directly from the plugin's pushurl configuration value.","display_reference":"GHSA-p3pr-8f3m-4qp8","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-p3pr-8f3m-4qp8","source_title":"pyLoad WindowsPhoneNotify addon: non-admin SETTINGS user triggers SSRF via unguarded http.client notification host","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T16:55:27.177Z","source_hash":"content-fingerprint:fnv1a-de36460b","affected_system":{"organization":"pyload-ng project","product":"pyload-ng","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Python"},"documented_facts":[{"id":"SEA-GHSA-p3pr-8f3m-4qp8-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"pyLoad WindowsPhoneNotify addon: non-admin SETTINGS user triggers SSRF via unguarded http.client notification host","source_quote_or_pointer":"Security Advisory GHSA-p3pr-8f3m-4qp8","fact_id":"SEA-GHSA-p3pr-8f3m-4qp8-F1","document_citation":"Security Advisory GHSA-p3pr-8f3m-4qp8"},{"id":"SEA-GHSA-p3pr-8f3m-4qp8-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"pyLoad ships the WindowsPhoneNotify addon, whose send() method opens an HTTP connection to a host taken directly from the plugin's pushurl configuration value. A user holding the standard non-admin SETTINGS permission can set pushurl and pushid and enable the addon through the web API, since these plugin options are…","source_quote_or_pointer":"Advisory description (GHSA-p3pr-8f3m-4qp8)","fact_id":"SEA-GHSA-p3pr-8f3m-4qp8-F2","document_citation":"Advisory description (GHSA-p3pr-8f3m-4qp8)"}],"source_stated_contributors":["pyLoad ships the WindowsPhoneNotify addon, whose send() method opens an HTTP connection to a host taken directly from the plugin's pushurl configuration value. A user holding the standard non-admin SETTINGS permission can set pushurl and pushid and enable the addon through the web API, since these plugin options are…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Internal network access","Cloud metadata or credential exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-p3pr-8f3m-4qp8","reporting_entity":"GitHub Security Advisory Database","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-p3pr-8f3m-4qp8-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-p3pr-8f3m-4qp8-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"The service fetched a URL chosen by the caller and could be steered at internal systems. Restrict outbound destinations and block internal address ranges.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":[],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-fr26-jjhm-638c","title":"pyLoad: Tar extraction creates device nodes and FIFOs (member types not filtered; tarfile extractall without filter=)","display_title":"Security issue reported in pyload-ng","display_summary":"UnTar.safeextractall — the hardening added for GHSA-mvwx-582f-56r7 — validates member","display_reference":"GHSA-fr26-jjhm-638c","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-fr26-jjhm-638c","source_title":"pyLoad: Tar extraction creates device nodes and FIFOs (member types not filtered; tarfile extractall without filter=)","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T16:55:27.177Z","source_hash":"content-fingerprint:fnv1a-6703f56c","affected_system":{"organization":"pyload-ng project","product":"pyload-ng","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Python"},"documented_facts":[{"id":"SEA-GHSA-fr26-jjhm-638c-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"pyLoad: Tar extraction creates device nodes and FIFOs (member types not filtered; tarfile extractall without filter=)","source_quote_or_pointer":"Security Advisory GHSA-fr26-jjhm-638c","fact_id":"SEA-GHSA-fr26-jjhm-638c-F1","document_citation":"Security Advisory GHSA-fr26-jjhm-638c"},{"id":"SEA-GHSA-fr26-jjhm-638c-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"UnTar.safeextractall — the hardening added for GHSA-mvwx-582f-56r7 — validates member","source_quote_or_pointer":"Advisory description (GHSA-fr26-jjhm-638c)","fact_id":"SEA-GHSA-fr26-jjhm-638c-F2","document_citation":"Advisory description (GHSA-fr26-jjhm-638c)"}],"source_stated_contributors":["UnTar.safeextractall — the hardening added for GHSA-mvwx-582f-56r7 — validates member"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.infrastructure_modification"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-fr26-jjhm-638c","reporting_entity":"GitHub Security Advisory Database","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-fr26-jjhm-638c-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-fr26-jjhm-638c-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-45gv-9wjv-xh7p","title":"Nginx UI: Authentication bypass: password login does not enforce a passkey-only second factor (2FA bypass)","display_title":"github.com/0xJacky/Nginx-UI issue could allow unauthorized access","display_summary":"nginx-ui supports two second-factor methods — TOTP (OTP) and WebAuthn passkeys —","display_reference":"CVE-2026-107808","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-45gv-9wjv-xh7p","source_title":"Nginx UI: Authentication bypass: password login does not enforce a passkey-only second factor (2FA bypass)","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T16:55:27.178Z","source_hash":"content-fingerprint:fnv1a-46cd8398","affected_system":{"organization":"github.com/0xJacky/Nginx-UI project","product":"github.com/0xJacky/Nginx-UI","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Go"},"documented_facts":[{"id":"SEA-GHSA-45gv-9wjv-xh7p-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Nginx UI: Authentication bypass: password login does not enforce a passkey-only second factor (2FA bypass)","source_quote_or_pointer":"Security Advisory GHSA-45gv-9wjv-xh7p","fact_id":"SEA-GHSA-45gv-9wjv-xh7p-F1","document_citation":"Security Advisory GHSA-45gv-9wjv-xh7p"},{"id":"SEA-GHSA-45gv-9wjv-xh7p-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"nginx-ui supports two second-factor methods — TOTP (OTP) and WebAuthn passkeys —","source_quote_or_pointer":"Advisory description (GHSA-45gv-9wjv-xh7p)","fact_id":"SEA-GHSA-45gv-9wjv-xh7p-F2","document_citation":"Advisory description (GHSA-45gv-9wjv-xh7p)"}],"source_stated_contributors":["nginx-ui supports two second-factor methods — TOTP (OTP) and WebAuthn passkeys —"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.credentials_secrets"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-45gv-9wjv-xh7p","reporting_entity":"CVE-2026-107808","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-45gv-9wjv-xh7p-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-45gv-9wjv-xh7p-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-107808"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-pvgv-gcp7-v38g","title":"Nginx UI: Node Secret Credential Exposure via URL Query Parameter","display_title":"github.com/0xJacky/Nginx-UI issue could expose accounts or credentials","display_summary":"nginx-ui's Node.Secret is a master credential that bypasses all JWT/password authentication for the entire API. The application accepts this credential via a URL query parameter (?nodesecret=), causing it to be recorded…","display_reference":"CVE-2026-107807","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-pvgv-gcp7-v38g","source_title":"Nginx UI: Node Secret Credential Exposure via URL Query Parameter","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T16:55:27.178Z","source_hash":"content-fingerprint:fnv1a-27b378d9","affected_system":{"organization":"github.com/0xJacky/Nginx-UI project","product":"github.com/0xJacky/Nginx-UI","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Go"},"documented_facts":[{"id":"SEA-GHSA-pvgv-gcp7-v38g-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Nginx UI: Node Secret Credential Exposure via URL Query Parameter","source_quote_or_pointer":"Security Advisory GHSA-pvgv-gcp7-v38g","fact_id":"SEA-GHSA-pvgv-gcp7-v38g-F1","document_citation":"Security Advisory GHSA-pvgv-gcp7-v38g"},{"id":"SEA-GHSA-pvgv-gcp7-v38g-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"nginx-ui's Node.Secret is a master credential that bypasses all JWT/password authentication for the entire API. The application accepts this credential via a URL query parameter (?nodesecret=), causing it to be recorded in plaintext in HTTP access logs, reverse proxy logs, browser history, and HTTP Referer headers.","source_quote_or_pointer":"Advisory description (GHSA-pvgv-gcp7-v38g)","fact_id":"SEA-GHSA-pvgv-gcp7-v38g-F2","document_citation":"Advisory description (GHSA-pvgv-gcp7-v38g)"}],"source_stated_contributors":["nginx-ui's Node.Secret is a master credential that bypasses all JWT/password authentication for the entire API. The application accepts this credential via a URL query parameter (?nodesecret=), causing it to be recorded in plaintext in HTTP access logs, reverse proxy logs, browser history, and HTTP Referer headers."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.infrastructure_modification","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-pvgv-gcp7-v38g","reporting_entity":"CVE-2026-107807","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-pvgv-gcp7-v38g-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-pvgv-gcp7-v38g-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-107807"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-p8v3-89rh-jxc7","title":"Nginx UI: Backup restore follows crafted symlinks into the live Nginx configuration path before restore flags are applied","display_title":"Security issue reported in github.com/0xJacky/Nginx-UI","display_summary":"An authenticated user who can create and restore a backup can craft a valid backup archive that causes the restore staging process to write attacker-controlled files into the live Nginx configuration path even when both…","display_reference":"CVE-2026-107810","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-p8v3-89rh-jxc7","source_title":"Nginx UI: Backup restore follows crafted symlinks into the live Nginx configuration path before restore flags are applied","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T16:55:27.178Z","source_hash":"content-fingerprint:fnv1a-df30a05f","affected_system":{"organization":"github.com/0xJacky/Nginx-UI project","product":"github.com/0xJacky/Nginx-UI","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Go"},"documented_facts":[{"id":"SEA-GHSA-p8v3-89rh-jxc7-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Nginx UI: Backup restore follows crafted symlinks into the live Nginx configuration path before restore flags are applied","source_quote_or_pointer":"Security Advisory GHSA-p8v3-89rh-jxc7","fact_id":"SEA-GHSA-p8v3-89rh-jxc7-F1","document_citation":"Security Advisory GHSA-p8v3-89rh-jxc7"},{"id":"SEA-GHSA-p8v3-89rh-jxc7-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"An authenticated user who can create and restore a backup can craft a valid backup archive that causes the restore staging process to write attacker-controlled files into the live Nginx configuration path even when both restorenginx and restorenginxui are set to false.","source_quote_or_pointer":"Advisory description (GHSA-p8v3-89rh-jxc7)","fact_id":"SEA-GHSA-p8v3-89rh-jxc7-F2","document_citation":"Advisory description (GHSA-p8v3-89rh-jxc7)"}],"source_stated_contributors":["An authenticated user who can create and restore a backup can craft a valid backup archive that causes the restore staging process to write attacker-controlled files into the live Nginx configuration path even when both restorenginx and restorenginxui are set to false."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-p8v3-89rh-jxc7","reporting_entity":"CVE-2026-107810","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-p8v3-89rh-jxc7-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-p8v3-89rh-jxc7-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-107810"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-r44w-v6gf-x3p6","title":"pyLoad has an authentication bypass in API key validation (check_apikey cache)","display_title":"pyload-ng issue could allow unauthorized access","display_summary":"The API-key cache in checkapikey() allows an attacker to authenticate with a forged API key as long as the legitimate key for the same keyid has been used recently.","display_reference":"GHSA-r44w-v6gf-x3p6","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-r44w-v6gf-x3p6","source_title":"pyLoad has an authentication bypass in API key validation (check_apikey cache)","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T16:55:27.179Z","source_hash":"content-fingerprint:fnv1a-1ad2a69c","affected_system":{"organization":"pyload-ng project","product":"pyload-ng","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Python"},"documented_facts":[{"id":"SEA-GHSA-r44w-v6gf-x3p6-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"pyLoad has an authentication bypass in API key validation (check_apikey cache)","source_quote_or_pointer":"Security Advisory GHSA-r44w-v6gf-x3p6","fact_id":"SEA-GHSA-r44w-v6gf-x3p6-F1","document_citation":"Security Advisory GHSA-r44w-v6gf-x3p6"},{"id":"SEA-GHSA-r44w-v6gf-x3p6-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The API-key cache in checkapikey() allows an attacker to authenticate with a forged API key as long as the legitimate key for the same keyid has been used recently.","source_quote_or_pointer":"Advisory description (GHSA-r44w-v6gf-x3p6)","fact_id":"SEA-GHSA-r44w-v6gf-x3p6-F2","document_citation":"Advisory description (GHSA-r44w-v6gf-x3p6)"}],"source_stated_contributors":["The API-key cache in checkapikey() allows an attacker to authenticate with a forged API key as long as the legitimate key for the same keyid has been used recently."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.credentials_secrets","arch.caching"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-r44w-v6gf-x3p6","reporting_entity":"GitHub Security Advisory Database","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-r44w-v6gf-x3p6-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-r44w-v6gf-x3p6-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":[],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-j92p-c242-7hfx","title":"pyLoad: Unauthenticated access to /web/<path:filename> bypasses authentication on sensitive templates and leaks internal error details via exception attribute typo","display_title":"Security issue reported in pyload-ng","display_summary":"The /web/ route in src/pyload/webui/app/blueprints/appblueprint.py renders Jinja2 templates without any authentication requirement.","display_reference":"CVE-2026-75597","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-j92p-c242-7hfx","source_title":"pyLoad: Unauthenticated access to /web/<path:filename> bypasses authentication on sensitive templates and leaks internal error details via exception attribute typo","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T16:55:27.179Z","source_hash":"content-fingerprint:fnv1a-2863d908","affected_system":{"organization":"pyload-ng project","product":"pyload-ng","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Python"},"documented_facts":[{"id":"SEA-GHSA-j92p-c242-7hfx-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"pyLoad: Unauthenticated access to /web/<path:filename> bypasses authentication on sensitive templates and leaks internal error details via exception attribute typo","source_quote_or_pointer":"Security Advisory GHSA-j92p-c242-7hfx","fact_id":"SEA-GHSA-j92p-c242-7hfx-F1","document_citation":"Security Advisory GHSA-j92p-c242-7hfx"},{"id":"SEA-GHSA-j92p-c242-7hfx-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The /web/ route in src/pyload/webui/app/blueprints/appblueprint.py renders Jinja2 templates without any authentication requirement. Every equivalent direct route (/logs, /settings, /queue, /dashboard, etc.) is protected by @loginrequired, but the underlying templates for all of these pages are accessible…","source_quote_or_pointer":"Advisory description (GHSA-j92p-c242-7hfx)","fact_id":"SEA-GHSA-j92p-c242-7hfx-F2","document_citation":"Advisory description (GHSA-j92p-c242-7hfx)"}],"source_stated_contributors":["The /web/ route in src/pyload/webui/app/blueprints/appblueprint.py renders Jinja2 templates without any authentication requirement. Every equivalent direct route (/logs, /settings, /queue, /dashboard, etc.) is protected by @loginrequired, but the underlying templates for all of these pages are accessible…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["arch.async_job"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-j92p-c242-7hfx","reporting_entity":"CVE-2026-75597","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-j92p-c242-7hfx-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-j92p-c242-7hfx-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-75597"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-j6cw-g6p4-7hch","title":"Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL","display_title":"github.com/argoproj/argo-cd/v2 issue could allow unintended commands to run","display_summary":"Argo CD runs a shell command in the repo-server when it clones or fetches an SSH Git repository that has a proxy URL. The proxy host and port are copied into an SSH ProxyCommand.","display_reference":"CVE-2026-55797","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-j6cw-g6p4-7hch","source_title":"Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T16:55:27.180Z","source_hash":"content-fingerprint:fnv1a-e1a6619a","affected_system":{"organization":"github.com/argoproj/argo-cd/v2 project","product":"github.com/argoproj/argo-cd/v2","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Go"},"documented_facts":[{"id":"SEA-GHSA-j6cw-g6p4-7hch-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL","source_quote_or_pointer":"Security Advisory GHSA-j6cw-g6p4-7hch","fact_id":"SEA-GHSA-j6cw-g6p4-7hch-F1","document_citation":"Security Advisory GHSA-j6cw-g6p4-7hch"},{"id":"SEA-GHSA-j6cw-g6p4-7hch-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Argo CD runs a shell command in the repo-server when it clones or fetches an SSH Git repository that has a proxy URL. The proxy host and port are copied into an SSH ProxyCommand. A host that contains shell metacharacters breaks out of that command and runs in the repo-server.","source_quote_or_pointer":"Advisory description (GHSA-j6cw-g6p4-7hch)","fact_id":"SEA-GHSA-j6cw-g6p4-7hch-F2","document_citation":"Advisory description (GHSA-j6cw-g6p4-7hch)"}],"source_stated_contributors":["Argo CD runs a shell command in the repo-server when it clones or fetches an SSH Git repository that has a proxy URL. The proxy host and port are copied into an SSH ProxyCommand. A host that contains shell metacharacters breaks out of that command and runs in the repo-server."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.code_execution"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-j6cw-g6p4-7hch","reporting_entity":"CVE-2026-55797","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-j6cw-g6p4-7hch-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-j6cw-g6p4-7hch-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-55797"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-vq8p-m3wm-gv5f","title":"pyLoad: Lack of Input Size Validation Leads to Denial of Service (DoS) and Process Termination","display_title":"pyload-ng issue could make the service unavailable","display_summary":"The API rpc function in apiblueprint.py handles multipart/form-data uploads by reading the whole content of the uploaded file into memory with file.read(). This occurs before the data is sent to the underlying function.","display_reference":"CVE-2026-48484","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-vq8p-m3wm-gv5f","source_title":"pyLoad: Lack of Input Size Validation Leads to Denial of Service (DoS) and Process Termination","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T16:55:27.180Z","source_hash":"content-fingerprint:fnv1a-e036d2a8","affected_system":{"organization":"pyload-ng project","product":"pyload-ng","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Python"},"documented_facts":[{"id":"SEA-GHSA-vq8p-m3wm-gv5f-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"pyLoad: Lack of Input Size Validation Leads to Denial of Service (DoS) and Process Termination","source_quote_or_pointer":"Security Advisory GHSA-vq8p-m3wm-gv5f","fact_id":"SEA-GHSA-vq8p-m3wm-gv5f-F1","document_citation":"Security Advisory GHSA-vq8p-m3wm-gv5f"},{"id":"SEA-GHSA-vq8p-m3wm-gv5f-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The API rpc function in apiblueprint.py handles multipart/form-data uploads by reading the whole content of the uploaded file into memory with file.read(). This occurs before the data is sent to the underlying function.","source_quote_or_pointer":"Advisory description (GHSA-vq8p-m3wm-gv5f)","fact_id":"SEA-GHSA-vq8p-m3wm-gv5f-F2","document_citation":"Advisory description (GHSA-vq8p-m3wm-gv5f)"}],"source_stated_contributors":["The API rpc function in apiblueprint.py handles multipart/form-data uploads by reading the whole content of the uploaded file into memory with file.read(). This occurs before the data is sent to the underlying function."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-vq8p-m3wm-gv5f","reporting_entity":"CVE-2026-48484","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-vq8p-m3wm-gv5f-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-vq8p-m3wm-gv5f-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-48484"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-m952-2w3f-6r8h","title":"Strawberry legacy graphql-ws retains naturally completed subscription slots","display_title":"Security issue reported in strawberry-graphql","display_summary":"Strawberry's legacy graphql-ws subscription handler can retain task and subscription bookkeeping after a one-shot subscription has naturally sent its complete message.","display_reference":"CVE-2026-107727","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-m952-2w3f-6r8h","source_title":"Strawberry legacy graphql-ws retains naturally completed subscription slots","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T16:55:27.180Z","source_hash":"content-fingerprint:fnv1a-ad182d1a","affected_system":{"organization":"strawberry-graphql project","product":"strawberry-graphql","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Python"},"documented_facts":[{"id":"SEA-GHSA-m952-2w3f-6r8h-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Strawberry legacy graphql-ws retains naturally completed subscription slots","source_quote_or_pointer":"Security Advisory GHSA-m952-2w3f-6r8h","fact_id":"SEA-GHSA-m952-2w3f-6r8h-F1","document_citation":"Security Advisory GHSA-m952-2w3f-6r8h"},{"id":"SEA-GHSA-m952-2w3f-6r8h-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Strawberry's legacy graphql-ws subscription handler can retain task and subscription bookkeeping after a one-shot subscription has naturally sent its complete message. When the application configures maxsubscriptionsperconnection, the handler counts those completed operations in len(self.tasks).","source_quote_or_pointer":"Advisory description (GHSA-m952-2w3f-6r8h)","fact_id":"SEA-GHSA-m952-2w3f-6r8h-F2","document_citation":"Advisory description (GHSA-m952-2w3f-6r8h)"}],"source_stated_contributors":["Strawberry's legacy graphql-ws subscription handler can retain task and subscription bookkeeping after a one-shot subscription has naturally sent its complete message. When the application configures maxsubscriptionsperconnection, the handler counts those completed operations in len(self.tasks)."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-m952-2w3f-6r8h","reporting_entity":"CVE-2026-107727","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-m952-2w3f-6r8h-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-m952-2w3f-6r8h-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-107727"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-pfvf-fwfp-25mp","title":"Strawberry GraphQL: Synchronous permission checks can treat an awaitable authorization result as truthy","display_title":"Security issue reported in strawberry-graphql","display_summary":"PermissionExtension.resolve() evaluates the return value of haspermission() for truthiness on the synchronous path. supportssync only classifies a permission as asynchronous when haspermission is declared with async def…","display_reference":"CVE-2026-107728","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-pfvf-fwfp-25mp","source_title":"Strawberry GraphQL: Synchronous permission checks can treat an awaitable authorization result as truthy","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T16:55:27.180Z","source_hash":"content-fingerprint:fnv1a-716824bc","affected_system":{"organization":"strawberry-graphql project","product":"strawberry-graphql","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Python"},"documented_facts":[{"id":"SEA-GHSA-pfvf-fwfp-25mp-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Strawberry GraphQL: Synchronous permission checks can treat an awaitable authorization result as truthy","source_quote_or_pointer":"Security Advisory GHSA-pfvf-fwfp-25mp","fact_id":"SEA-GHSA-pfvf-fwfp-25mp-F1","document_citation":"Security Advisory GHSA-pfvf-fwfp-25mp"},{"id":"SEA-GHSA-pfvf-fwfp-25mp-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"PermissionExtension.resolve() evaluates the return value of haspermission() for truthiness on the synchronous path. supportssync only classifies a permission as asynchronous when haspermission is declared with async def (via inspect.iscoroutinefunction), so a plain def that returns an awaitable is treated as…","source_quote_or_pointer":"Advisory description (GHSA-pfvf-fwfp-25mp)","fact_id":"SEA-GHSA-pfvf-fwfp-25mp-F2","document_citation":"Advisory description (GHSA-pfvf-fwfp-25mp)"}],"source_stated_contributors":["PermissionExtension.resolve() evaluates the return value of haspermission() for truthiness on the synchronous path. supportssync only classifies a permission as asynchronous when haspermission is declared with async def (via inspect.iscoroutinefunction), so a plain def that returns an awaitable is treated as…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-pfvf-fwfp-25mp","reporting_entity":"CVE-2026-107728","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-pfvf-fwfp-25mp-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-pfvf-fwfp-25mp-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-107728"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-107851","title":"Contao is an Open Source CMS. From version 5.7.0 until 5.7.12, TableAccessVoter::hasAccessToModule() in core-bundle/src/Security/Voter/DataContainer/TableAccessVoter.php caches authorization decisions using only $tokenHash, a hash of the user's security token, and omits the table returned by getDataSource(). If one request first checks a table allowed to the user and then a different denied table, the voter can reuse the allowed result, while DefaultDataContainerVoter can convert an incorrect abstention into a grant. A low-privileged backend user can consequently read, create, update, or delete records in tables outside assigned module permissions, including tables containing member or newsletter-subscriber data. This issue is fixed in version 5.7.12.","display_title":"Security issue reported in Software component","display_summary":"Contao is an Open Source CMS. From version 5.7.0 until 5.7.12, TableAccessVoter::hasAccessToModule() in core-bundle/src/Security/Voter/DataContainer/TableAccessVoter.php caches authorization decisions using only…","display_reference":"CVE-2026-107851","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107851","source_title":"Contao is an Open Source CMS. From version 5.7.0 until 5.7.12, TableAccessVoter::hasAccessToModule() in core-bundle/src/Security/Voter/DataContainer/TableAccessVoter.php caches authorization decisions using only $tokenHash, a hash of the user's security token, and omits the table returned by getDataSource(). If one request first checks a table allowed to the user and then a different denied table, the voter can reuse the allowed result, while DefaultDataContainerVoter can convert an incorrect abstention into a grant. A low-privileged backend user can consequently read, create, update, or delete records in tables outside assigned module permissions, including tables containing member or newsletter-subscriber data. This issue is fixed in version 5.7.12.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-17T00:24:19.384Z","source_hash":"content-fingerprint:fnv1a-ea79623f","affected_system":{"organization":"Contao is an Open Source CMS. From version 5.7.0 until 5.7.12, TableAccessVoter project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-107851-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Contao is an Open Source CMS. From version 5.7.0 until 5.7.12, TableAccessVoter::hasAccessToModule() in core-bundle/src/Security/Voter/DataContainer/TableAccessVoter.php caches authorization decisions using only $tokenHash, a hash of the user's security token, and omits the table returned by getDataSource(). If one request first checks a table allowed to the user and then a different denied table, the voter can reuse the allowed result, while DefaultDataContainerVoter can convert an incorrect abstention into a grant. A low-privileged backend user can consequently read, create, update, or delete records in tables outside assigned module permissions, including tables containing member or newsletter-subscriber data. This issue is fixed in version 5.7.12.","source_quote_or_pointer":"Security Advisory CVE-2026-107851","fact_id":"SEA-CVE-2026-107851-F1","document_citation":"Security Advisory CVE-2026-107851"},{"id":"SEA-CVE-2026-107851-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Contao is an Open Source CMS. From version 5.7.0 until 5.7.12, TableAccessVoter::hasAccessToModule() in core-bundle/src/Security/Voter/DataContainer/TableAccessVoter.php caches authorization decisions using only $tokenHash, a hash of the user's security token, and omits the table returned by getDataSource().","source_quote_or_pointer":"Advisory description (CVE-2026-107851)","fact_id":"SEA-CVE-2026-107851-F2","document_citation":"Advisory description (CVE-2026-107851)"}],"source_stated_contributors":["Contao is an Open Source CMS. From version 5.7.0 until 5.7.12, TableAccessVoter::hasAccessToModule() in core-bundle/src/Security/Voter/DataContainer/TableAccessVoter.php caches authorization decisions using only $tokenHash, a hash of the user's security token, and omits the table returned by getDataSource()."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.privileged_action","auth.write_action","data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-107851","reporting_entity":"CVE-2026-107851","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-107851-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-107851-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-107851"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-107852","title":"Jexactyl is a customisable game management panel and billing system. Prior to 4.0.5, the POST /api/client/billing/stripe/process endpoint accepts a client-supplied Stripe Checkout Session when payment_status is paid but does not compare amount_total or currency with the referenced order and configured billing currency. On an instance where the billing module is enabled and a Stripe secret key is configured, an authenticated client can therefore complete a lower-value or mismatched-currency payment and cause the order to be processed, provisioning, renewing, upgrading, or unsuspending the purchased server for less than the required price. This issue is fixed in version 4.0.5.","display_title":"Software component issue could expose accounts or credentials","display_summary":"Jexactyl is a customisable game management panel and billing system. Prior to 4.0.5, the POST /api/client/billing/stripe/process endpoint accepts a client-supplied Stripe Checkout Session when paymentstatus is paid but…","display_reference":"CVE-2026-107852","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107852","source_title":"Jexactyl is a customisable game management panel and billing system. Prior to 4.0.5, the POST /api/client/billing/stripe/process endpoint accepts a client-supplied Stripe Checkout Session when payment_status is paid but does not compare amount_total or currency with the referenced order and configured billing currency. On an instance where the billing module is enabled and a Stripe secret key is configured, an authenticated client can therefore complete a lower-value or mismatched-currency payment and cause the order to be processed, provisioning, renewing, upgrading, or unsuspending the purchased server for less than the required price. This issue is fixed in version 4.0.5.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-17T00:24:19.384Z","source_hash":"content-fingerprint:fnv1a-8eebf326","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-107852-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Jexactyl is a customisable game management panel and billing system. Prior to 4.0.5, the POST /api/client/billing/stripe/process endpoint accepts a client-supplied Stripe Checkout Session when payment_status is paid but does not compare amount_total or currency with the referenced order and configured billing currency. On an instance where the billing module is enabled and a Stripe secret key is configured, an authenticated client can therefore complete a lower-value or mismatched-currency payment and cause the order to be processed, provisioning, renewing, upgrading, or unsuspending the purchased server for less than the required price. This issue is fixed in version 4.0.5.","source_quote_or_pointer":"Security Advisory CVE-2026-107852","fact_id":"SEA-CVE-2026-107852-F1","document_citation":"Security Advisory CVE-2026-107852"},{"id":"SEA-CVE-2026-107852-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Jexactyl is a customisable game management panel and billing system. Prior to 4.0.5, the POST /api/client/billing/stripe/process endpoint accepts a client-supplied Stripe Checkout Session when paymentstatus is paid but does not compare amounttotal or currency with the referenced order and configured billing currency.","source_quote_or_pointer":"Advisory description (CVE-2026-107852)","fact_id":"SEA-CVE-2026-107852-F2","document_citation":"Advisory description (CVE-2026-107852)"}],"source_stated_contributors":["Jexactyl is a customisable game management panel and billing system. Prior to 4.0.5, the POST /api/client/billing/stripe/process endpoint accepts a client-supplied Stripe Checkout Session when paymentstatus is paid but does not compare amounttotal or currency with the referenced order and configured billing currency."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.financial_action","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-107852","reporting_entity":"CVE-2026-107852","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-107852-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-107852-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-107852"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-107854","title":"Jexactyl is a customisable game management panel and billing system. From 4.0.0 until 4.0.5, the POST /api/client/billing/free/process endpoint accepts a client-controlled server_id and loads the server without restricting the lookup to servers owned by the authenticated account. On installations with billing enabled, an authenticated user can renew or unsuspend another tenant's billable server when its renewal_date is non-null and more than seven days away, even without a subuser relationship to that server. This issue is fixed in version 4.0.5.","display_title":"Security issue reported in Software component","display_summary":"Jexactyl is a customisable game management panel and billing system. From 4.0.0 until 4.0.5, the POST /api/client/billing/free/process endpoint accepts a client-controlled serverid and loads the server without…","display_reference":"CVE-2026-107854","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107854","source_title":"Jexactyl is a customisable game management panel and billing system. From 4.0.0 until 4.0.5, the POST /api/client/billing/free/process endpoint accepts a client-controlled server_id and loads the server without restricting the lookup to servers owned by the authenticated account. On installations with billing enabled, an authenticated user can renew or unsuspend another tenant's billable server when its renewal_date is non-null and more than seven days away, even without a subuser relationship to that server. This issue is fixed in version 4.0.5.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-17T00:24:19.384Z","source_hash":"content-fingerprint:fnv1a-8880646e","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-107854-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Jexactyl is a customisable game management panel and billing system. From 4.0.0 until 4.0.5, the POST /api/client/billing/free/process endpoint accepts a client-controlled server_id and loads the server without restricting the lookup to servers owned by the authenticated account. On installations with billing enabled, an authenticated user can renew or unsuspend another tenant's billable server when its renewal_date is non-null and more than seven days away, even without a subuser relationship to that server. This issue is fixed in version 4.0.5.","source_quote_or_pointer":"Security Advisory CVE-2026-107854","fact_id":"SEA-CVE-2026-107854-F1","document_citation":"Security Advisory CVE-2026-107854"},{"id":"SEA-CVE-2026-107854-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Jexactyl is a customisable game management panel and billing system. From 4.0.0 until 4.0.5, the POST /api/client/billing/free/process endpoint accepts a client-controlled serverid and loads the server without restricting the lookup to servers owned by the authenticated account.","source_quote_or_pointer":"Advisory description (CVE-2026-107854)","fact_id":"SEA-CVE-2026-107854-F2","document_citation":"Advisory description (CVE-2026-107854)"}],"source_stated_contributors":["Jexactyl is a customisable game management panel and billing system. From 4.0.0 until 4.0.5, the POST /api/client/billing/free/process endpoint accepts a client-controlled serverid and loads the server without restricting the lookup to servers owned by the authenticated account."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.financial_action","data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-107854","reporting_entity":"CVE-2026-107854","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-107854-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-107854-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-107854"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108259","title":"Tina is a headless content management system. Prior to 3.0.0, @tinacms/cli reads Git branch values from VERCEL_GIT_COMMIT_REF, GITHUB_BRANCH, or HEAD, incorporates the raw value into the API URL, and interpolates that URL into JavaScript string literals in packages/@tinacms/cli/src/next/codegen/index.ts and packages/@tinacms/cli/src/next/codegen/codegen/plugin.ts. A crafted Git-valid branch name containing a quote can terminate the generated string and inject an expression that executes when the generated client module is imported during a preview build. The injected code runs with the build process privileges and can read environment credentials, modify deployment artifacts, or make network requests. This issue is fixed in version 3.0.0.","display_title":"Software component issue could expose accounts or credentials","display_summary":"Tina is a headless content management system. Prior to 3.0.0, @tinacms/cli reads Git branch values from VERCELGITCOMMITREF, GITHUBBRANCH, or HEAD, incorporates the raw value into the API URL, and interpolates that URL…","display_reference":"CVE-2026-108259","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108259","source_title":"Tina is a headless content management system. Prior to 3.0.0, @tinacms/cli reads Git branch values from VERCEL_GIT_COMMIT_REF, GITHUB_BRANCH, or HEAD, incorporates the raw value into the API URL, and interpolates that URL into JavaScript string literals in packages/@tinacms/cli/src/next/codegen/index.ts and packages/@tinacms/cli/src/next/codegen/codegen/plugin.ts. A crafted Git-valid branch name containing a quote can terminate the generated string and inject an expression that executes when the generated client module is imported during a preview build. The injected code runs with the build process privileges and can read environment credentials, modify deployment artifacts, or make network requests. This issue is fixed in version 3.0.0.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-17T00:24:19.385Z","source_hash":"content-fingerprint:fnv1a-7c71e3ee","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108259-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Tina is a headless content management system. Prior to 3.0.0, @tinacms/cli reads Git branch values from VERCEL_GIT_COMMIT_REF, GITHUB_BRANCH, or HEAD, incorporates the raw value into the API URL, and interpolates that URL into JavaScript string literals in packages/@tinacms/cli/src/next/codegen/index.ts and packages/@tinacms/cli/src/next/codegen/codegen/plugin.ts. A crafted Git-valid branch name containing a quote can terminate the generated string and inject an expression that executes when the generated client module is imported during a preview build. The injected code runs with the build process privileges and can read environment credentials, modify deployment artifacts, or make network requests. This issue is fixed in version 3.0.0.","source_quote_or_pointer":"Security Advisory CVE-2026-108259","fact_id":"SEA-CVE-2026-108259-F1","document_citation":"Security Advisory CVE-2026-108259"},{"id":"SEA-CVE-2026-108259-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Tina is a headless content management system. Prior to 3.0.0, @tinacms/cli reads Git branch values from VERCELGITCOMMITREF, GITHUBBRANCH, or HEAD, incorporates the raw value into the API URL, and interpolates that URL into JavaScript string literals in packages/@tinacms/cli/src/next/codegen/index.ts and…","source_quote_or_pointer":"Advisory description (CVE-2026-108259)","fact_id":"SEA-CVE-2026-108259-F2","document_citation":"Advisory description (CVE-2026-108259)"}],"source_stated_contributors":["Tina is a headless content management system. Prior to 3.0.0, @tinacms/cli reads Git branch values from VERCELGITCOMMITREF, GITHUBBRANCH, or HEAD, incorporates the raw value into the API URL, and interpolates that URL into JavaScript string literals in packages/@tinacms/cli/src/next/codegen/index.ts and…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.write_action","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108259","reporting_entity":"CVE-2026-108259","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108259-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108259-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108259"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108263","title":"Astron Agent is an agentic workflow platform for building and running AI agents. Prior to 1.1.2, the default workflow code-node path through /console-api/workflow/code/run and /workflow/v1/run selects LocalExecutor in core/workflow/engine/nodes/code/code_node.py when CODE_EXEC_TYPE is not explicitly changed. LocalExecutor supplies complete Python builtins to dynamic code execution without the documented sandbox restrictions. An authenticated low-privilege tenant can execute code as root in the core-workflow container and use shared service and database credentials to bypass application-level tenant checks, read or modify other tenants' data, and disrupt shared services. This issue is fixed in version 1.1.2.","display_title":"Software component issue could allow unintended commands to run","display_summary":"Astron Agent is an agentic workflow platform for building and running AI agents. Prior to 1.1.2, the default workflow code-node path through /console-api/workflow/code/run and /workflow/v1/run selects LocalExecutor in…","display_reference":"CVE-2026-108263","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108263","source_title":"Astron Agent is an agentic workflow platform for building and running AI agents. Prior to 1.1.2, the default workflow code-node path through /console-api/workflow/code/run and /workflow/v1/run selects LocalExecutor in core/workflow/engine/nodes/code/code_node.py when CODE_EXEC_TYPE is not explicitly changed. LocalExecutor supplies complete Python builtins to dynamic code execution without the documented sandbox restrictions. An authenticated low-privilege tenant can execute code as root in the core-workflow container and use shared service and database credentials to bypass application-level tenant checks, read or modify other tenants' data, and disrupt shared services. This issue is fixed in version 1.1.2.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-17T00:24:19.385Z","source_hash":"content-fingerprint:fnv1a-323fa3d5","affected_system":{"organization":"Software component project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108263-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Astron Agent is an agentic workflow platform for building and running AI agents. Prior to 1.1.2, the default workflow code-node path through /console-api/workflow/code/run and /workflow/v1/run selects LocalExecutor in core/workflow/engine/nodes/code/code_node.py when CODE_EXEC_TYPE is not explicitly changed. LocalExecutor supplies complete Python builtins to dynamic code execution without the documented sandbox restrictions. An authenticated low-privilege tenant can execute code as root in the core-workflow container and use shared service and database credentials to bypass application-level tenant checks, read or modify other tenants' data, and disrupt shared services. This issue is fixed in version 1.1.2.","source_quote_or_pointer":"Security Advisory CVE-2026-108263","fact_id":"SEA-CVE-2026-108263-F1","document_citation":"Security Advisory CVE-2026-108263"},{"id":"SEA-CVE-2026-108263-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Astron Agent is an agentic workflow platform for building and running AI agents. Prior to 1.1.2, the default workflow code-node path through /console-api/workflow/code/run and /workflow/v1/run selects LocalExecutor in core/workflow/engine/nodes/code/codenode.py when CODEEXECTYPE is not explicitly changed.","source_quote_or_pointer":"Advisory description (CVE-2026-108263)","fact_id":"SEA-CVE-2026-108263-F2","document_citation":"Advisory description (CVE-2026-108263)"}],"source_stated_contributors":["Astron Agent is an agentic workflow platform for building and running AI agents. Prior to 1.1.2, the default workflow code-node path through /console-api/workflow/code/run and /workflow/v1/run selects LocalExecutor in core/workflow/engine/nodes/code/codenode.py when CODEEXECTYPE is not explicitly changed."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.code_execution","auth.privileged_action","auth.infrastructure_modification","auth.write_action","data.credentials_secrets","arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-004","SEA-FM-002","SEA-FM-010"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108263","reporting_entity":"CVE-2026-108263","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108263-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108263-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108263"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108264","title":"Wizarr is an advanced user invitation and management system for Jellyfin, Plex, Emby, and other media servers. Prior to 2026.9.1, wizard step Markdown supplied through the editor or imported bundles was evaluated by app/blueprints/wizard/routes.py in the application's non-sandboxed Jinja2 environment with application globals exposed. An authenticated user able to create steps, or an administrator importing an untrusted bundle through POST /settings/wizard/import, could execute arbitrary Python when GET /wizard/{server}/{idx} rendered the stored step; app/jinja_filters.py and app/services/wizard_widgets.py contained additional evaluation sinks. This could execute operating-system commands as the application user, disclose the Flask SECRET_KEY, access connected service credentials and the database, and produce stored cross-site scripting. This issue is fixed in 2026.9.1.","display_title":"Software component issue could run attacker-controlled scripts in a browser","display_summary":"Wizarr is an advanced user invitation and management system for Jellyfin, Plex, Emby, and other media servers. Prior to 2026.9.1, wizard step Markdown supplied through the editor or imported bundles was evaluated by…","display_reference":"CVE-2026-108264","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108264","source_title":"Wizarr is an advanced user invitation and management system for Jellyfin, Plex, Emby, and other media servers. Prior to 2026.9.1, wizard step Markdown supplied through the editor or imported bundles was evaluated by app/blueprints/wizard/routes.py in the application's non-sandboxed Jinja2 environment with application globals exposed. An authenticated user able to create steps, or an administrator importing an untrusted bundle through POST /settings/wizard/import, could execute arbitrary Python when GET /wizard/{server}/{idx} rendered the stored step; app/jinja_filters.py and app/services/wizard_widgets.py contained additional evaluation sinks. This could execute operating-system commands as the application user, disclose the Flask SECRET_KEY, access connected service credentials and the database, and produce stored cross-site scripting. This issue is fixed in 2026.9.1.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-17T00:24:19.385Z","source_hash":"content-fingerprint:fnv1a-3e3d222e","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108264-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Wizarr is an advanced user invitation and management system for Jellyfin, Plex, Emby, and other media servers. Prior to 2026.9.1, wizard step Markdown supplied through the editor or imported bundles was evaluated by app/blueprints/wizard/routes.py in the application's non-sandboxed Jinja2 environment with application globals exposed. An authenticated user able to create steps, or an administrator importing an untrusted bundle through POST /settings/wizard/import, could execute arbitrary Python when GET /wizard/{server}/{idx} rendered the stored step; app/jinja_filters.py and app/services/wizard_widgets.py contained additional evaluation sinks. This could execute operating-system commands as the application user, disclose the Flask SECRET_KEY, access connected service credentials and the database, and produce stored cross-site scripting. This issue is fixed in 2026.9.1.","source_quote_or_pointer":"Security Advisory CVE-2026-108264","fact_id":"SEA-CVE-2026-108264-F1","document_citation":"Security Advisory CVE-2026-108264"},{"id":"SEA-CVE-2026-108264-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Wizarr is an advanced user invitation and management system for Jellyfin, Plex, Emby, and other media servers. Prior to 2026.9.1, wizard step Markdown supplied through the editor or imported bundles was evaluated by app/blueprints/wizard/routes.py in the application's non-sandboxed Jinja2 environment with application…","source_quote_or_pointer":"Advisory description (CVE-2026-108264)","fact_id":"SEA-CVE-2026-108264-F2","document_citation":"Advisory description (CVE-2026-108264)"}],"source_stated_contributors":["Wizarr is an advanced user invitation and management system for Jellyfin, Plex, Emby, and other media servers. Prior to 2026.9.1, wizard step Markdown supplied through the editor or imported bundles was evaluated by app/blueprints/wizard/routes.py in the application's non-sandboxed Jinja2 environment with application…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.code_execution","auth.privileged_action","auth.write_action","data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108264","reporting_entity":"CVE-2026-108264","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108264-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108264-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108264"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108265","title":"Enclave OS Mini is a Rust-based runtime for confidential applications inside Intel SGX enclaves. Prior to wasm-v0.40.0, the SGX runtime's RA-TLS challenge certificate path placed the certificate public-key hash and client nonce in quote ReportData but omitted a value bound to the active TLS session. An attacker who obtained an enclave TLS private key could relay a genuine quote onto another connection, causing a relying party to accept an attacker-terminated connection as the attested enclave. This issue is fixed in wasm-v0.40.0.","display_title":"Security issue reported in Software component","display_summary":"Enclave OS Mini is a Rust-based runtime for confidential applications inside Intel SGX enclaves. Prior to wasm-v0.40.0, the SGX runtime's RA-TLS challenge certificate path placed the certificate public-key hash and…","display_reference":"CVE-2026-108265","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108265","source_title":"Enclave OS Mini is a Rust-based runtime for confidential applications inside Intel SGX enclaves. Prior to wasm-v0.40.0, the SGX runtime's RA-TLS challenge certificate path placed the certificate public-key hash and client nonce in quote ReportData but omitted a value bound to the active TLS session. An attacker who obtained an enclave TLS private key could relay a genuine quote onto another connection, causing a relying party to accept an attacker-terminated connection as the attested enclave. This issue is fixed in wasm-v0.40.0.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-17T00:24:19.386Z","source_hash":"content-fingerprint:fnv1a-4965f5c7","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108265-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Enclave OS Mini is a Rust-based runtime for confidential applications inside Intel SGX enclaves. Prior to wasm-v0.40.0, the SGX runtime's RA-TLS challenge certificate path placed the certificate public-key hash and client nonce in quote ReportData but omitted a value bound to the active TLS session. An attacker who obtained an enclave TLS private key could relay a genuine quote onto another connection, causing a relying party to accept an attacker-terminated connection as the attested enclave. This issue is fixed in wasm-v0.40.0.","source_quote_or_pointer":"Security Advisory CVE-2026-108265","fact_id":"SEA-CVE-2026-108265-F1","document_citation":"Security Advisory CVE-2026-108265"},{"id":"SEA-CVE-2026-108265-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Enclave OS Mini is a Rust-based runtime for confidential applications inside Intel SGX enclaves. Prior to wasm-v0.40.0, the SGX runtime's RA-TLS challenge certificate path placed the certificate public-key hash and client nonce in quote ReportData but omitted a value bound to the active TLS session.","source_quote_or_pointer":"Advisory description (CVE-2026-108265)","fact_id":"SEA-CVE-2026-108265-F2","document_citation":"Advisory description (CVE-2026-108265)"}],"source_stated_contributors":["Enclave OS Mini is a Rust-based runtime for confidential applications inside Intel SGX enclaves. Prior to wasm-v0.40.0, the SGX runtime's RA-TLS challenge certificate path placed the certificate public-key hash and client nonce in quote ReportData but omitted a value bound to the active TLS session."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.public_publication","data.credentials_secrets"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108265","reporting_entity":"CVE-2026-108265","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108265-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108265-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-108265"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-57458","title":"Vikunja is an open-source self-hosted task management platform. In version 2.3.0, a scoped API token limited to the oauth.authorize permission can call POST /api/v1/oauth/authorize, obtain an OAuth authorization code, and exchange the code at POST /api/v1/oauth/token for a normal bearer JSON Web Token (JWT) and refresh token. The resulting credentials are not restricted by the original API token's permissions, allowing access to routes outside its declared scope for the same user. Version 2.4.0 fixes the vulnerability.","display_title":"Software component issue could expose accounts or credentials","display_summary":"Vikunja is an open-source self-hosted task management platform. In version 2.3.0, a scoped API token limited to the oauth.authorize permission can call POST /api/v1/oauth/authorize, obtain an OAuth authorization code,…","display_reference":"CVE-2026-57458","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-57458","source_title":"Vikunja is an open-source self-hosted task management platform. In version 2.3.0, a scoped API token limited to the oauth.authorize permission can call POST /api/v1/oauth/authorize, obtain an OAuth authorization code, and exchange the code at POST /api/v1/oauth/token for a normal bearer JSON Web Token (JWT) and refresh token. The resulting credentials are not restricted by the original API token's permissions, allowing access to routes outside its declared scope for the same user. Version 2.4.0 fixes the vulnerability.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-17T00:24:19.386Z","source_hash":"content-fingerprint:fnv1a-6d0d160e","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-57458-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Vikunja is an open-source self-hosted task management platform. In version 2.3.0, a scoped API token limited to the oauth.authorize permission can call POST /api/v1/oauth/authorize, obtain an OAuth authorization code, and exchange the code at POST /api/v1/oauth/token for a normal bearer JSON Web Token (JWT) and refresh token. The resulting credentials are not restricted by the original API token's permissions, allowing access to routes outside its declared scope for the same user. Version 2.4.0 fixes the vulnerability.","source_quote_or_pointer":"Security Advisory CVE-2026-57458","fact_id":"SEA-CVE-2026-57458-F1","document_citation":"Security Advisory CVE-2026-57458"},{"id":"SEA-CVE-2026-57458-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Vikunja is an open-source self-hosted task management platform. In version 2.3.0, a scoped API token limited to the oauth.authorize permission can call POST /api/v1/oauth/authorize, obtain an OAuth authorization code, and exchange the code at POST /api/v1/oauth/token for a normal bearer JSON Web Token (JWT) and…","source_quote_or_pointer":"Advisory description (CVE-2026-57458)","fact_id":"SEA-CVE-2026-57458-F2","document_citation":"Advisory description (CVE-2026-57458)"}],"source_stated_contributors":["Vikunja is an open-source self-hosted task management platform. In version 2.3.0, a scoped API token limited to the oauth.authorize permission can call POST /api/v1/oauth/authorize, obtain an OAuth authorization code, and exchange the code at POST /api/v1/oauth/token for a normal bearer JSON Web Token (JWT) and…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-57458","reporting_entity":"CVE-2026-57458","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-57458-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-57458-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-57458"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-62367","title":"Vikunja is an open-source self-hosted task management platform. In versions 1.0.0 through 2.3.0, when an administrator enables the per-provider emailfallback option on an OpenID Connect provider, Vikunja links an SSO login to a pre-existing local (username+password) account using only the email claim from the IdP. The fallback never checks an email_verified (or Microsoft xms_edov) signal and never requires the matched account's password. An attacker who can obtain a token from the configured issuer carrying a victim's email logs in as that victim with a full session, with no consent or interaction from the victim. Version 2.4.0 fixes the issue.","display_title":"Security issue reported in Software component","display_summary":"Vikunja is an open-source self-hosted task management platform. In versions 1.0.0 through 2.3.0, when an administrator enables the per-provider emailfallback option on an OpenID Connect provider, Vikunja links an SSO…","display_reference":"CVE-2026-62367","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-62367","source_title":"Vikunja is an open-source self-hosted task management platform. In versions 1.0.0 through 2.3.0, when an administrator enables the per-provider emailfallback option on an OpenID Connect provider, Vikunja links an SSO login to a pre-existing local (username+password) account using only the email claim from the IdP. The fallback never checks an email_verified (or Microsoft xms_edov) signal and never requires the matched account's password. An attacker who can obtain a token from the configured issuer carrying a victim's email logs in as that victim with a full session, with no consent or interaction from the victim. Version 2.4.0 fixes the issue.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-17T00:24:19.386Z","source_hash":"content-fingerprint:fnv1a-bc467e7d","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-62367-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Vikunja is an open-source self-hosted task management platform. In versions 1.0.0 through 2.3.0, when an administrator enables the per-provider emailfallback option on an OpenID Connect provider, Vikunja links an SSO login to a pre-existing local (username+password) account using only the email claim from the IdP. The fallback never checks an email_verified (or Microsoft xms_edov) signal and never requires the matched account's password. An attacker who can obtain a token from the configured issuer carrying a victim's email logs in as that victim with a full session, with no consent or interaction from the victim. Version 2.4.0 fixes the issue.","source_quote_or_pointer":"Security Advisory CVE-2026-62367","fact_id":"SEA-CVE-2026-62367-F1","document_citation":"Security Advisory CVE-2026-62367"},{"id":"SEA-CVE-2026-62367-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Vikunja is an open-source self-hosted task management platform. In versions 1.0.0 through 2.3.0, when an administrator enables the per-provider emailfallback option on an OpenID Connect provider, Vikunja links an SSO login to a pre-existing local (username+password) account using only the email claim from the IdP.","source_quote_or_pointer":"Advisory description (CVE-2026-62367)","fact_id":"SEA-CVE-2026-62367-F2","document_citation":"Advisory description (CVE-2026-62367)"}],"source_stated_contributors":["Vikunja is an open-source self-hosted task management platform. In versions 1.0.0 through 2.3.0, when an administrator enables the per-provider emailfallback option on an OpenID Connect provider, Vikunja links an SSO login to a pre-existing local (username+password) account using only the email claim from the IdP."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-62367","reporting_entity":"CVE-2026-62367","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-62367-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-62367-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-62367"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-62376","title":"Vikunja is an open-source self-hosted task management platform. Versions prior to 2.4.0 store password-reset, email-confirmation, and account-deletion tokens in the user_tokens table in plaintext. If an attacker gains read access to the database through a backup leak, misconfigured storage, or SQL-level exposure, they can immediately use pending tokens to take over user accounts without knowing passwords. Version 2.4.0 fixes the issue.","display_title":"Security issue reported in Software component","display_summary":"Vikunja is an open-source self-hosted task management platform. Versions prior to 2.4.0 store password-reset, email-confirmation, and account-deletion tokens in the usertokens table in plaintext.","display_reference":"CVE-2026-62376","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-62376","source_title":"Vikunja is an open-source self-hosted task management platform. Versions prior to 2.4.0 store password-reset, email-confirmation, and account-deletion tokens in the user_tokens table in plaintext. If an attacker gains read access to the database through a backup leak, misconfigured storage, or SQL-level exposure, they can immediately use pending tokens to take over user accounts without knowing passwords. Version 2.4.0 fixes the issue.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-17T00:24:19.386Z","source_hash":"content-fingerprint:fnv1a-40d6dfab","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-62376-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Vikunja is an open-source self-hosted task management platform. Versions prior to 2.4.0 store password-reset, email-confirmation, and account-deletion tokens in the user_tokens table in plaintext. If an attacker gains read access to the database through a backup leak, misconfigured storage, or SQL-level exposure, they can immediately use pending tokens to take over user accounts without knowing passwords. Version 2.4.0 fixes the issue.","source_quote_or_pointer":"Security Advisory CVE-2026-62376","fact_id":"SEA-CVE-2026-62376-F1","document_citation":"Security Advisory CVE-2026-62376"},{"id":"SEA-CVE-2026-62376-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Vikunja is an open-source self-hosted task management platform. Versions prior to 2.4.0 store password-reset, email-confirmation, and account-deletion tokens in the usertokens table in plaintext.","source_quote_or_pointer":"Advisory description (CVE-2026-62376)","fact_id":"SEA-CVE-2026-62376-F2","document_citation":"Advisory description (CVE-2026-62376)"}],"source_stated_contributors":["Vikunja is an open-source self-hosted task management platform. Versions prior to 2.4.0 store password-reset, email-confirmation, and account-deletion tokens in the usertokens table in plaintext."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.write_action","data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-62376","reporting_entity":"CVE-2026-62376","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-62376-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-62376-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-62376"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108267","title":"Privasys Go is a maintained fork of the Go programming language that adds RA-TLS support to crypto/tls. Prior to privasys-v0.5.1-go1.26.5, challenge-mode RA-TLS certificates bound quote ReportData to the certificate public key and client nonce but not to the active TLS session. An attacker who obtained an enclave TLS private key could relay a genuine quote onto another connection, causing a relying party to accept a handshake terminated by the attacker as an attested enclave connection. This issue is fixed in privasys-v0.5.1-go1.26.5.","display_title":"Security issue reported in Software component","display_summary":"Privasys Go is a maintained fork of the Go programming language that adds RA-TLS support to crypto/tls. Prior to privasys-v0.5.1-go1.26.5, challenge-mode RA-TLS certificates bound quote ReportData to the certificate…","display_reference":"CVE-2026-108267","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108267","source_title":"Privasys Go is a maintained fork of the Go programming language that adds RA-TLS support to crypto/tls. Prior to privasys-v0.5.1-go1.26.5, challenge-mode RA-TLS certificates bound quote ReportData to the certificate public key and client nonce but not to the active TLS session. An attacker who obtained an enclave TLS private key could relay a genuine quote onto another connection, causing a relying party to accept a handshake terminated by the attacker as an attested enclave connection. This issue is fixed in privasys-v0.5.1-go1.26.5.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-17T00:24:19.387Z","source_hash":"content-fingerprint:fnv1a-72e5d157","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108267-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Privasys Go is a maintained fork of the Go programming language that adds RA-TLS support to crypto/tls. Prior to privasys-v0.5.1-go1.26.5, challenge-mode RA-TLS certificates bound quote ReportData to the certificate public key and client nonce but not to the active TLS session. An attacker who obtained an enclave TLS private key could relay a genuine quote onto another connection, causing a relying party to accept a handshake terminated by the attacker as an attested enclave connection. This issue is fixed in privasys-v0.5.1-go1.26.5.","source_quote_or_pointer":"Security Advisory CVE-2026-108267","fact_id":"SEA-CVE-2026-108267-F1","document_citation":"Security Advisory CVE-2026-108267"},{"id":"SEA-CVE-2026-108267-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Privasys Go is a maintained fork of the Go programming language that adds RA-TLS support to crypto/tls. Prior to privasys-v0.5.1-go1.26.5, challenge-mode RA-TLS certificates bound quote ReportData to the certificate public key and client nonce but not to the active TLS session.","source_quote_or_pointer":"Advisory description (CVE-2026-108267)","fact_id":"SEA-CVE-2026-108267-F2","document_citation":"Advisory description (CVE-2026-108267)"}],"source_stated_contributors":["Privasys Go is a maintained fork of the Go programming language that adds RA-TLS support to crypto/tls. Prior to privasys-v0.5.1-go1.26.5, challenge-mode RA-TLS certificates bound quote ReportData to the certificate public key and client nonce but not to the active TLS session."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.financial_action","auth.destructive_action","auth.public_publication","data.financial_records","data.credentials_secrets"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108267","reporting_entity":"CVE-2026-108267","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108267-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108267-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-108267"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108268","title":"Enclave OS Virtual runs container workloads inside confidential virtual machines with end-to-end attestation. Prior to tdx-v0.2.43 and tdx-gpu-v0.6.27, the TDX/GPU RA-TLS certificate issuer placed the certificate public-key hash and client nonce in quote ReportData but omitted a value bound to the active TLS session. An attacker who obtained an enclave TLS private key could relay a genuine quote onto another connection, causing a relying party to accept an attacker-terminated connection as the attested enclave. This issue is fixed in tdx-v0.2.43 and tdx-gpu-v0.6.27.","display_title":"Security issue reported in Software component","display_summary":"Enclave OS Virtual runs container workloads inside confidential virtual machines with end-to-end attestation. Prior to tdx-v0.2.43 and tdx-gpu-v0.6.27, the TDX/GPU RA-TLS certificate issuer placed the certificate…","display_reference":"CVE-2026-108268","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108268","source_title":"Enclave OS Virtual runs container workloads inside confidential virtual machines with end-to-end attestation. Prior to tdx-v0.2.43 and tdx-gpu-v0.6.27, the TDX/GPU RA-TLS certificate issuer placed the certificate public-key hash and client nonce in quote ReportData but omitted a value bound to the active TLS session. An attacker who obtained an enclave TLS private key could relay a genuine quote onto another connection, causing a relying party to accept an attacker-terminated connection as the attested enclave. This issue is fixed in tdx-v0.2.43 and tdx-gpu-v0.6.27.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-17T00:24:19.387Z","source_hash":"content-fingerprint:fnv1a-a6b48174","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Cloud & container infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108268-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Enclave OS Virtual runs container workloads inside confidential virtual machines with end-to-end attestation. Prior to tdx-v0.2.43 and tdx-gpu-v0.6.27, the TDX/GPU RA-TLS certificate issuer placed the certificate public-key hash and client nonce in quote ReportData but omitted a value bound to the active TLS session. An attacker who obtained an enclave TLS private key could relay a genuine quote onto another connection, causing a relying party to accept an attacker-terminated connection as the attested enclave. This issue is fixed in tdx-v0.2.43 and tdx-gpu-v0.6.27.","source_quote_or_pointer":"Security Advisory CVE-2026-108268","fact_id":"SEA-CVE-2026-108268-F1","document_citation":"Security Advisory CVE-2026-108268"},{"id":"SEA-CVE-2026-108268-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Enclave OS Virtual runs container workloads inside confidential virtual machines with end-to-end attestation. Prior to tdx-v0.2.43 and tdx-gpu-v0.6.27, the TDX/GPU RA-TLS certificate issuer placed the certificate public-key hash and client nonce in quote ReportData but omitted a value bound to the active TLS session.","source_quote_or_pointer":"Advisory description (CVE-2026-108268)","fact_id":"SEA-CVE-2026-108268-F2","document_citation":"Advisory description (CVE-2026-108268)"}],"source_stated_contributors":["Enclave OS Virtual runs container workloads inside confidential virtual machines with end-to-end attestation. Prior to tdx-v0.2.43 and tdx-gpu-v0.6.27, the TDX/GPU RA-TLS certificate issuer placed the certificate public-key hash and client nonce in quote ReportData but omitted a value bound to the active TLS session."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.infrastructure_modification","auth.public_publication","data.credentials_secrets"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108268","reporting_entity":"CVE-2026-108268","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108268-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108268-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-108268"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108269","title":"Remote Attestation TLS Clients provides multi-language utilities for verifying attested TLS connections. Prior to 0.5.0, the Rust and Go RA-TLS challenge verifiers accepted quote ReportData that was bound to the certificate public key and client nonce but not to the active TLS session before permitting application traffic. An attacker who obtained an enclave TLS private key could relay a genuine quote onto another connection, causing the clients to accept an attacker-terminated connection as the attested enclave. This issue is fixed in 0.5.0.","display_title":"Security issue reported in Software component","display_summary":"Remote Attestation TLS Clients provides multi-language utilities for verifying attested TLS connections. Prior to 0.5.0, the Rust and Go RA-TLS challenge verifiers accepted quote ReportData that was bound to the…","display_reference":"CVE-2026-108269","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108269","source_title":"Remote Attestation TLS Clients provides multi-language utilities for verifying attested TLS connections. Prior to 0.5.0, the Rust and Go RA-TLS challenge verifiers accepted quote ReportData that was bound to the certificate public key and client nonce but not to the active TLS session before permitting application traffic. An attacker who obtained an enclave TLS private key could relay a genuine quote onto another connection, causing the clients to accept an attacker-terminated connection as the attested enclave. This issue is fixed in 0.5.0.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-17T00:24:19.387Z","source_hash":"content-fingerprint:fnv1a-9656337b","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108269-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Remote Attestation TLS Clients provides multi-language utilities for verifying attested TLS connections. Prior to 0.5.0, the Rust and Go RA-TLS challenge verifiers accepted quote ReportData that was bound to the certificate public key and client nonce but not to the active TLS session before permitting application traffic. An attacker who obtained an enclave TLS private key could relay a genuine quote onto another connection, causing the clients to accept an attacker-terminated connection as the attested enclave. This issue is fixed in 0.5.0.","source_quote_or_pointer":"Security Advisory CVE-2026-108269","fact_id":"SEA-CVE-2026-108269-F1","document_citation":"Security Advisory CVE-2026-108269"},{"id":"SEA-CVE-2026-108269-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Remote Attestation TLS Clients provides multi-language utilities for verifying attested TLS connections. Prior to 0.5.0, the Rust and Go RA-TLS challenge verifiers accepted quote ReportData that was bound to the certificate public key and client nonce but not to the active TLS session before permitting application…","source_quote_or_pointer":"Advisory description (CVE-2026-108269)","fact_id":"SEA-CVE-2026-108269-F2","document_citation":"Advisory description (CVE-2026-108269)"}],"source_stated_contributors":["Remote Attestation TLS Clients provides multi-language utilities for verifying attested TLS connections. Prior to 0.5.0, the Rust and Go RA-TLS challenge verifiers accepted quote ReportData that was bound to the certificate public key and client nonce but not to the active TLS session before permitting application…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.public_publication","data.credentials_secrets"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108269","reporting_entity":"CVE-2026-108269","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108269-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108269-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-108269"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108096","title":"Improper authorization in the query resolvers generated by @aws-amplify/graphql-index-transformer in AWS Amplify API Category before 3.1.2 might allow an authenticated remote user to read records owned by other users of the same application via crafted queries. This issue has been addressed in @aws-amplify/graphql-index-transformer 3.1.2 https://www.npmjs.com/package/@aws-amplify/graphql-index-transformer/v/3.1.2 (included in @aws-amplify/data-construct 1.17.4 https://www.npmjs.com/package/@aws-amplify/data-construct/v/1.17.4 and @aws-amplify/graphql-api-construct 1.21.4 https://www.npmjs.com/package/@aws-amplify/graphql-api-construct/v/1.21.4 ). We recommend upgrading to the latest version ensuring any forked or derivative code is patched to incorporate the new fixes and then redeploying their backend.","display_title":"Software component issue could allow unauthorized access","display_summary":"Improper authorization in the query resolvers generated by @aws-amplify/graphql-index-transformer in AWS Amplify API Category before 3.1.2 might allow an authenticated remote user to read records owned by other users of…","display_reference":"CVE-2026-108096","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108096","source_title":"Improper authorization in the query resolvers generated by @aws-amplify/graphql-index-transformer in AWS Amplify API Category before 3.1.2 might allow an authenticated remote user to read records owned by other users of the same application via crafted queries. This issue has been addressed in @aws-amplify/graphql-index-transformer 3.1.2 https://www.npmjs.com/package/@aws-amplify/graphql-index-transformer/v/3.1.2 (included in @aws-amplify/data-construct 1.17.4 https://www.npmjs.com/package/@aws-amplify/data-construct/v/1.17.4 and @aws-amplify/graphql-api-construct 1.21.4 https://www.npmjs.com/package/@aws-amplify/graphql-api-construct/v/1.21.4 ). We recommend upgrading to the latest version ensuring any forked or derivative code is patched to incorporate the new fixes and then redeploying their backend.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-16T16:33:35.958Z","source_hash":"content-fingerprint:fnv1a-31002fe3","affected_system":{"organization":"Improper authorization in the query resolvers generated by @aws-amplify/graphql-index-transformer in AWS Amplify API Category before 3.1.2 might allow an authenticated remote user to read records owned by other users of the same application via crafted queries. This issue has been addressed in @aws-amplify/graphql-index-transformer 3.1.2 https project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108096-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Improper authorization in the query resolvers generated by @aws-amplify/graphql-index-transformer in AWS Amplify API Category before 3.1.2 might allow an authenticated remote user to read records owned by other users of the same application via crafted queries. This issue has been addressed in @aws-amplify/graphql-index-transformer 3.1.2 https://www.npmjs.com/package/@aws-amplify/graphql-index-transformer/v/3.1.2 (included in @aws-amplify/data-construct 1.17.4 https://www.npmjs.com/package/@aws-amplify/data-construct/v/1.17.4 and @aws-amplify/graphql-api-construct 1.21.4 https://www.npmjs.com/package/@aws-amplify/graphql-api-construct/v/1.21.4 ). We recommend upgrading to the latest version ensuring any forked or derivative code is patched to incorporate the new fixes and then redeploying their backend.","source_quote_or_pointer":"Security Advisory CVE-2026-108096","fact_id":"SEA-CVE-2026-108096-F1","document_citation":"Security Advisory CVE-2026-108096"},{"id":"SEA-CVE-2026-108096-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Improper authorization in the query resolvers generated by @aws-amplify/graphql-index-transformer in AWS Amplify API Category before 3.1.2 might allow an authenticated remote user to read records owned by other users of the same application via crafted queries.","source_quote_or_pointer":"Advisory description (CVE-2026-108096)","fact_id":"SEA-CVE-2026-108096-F2","document_citation":"Advisory description (CVE-2026-108096)"}],"source_stated_contributors":["Improper authorization in the query resolvers generated by @aws-amplify/graphql-index-transformer in AWS Amplify API Category before 3.1.2 might allow an authenticated remote user to read records owned by other users of the same application via crafted queries."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.infrastructure_modification","data.pii"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108096","reporting_entity":"CVE-2026-108096","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108096-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108096-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108096"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-97468","title":"Apache CXF's STSTokenValidator and Security Token Service (STS) cached validated security tokens under a non-cryptographic 32-bit hash of the token (Java Arrays.hashCode/hashCode()), and treated a cache hit as proof that the presented token had already been validated. An attacker could craft a token (for example a UsernameToken or a self-signed SAML Assertion) whose hash collides with a cached entry. The token would then be accepted without password validation, signature trust verification or a call to the STS. This could let the attacker authenticate as another user and, through STS token validation or renewal, obtain STS-signed tokens for that identity. Users are recommended to upgrade to versions 4.2.4 or 4.1.9 or 3.6.13, which fix this issue.","display_title":"Security issue reported in Software component","display_summary":"Apache CXF's STSTokenValidator and Security Token Service (STS) cached validated security tokens under a non-cryptographic 32-bit hash of the token (Java Arrays.hashCode/hashCode()), and treated a cache hit as proof that…","display_reference":"CVE-2026-97468","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97468","source_title":"Apache CXF's STSTokenValidator and Security Token Service (STS) cached validated security tokens under a non-cryptographic 32-bit hash of the token (Java Arrays.hashCode/hashCode()), and treated a cache hit as proof that the presented token had already been validated. An attacker could craft a token (for example a UsernameToken or a self-signed SAML Assertion) whose hash collides with a cached entry. The token would then be accepted without password validation, signature trust verification or a call to the STS. This could let the attacker authenticate as another user and, through STS token validation or renewal, obtain STS-signed tokens for that identity. Users are recommended to upgrade to versions 4.2.4 or 4.1.9 or 3.6.13, which fix this issue.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T18:14:27.085Z","source_hash":"content-fingerprint:fnv1a-72cbd90f","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-97468-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Apache CXF's STSTokenValidator and Security Token Service (STS) cached validated security tokens under a non-cryptographic 32-bit hash of the token (Java Arrays.hashCode/hashCode()), and treated a cache hit as proof that the presented token had already been validated. An attacker could craft a token (for example a UsernameToken or a self-signed SAML Assertion) whose hash collides with a cached entry. The token would then be accepted without password validation, signature trust verification or a call to the STS. This could let the attacker authenticate as another user and, through STS token validation or renewal, obtain STS-signed tokens for that identity. Users are recommended to upgrade to versions 4.2.4 or 4.1.9 or 3.6.13, which fix this issue.","source_quote_or_pointer":"Security Advisory CVE-2026-97468","fact_id":"SEA-CVE-2026-97468-F1","document_citation":"Security Advisory CVE-2026-97468"},{"id":"SEA-CVE-2026-97468-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Apache CXF's STSTokenValidator and Security Token Service (STS) cached validated security tokens under a non-cryptographic 32-bit hash of the token (Java Arrays.hashCode/hashCode()), and treated a cache hit as proof that the presented token had already been validated.","source_quote_or_pointer":"Advisory description (CVE-2026-97468)","fact_id":"SEA-CVE-2026-97468-F2","document_citation":"Advisory description (CVE-2026-97468)"}],"source_stated_contributors":["Apache CXF's STSTokenValidator and Security Token Service (STS) cached validated security tokens under a non-cryptographic 32-bit hash of the token (Java Arrays.hashCode/hashCode()), and treated a cache hit as proof that the presented token had already been validated."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","data.credentials_secrets","arch.caching"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-97468","reporting_entity":"CVE-2026-97468","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-97468-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-97468-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-97468"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-73179","title":"Improper enforcement of single-use authorization code semantics in the JPA OAuth2 authorization code grant provider in Apache CXFallows a remote attacker to obtain multiple valid access tokens from a single authorization code via concurrent token exchange requests that race the non-atomic find-then-delete operation against a shared relational database under READ_COMMITTED isolation. Users are recommended to upgrade to versions 4.2.4 or 4.1.9 or 3.6.13, which fixes this issue.","display_title":"Software component issue could expose accounts or credentials","display_summary":"Improper enforcement of single-use authorization code semantics in the JPA OAuth2 authorization code grant provider in Apache CXFallows a remote attacker to obtain multiple valid access tokens from a single authorization…","display_reference":"CVE-2026-73179","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-73179","source_title":"Improper enforcement of single-use authorization code semantics in the JPA OAuth2 authorization code grant provider in Apache CXFallows a remote attacker to obtain multiple valid access tokens from a single authorization code via concurrent token exchange requests that race the non-atomic find-then-delete operation against a shared relational database under READ_COMMITTED isolation. Users are recommended to upgrade to versions 4.2.4 or 4.1.9 or 3.6.13, which fixes this issue.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T18:14:27.097Z","source_hash":"content-fingerprint:fnv1a-858ba9a6","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-73179-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Improper enforcement of single-use authorization code semantics in the JPA OAuth2 authorization code grant provider in Apache CXFallows a remote attacker to obtain multiple valid access tokens from a single authorization code via concurrent token exchange requests that race the non-atomic find-then-delete operation against a shared relational database under READ_COMMITTED isolation. Users are recommended to upgrade to versions 4.2.4 or 4.1.9 or 3.6.13, which fixes this issue.","source_quote_or_pointer":"Security Advisory CVE-2026-73179","fact_id":"SEA-CVE-2026-73179-F1","document_citation":"Security Advisory CVE-2026-73179"},{"id":"SEA-CVE-2026-73179-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Improper enforcement of single-use authorization code semantics in the JPA OAuth2 authorization code grant provider in Apache CXFallows a remote attacker to obtain multiple valid access tokens from a single authorization code via concurrent token exchange requests that race the non-atomic find-then-delete operation…","source_quote_or_pointer":"Advisory description (CVE-2026-73179)","fact_id":"SEA-CVE-2026-73179-F2","document_citation":"Advisory description (CVE-2026-73179)"}],"source_stated_contributors":["Improper enforcement of single-use authorization code semantics in the JPA OAuth2 authorization code grant provider in Apache CXFallows a remote attacker to obtain multiple valid access tokens from a single authorization code via concurrent token exchange requests that race the non-atomic find-then-delete operation…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.write_action","data.pii"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-73179","reporting_entity":"CVE-2026-73179","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-73179-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-73179-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-73179"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-107910","title":"An improper authentication vulnerability in the is_authenticated function (src/bolt/bolt_api.c) in FalkorDB before 4.20.0 allows a remote unauthenticated attacker to execute graph queries without credentials through the Bolt endpoint. The function decides whether a password is required by issuing an empty AUTH command to Redis and treats only a WRONGPASS error as meaning that a password is required; any other error, such as LOADING while a dataset is being loaded, MASTERDOWN during replication failover, or OOM under memory pressure, causes the client to be treated as authenticated. Only deployments that enable the Bolt endpoint (BOLT_PORT, disabled by default) are affected.","display_title":"Software component issue could expose accounts or credentials","display_summary":"An improper authentication vulnerability in the isauthenticated function (src/bolt/boltapi.c) in FalkorDB before 4.20.0 allows a remote unauthenticated attacker to execute graph queries without credentials through the…","display_reference":"CVE-2026-107910","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107910","source_title":"An improper authentication vulnerability in the is_authenticated function (src/bolt/bolt_api.c) in FalkorDB before 4.20.0 allows a remote unauthenticated attacker to execute graph queries without credentials through the Bolt endpoint. The function decides whether a password is required by issuing an empty AUTH command to Redis and treats only a WRONGPASS error as meaning that a password is required; any other error, such as LOADING while a dataset is being loaded, MASTERDOWN during replication failover, or OOM under memory pressure, causes the client to be treated as authenticated. Only deployments that enable the Bolt endpoint (BOLT_PORT, disabled by default) are affected.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T18:14:27.107Z","source_hash":"content-fingerprint:fnv1a-bce59a89","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-107910-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"An improper authentication vulnerability in the is_authenticated function (src/bolt/bolt_api.c) in FalkorDB before 4.20.0 allows a remote unauthenticated attacker to execute graph queries without credentials through the Bolt endpoint. The function decides whether a password is required by issuing an empty AUTH command to Redis and treats only a WRONGPASS error as meaning that a password is required; any other error, such as LOADING while a dataset is being loaded, MASTERDOWN during replication failover, or OOM under memory pressure, causes the client to be treated as authenticated. Only deployments that enable the Bolt endpoint (BOLT_PORT, disabled by default) are affected.","source_quote_or_pointer":"Security Advisory CVE-2026-107910","fact_id":"SEA-CVE-2026-107910-F1","document_citation":"Security Advisory CVE-2026-107910"},{"id":"SEA-CVE-2026-107910-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"An improper authentication vulnerability in the isauthenticated function (src/bolt/boltapi.c) in FalkorDB before 4.20.0 allows a remote unauthenticated attacker to execute graph queries without credentials through the Bolt endpoint.","source_quote_or_pointer":"Advisory description (CVE-2026-107910)","fact_id":"SEA-CVE-2026-107910-F2","document_citation":"Advisory description (CVE-2026-107910)"}],"source_stated_contributors":["An improper authentication vulnerability in the isauthenticated function (src/bolt/boltapi.c) in FalkorDB before 4.20.0 allows a remote unauthenticated attacker to execute graph queries without credentials through the Bolt endpoint."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.credentials_secrets","arch.caching"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-107910","reporting_entity":"CVE-2026-107910","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-107910-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-107910-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-107910"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-107818","title":"MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the mariadb.service unit used /run/mysqld/wsrep-new-cluster during the next service restart. A database user with FILE privilege and a secure-file-priv configuration permitting writes to /run/mysqld could create that file and inject attacker-controlled environment values into the restarted service. This issue is fixed in versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.","display_title":"Security issue reported in Software component","display_summary":"MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the mariadb.service unit used /run/mysqld/wsrep-new-cluster during the next service…","display_reference":"CVE-2026-107818","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107818","source_title":"MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the mariadb.service unit used /run/mysqld/wsrep-new-cluster during the next service restart. A database user with FILE privilege and a secure-file-priv configuration permitting writes to /run/mysqld could create that file and inject attacker-controlled environment values into the restarted service. This issue is fixed in versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T17:34:01.273Z","source_hash":"content-fingerprint:fnv1a-9b04b14c","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-107818-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the mariadb.service unit used /run/mysqld/wsrep-new-cluster during the next service restart. A database user with FILE privilege and a secure-file-priv configuration permitting writes to /run/mysqld could create that file and inject attacker-controlled environment values into the restarted service. This issue is fixed in versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.","source_quote_or_pointer":"Security Advisory CVE-2026-107818","fact_id":"SEA-CVE-2026-107818-F1","document_citation":"Security Advisory CVE-2026-107818"},{"id":"SEA-CVE-2026-107818-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the mariadb.service unit used /run/mysqld/wsrep-new-cluster during the next service restart.","source_quote_or_pointer":"Advisory description (CVE-2026-107818)","fact_id":"SEA-CVE-2026-107818-F2","document_citation":"Advisory description (CVE-2026-107818)"}],"source_stated_contributors":["MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the mariadb.service unit used /run/mysqld/wsrep-new-cluster during the next service restart."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-107818","reporting_entity":"CVE-2026-107818","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-107818-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-107818-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-107818"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-107822","title":"MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB's ACL cache could generate the same database-privilege cache key for role and localhost user names that matched because both used an empty IP component. An attacker with CREATE USER could create the colliding principal and, when the original principal's database privileges were cached, exercise privileges assigned to the other account. This issue is fixed in versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.","display_title":"Security issue reported in Software component","display_summary":"MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB's ACL cache could generate the same database-privilege cache key for role…","display_reference":"CVE-2026-107822","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107822","source_title":"MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB's ACL cache could generate the same database-privilege cache key for role and localhost user names that matched because both used an empty IP component. An attacker with CREATE USER could create the colliding principal and, when the original principal's database privileges were cached, exercise privileges assigned to the other account. This issue is fixed in versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T17:34:01.274Z","source_hash":"content-fingerprint:fnv1a-b023fb93","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-107822-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB's ACL cache could generate the same database-privilege cache key for role and localhost user names that matched because both used an empty IP component. An attacker with CREATE USER could create the colliding principal and, when the original principal's database privileges were cached, exercise privileges assigned to the other account. This issue is fixed in versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.","source_quote_or_pointer":"Security Advisory CVE-2026-107822","fact_id":"SEA-CVE-2026-107822-F1","document_citation":"Security Advisory CVE-2026-107822"},{"id":"SEA-CVE-2026-107822-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB's ACL cache could generate the same database-privilege cache key for role and localhost user names that matched because both used an empty IP component.","source_quote_or_pointer":"Advisory description (CVE-2026-107822)","fact_id":"SEA-CVE-2026-107822-F2","document_citation":"Advisory description (CVE-2026-107822)"}],"source_stated_contributors":["MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB's ACL cache could generate the same database-privilege cache key for role and localhost user names that matched because both used an empty IP component."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.pii","arch.caching"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-107822","reporting_entity":"CVE-2026-107822","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-107822-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-107822-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-107822"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-107823","title":"MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the MariaDB view FRM parser did not safely encode embedded newline characters in a username. An account with CREATE USER and CREATE VIEW WITH GRANT OPTION could create a crafted username containing additional view metadata, causing the parser to interpret part of the username as security metadata and potentially escalating database privileges. This issue is fixed in versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.","display_title":"Security issue reported in Software component","display_summary":"MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the MariaDB view FRM parser did not safely encode embedded newline characters in a…","display_reference":"CVE-2026-107823","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107823","source_title":"MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the MariaDB view FRM parser did not safely encode embedded newline characters in a username. An account with CREATE USER and CREATE VIEW WITH GRANT OPTION could create a crafted username containing additional view metadata, causing the parser to interpret part of the username as security metadata and potentially escalating database privileges. This issue is fixed in versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T17:34:01.274Z","source_hash":"content-fingerprint:fnv1a-cf30b770","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-107823-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the MariaDB view FRM parser did not safely encode embedded newline characters in a username. An account with CREATE USER and CREATE VIEW WITH GRANT OPTION could create a crafted username containing additional view metadata, causing the parser to interpret part of the username as security metadata and potentially escalating database privileges. This issue is fixed in versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.","source_quote_or_pointer":"Security Advisory CVE-2026-107823","fact_id":"SEA-CVE-2026-107823-F1","document_citation":"Security Advisory CVE-2026-107823"},{"id":"SEA-CVE-2026-107823-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the MariaDB view FRM parser did not safely encode embedded newline characters in a username.","source_quote_or_pointer":"Advisory description (CVE-2026-107823)","fact_id":"SEA-CVE-2026-107823-F2","document_citation":"Advisory description (CVE-2026-107823)"}],"source_stated_contributors":["MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the MariaDB view FRM parser did not safely encode embedded newline characters in a username."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-107823","reporting_entity":"CVE-2026-107823","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-107823-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-107823-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-107823"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108158","title":"plugNmeet Server through 2.5.2 contains a path traversal vulnerability in the whiteboard conversion endpoint that allows any meeting participant to read server files via crafted filePath values. Attackers can supply ../ sequences so text or office documents are converted into page images, then fetch them unauthenticated through /download/uploadedFile/.","display_title":"Software component issue could expose restricted files","display_summary":"plugNmeet Server through 2.5.2 contains a path traversal vulnerability in the whiteboard conversion endpoint that allows any meeting participant to read server files via crafted filePath values.","display_reference":"CVE-2026-108158","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108158","source_title":"plugNmeet Server through 2.5.2 contains a path traversal vulnerability in the whiteboard conversion endpoint that allows any meeting participant to read server files via crafted filePath values. Attackers can supply ../ sequences so text or office documents are converted into page images, then fetch them unauthenticated through /download/uploadedFile/.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T09:20:33.894Z","source_hash":"content-fingerprint:fnv1a-b0e909b6","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108158-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"plugNmeet Server through 2.5.2 contains a path traversal vulnerability in the whiteboard conversion endpoint that allows any meeting participant to read server files via crafted filePath values. Attackers can supply ../ sequences so text or office documents are converted into page images, then fetch them unauthenticated through /download/uploadedFile/.","source_quote_or_pointer":"Security Advisory CVE-2026-108158","fact_id":"SEA-CVE-2026-108158-F1","document_citation":"Security Advisory CVE-2026-108158"},{"id":"SEA-CVE-2026-108158-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"plugNmeet Server through 2.5.2 contains a path traversal vulnerability in the whiteboard conversion endpoint that allows any meeting participant to read server files via crafted filePath values.","source_quote_or_pointer":"Advisory description (CVE-2026-108158)","fact_id":"SEA-CVE-2026-108158-F2","document_citation":"Advisory description (CVE-2026-108158)"}],"source_stated_contributors":["plugNmeet Server through 2.5.2 contains a path traversal vulnerability in the whiteboard conversion endpoint that allows any meeting participant to read server files via crafted filePath values."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.uploaded_files"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Restricted file exposure","File overwrite"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108158","reporting_entity":"CVE-2026-108158","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108158-SG1","label":"Confine file access to a fixed root","description":"Resolve paths to canonical form and reject anything outside the intended directory before opening files.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108158-SG1","label":"Confine file access to a fixed root","description":"Resolve paths to canonical form and reject anything outside the intended directory before opening files.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"File paths supplied by a caller escaped the intended directory. Canonicalise paths and confine file access to a fixed root.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108158"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108111","title":"ruoyi-ai 3.0.0 through 3.1.0 contains a missing authorization vulnerability in the GET /workflow/search endpoint that exposes other users' private workflows. Authenticated non-admin users can query this endpoint, which lacks owner or is_public filtering, to list enabled private workflows in the same tenant, including UUIDs and full node and edge configurations.","display_title":"Security issue reported in Software component","display_summary":"ruoyi-ai 3.0.0 through 3.1.0 contains a missing authorization vulnerability in the GET /workflow/search endpoint that exposes other users' private workflows.","display_reference":"CVE-2026-108111","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108111","source_title":"ruoyi-ai 3.0.0 through 3.1.0 contains a missing authorization vulnerability in the GET /workflow/search endpoint that exposes other users' private workflows. Authenticated non-admin users can query this endpoint, which lacks owner or is_public filtering, to list enabled private workflows in the same tenant, including UUIDs and full node and edge configurations.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T09:20:33.894Z","source_hash":"content-fingerprint:fnv1a-888013ab","affected_system":{"organization":"Software component project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108111-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"ruoyi-ai 3.0.0 through 3.1.0 contains a missing authorization vulnerability in the GET /workflow/search endpoint that exposes other users' private workflows. Authenticated non-admin users can query this endpoint, which lacks owner or is_public filtering, to list enabled private workflows in the same tenant, including UUIDs and full node and edge configurations.","source_quote_or_pointer":"Security Advisory CVE-2026-108111","fact_id":"SEA-CVE-2026-108111-F1","document_citation":"Security Advisory CVE-2026-108111"},{"id":"SEA-CVE-2026-108111-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"ruoyi-ai 3.0.0 through 3.1.0 contains a missing authorization vulnerability in the GET /workflow/search endpoint that exposes other users' private workflows. Authenticated non-admin users can query this endpoint, which lacks owner or ispublic filtering, to list enabled private workflows in the same tenant, including…","source_quote_or_pointer":"Advisory description (CVE-2026-108111)","fact_id":"SEA-CVE-2026-108111-F2","document_citation":"Advisory description (CVE-2026-108111)"}],"source_stated_contributors":["ruoyi-ai 3.0.0 through 3.1.0 contains a missing authorization vulnerability in the GET /workflow/search endpoint that exposes other users' private workflows. Authenticated non-admin users can query this endpoint, which lacks owner or ispublic filtering, to list enabled private workflows in the same tenant, including…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108111","reporting_entity":"CVE-2026-108111","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108111-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108111-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108111"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108110","title":"MOVO through 0.2.3 contains an authorization bypass vulnerability in the chat-api document endpoints that allows authenticated users to access other users' stored objects by supplying arbitrary object paths. Attackers who know a target's object path can send it to /api/documents/fetch or /api/documents/save-blueprint to read private documents and overwrite presentation blueprints.","display_title":"Software component issue could allow unauthorized access","display_summary":"MOVO through 0.2.3 contains an authorization bypass vulnerability in the chat-api document endpoints that allows authenticated users to access other users' stored objects by supplying arbitrary object paths.","display_reference":"CVE-2026-108110","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108110","source_title":"MOVO through 0.2.3 contains an authorization bypass vulnerability in the chat-api document endpoints that allows authenticated users to access other users' stored objects by supplying arbitrary object paths. Attackers who know a target's object path can send it to /api/documents/fetch or /api/documents/save-blueprint to read private documents and overwrite presentation blueprints.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T09:20:33.906Z","source_hash":"content-fingerprint:fnv1a-c0864148","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108110-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"MOVO through 0.2.3 contains an authorization bypass vulnerability in the chat-api document endpoints that allows authenticated users to access other users' stored objects by supplying arbitrary object paths. Attackers who know a target's object path can send it to /api/documents/fetch or /api/documents/save-blueprint to read private documents and overwrite presentation blueprints.","source_quote_or_pointer":"Security Advisory CVE-2026-108110","fact_id":"SEA-CVE-2026-108110-F1","document_citation":"Security Advisory CVE-2026-108110"},{"id":"SEA-CVE-2026-108110-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"MOVO through 0.2.3 contains an authorization bypass vulnerability in the chat-api document endpoints that allows authenticated users to access other users' stored objects by supplying arbitrary object paths.","source_quote_or_pointer":"Advisory description (CVE-2026-108110)","fact_id":"SEA-CVE-2026-108110-F2","document_citation":"Advisory description (CVE-2026-108110)"}],"source_stated_contributors":["MOVO through 0.2.3 contains an authorization bypass vulnerability in the chat-api document endpoints that allows authenticated users to access other users' stored objects by supplying arbitrary object paths."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.pii","data.uploaded_files"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108110","reporting_entity":"CVE-2026-108110","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108110-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108110-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108110"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-105278","title":"The published Docker image for openPDC includes a fixed administrative credential with no forced change on first use. An attacker with network access to the management interface can authenticate using this credential and gain full administrative control of the application.","display_title":"Software component issue could expose accounts or credentials","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-105278","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105278","source_title":"The published Docker image for openPDC includes a fixed administrative credential with no forced change on first use. An attacker with network access to the management interface can authenticate using this credential and gain full administrative control of the application.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:07.025Z","source_hash":"content-fingerprint:fnv1a-82bb2142","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Cloud & container infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-105278-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The published Docker image for openPDC includes a fixed administrative credential with no forced change on first use. An attacker with network access to the management interface can authenticate using this credential and gain full administrative control of the application.","source_quote_or_pointer":"Security Advisory CVE-2026-105278","fact_id":"SEA-CVE-2026-105278-F1","document_citation":"Security Advisory CVE-2026-105278"},{"id":"SEA-CVE-2026-105278-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The published Docker image for openPDC includes a fixed administrative credential with no forced change on first use. An attacker with network access to the management interface can authenticate using this credential and gain full administrative control of the application.","source_quote_or_pointer":"Advisory description (CVE-2026-105278)","fact_id":"SEA-CVE-2026-105278-F2","document_citation":"Advisory description (CVE-2026-105278)"}],"source_stated_contributors":["The published Docker image for openPDC includes a fixed administrative credential with no forced change on first use. An attacker with network access to the management interface can authenticate using this credential and gain full administrative control of the application."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.code_execution"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-105278","reporting_entity":"CVE-2026-105278","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-105278-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-105278-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-105278"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-100730","title":"A service console interface on openPDC and openHistorian deserializes a client-supplied data structure. On systems using Windows Authentication, an attacker must already be authenticated to reach this function; on systems without Windows Authentication, this is reachable by an unauthenticated network attacker. This allows an attacker to trigger deserialization of an arbitrary object graph, which could allow remote code execution under the privileges of the affected service account.","display_title":"Software component issue could allow unintended commands to run","display_summary":"A service console interface on openPDC and openHistorian deserializes a client-supplied data structure. On systems using Windows Authentication, an attacker must already be authenticated to reach this function;","display_reference":"CVE-2026-100730","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100730","source_title":"A service console interface on openPDC and openHistorian deserializes a client-supplied data structure. On systems using Windows Authentication, an attacker must already be authenticated to reach this function; on systems without Windows Authentication, this is reachable by an unauthenticated network attacker. This allows an attacker to trigger deserialization of an arbitrary object graph, which could allow remote code execution under the privileges of the affected service account.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:07.044Z","source_hash":"content-fingerprint:fnv1a-aba8a1c4","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-100730-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A service console interface on openPDC and openHistorian deserializes a client-supplied data structure. On systems using Windows Authentication, an attacker must already be authenticated to reach this function; on systems without Windows Authentication, this is reachable by an unauthenticated network attacker. This allows an attacker to trigger deserialization of an arbitrary object graph, which could allow remote code execution under the privileges of the affected service account.","source_quote_or_pointer":"Security Advisory CVE-2026-100730","fact_id":"SEA-CVE-2026-100730-F1","document_citation":"Security Advisory CVE-2026-100730"},{"id":"SEA-CVE-2026-100730-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A service console interface on openPDC and openHistorian deserializes a client-supplied data structure. On systems using Windows Authentication, an attacker must already be authenticated to reach this function; on systems without Windows Authentication, this is reachable by an unauthenticated network attacker.","source_quote_or_pointer":"Advisory description (CVE-2026-100730)","fact_id":"SEA-CVE-2026-100730-F2","document_citation":"Advisory description (CVE-2026-100730)"}],"source_stated_contributors":["A service console interface on openPDC and openHistorian deserializes a client-supplied data structure. On systems using Windows Authentication, an attacker must already be authenticated to reach this function; on systems without Windows Authentication, this is reachable by an unauthenticated network attacker."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.credentials_secrets"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-100730","reporting_entity":"CVE-2026-100730","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-100730-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-100730-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-100730"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2025-14123","title":"The Redux Framework plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 4.5.11. This is due to the plugin saving arbitrary meta keys under a registered option name without sufficient capability checks or key allowlist / restrictions. This makes it possible for authenticated attackers, with Subscriber-level access and above, to set an arbitrary role (e.g., Administrator) when performing a profile update if a plugin or theme using this framework has added at least one user profile field that leverages Redux_Users::set_profile/set_section/set_field.","display_title":"Software component issue could grant elevated privileges","display_summary":"The Redux Framework plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 4.5.11.","display_reference":"CVE-2025-14123","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2025-14123","source_title":"The Redux Framework plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 4.5.11. This is due to the plugin saving arbitrary meta keys under a registered option name without sufficient capability checks or key allowlist / restrictions. This makes it possible for authenticated attackers, with Subscriber-level access and above, to set an arbitrary role (e.g., Administrator) when performing a profile update if a plugin or theme using this framework has added at least one user profile field that leverages Redux_Users::set_profile/set_section/set_field.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:07.045Z","source_hash":"content-fingerprint:fnv1a-994b0297","affected_system":{"organization":"The Redux Framework plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 4.5.11. This is due to the plugin saving arbitrary meta keys under a registered option name without sufficient capability checks or key allowlist / restrictions. This makes it possible for authenticated attackers, with Subscriber-level access and above, to set an arbitrary role (e.g., Administrator) when performing a profile update if a plugin or theme using this framework has added at least one user profile field that leverages ReduxUsers project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2025-14123-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Redux Framework plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 4.5.11. This is due to the plugin saving arbitrary meta keys under a registered option name without sufficient capability checks or key allowlist / restrictions. This makes it possible for authenticated attackers, with Subscriber-level access and above, to set an arbitrary role (e.g., Administrator) when performing a profile update if a plugin or theme using this framework has added at least one user profile field that leverages Redux_Users::set_profile/set_section/set_field.","source_quote_or_pointer":"Security Advisory CVE-2025-14123","fact_id":"SEA-CVE-2025-14123-F1","document_citation":"Security Advisory CVE-2025-14123"},{"id":"SEA-CVE-2025-14123-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Redux Framework plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 4.5.11. This is due to the plugin saving arbitrary meta keys under a registered option name without sufficient capability checks or key allowlist / restrictions.","source_quote_or_pointer":"Advisory description (CVE-2025-14123)","fact_id":"SEA-CVE-2025-14123-F2","document_citation":"Advisory description (CVE-2025-14123)"}],"source_stated_contributors":["The Redux Framework plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 4.5.11. This is due to the plugin saving arbitrary meta keys under a registered option name without sufficient capability checks or key allowlist / restrictions."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.write_action","data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Elevated privileges","Boundary bypass"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2025-14123","reporting_entity":"CVE-2025-14123","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2025-14123-SG1","label":"Enforce privilege boundaries in code","description":"Require explicit, server-verified authorization for privileged operations and isolate components with separate identities.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2025-14123-SG1","label":"Enforce privilege boundaries in code","description":"Require explicit, server-verified authorization for privileged operations and isolate components with separate identities.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A low-privilege actor reached a high-privilege capability. Enforce approval and privilege boundaries in deterministic code, not by convention.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2025-14123"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-78020","title":"Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Denial of service, Information disclosure, and Remote execution.","display_title":"Software component issue could make the service unavailable","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-78020","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-78020","source_title":"Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Denial of service, Information disclosure, and Remote execution.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-10T20:00:54.468Z","source_hash":"content-fingerprint:fnv1a-75a14df2","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-78020-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Denial of service, Information disclosure, and Remote execution.","source_quote_or_pointer":"Security Advisory CVE-2026-78020","fact_id":"SEA-CVE-2026-78020-F1","document_citation":"Security Advisory CVE-2026-78020"},{"id":"SEA-CVE-2026-78020-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Denial of service, Information disclosure, and Remote execution.","source_quote_or_pointer":"Advisory description (CVE-2026-78020)","fact_id":"SEA-CVE-2026-78020-F2","document_citation":"Advisory description (CVE-2026-78020)"}],"source_stated_contributors":["Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Denial of service, Information disclosure, and Remote execution."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-78020","reporting_entity":"CVE-2026-78020","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-78020-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-78020-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-78020"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-78024","title":"Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Server-Side Request Forgery (SSRF) vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure, Protection mechanism bypass, Server-side request forgery, and Unauthorized access.","display_title":"Software component issue could allow unauthorized access","display_summary":"Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Server-Side Request Forgery (SSRF) vulnerability.","display_reference":"CVE-2026-78024","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-78024","source_title":"Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Server-Side Request Forgery (SSRF) vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure, Protection mechanism bypass, Server-side request forgery, and Unauthorized access.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-10T10:00:11.147Z","source_hash":"content-fingerprint:fnv1a-3ca208a","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-78024-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Server-Side Request Forgery (SSRF) vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure, Protection mechanism bypass, Server-side request forgery, and Unauthorized access.","source_quote_or_pointer":"Security Advisory CVE-2026-78024","fact_id":"SEA-CVE-2026-78024-F1","document_citation":"Security Advisory CVE-2026-78024"},{"id":"SEA-CVE-2026-78024-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Server-Side Request Forgery (SSRF) vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure, Protection mechanism bypass, Server-side request…","source_quote_or_pointer":"Advisory description (CVE-2026-78024)","fact_id":"SEA-CVE-2026-78024-F2","document_citation":"Advisory description (CVE-2026-78024)"}],"source_stated_contributors":["Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Server-Side Request Forgery (SSRF) vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure, Protection mechanism bypass, Server-side request…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-78024","reporting_entity":"CVE-2026-78024","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-78024-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-78024-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-78024"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-102916","title":"A reachable assertion in the illumos bhyve instruction emulator allows a guest to panic the host. When emulating a REP-prefixed MOVS or STOS instruction that accesses guest MMIO, vie_emulate_movs() and vie_emulate_stos() in usr/src/uts/intel/io/vmm/vmm_instruction_emul.c do not clear the VIES_REPEAT status flag on the final iteration. For MMIO regions emulated in the kernel (the local APIC, I/O APIC and HPET), the stale flag causes a VERIFY assertion in vie_advance_pc() to fail, and the host panics. A privileged user within a guest VM can issue a REP MOVS or REP STOS instruction against the local APIC page to cause a denial of service of the host and every other guest running on it. The flaw has existed since 2020 (illumos-gate commit e0c0d44e), and affects any illumos distribution prior to illumos-gate commit 696ecf8d.","display_title":"Software component issue could make the service unavailable","display_summary":"A reachable assertion in the illumos bhyve instruction emulator allows a guest to panic the host. When emulating a REP-prefixed MOVS or STOS instruction that accesses guest MMIO, vieemulatemovs() and vieemulatestos() in…","display_reference":"CVE-2026-102916","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-102916","source_title":"A reachable assertion in the illumos bhyve instruction emulator allows a guest to panic the host. When emulating a REP-prefixed MOVS or STOS instruction that accesses guest MMIO, vie_emulate_movs() and vie_emulate_stos() in usr/src/uts/intel/io/vmm/vmm_instruction_emul.c do not clear the VIES_REPEAT status flag on the final iteration. For MMIO regions emulated in the kernel (the local APIC, I/O APIC and HPET), the stale flag causes a VERIFY assertion in vie_advance_pc() to fail, and the host panics. A privileged user within a guest VM can issue a REP MOVS or REP STOS instruction against the local APIC page to cause a denial of service of the host and every other guest running on it. The flaw has existed since 2020 (illumos-gate commit e0c0d44e), and affects any illumos distribution prior to illumos-gate commit 696ecf8d.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-10T10:00:11.147Z","source_hash":"content-fingerprint:fnv1a-950d0e8","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-102916-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A reachable assertion in the illumos bhyve instruction emulator allows a guest to panic the host. When emulating a REP-prefixed MOVS or STOS instruction that accesses guest MMIO, vie_emulate_movs() and vie_emulate_stos() in usr/src/uts/intel/io/vmm/vmm_instruction_emul.c do not clear the VIES_REPEAT status flag on the final iteration. For MMIO regions emulated in the kernel (the local APIC, I/O APIC and HPET), the stale flag causes a VERIFY assertion in vie_advance_pc() to fail, and the host panics. A privileged user within a guest VM can issue a REP MOVS or REP STOS instruction against the local APIC page to cause a denial of service of the host and every other guest running on it. The flaw has existed since 2020 (illumos-gate commit e0c0d44e), and affects any illumos distribution prior to illumos-gate commit 696ecf8d.","source_quote_or_pointer":"Security Advisory CVE-2026-102916","fact_id":"SEA-CVE-2026-102916-F1","document_citation":"Security Advisory CVE-2026-102916"},{"id":"SEA-CVE-2026-102916-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A reachable assertion in the illumos bhyve instruction emulator allows a guest to panic the host. When emulating a REP-prefixed MOVS or STOS instruction that accesses guest MMIO, vieemulatemovs() and vieemulatestos() in usr/src/uts/intel/io/vmm/vmminstructionemul.c do not clear the VIESREPEAT status flag on the final…","source_quote_or_pointer":"Advisory description (CVE-2026-102916)","fact_id":"SEA-CVE-2026-102916-F2","document_citation":"Advisory description (CVE-2026-102916)"}],"source_stated_contributors":["A reachable assertion in the illumos bhyve instruction emulator allows a guest to panic the host. When emulating a REP-prefixed MOVS or STOS instruction that accesses guest MMIO, vieemulatemovs() and vieemulatestos() in usr/src/uts/intel/io/vmm/vmminstructionemul.c do not clear the VIESREPEAT status flag on the final…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-102916","reporting_entity":"CVE-2026-102916","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-102916-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-102916-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-102916"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-96327","title":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VibeThemes WPLMS wplms_plugin allows Blind SQL Injection.This issue affects WPLMS: from n/a before 1.9.9.8.2.","display_title":"Software component issue could expose or alter stored data","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-96327","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-96327","source_title":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VibeThemes WPLMS wplms_plugin allows Blind SQL Injection.This issue affects WPLMS: from n/a before 1.9.9.8.2.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-10T10:00:11.147Z","source_hash":"content-fingerprint:fnv1a-34a4f354","affected_system":{"organization":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VibeThemes WPLMS wplmsplugin allows Blind SQL Injection.This issue affects WPLMS project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-96327-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VibeThemes WPLMS wplms_plugin allows Blind SQL Injection.This issue affects WPLMS: from n/a before 1.9.9.8.2.","source_quote_or_pointer":"Security Advisory CVE-2026-96327","fact_id":"SEA-CVE-2026-96327-F1","document_citation":"Security Advisory CVE-2026-96327"},{"id":"SEA-CVE-2026-96327-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VibeThemes WPLMS wplmsplugin allows Blind SQL Injection.This issue affects WPLMS: from n/a before 1.9.9.8.2.","source_quote_or_pointer":"Advisory description (CVE-2026-96327)","fact_id":"SEA-CVE-2026-96327-F2","document_citation":"Advisory description (CVE-2026-96327)"}],"source_stated_contributors":["Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VibeThemes WPLMS wplmsplugin allows Blind SQL Injection.This issue affects WPLMS: from n/a before 1.9.9.8.2."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-96327","reporting_entity":"CVE-2026-96327","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-96327-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-96327-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-96327"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-95599","title":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Taskbuilder Taskbuilder taskbuilder allows Blind SQL Injection.This issue affects Taskbuilder: from n/a through 6.0.5.","display_title":"Software component issue could expose or alter stored data","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-95599","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95599","source_title":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Taskbuilder Taskbuilder taskbuilder allows Blind SQL Injection.This issue affects Taskbuilder: from n/a through 6.0.5.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-10T10:00:11.147Z","source_hash":"content-fingerprint:fnv1a-b5c39af8","affected_system":{"organization":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Taskbuilder Taskbuilder taskbuilder allows Blind SQL Injection.This issue affects Taskbuilder project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-95599-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Taskbuilder Taskbuilder taskbuilder allows Blind SQL Injection.This issue affects Taskbuilder: from n/a through 6.0.5.","source_quote_or_pointer":"Security Advisory CVE-2026-95599","fact_id":"SEA-CVE-2026-95599-F1","document_citation":"Security Advisory CVE-2026-95599"},{"id":"SEA-CVE-2026-95599-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Taskbuilder Taskbuilder taskbuilder allows Blind SQL Injection.This issue affects Taskbuilder: from n/a through 6.0.5.","source_quote_or_pointer":"Advisory description (CVE-2026-95599)","fact_id":"SEA-CVE-2026-95599-F2","document_citation":"Advisory description (CVE-2026-95599)"}],"source_stated_contributors":["Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Taskbuilder Taskbuilder taskbuilder allows Blind SQL Injection.This issue affects Taskbuilder: from n/a through 6.0.5."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-95599","reporting_entity":"CVE-2026-95599","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-95599-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-95599-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-95599"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-95589","title":"Missing Authorization vulnerability in Magepeople inc. Deposits and Partial Payments for WooCommerce advanced-partial-payment-or-deposit-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Deposits and Partial Payments for WooCommerce: from n/a through 4.0.1.","display_title":"Software component issue could allow unauthorized access","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-95589","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95589","source_title":"Missing Authorization vulnerability in Magepeople inc. Deposits and Partial Payments for WooCommerce advanced-partial-payment-or-deposit-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Deposits and Partial Payments for WooCommerce: from n/a through 4.0.1.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-10T10:00:11.147Z","source_hash":"content-fingerprint:fnv1a-31ef4953","affected_system":{"organization":"Missing Authorization vulnerability in Magepeople inc. Deposits and Partial Payments for WooCommerce advanced-partial-payment-or-deposit-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Deposits and Partial Payments for WooCommerce project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-95589-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Missing Authorization vulnerability in Magepeople inc. Deposits and Partial Payments for WooCommerce advanced-partial-payment-or-deposit-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Deposits and Partial Payments for WooCommerce: from n/a through 4.0.1.","source_quote_or_pointer":"Security Advisory CVE-2026-95589","fact_id":"SEA-CVE-2026-95589-F1","document_citation":"Security Advisory CVE-2026-95589"},{"id":"SEA-CVE-2026-95589-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Missing Authorization vulnerability in Magepeople inc. Deposits and Partial Payments for WooCommerce advanced-partial-payment-or-deposit-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Deposits and Partial Payments for WooCommerce: from n/a through 4.0.1.","source_quote_or_pointer":"Advisory description (CVE-2026-95589)","fact_id":"SEA-CVE-2026-95589-F2","document_citation":"Advisory description (CVE-2026-95589)"}],"source_stated_contributors":["Missing Authorization vulnerability in Magepeople inc. Deposits and Partial Payments for WooCommerce advanced-partial-payment-or-deposit-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Deposits and Partial Payments for WooCommerce: from n/a through 4.0.1."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.financial_action","auth.privileged_action"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-95589","reporting_entity":"CVE-2026-95589","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-95589-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-95589-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-95589"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-75351","title":"OpENer v2.3/commit 76b95cf, contains an out-of-bounds read in the server-side EtherNet/IP ForwardOpen connection-path parser. This allows a remote attacker to cause a denial of service.","display_title":"Software component issue could make the service unavailable","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-75351","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-75351","source_title":"OpENer v2.3/commit 76b95cf, contains an out-of-bounds read in the server-side EtherNet/IP ForwardOpen connection-path parser. This allows a remote attacker to cause a denial of service.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-10T10:00:11.147Z","source_hash":"content-fingerprint:fnv1a-d0adcdc2","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-75351-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"OpENer v2.3/commit 76b95cf, contains an out-of-bounds read in the server-side EtherNet/IP ForwardOpen connection-path parser. This allows a remote attacker to cause a denial of service.","source_quote_or_pointer":"Security Advisory CVE-2026-75351","fact_id":"SEA-CVE-2026-75351-F1","document_citation":"Security Advisory CVE-2026-75351"},{"id":"SEA-CVE-2026-75351-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"OpENer v2.3/commit 76b95cf, contains an out-of-bounds read in the server-side EtherNet/IP ForwardOpen connection-path parser. This allows a remote attacker to cause a denial of service.","source_quote_or_pointer":"Advisory description (CVE-2026-75351)","fact_id":"SEA-CVE-2026-75351-F2","document_citation":"Advisory description (CVE-2026-75351)"}],"source_stated_contributors":["OpENer v2.3/commit 76b95cf, contains an out-of-bounds read in the server-side EtherNet/IP ForwardOpen connection-path parser. This allows a remote attacker to cause a denial of service."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-75351","reporting_entity":"CVE-2026-75351","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-75351-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-75351-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-75351"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-75346","title":"An out-of-bounds read vulnerability exists in EIPStackGroup OpENer v2.3 and master through commit 76b95cf in the server-side CIP SetAttributeList service. This allows a remote attacker to cause a denial of service","display_title":"Software component issue could make the service unavailable","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-75346","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-75346","source_title":"An out-of-bounds read vulnerability exists in EIPStackGroup OpENer v2.3 and master through commit 76b95cf in the server-side CIP SetAttributeList service. This allows a remote attacker to cause a denial of service","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-10T10:00:11.147Z","source_hash":"content-fingerprint:fnv1a-9356b632","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-75346-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"An out-of-bounds read vulnerability exists in EIPStackGroup OpENer v2.3 and master through commit 76b95cf in the server-side CIP SetAttributeList service. This allows a remote attacker to cause a denial of service","source_quote_or_pointer":"Security Advisory CVE-2026-75346","fact_id":"SEA-CVE-2026-75346-F1","document_citation":"Security Advisory CVE-2026-75346"},{"id":"SEA-CVE-2026-75346-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"An out-of-bounds read vulnerability exists in EIPStackGroup OpENer v2.3 and master through commit 76b95cf in the server-side CIP SetAttributeList service. This allows a remote attacker to cause a denial of service","source_quote_or_pointer":"Advisory description (CVE-2026-75346)","fact_id":"SEA-CVE-2026-75346-F2","document_citation":"Advisory description (CVE-2026-75346)"}],"source_stated_contributors":["An out-of-bounds read vulnerability exists in EIPStackGroup OpENer v2.3 and master through commit 76b95cf in the server-side CIP SetAttributeList service. This allows a remote attacker to cause a denial of service"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-75346","reporting_entity":"CVE-2026-75346","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-75346-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-75346-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-75346"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108266","title":"Privasys rustls is a maintained fork of the rustls TLS library that adds RA-TLS challenge and channel-binding support. Prior to privasys-v0.8.1, the fork emitted RA-TLS challenge certificates whose quote ReportData was bound to the certificate public key and client nonce but not to the active TLS session. An attacker who obtained an enclave TLS private key could relay a genuine quote onto another connection, causing a relying party to accept an attacker-terminated connection as the attested enclave. This issue is fixed in privasys-v0.8.1.","display_title":"Security issue reported in Software component","display_summary":"Privasys rustls is a maintained fork of the rustls TLS library that adds RA-TLS challenge and channel-binding support. Prior to privasys-v0.8.1, the fork emitted RA-TLS challenge certificates whose quote ReportData was…","display_reference":"CVE-2026-108266","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108266","source_title":"Privasys rustls is a maintained fork of the rustls TLS library that adds RA-TLS challenge and channel-binding support. Prior to privasys-v0.8.1, the fork emitted RA-TLS challenge certificates whose quote ReportData was bound to the certificate public key and client nonce but not to the active TLS session. An attacker who obtained an enclave TLS private key could relay a genuine quote onto another connection, causing a relying party to accept an attacker-terminated connection as the attested enclave. This issue is fixed in privasys-v0.8.1.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-10T10:00:11.147Z","source_hash":"content-fingerprint:fnv1a-4129bfc8","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108266-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Privasys rustls is a maintained fork of the rustls TLS library that adds RA-TLS challenge and channel-binding support. Prior to privasys-v0.8.1, the fork emitted RA-TLS challenge certificates whose quote ReportData was bound to the certificate public key and client nonce but not to the active TLS session. An attacker who obtained an enclave TLS private key could relay a genuine quote onto another connection, causing a relying party to accept an attacker-terminated connection as the attested enclave. This issue is fixed in privasys-v0.8.1.","source_quote_or_pointer":"Security Advisory CVE-2026-108266","fact_id":"SEA-CVE-2026-108266-F1","document_citation":"Security Advisory CVE-2026-108266"},{"id":"SEA-CVE-2026-108266-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Privasys rustls is a maintained fork of the rustls TLS library that adds RA-TLS challenge and channel-binding support. Prior to privasys-v0.8.1, the fork emitted RA-TLS challenge certificates whose quote ReportData was bound to the certificate public key and client nonce but not to the active TLS session.","source_quote_or_pointer":"Advisory description (CVE-2026-108266)","fact_id":"SEA-CVE-2026-108266-F2","document_citation":"Advisory description (CVE-2026-108266)"}],"source_stated_contributors":["Privasys rustls is a maintained fork of the rustls TLS library that adds RA-TLS challenge and channel-binding support. Prior to privasys-v0.8.1, the fork emitted RA-TLS challenge certificates whose quote ReportData was bound to the certificate public key and client nonce but not to the active TLS session."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.public_publication","data.credentials_secrets"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108266","reporting_entity":"CVE-2026-108266","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108266-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108266-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-108266"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-107885","title":"OpenPrinting CUPS through 2.4.20 contains a resource-exhaustion vulnerability in the submission-timeout handling of cupsdCheckJobs(). The scheduler suppresses timeout processing for all pending jobs whenever any client connection has an in-flight Send-Document operation, without matching that connection to the job being examined. A client allowed to reach the IPP service can hold an incomplete HTTP request containing parsed Send-Document headers before operation authorization, preventing unrelated incomplete jobs from expiring. Where Create-Job submission is allowed, incomplete jobs can accumulate until MaxJobs is exhausted and further legitimate print submissions are rejected. The suppression ends when the held connection closes.","display_title":"Security issue reported in Software component","display_summary":"OpenPrinting CUPS through 2.4.20 contains a resource-exhaustion vulnerability in the submission-timeout handling of cupsdCheckJobs().","display_reference":"CVE-2026-107885","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107885","source_title":"OpenPrinting CUPS through 2.4.20 contains a resource-exhaustion vulnerability in the submission-timeout handling of cupsdCheckJobs(). The scheduler suppresses timeout processing for all pending jobs whenever any client connection has an in-flight Send-Document operation, without matching that connection to the job being examined. A client allowed to reach the IPP service can hold an incomplete HTTP request containing parsed Send-Document headers before operation authorization, preventing unrelated incomplete jobs from expiring. Where Create-Job submission is allowed, incomplete jobs can accumulate until MaxJobs is exhausted and further legitimate print submissions are rejected. The suppression ends when the held connection closes.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-10T10:00:11.147Z","source_hash":"content-fingerprint:fnv1a-c9fb15e6","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-107885-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"OpenPrinting CUPS through 2.4.20 contains a resource-exhaustion vulnerability in the submission-timeout handling of cupsdCheckJobs(). The scheduler suppresses timeout processing for all pending jobs whenever any client connection has an in-flight Send-Document operation, without matching that connection to the job being examined. A client allowed to reach the IPP service can hold an incomplete HTTP request containing parsed Send-Document headers before operation authorization, preventing unrelated incomplete jobs from expiring. Where Create-Job submission is allowed, incomplete jobs can accumulate until MaxJobs is exhausted and further legitimate print submissions are rejected. The suppression ends when the held connection closes.","source_quote_or_pointer":"Security Advisory CVE-2026-107885","fact_id":"SEA-CVE-2026-107885-F1","document_citation":"Security Advisory CVE-2026-107885"},{"id":"SEA-CVE-2026-107885-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"OpenPrinting CUPS through 2.4.20 contains a resource-exhaustion vulnerability in the submission-timeout handling of cupsdCheckJobs(). The scheduler suppresses timeout processing for all pending jobs whenever any client connection has an in-flight Send-Document operation, without matching that connection to the job…","source_quote_or_pointer":"Advisory description (CVE-2026-107885)","fact_id":"SEA-CVE-2026-107885-F2","document_citation":"Advisory description (CVE-2026-107885)"}],"source_stated_contributors":["OpenPrinting CUPS through 2.4.20 contains a resource-exhaustion vulnerability in the submission-timeout handling of cupsdCheckJobs(). The scheduler suppresses timeout processing for all pending jobs whenever any client connection has an in-flight Send-Document operation, without matching that connection to the job…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["arch.async_job"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-107885","reporting_entity":"CVE-2026-107885","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-107885-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-107885-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-107885"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-107857","title":"Mindwtr is a free offline-first task management application for desktop and mobile. Prior to 1.1.5, the mobile application writes the Cloud sync bearer token and WebDAV password to unencrypted AsyncStorage under @mindwtr_cloud_token and @mindwtr_webdav_password. A party with access to the application database or an exposed device backup can recover these credentials and use them to access the user's synchronized tasks and attachments. This issue is fixed in version 1.1.5.","display_title":"Software component issue could expose accounts or credentials","display_summary":"Mindwtr is a free offline-first task management application for desktop and mobile. Prior to 1.1.5, the mobile application writes the Cloud sync bearer token and WebDAV password to unencrypted AsyncStorage under…","display_reference":"CVE-2026-107857","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107857","source_title":"Mindwtr is a free offline-first task management application for desktop and mobile. Prior to 1.1.5, the mobile application writes the Cloud sync bearer token and WebDAV password to unencrypted AsyncStorage under @mindwtr_cloud_token and @mindwtr_webdav_password. A party with access to the application database or an exposed device backup can recover these credentials and use them to access the user's synchronized tasks and attachments. This issue is fixed in version 1.1.5.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-10T10:00:11.147Z","source_hash":"content-fingerprint:fnv1a-396962af","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Cloud & container infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-107857-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Mindwtr is a free offline-first task management application for desktop and mobile. Prior to 1.1.5, the mobile application writes the Cloud sync bearer token and WebDAV password to unencrypted AsyncStorage under @mindwtr_cloud_token and @mindwtr_webdav_password. A party with access to the application database or an exposed device backup can recover these credentials and use them to access the user's synchronized tasks and attachments. This issue is fixed in version 1.1.5.","source_quote_or_pointer":"Security Advisory CVE-2026-107857","fact_id":"SEA-CVE-2026-107857-F1","document_citation":"Security Advisory CVE-2026-107857"},{"id":"SEA-CVE-2026-107857-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Mindwtr is a free offline-first task management application for desktop and mobile. Prior to 1.1.5, the mobile application writes the Cloud sync bearer token and WebDAV password to unencrypted AsyncStorage under @mindwtrcloudtoken and @mindwtrwebdavpassword.","source_quote_or_pointer":"Advisory description (CVE-2026-107857)","fact_id":"SEA-CVE-2026-107857-F2","document_citation":"Advisory description (CVE-2026-107857)"}],"source_stated_contributors":["Mindwtr is a free offline-first task management application for desktop and mobile. Prior to 1.1.5, the mobile application writes the Cloud sync bearer token and WebDAV password to unencrypted AsyncStorage under @mindwtrcloudtoken and @mindwtrwebdavpassword."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.pii","data.credentials_secrets","data.uploaded_files"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-107857","reporting_entity":"CVE-2026-107857","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-107857-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-107857-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-107857"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-107935","title":"A path traversal vulnerability was found in gvproxy, the network forwarder provided by the gvisor-tap-vsock package. The unauthenticated /services/forwarder/expose endpoint does not validate the caller-supplied socket path, allowing an attacker to delete arbitrary files on the host system.","display_title":"Software component issue could expose restricted files","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-107935","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107935","source_title":"A path traversal vulnerability was found in gvproxy, the network forwarder provided by the gvisor-tap-vsock package. The unauthenticated /services/forwarder/expose endpoint does not validate the caller-supplied socket path, allowing an attacker to delete arbitrary files on the host system.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-10T10:00:11.147Z","source_hash":"content-fingerprint:fnv1a-d0d23ef0","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-107935-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A path traversal vulnerability was found in gvproxy, the network forwarder provided by the gvisor-tap-vsock package. The unauthenticated /services/forwarder/expose endpoint does not validate the caller-supplied socket path, allowing an attacker to delete arbitrary files on the host system.","source_quote_or_pointer":"Security Advisory CVE-2026-107935","fact_id":"SEA-CVE-2026-107935-F1","document_citation":"Security Advisory CVE-2026-107935"},{"id":"SEA-CVE-2026-107935-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A path traversal vulnerability was found in gvproxy, the network forwarder provided by the gvisor-tap-vsock package. The unauthenticated /services/forwarder/expose endpoint does not validate the caller-supplied socket path, allowing an attacker to delete arbitrary files on the host system.","source_quote_or_pointer":"Advisory description (CVE-2026-107935)","fact_id":"SEA-CVE-2026-107935-F2","document_citation":"Advisory description (CVE-2026-107935)"}],"source_stated_contributors":["A path traversal vulnerability was found in gvproxy, the network forwarder provided by the gvisor-tap-vsock package. The unauthenticated /services/forwarder/expose endpoint does not validate the caller-supplied socket path, allowing an attacker to delete arbitrary files on the host system."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.write_action"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Restricted file exposure","File overwrite"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-107935","reporting_entity":"CVE-2026-107935","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-107935-SG1","label":"Confine file access to a fixed root","description":"Resolve paths to canonical form and reject anything outside the intended directory before opening files.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-107935-SG1","label":"Confine file access to a fixed root","description":"Resolve paths to canonical form and reject anything outside the intended directory before opening files.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"File paths supplied by a caller escaped the intended directory. Canonicalise paths and confine file access to a fixed root.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-107935"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-107840","title":"yopass is a service for securely sharing secrets, passwords, and files. Prior to version 14.7.0, the Prometheus metrics middleware in pkg/server/server.go uses the attacker-controlled r.Method value directly as the method label for yopass_http_requests_total and yopass_http_request_duration_seconds. Because the catch-all route accepts arbitrary HTTP method tokens, an unauthenticated remote attacker can submit many unique methods and create metric series that the Prometheus registry never evicts. The resulting monotonic memory growth can OOM-kill the process, while the expanding registry also degrades /metrics scrape latency and can blind monitoring. This issue is fixed in version 14.7.0.","display_title":"Software component issue could expose accounts or credentials","display_summary":"yopass is a service for securely sharing secrets, passwords, and files. Prior to version 14.7.0, the Prometheus metrics middleware in pkg/server/server.go uses the attacker-controlled r.Method value directly as the…","display_reference":"CVE-2026-107840","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107840","source_title":"yopass is a service for securely sharing secrets, passwords, and files. Prior to version 14.7.0, the Prometheus metrics middleware in pkg/server/server.go uses the attacker-controlled r.Method value directly as the method label for yopass_http_requests_total and yopass_http_request_duration_seconds. Because the catch-all route accepts arbitrary HTTP method tokens, an unauthenticated remote attacker can submit many unique methods and create metric series that the Prometheus registry never evicts. The resulting monotonic memory growth can OOM-kill the process, while the expanding registry also degrades /metrics scrape latency and can blind monitoring. This issue is fixed in version 14.7.0.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-10T10:00:11.147Z","source_hash":"content-fingerprint:fnv1a-11bcfffd","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-107840-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"yopass is a service for securely sharing secrets, passwords, and files. Prior to version 14.7.0, the Prometheus metrics middleware in pkg/server/server.go uses the attacker-controlled r.Method value directly as the method label for yopass_http_requests_total and yopass_http_request_duration_seconds. Because the catch-all route accepts arbitrary HTTP method tokens, an unauthenticated remote attacker can submit many unique methods and create metric series that the Prometheus registry never evicts. The resulting monotonic memory growth can OOM-kill the process, while the expanding registry also degrades /metrics scrape latency and can blind monitoring. This issue is fixed in version 14.7.0.","source_quote_or_pointer":"Security Advisory CVE-2026-107840","fact_id":"SEA-CVE-2026-107840-F1","document_citation":"Security Advisory CVE-2026-107840"},{"id":"SEA-CVE-2026-107840-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"yopass is a service for securely sharing secrets, passwords, and files. Prior to version 14.7.0, the Prometheus metrics middleware in pkg/server/server.go uses the attacker-controlled r.Method value directly as the method label for yopasshttprequeststotal and yopasshttprequestdurationseconds.","source_quote_or_pointer":"Advisory description (CVE-2026-107840)","fact_id":"SEA-CVE-2026-107840-F2","document_citation":"Advisory description (CVE-2026-107840)"}],"source_stated_contributors":["yopass is a service for securely sharing secrets, passwords, and files. Prior to version 14.7.0, the Prometheus metrics middleware in pkg/server/server.go uses the attacker-controlled r.Method value directly as the method label for yopasshttprequeststotal and yopasshttprequestdurationseconds."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-107840","reporting_entity":"CVE-2026-107840","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-107840-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-107840-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-107840"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-104084","title":"SmarterMail before build 9777 contains a privilege escalation vulnerability where JWT access and refresh tokens embed a role claim at issuance that is not revalidated against the account's current role when redeemed through POST /api/v1/auth/refresh-token. Attackers who capture a refresh token issued before an administrator demotion, or a demoted user whose session was not actively polling at the time of demotion, can replay the stale token to obtain a new access token retaining the higher-privilege role (such as DomainAdmin or SysAdmin) until natural token expiry.","display_title":"Software component issue could expose accounts or credentials","display_summary":"SmarterMail before build 9777 contains a privilege escalation vulnerability where JWT access and refresh tokens embed a role claim at issuance that is not revalidated against the account's current role when redeemed…","display_reference":"CVE-2026-104084","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104084","source_title":"SmarterMail before build 9777 contains a privilege escalation vulnerability where JWT access and refresh tokens embed a role claim at issuance that is not revalidated against the account's current role when redeemed through POST /api/v1/auth/refresh-token. Attackers who capture a refresh token issued before an administrator demotion, or a demoted user whose session was not actively polling at the time of demotion, can replay the stale token to obtain a new access token retaining the higher-privilege role (such as DomainAdmin or SysAdmin) until natural token expiry.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-10T02:00:30.356Z","source_hash":"content-fingerprint:fnv1a-163daf5e","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-104084-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"SmarterMail before build 9777 contains a privilege escalation vulnerability where JWT access and refresh tokens embed a role claim at issuance that is not revalidated against the account's current role when redeemed through POST /api/v1/auth/refresh-token. Attackers who capture a refresh token issued before an administrator demotion, or a demoted user whose session was not actively polling at the time of demotion, can replay the stale token to obtain a new access token retaining the higher-privilege role (such as DomainAdmin or SysAdmin) until natural token expiry.","source_quote_or_pointer":"Security Advisory CVE-2026-104084","fact_id":"SEA-CVE-2026-104084-F1","document_citation":"Security Advisory CVE-2026-104084"},{"id":"SEA-CVE-2026-104084-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"SmarterMail before build 9777 contains a privilege escalation vulnerability where JWT access and refresh tokens embed a role claim at issuance that is not revalidated against the account's current role when redeemed through POST /api/v1/auth/refresh-token.","source_quote_or_pointer":"Advisory description (CVE-2026-104084)","fact_id":"SEA-CVE-2026-104084-F2","document_citation":"Advisory description (CVE-2026-104084)"}],"source_stated_contributors":["SmarterMail before build 9777 contains a privilege escalation vulnerability where JWT access and refresh tokens embed a role claim at issuance that is not revalidated against the account's current role when redeemed through POST /api/v1/auth/refresh-token."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-104084","reporting_entity":"CVE-2026-104084","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-104084-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-104084-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-104084"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-75353","title":"OpENer v2.3/ commit 76b95cf, contains an out-of-bounds read in the server-side EtherNet/IP ForwardOpen connection-path parser. This allows a remtoe attacker to cause a denial of service","display_title":"Software component issue could make the service unavailable","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-75353","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-75353","source_title":"OpENer v2.3/ commit 76b95cf, contains an out-of-bounds read in the server-side EtherNet/IP ForwardOpen connection-path parser. This allows a remtoe attacker to cause a denial of service","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-10T02:00:30.356Z","source_hash":"content-fingerprint:fnv1a-f37ff37c","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-75353-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"OpENer v2.3/ commit 76b95cf, contains an out-of-bounds read in the server-side EtherNet/IP ForwardOpen connection-path parser. This allows a remtoe attacker to cause a denial of service","source_quote_or_pointer":"Security Advisory CVE-2026-75353","fact_id":"SEA-CVE-2026-75353-F1","document_citation":"Security Advisory CVE-2026-75353"},{"id":"SEA-CVE-2026-75353-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"OpENer v2.3/ commit 76b95cf, contains an out-of-bounds read in the server-side EtherNet/IP ForwardOpen connection-path parser. This allows a remtoe attacker to cause a denial of service","source_quote_or_pointer":"Advisory description (CVE-2026-75353)","fact_id":"SEA-CVE-2026-75353-F2","document_citation":"Advisory description (CVE-2026-75353)"}],"source_stated_contributors":["OpENer v2.3/ commit 76b95cf, contains an out-of-bounds read in the server-side EtherNet/IP ForwardOpen connection-path parser. This allows a remtoe attacker to cause a denial of service"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-75353","reporting_entity":"CVE-2026-75353","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-75353-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-75353-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-75353"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-75352","title":"OpENer v2.3/commit 76b95cf, contains an integer underflow in the server-side EtherNet/IP ForwardOpen connection-path parser. This allows a remote attacker to cause a denial of service","display_title":"Software component issue could make the service unavailable","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-75352","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-75352","source_title":"OpENer v2.3/commit 76b95cf, contains an integer underflow in the server-side EtherNet/IP ForwardOpen connection-path parser. This allows a remote attacker to cause a denial of service","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-10T02:00:30.356Z","source_hash":"content-fingerprint:fnv1a-258bdec9","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-75352-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"OpENer v2.3/commit 76b95cf, contains an integer underflow in the server-side EtherNet/IP ForwardOpen connection-path parser. This allows a remote attacker to cause a denial of service","source_quote_or_pointer":"Security Advisory CVE-2026-75352","fact_id":"SEA-CVE-2026-75352-F1","document_citation":"Security Advisory CVE-2026-75352"},{"id":"SEA-CVE-2026-75352-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"OpENer v2.3/commit 76b95cf, contains an integer underflow in the server-side EtherNet/IP ForwardOpen connection-path parser. This allows a remote attacker to cause a denial of service","source_quote_or_pointer":"Advisory description (CVE-2026-75352)","fact_id":"SEA-CVE-2026-75352-F2","document_citation":"Advisory description (CVE-2026-75352)"}],"source_stated_contributors":["OpENer v2.3/commit 76b95cf, contains an integer underflow in the server-side EtherNet/IP ForwardOpen connection-path parser. This allows a remote attacker to cause a denial of service"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-75352","reporting_entity":"CVE-2026-75352","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-75352-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-75352-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-75352"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-96331","title":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in wpdreams Ajax Search Pro ajax-search-pro allows Blind SQL Injection.This issue affects Ajax Search Pro: from n/a through 4.29.1.","display_title":"Software component issue could expose or alter stored data","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-96331","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-96331","source_title":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in wpdreams Ajax Search Pro ajax-search-pro allows Blind SQL Injection.This issue affects Ajax Search Pro: from n/a through 4.29.1.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-10T02:00:30.356Z","source_hash":"content-fingerprint:fnv1a-a1f4c861","affected_system":{"organization":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in wpdreams Ajax Search Pro ajax-search-pro allows Blind SQL Injection.This issue affects Ajax Search Pro project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-96331-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in wpdreams Ajax Search Pro ajax-search-pro allows Blind SQL Injection.This issue affects Ajax Search Pro: from n/a through 4.29.1.","source_quote_or_pointer":"Security Advisory CVE-2026-96331","fact_id":"SEA-CVE-2026-96331-F1","document_citation":"Security Advisory CVE-2026-96331"},{"id":"SEA-CVE-2026-96331-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in wpdreams Ajax Search Pro ajax-search-pro allows Blind SQL Injection.This issue affects Ajax Search Pro: from n/a through 4.29.1.","source_quote_or_pointer":"Advisory description (CVE-2026-96331)","fact_id":"SEA-CVE-2026-96331-F2","document_citation":"Advisory description (CVE-2026-96331)"}],"source_stated_contributors":["Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in wpdreams Ajax Search Pro ajax-search-pro allows Blind SQL Injection.This issue affects Ajax Search Pro: from n/a through 4.29.1."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-96331","reporting_entity":"CVE-2026-96331","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-96331-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-96331-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-96331"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-95610","title":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in UpSolution UpSolution Core us-core allows Blind SQL Injection.This issue affects UpSolution Core: from n/a through 9.3.","display_title":"Software component issue could expose or alter stored data","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-95610","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95610","source_title":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in UpSolution UpSolution Core us-core allows Blind SQL Injection.This issue affects UpSolution Core: from n/a through 9.3.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-10T02:00:30.356Z","source_hash":"content-fingerprint:fnv1a-eb203594","affected_system":{"organization":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in UpSolution UpSolution Core us-core allows Blind SQL Injection.This issue affects UpSolution Core project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-95610-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in UpSolution UpSolution Core us-core allows Blind SQL Injection.This issue affects UpSolution Core: from n/a through 9.3.","source_quote_or_pointer":"Security Advisory CVE-2026-95610","fact_id":"SEA-CVE-2026-95610-F1","document_citation":"Security Advisory CVE-2026-95610"},{"id":"SEA-CVE-2026-95610-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in UpSolution UpSolution Core us-core allows Blind SQL Injection.This issue affects UpSolution Core: from n/a through 9.3.","source_quote_or_pointer":"Advisory description (CVE-2026-95610)","fact_id":"SEA-CVE-2026-95610-F2","document_citation":"Advisory description (CVE-2026-95610)"}],"source_stated_contributors":["Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in UpSolution UpSolution Core us-core allows Blind SQL Injection.This issue affects UpSolution Core: from n/a through 9.3."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-95610","reporting_entity":"CVE-2026-95610","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-95610-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-95610-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-95610"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-94663","title":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities allows Blind SQL Injection.This issue affects ProfileGrid: from n/a through 6.0.0.2.","display_title":"Software component issue could expose or alter stored data","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-94663","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-94663","source_title":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities allows Blind SQL Injection.This issue affects ProfileGrid: from n/a through 6.0.0.2.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-10T02:00:30.356Z","source_hash":"content-fingerprint:fnv1a-2c22fce5","affected_system":{"organization":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities allows Blind SQL Injection.This issue affects ProfileGrid project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-94663-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities allows Blind SQL Injection.This issue affects ProfileGrid: from n/a through 6.0.0.2.","source_quote_or_pointer":"Security Advisory CVE-2026-94663","fact_id":"SEA-CVE-2026-94663-F1","document_citation":"Security Advisory CVE-2026-94663"},{"id":"SEA-CVE-2026-94663-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities allows Blind SQL Injection.This issue affects ProfileGrid: from n/a through 6.0.0.2.","source_quote_or_pointer":"Advisory description (CVE-2026-94663)","fact_id":"SEA-CVE-2026-94663-F2","document_citation":"Advisory description (CVE-2026-94663)"}],"source_stated_contributors":["Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities allows Blind SQL Injection.This issue affects ProfileGrid: from n/a through 6.0.0.2."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-94663","reporting_entity":"CVE-2026-94663","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-94663-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-94663-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-94663"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-78013","title":"Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Initialization of a Resource with an Insecure Default vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Denial of service, Information disclosure, and Protection mechanism bypass.","display_title":"Software component issue could make the service unavailable","display_summary":"Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Initialization of a Resource with an Insecure Default vulnerability.","display_reference":"CVE-2026-78013","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-78013","source_title":"Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Initialization of a Resource with an Insecure Default vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Denial of service, Information disclosure, and Protection mechanism bypass.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-10T02:00:30.356Z","source_hash":"content-fingerprint:fnv1a-1325482a","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-78013-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Initialization of a Resource with an Insecure Default vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Denial of service, Information disclosure, and Protection mechanism bypass.","source_quote_or_pointer":"Security Advisory CVE-2026-78013","fact_id":"SEA-CVE-2026-78013-F1","document_citation":"Security Advisory CVE-2026-78013"},{"id":"SEA-CVE-2026-78013-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Initialization of a Resource with an Insecure Default vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Denial of service, Information disclosure, and…","source_quote_or_pointer":"Advisory description (CVE-2026-78013)","fact_id":"SEA-CVE-2026-78013-F2","document_citation":"Advisory description (CVE-2026-78013)"}],"source_stated_contributors":["Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Initialization of a Resource with an Insecure Default vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Denial of service, Information disclosure, and…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-78013","reporting_entity":"CVE-2026-78013","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-78013-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-78013-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-78013"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-75350","title":"EIPStackGroup OpENer v2.3 / master commit 76b95cf contains a buffer overflow in the GetAttributeList() implementation for the EtherNet/IP Get_Attribute_List service. This allows a remote attacker to cause a denial of service","display_title":"Software component issue could make the service unavailable","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-75350","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-75350","source_title":"EIPStackGroup OpENer v2.3 / master commit 76b95cf contains a buffer overflow in the GetAttributeList() implementation for the EtherNet/IP Get_Attribute_List service. This allows a remote attacker to cause a denial of service","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-10T02:00:30.356Z","source_hash":"content-fingerprint:fnv1a-ae46409","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-75350-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"EIPStackGroup OpENer v2.3 / master commit 76b95cf contains a buffer overflow in the GetAttributeList() implementation for the EtherNet/IP Get_Attribute_List service. This allows a remote attacker to cause a denial of service","source_quote_or_pointer":"Security Advisory CVE-2026-75350","fact_id":"SEA-CVE-2026-75350-F1","document_citation":"Security Advisory CVE-2026-75350"},{"id":"SEA-CVE-2026-75350-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"EIPStackGroup OpENer v2.3 / master commit 76b95cf contains a buffer overflow in the GetAttributeList() implementation for the EtherNet/IP GetAttributeList service. This allows a remote attacker to cause a denial of service","source_quote_or_pointer":"Advisory description (CVE-2026-75350)","fact_id":"SEA-CVE-2026-75350-F2","document_citation":"Advisory description (CVE-2026-75350)"}],"source_stated_contributors":["EIPStackGroup OpENer v2.3 / master commit 76b95cf contains a buffer overflow in the GetAttributeList() implementation for the EtherNet/IP GetAttributeList service. This allows a remote attacker to cause a denial of service"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-75350","reporting_entity":"CVE-2026-75350","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-75350-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-75350-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-75350"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-75348","title":"An out-of-bounds read vulnerability exists in EIPStackGroup OpENer v2.3 and master up to commit 76b95cf in the EtherNet/IP TCP SendRRData Common Packet Format parser. The issue occurs in CreateCommonPacketFormatStructure() when it parses recognized optional socket address information items of type 0x8000 or 0x8001 without first validating that the remaining CPF buffer contains the complete fixed sockaddr structure. This allows a remote attacker to cause a denial of service.","display_title":"Software component issue could make the service unavailable","display_summary":"An out-of-bounds read vulnerability exists in EIPStackGroup OpENer v2.3 and master up to commit 76b95cf in the EtherNet/IP TCP SendRRData Common Packet Format parser.","display_reference":"CVE-2026-75348","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-75348","source_title":"An out-of-bounds read vulnerability exists in EIPStackGroup OpENer v2.3 and master up to commit 76b95cf in the EtherNet/IP TCP SendRRData Common Packet Format parser. The issue occurs in CreateCommonPacketFormatStructure() when it parses recognized optional socket address information items of type 0x8000 or 0x8001 without first validating that the remaining CPF buffer contains the complete fixed sockaddr structure. This allows a remote attacker to cause a denial of service.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-10T02:00:30.356Z","source_hash":"content-fingerprint:fnv1a-c3881cf2","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-75348-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"An out-of-bounds read vulnerability exists in EIPStackGroup OpENer v2.3 and master up to commit 76b95cf in the EtherNet/IP TCP SendRRData Common Packet Format parser. The issue occurs in CreateCommonPacketFormatStructure() when it parses recognized optional socket address information items of type 0x8000 or 0x8001 without first validating that the remaining CPF buffer contains the complete fixed sockaddr structure. This allows a remote attacker to cause a denial of service.","source_quote_or_pointer":"Security Advisory CVE-2026-75348","fact_id":"SEA-CVE-2026-75348-F1","document_citation":"Security Advisory CVE-2026-75348"},{"id":"SEA-CVE-2026-75348-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"An out-of-bounds read vulnerability exists in EIPStackGroup OpENer v2.3 and master up to commit 76b95cf in the EtherNet/IP TCP SendRRData Common Packet Format parser.","source_quote_or_pointer":"Advisory description (CVE-2026-75348)","fact_id":"SEA-CVE-2026-75348-F2","document_citation":"Advisory description (CVE-2026-75348)"}],"source_stated_contributors":["An out-of-bounds read vulnerability exists in EIPStackGroup OpENer v2.3 and master up to commit 76b95cf in the EtherNet/IP TCP SendRRData Common Packet Format parser."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-75348","reporting_entity":"CVE-2026-75348","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-75348-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-75348-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-75348"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-62040","title":"Missing Authorization vulnerability in DEV Institute Restrict User Access – Membership Plugin with Force restrict-user-access allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Restrict User Access – Membership Plugin with Force: from n/a through 2.8.1.","display_title":"Software component issue could allow unauthorized access","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-62040","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-62040","source_title":"Missing Authorization vulnerability in DEV Institute Restrict User Access – Membership Plugin with Force restrict-user-access allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Restrict User Access – Membership Plugin with Force: from n/a through 2.8.1.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-10T02:00:30.356Z","source_hash":"content-fingerprint:fnv1a-3b9b6363","affected_system":{"organization":"Missing Authorization vulnerability in DEV Institute Restrict User Access – Membership Plugin with Force restrict-user-access allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Restrict User Access – Membership Plugin with Force project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-62040-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Missing Authorization vulnerability in DEV Institute Restrict User Access – Membership Plugin with Force restrict-user-access allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Restrict User Access – Membership Plugin with Force: from n/a through 2.8.1.","source_quote_or_pointer":"Security Advisory CVE-2026-62040","fact_id":"SEA-CVE-2026-62040-F1","document_citation":"Security Advisory CVE-2026-62040"},{"id":"SEA-CVE-2026-62040-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Missing Authorization vulnerability in DEV Institute Restrict User Access – Membership Plugin with Force restrict-user-access allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Restrict User Access – Membership Plugin with Force: from n/a through 2.8.1.","source_quote_or_pointer":"Advisory description (CVE-2026-62040)","fact_id":"SEA-CVE-2026-62040-F2","document_citation":"Advisory description (CVE-2026-62040)"}],"source_stated_contributors":["Missing Authorization vulnerability in DEV Institute Restrict User Access – Membership Plugin with Force restrict-user-access allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Restrict User Access – Membership Plugin with Force: from n/a through 2.8.1."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-62040","reporting_entity":"CVE-2026-62040","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-62040-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-62040-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-62040"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-19570","title":"The LE Audio Broadcast Sink in subsys/bluetooth/audio/bap_broadcast_sink.c copies subgroup metadata from a received Basic Audio Announcement (BASE) into the static Broadcast Audio Scan Service parameter structure mod_src_param without any bounds check. In base_subgroup_meta_cb() the destination element was selected as mod_src_param.subgroups[mod_src_param.num_subgroups] with no test against ARRAY_SIZE(mod_src_param.subgroups) (sized by CONFIG_BT_BAP_BASS_MAX_SUBGROUPS, default 1), and the metadata was copied with memcpy() using the raw on-air length returned by bt_bap_base_get_subgroup_codec_meta() into a metadata array sized by CONFIG_BT_AUDIO_CODEC_CFG_MAX_METADATA_SIZE (default 4). The BASE validator bt_bap_base_get_base_from_ad() only checks structural consistency and permits up to ~24 subgroups and metadata LTVs of ~240 octets. The defect is reached from the periodic advertising receive callback: pa_recv() → bt_data_parse() → pa_decode_base() → update_recv_state_base() → bt_bap_base_foreach_subgroup() → base_subgroup_meta_cb(). Every broadcast sink registers a scan-delegator receive state at creation (bt_bap_broadcast_sink_create() calls broadcast_sink_add_src()), and CONFIG_BT_BAP_BROADCAST_SINK depends on CONFIG_BT_BAP_SCAN_DELEGATOR, so the path is active in every broadcast-sink build once the device is periodic-advertising-synced. An attacker in radio range who operates a broadcast source the device syncs to — or who impersonates the advertiser address and SID of one already in use, periodic advertising data being unauthenticated — can change the BASE at will; each new BASE is re-parsed. A crafted BASE therefore writes attacker-chosen bytes past the end of a fixed static object in .bss: up to roughly 236 bytes for an oversized metadata LTV, plus whole struct bt_bap_bass_subgroup records for each subgroup beyond CONFIG_BT_BAP_BASS_MAX_SUBGROUPS. This is memory corruption of adjacent Bluetooth-audio state reachable with no pairing, bonding or GATT connection, with a potential for remote code execution in the Bluetooth RX thread; in addition, the unvalidated metadata_len is forwarded to bt_bap_scan_delegator_mod_src(), which neither clamps it nor rejects it, leading to a further copy into the receive state and to out-of-bounds memory being disclosed in the BASS receive-state notification sent to a connected Broadcast Assistant. The fix rejects a BASE carrying more subgroups than the receive state can hold (discarding the update entirely) and omits metadata that does not fit rather than copying it, and additionally honours the previously-ignored error return of the subgroup decode pass.","display_title":"Software component issue could allow unintended commands to run","display_summary":"The LE Audio Broadcast Sink in subsys/bluetooth/audio/bapbroadcastsink.c copies subgroup metadata from a received Basic Audio Announcement (BASE) into the static Broadcast Audio Scan Service parameter structure…","display_reference":"CVE-2026-19570","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-19570","source_title":"The LE Audio Broadcast Sink in subsys/bluetooth/audio/bap_broadcast_sink.c copies subgroup metadata from a received Basic Audio Announcement (BASE) into the static Broadcast Audio Scan Service parameter structure mod_src_param without any bounds check. In base_subgroup_meta_cb() the destination element was selected as mod_src_param.subgroups[mod_src_param.num_subgroups] with no test against ARRAY_SIZE(mod_src_param.subgroups) (sized by CONFIG_BT_BAP_BASS_MAX_SUBGROUPS, default 1), and the metadata was copied with memcpy() using the raw on-air length returned by bt_bap_base_get_subgroup_codec_meta() into a metadata array sized by CONFIG_BT_AUDIO_CODEC_CFG_MAX_METADATA_SIZE (default 4). The BASE validator bt_bap_base_get_base_from_ad() only checks structural consistency and permits up to ~24 subgroups and metadata LTVs of ~240 octets. The defect is reached from the periodic advertising receive callback: pa_recv() → bt_data_parse() → pa_decode_base() → update_recv_state_base() → bt_bap_base_foreach_subgroup() → base_subgroup_meta_cb(). Every broadcast sink registers a scan-delegator receive state at creation (bt_bap_broadcast_sink_create() calls broadcast_sink_add_src()), and CONFIG_BT_BAP_BROADCAST_SINK depends on CONFIG_BT_BAP_SCAN_DELEGATOR, so the path is active in every broadcast-sink build once the device is periodic-advertising-synced. An attacker in radio range who operates a broadcast source the device syncs to — or who impersonates the advertiser address and SID of one already in use, periodic advertising data being unauthenticated — can change the BASE at will; each new BASE is re-parsed. A crafted BASE therefore writes attacker-chosen bytes past the end of a fixed static object in .bss: up to roughly 236 bytes for an oversized metadata LTV, plus whole struct bt_bap_bass_subgroup records for each subgroup beyond CONFIG_BT_BAP_BASS_MAX_SUBGROUPS. This is memory corruption of adjacent Bluetooth-audio state reachable with no pairing, bonding or GATT connection, with a potential for remote code execution in the Bluetooth RX thread; in addition, the unvalidated metadata_len is forwarded to bt_bap_scan_delegator_mod_src(), which neither clamps it nor rejects it, leading to a further copy into the receive state and to out-of-bounds memory being disclosed in the BASS receive-state notification sent to a connected Broadcast Assistant. The fix rejects a BASE carrying more subgroups than the receive state can hold (discarding the update entirely) and omits metadata that does not fit rather than copying it, and additionally honours the previously-ignored error return of the subgroup decode pass.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-10T02:00:30.356Z","source_hash":"content-fingerprint:fnv1a-f15f8f51","affected_system":{"organization":"The LE Audio Broadcast Sink in subsys/bluetooth/audio/bapbroadcastsink.c copies subgroup metadata from a received Basic Audio Announcement (BASE) into the static Broadcast Audio Scan Service parameter structure modsrcparam without any bounds check. In basesubgroupmetacb() the destination element was selected as modsrcparam.subgroups[modsrcparam.numsubgroups] with no test against ARRAYSIZE(modsrcparam.subgroups) (sized by CONFIGBTBAPBASSMAXSUBGROUPS, default 1), and the metadata was copied with memcpy() using the raw on-air length returned by btbapbasegetsubgroupcodecmeta() into a metadata array sized by CONFIGBTAUDIOCODECCFGMAXMETADATASIZE (default 4). The BASE validator btbapbasegetbasefromad() only checks structural consistency and permits up to ~24 subgroups and metadata LTVs of ~240 octets. The defect is reached from the periodic advertising receive callback project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-19570-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The LE Audio Broadcast Sink in subsys/bluetooth/audio/bap_broadcast_sink.c copies subgroup metadata from a received Basic Audio Announcement (BASE) into the static Broadcast Audio Scan Service parameter structure mod_src_param without any bounds check. In base_subgroup_meta_cb() the destination element was selected as mod_src_param.subgroups[mod_src_param.num_subgroups] with no test against ARRAY_SIZE(mod_src_param.subgroups) (sized by CONFIG_BT_BAP_BASS_MAX_SUBGROUPS, default 1), and the metadata was copied with memcpy() using the raw on-air length returned by bt_bap_base_get_subgroup_codec_meta() into a metadata array sized by CONFIG_BT_AUDIO_CODEC_CFG_MAX_METADATA_SIZE (default 4). The BASE validator bt_bap_base_get_base_from_ad() only checks structural consistency and permits up to ~24 subgroups and metadata LTVs of ~240 octets. The defect is reached from the periodic advertising receive callback: pa_recv() → bt_data_parse() → pa_decode_base() → update_recv_state_base() → bt_bap_base_foreach_subgroup() → base_subgroup_meta_cb(). Every broadcast sink registers a scan-delegator receive state at creation (bt_bap_broadcast_sink_create() calls broadcast_sink_add_src()), and CONFIG_BT_BAP_BROADCAST_SINK depends on CONFIG_BT_BAP_SCAN_DELEGATOR, so the path is active in every broadcast-sink build once the device is periodic-advertising-synced. An attacker in radio range who operates a broadcast source the device syncs to — or who impersonates the advertiser address and SID of one already in use, periodic advertising data being unauthenticated — can change the BASE at will; each new BASE is re-parsed. A crafted BASE therefore writes attacker-chosen bytes past the end of a fixed static object in .bss: up to roughly 236 bytes for an oversized metadata LTV, plus whole struct bt_bap_bass_subgroup records for each subgroup beyond CONFIG_BT_BAP_BASS_MAX_SUBGROUPS. This is memory corruption of adjacent Bluetooth-audio state reachable with no pairing, bonding or GATT connection, with a potential for remote code execution in the Bluetooth RX thread; in addition, the unvalidated metadata_len is forwarded to bt_bap_scan_delegator_mod_src(), which neither clamps it nor rejects it, leading to a further copy into the receive state and to out-of-bounds memory being disclosed in the BASS receive-state notification sent to a connected Broadcast Assistant. The fix rejects a BASE carrying more subgroups than the receive state can hold (discarding the update entirely) and omits metadata that does not fit rather than copying it, and additionally honours the previously-ignored error return of the subgroup decode pass.","source_quote_or_pointer":"Security Advisory CVE-2026-19570","fact_id":"SEA-CVE-2026-19570-F1","document_citation":"Security Advisory CVE-2026-19570"},{"id":"SEA-CVE-2026-19570-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The LE Audio Broadcast Sink in subsys/bluetooth/audio/bapbroadcastsink.c copies subgroup metadata from a received Basic Audio Announcement (BASE) into the static Broadcast Audio Scan Service parameter structure modsrcparam without any bounds check.","source_quote_or_pointer":"Advisory description (CVE-2026-19570)","fact_id":"SEA-CVE-2026-19570-F2","document_citation":"Advisory description (CVE-2026-19570)"}],"source_stated_contributors":["The LE Audio Broadcast Sink in subsys/bluetooth/audio/bapbroadcastsink.c copies subgroup metadata from a received Basic Audio Announcement (BASE) into the static Broadcast Audio Scan Service parameter structure modsrcparam without any bounds check."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","arch.async_job"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-19570","reporting_entity":"CVE-2026-19570","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-19570-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-19570-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-19570"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108157","title":"Pingvin Share X from 0.19.0 before 1.22.0 contains an improper authentication vulnerability that allows remote unauthenticated attackers to take over accounts by abusing automatic OAuth email linking in OAuthService.signUp(). Attackers can register a victim's unverified email on an enabled OAuth/OIDC provider, exploiting the missing email_verified check in GenericOidcProvider, to sign in as the victim including administrators while bypassing TOTP.","display_title":"Security issue reported in Software component","display_summary":"Pingvin Share X from 0.19.0 before 1.22.0 contains an improper authentication vulnerability that allows remote unauthenticated attackers to take over accounts by abusing automatic OAuth email linking in…","display_reference":"CVE-2026-108157","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108157","source_title":"Pingvin Share X from 0.19.0 before 1.22.0 contains an improper authentication vulnerability that allows remote unauthenticated attackers to take over accounts by abusing automatic OAuth email linking in OAuthService.signUp(). Attackers can register a victim's unverified email on an enabled OAuth/OIDC provider, exploiting the missing email_verified check in GenericOidcProvider, to sign in as the victim including administrators while bypassing TOTP.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-10T02:00:30.356Z","source_hash":"content-fingerprint:fnv1a-1e8f9f5","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108157-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Pingvin Share X from 0.19.0 before 1.22.0 contains an improper authentication vulnerability that allows remote unauthenticated attackers to take over accounts by abusing automatic OAuth email linking in OAuthService.signUp(). Attackers can register a victim's unverified email on an enabled OAuth/OIDC provider, exploiting the missing email_verified check in GenericOidcProvider, to sign in as the victim including administrators while bypassing TOTP.","source_quote_or_pointer":"Security Advisory CVE-2026-108157","fact_id":"SEA-CVE-2026-108157-F1","document_citation":"Security Advisory CVE-2026-108157"},{"id":"SEA-CVE-2026-108157-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Pingvin Share X from 0.19.0 before 1.22.0 contains an improper authentication vulnerability that allows remote unauthenticated attackers to take over accounts by abusing automatic OAuth email linking in OAuthService.signUp().","source_quote_or_pointer":"Advisory description (CVE-2026-108157)","fact_id":"SEA-CVE-2026-108157-F2","document_citation":"Advisory description (CVE-2026-108157)"}],"source_stated_contributors":["Pingvin Share X from 0.19.0 before 1.22.0 contains an improper authentication vulnerability that allows remote unauthenticated attackers to take over accounts by abusing automatic OAuth email linking in OAuthService.signUp()."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.credentials_secrets"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108157","reporting_entity":"CVE-2026-108157","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108157-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108157-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-108157"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108125","title":"Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in wp-post-author. This issue affects wp-post-author version 4.0.0 prior to 4.1.0.","display_title":"Software component issue could expose or alter stored data","display_summary":"Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in wp-post-author.","display_reference":"CVE-2026-108125","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108125","source_title":"Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in wp-post-author. This issue affects wp-post-author version 4.0.0 prior to 4.1.0.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-10T02:00:30.356Z","source_hash":"content-fingerprint:fnv1a-72a9782c","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108125-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in wp-post-author. This issue affects wp-post-author version 4.0.0 prior to 4.1.0.","source_quote_or_pointer":"Security Advisory CVE-2026-108125","fact_id":"SEA-CVE-2026-108125-F1","document_citation":"Security Advisory CVE-2026-108125"},{"id":"SEA-CVE-2026-108125-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in wp-post-author.","source_quote_or_pointer":"Advisory description (CVE-2026-108125)","fact_id":"SEA-CVE-2026-108125-F2","document_citation":"Advisory description (CVE-2026-108125)"}],"source_stated_contributors":["Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in wp-post-author."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108125","reporting_entity":"CVE-2026-108125","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108125-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108125-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108125"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108124","title":"Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in wp-post-author. This issue affects wp-post-author before 4.1.0.","display_title":"Software component issue could expose or alter stored data","display_summary":"Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in wp-post-author.","display_reference":"CVE-2026-108124","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108124","source_title":"Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in wp-post-author. This issue affects wp-post-author before 4.1.0.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-10T02:00:30.356Z","source_hash":"content-fingerprint:fnv1a-b1cd6cc3","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108124-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in wp-post-author. This issue affects wp-post-author before 4.1.0.","source_quote_or_pointer":"Security Advisory CVE-2026-108124","fact_id":"SEA-CVE-2026-108124-F1","document_citation":"Security Advisory CVE-2026-108124"},{"id":"SEA-CVE-2026-108124-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in wp-post-author.","source_quote_or_pointer":"Advisory description (CVE-2026-108124)","fact_id":"SEA-CVE-2026-108124-F2","document_citation":"Advisory description (CVE-2026-108124)"}],"source_stated_contributors":["Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in wp-post-author."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108124","reporting_entity":"CVE-2026-108124","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108124-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108124-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108124"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108109","title":"PHPNuxBill through 2025.3.20 contains an account takeover vulnerability in the customer password reset flow in system/controllers/forgot.php that allows unauthenticated attackers to brute-force the 6-digit otp_code. Attackers knowing a customer username can guess the code without attempt limits or lockout, then read the newly set password from the HTTP response to hijack the account.","display_title":"Software component issue could expose accounts or credentials","display_summary":"PHPNuxBill through 2025.3.20 contains an account takeover vulnerability in the customer password reset flow in system/controllers/forgot.php that allows unauthenticated attackers to brute-force the 6-digit otpcode.","display_reference":"CVE-2026-108109","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108109","source_title":"PHPNuxBill through 2025.3.20 contains an account takeover vulnerability in the customer password reset flow in system/controllers/forgot.php that allows unauthenticated attackers to brute-force the 6-digit otp_code. Attackers knowing a customer username can guess the code without attempt limits or lockout, then read the newly set password from the HTTP response to hijack the account.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-10T02:00:30.356Z","source_hash":"content-fingerprint:fnv1a-3b7148f0","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108109-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"PHPNuxBill through 2025.3.20 contains an account takeover vulnerability in the customer password reset flow in system/controllers/forgot.php that allows unauthenticated attackers to brute-force the 6-digit otp_code. Attackers knowing a customer username can guess the code without attempt limits or lockout, then read the newly set password from the HTTP response to hijack the account.","source_quote_or_pointer":"Security Advisory CVE-2026-108109","fact_id":"SEA-CVE-2026-108109-F1","document_citation":"Security Advisory CVE-2026-108109"},{"id":"SEA-CVE-2026-108109-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"PHPNuxBill through 2025.3.20 contains an account takeover vulnerability in the customer password reset flow in system/controllers/forgot.php that allows unauthenticated attackers to brute-force the 6-digit otpcode.","source_quote_or_pointer":"Advisory description (CVE-2026-108109)","fact_id":"SEA-CVE-2026-108109-F2","document_citation":"Advisory description (CVE-2026-108109)"}],"source_stated_contributors":["PHPNuxBill through 2025.3.20 contains an account takeover vulnerability in the customer password reset flow in system/controllers/forgot.php that allows unauthenticated attackers to brute-force the 6-digit otpcode."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108109","reporting_entity":"CVE-2026-108109","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108109-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108109-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108109"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-107838","title":"RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. From version 2023.07 through version 2026.07, nanocoap_fileserver callers in sys/net/application_layer/nanocoap/fileserver.c ignore a failure returned by _resp_init() when coap_build_reply() cannot fit a response header into the response buffer. A remote client can send a CoAP request with a sufficiently large extended token when nanocoap_token_ext is enabled, causing response initialization to fail while _get_file() or _get_directory() continues with stale response state. The path then reaches _calc_szx2() and its pdu->payload_len > reserve assertion, terminating the affected service or device task. No fixed release is available as of this review.","display_title":"Security issue reported in Software component","display_summary":"RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems.","display_reference":"CVE-2026-107838","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107838","source_title":"RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. From version 2023.07 through version 2026.07, nanocoap_fileserver callers in sys/net/application_layer/nanocoap/fileserver.c ignore a failure returned by _resp_init() when coap_build_reply() cannot fit a response header into the response buffer. A remote client can send a CoAP request with a sufficiently large extended token when nanocoap_token_ext is enabled, causing response initialization to fail while _get_file() or _get_directory() continues with stale response state. The path then reaches _calc_szx2() and its pdu->payload_len > reserve assertion, terminating the affected service or device task. No fixed release is available as of this review.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-10T02:00:30.356Z","source_hash":"content-fingerprint:fnv1a-f0ebc47e","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-107838-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. From version 2023.07 through version 2026.07, nanocoap_fileserver callers in sys/net/application_layer/nanocoap/fileserver.c ignore a failure returned by _resp_init() when coap_build_reply() cannot fit a response header into the response buffer. A remote client can send a CoAP request with a sufficiently large extended token when nanocoap_token_ext is enabled, causing response initialization to fail while _get_file() or _get_directory() continues with stale response state. The path then reaches _calc_szx2() and its pdu->payload_len > reserve assertion, terminating the affected service or device task. No fixed release is available as of this review.","source_quote_or_pointer":"Security Advisory CVE-2026-107838","fact_id":"SEA-CVE-2026-107838-F1","document_citation":"Security Advisory CVE-2026-107838"},{"id":"SEA-CVE-2026-107838-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. From version 2023.07 through version 2026.07, nanocoapfileserver callers in sys/net/applicationlayer/nanocoap/fileserver.c ignore a failure returned by respinit() when coapbuildreply() cannot fit…","source_quote_or_pointer":"Advisory description (CVE-2026-107838)","fact_id":"SEA-CVE-2026-107838-F2","document_citation":"Advisory description (CVE-2026-107838)"}],"source_stated_contributors":["RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. From version 2023.07 through version 2026.07, nanocoapfileserver callers in sys/net/applicationlayer/nanocoap/fileserver.c ignore a failure returned by respinit() when coapbuildreply() cannot fit…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-107838","reporting_entity":"CVE-2026-107838","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-107838-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-107838-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-107838"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-107836","title":"RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. In 2026.07 and earlier, the nanoCoAP client function nanocoap_sock_get_slice() in sys/net/application_layer/nanocoap/sock.c accepts a Block2 response when _block_cb() sees the expected block number without also verifying that the server-controlled szx and derived offset match the requested block geometry. A malicious CoAP server can return the expected block number with a larger block size, causing the derived offset to exceed the client slice offset and making ctx->offset - offset underflow in _2buf_slice(). The resulting buffer-relative calculation can read before the payload buffer and crash the client, causing denial of service and potentially exposing adjacent memory. No fixed release is available as of this review.","display_title":"Software component issue could make the service unavailable","display_summary":"RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems.","display_reference":"CVE-2026-107836","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107836","source_title":"RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. In 2026.07 and earlier, the nanoCoAP client function nanocoap_sock_get_slice() in sys/net/application_layer/nanocoap/sock.c accepts a Block2 response when _block_cb() sees the expected block number without also verifying that the server-controlled szx and derived offset match the requested block geometry. A malicious CoAP server can return the expected block number with a larger block size, causing the derived offset to exceed the client slice offset and making ctx->offset - offset underflow in _2buf_slice(). The resulting buffer-relative calculation can read before the payload buffer and crash the client, causing denial of service and potentially exposing adjacent memory. No fixed release is available as of this review.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-10T02:00:30.356Z","source_hash":"content-fingerprint:fnv1a-679198ec","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-107836-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. In 2026.07 and earlier, the nanoCoAP client function nanocoap_sock_get_slice() in sys/net/application_layer/nanocoap/sock.c accepts a Block2 response when _block_cb() sees the expected block number without also verifying that the server-controlled szx and derived offset match the requested block geometry. A malicious CoAP server can return the expected block number with a larger block size, causing the derived offset to exceed the client slice offset and making ctx->offset - offset underflow in _2buf_slice(). The resulting buffer-relative calculation can read before the payload buffer and crash the client, causing denial of service and potentially exposing adjacent memory. No fixed release is available as of this review.","source_quote_or_pointer":"Security Advisory CVE-2026-107836","fact_id":"SEA-CVE-2026-107836-F1","document_citation":"Security Advisory CVE-2026-107836"},{"id":"SEA-CVE-2026-107836-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. In 2026.07 and earlier, the nanoCoAP client function nanocoapsockgetslice() in sys/net/applicationlayer/nanocoap/sock.c accepts a Block2 response when blockcb() sees the expected block number…","source_quote_or_pointer":"Advisory description (CVE-2026-107836)","fact_id":"SEA-CVE-2026-107836-F2","document_citation":"Advisory description (CVE-2026-107836)"}],"source_stated_contributors":["RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. In 2026.07 and earlier, the nanoCoAP client function nanocoapsockgetslice() in sys/net/applicationlayer/nanocoap/sock.c accepts a Block2 response when blockcb() sees the expected block number…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-107836","reporting_entity":"CVE-2026-107836","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-107836-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-107836-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-107836"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-107824","title":"x64dbg-MCP Server is a native Model Context Protocol (MCP) plugin for x64dbg that exposes the debugger's full functionality over HTTP. Prior to 1.1, x64dbg-MCP Server exposes all MCP debugger tools over HTTP and SSE without authentication while listening on 0.0.0.0 by default. Any unauthenticated network client that can reach the default port, 9094 for x64 or 9095 for x32, can execute arbitrary x64dbg commands, attach to processes by PID, read and write debuggee memory, and write files to arbitrary paths. This issue is fixed in version 1.1.","display_title":"Security issue reported in Software component","display_summary":"x64dbg-MCP Server is a native Model Context Protocol (MCP) plugin for x64dbg that exposes the debugger's full functionality over HTTP.","display_reference":"CVE-2026-107824","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107824","source_title":"x64dbg-MCP Server is a native Model Context Protocol (MCP) plugin for x64dbg that exposes the debugger's full functionality over HTTP. Prior to 1.1, x64dbg-MCP Server exposes all MCP debugger tools over HTTP and SSE without authentication while listening on 0.0.0.0 by default. Any unauthenticated network client that can reach the default port, 9094 for x64 or 9095 for x32, can execute arbitrary x64dbg commands, attach to processes by PID, read and write debuggee memory, and write files to arbitrary paths. This issue is fixed in version 1.1.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-10T02:00:30.356Z","source_hash":"content-fingerprint:fnv1a-86596671","affected_system":{"organization":"Software component project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-107824-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"x64dbg-MCP Server is a native Model Context Protocol (MCP) plugin for x64dbg that exposes the debugger's full functionality over HTTP. Prior to 1.1, x64dbg-MCP Server exposes all MCP debugger tools over HTTP and SSE without authentication while listening on 0.0.0.0 by default. Any unauthenticated network client that can reach the default port, 9094 for x64 or 9095 for x32, can execute arbitrary x64dbg commands, attach to processes by PID, read and write debuggee memory, and write files to arbitrary paths. This issue is fixed in version 1.1.","source_quote_or_pointer":"Security Advisory CVE-2026-107824","fact_id":"SEA-CVE-2026-107824-F1","document_citation":"Security Advisory CVE-2026-107824"},{"id":"SEA-CVE-2026-107824-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"x64dbg-MCP Server is a native Model Context Protocol (MCP) plugin for x64dbg that exposes the debugger's full functionality over HTTP. Prior to 1.1, x64dbg-MCP Server exposes all MCP debugger tools over HTTP and SSE without authentication while listening on 0.0.0.0 by default.","source_quote_or_pointer":"Advisory description (CVE-2026-107824)","fact_id":"SEA-CVE-2026-107824-F2","document_citation":"Advisory description (CVE-2026-107824)"}],"source_stated_contributors":["x64dbg-MCP Server is a native Model Context Protocol (MCP) plugin for x64dbg that exposes the debugger's full functionality over HTTP. Prior to 1.1, x64dbg-MCP Server exposes all MCP debugger tools over HTTP and SSE without authentication while listening on 0.0.0.0 by default."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-010"],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-107824","reporting_entity":"CVE-2026-107824","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-107824-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-107824-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-107824"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-107820","title":"x64dbg-MCP Server is a native Model Context Protocol (MCP) plugin for x64dbg that exposes the debugger's full functionality over HTTP. Prior to 1.2, src/core/mcp_server.zig parses an unbounded Content-Length value in parseContentLength() and uses it in unchecked usize addition in wsRecv() before token authentication. The server listens on 0.0.0.0 by default in affected versions. An unauthenticated network client can supply a near-maximum Content-Length value to trigger a runtime integer-overflow panic in Debug and ReleaseSafe builds, terminating the entire x64dbg process and its live debugging session. The overflowed value is used only in a comparison, so the impact is limited to denial of service rather than memory corruption or code execution. This issue is fixed in version 1.2.","display_title":"Software component issue could allow unintended commands to run","display_summary":"x64dbg-MCP Server is a native Model Context Protocol (MCP) plugin for x64dbg that exposes the debugger's full functionality over HTTP.","display_reference":"CVE-2026-107820","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107820","source_title":"x64dbg-MCP Server is a native Model Context Protocol (MCP) plugin for x64dbg that exposes the debugger's full functionality over HTTP. Prior to 1.2, src/core/mcp_server.zig parses an unbounded Content-Length value in parseContentLength() and uses it in unchecked usize addition in wsRecv() before token authentication. The server listens on 0.0.0.0 by default in affected versions. An unauthenticated network client can supply a near-maximum Content-Length value to trigger a runtime integer-overflow panic in Debug and ReleaseSafe builds, terminating the entire x64dbg process and its live debugging session. The overflowed value is used only in a comparison, so the impact is limited to denial of service rather than memory corruption or code execution. This issue is fixed in version 1.2.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-10T02:00:30.356Z","source_hash":"content-fingerprint:fnv1a-5d66943b","affected_system":{"organization":"Software component project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-107820-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"x64dbg-MCP Server is a native Model Context Protocol (MCP) plugin for x64dbg that exposes the debugger's full functionality over HTTP. Prior to 1.2, src/core/mcp_server.zig parses an unbounded Content-Length value in parseContentLength() and uses it in unchecked usize addition in wsRecv() before token authentication. The server listens on 0.0.0.0 by default in affected versions. An unauthenticated network client can supply a near-maximum Content-Length value to trigger a runtime integer-overflow panic in Debug and ReleaseSafe builds, terminating the entire x64dbg process and its live debugging session. The overflowed value is used only in a comparison, so the impact is limited to denial of service rather than memory corruption or code execution. This issue is fixed in version 1.2.","source_quote_or_pointer":"Security Advisory CVE-2026-107820","fact_id":"SEA-CVE-2026-107820-F1","document_citation":"Security Advisory CVE-2026-107820"},{"id":"SEA-CVE-2026-107820-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"x64dbg-MCP Server is a native Model Context Protocol (MCP) plugin for x64dbg that exposes the debugger's full functionality over HTTP. Prior to 1.2, src/core/mcpserver.zig parses an unbounded Content-Length value in parseContentLength() and uses it in unchecked usize addition in wsRecv() before token authentication.","source_quote_or_pointer":"Advisory description (CVE-2026-107820)","fact_id":"SEA-CVE-2026-107820-F2","document_citation":"Advisory description (CVE-2026-107820)"}],"source_stated_contributors":["x64dbg-MCP Server is a native Model Context Protocol (MCP) plugin for x64dbg that exposes the debugger's full functionality over HTTP. Prior to 1.2, src/core/mcpserver.zig parses an unbounded Content-Length value in parseContentLength() and uses it in unchecked usize addition in wsRecv() before token authentication."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-004","SEA-FM-002","SEA-FM-010"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-107820","reporting_entity":"CVE-2026-107820","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-107820-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-107820-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-107820"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-107803","title":"ProcessMaker is an open source workflow management software suite. Prior to 2026.14.3, the GET /api/1.0/tasks endpoint in ProcessMaker is vulnerable to SQL injection through the order_by parameter because ProcessMaker\\Traits\\TaskControllerIndexMethods::applyColumnOrdering() concatenates a user-controlled process_requests column name into a DB::raw() SQL subquery without validation or parameter binding. Any authenticated user can use blind, time-based queries to infer and extract data accessible to the ProcessMaker database account. This issue is fixed in version 2026.14.3.","display_title":"Software component issue could expose or alter stored data","display_summary":"ProcessMaker is an open source workflow management software suite. Prior to 2026.14.3, the GET /api/1.0/tasks endpoint in ProcessMaker is vulnerable to SQL injection through the orderby parameter because…","display_reference":"CVE-2026-107803","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107803","source_title":"ProcessMaker is an open source workflow management software suite. Prior to 2026.14.3, the GET /api/1.0/tasks endpoint in ProcessMaker is vulnerable to SQL injection through the order_by parameter because ProcessMaker\\Traits\\TaskControllerIndexMethods::applyColumnOrdering() concatenates a user-controlled process_requests column name into a DB::raw() SQL subquery without validation or parameter binding. Any authenticated user can use blind, time-based queries to infer and extract data accessible to the ProcessMaker database account. This issue is fixed in version 2026.14.3.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-10T00:00:11.342Z","source_hash":"content-fingerprint:fnv1a-3ebf6870","affected_system":{"organization":"ProcessMaker is an open source workflow management software suite. Prior to 2026.14.3, the GET /api/1.0/tasks endpoint in ProcessMaker is vulnerable to SQL injection through the orderby parameter because ProcessMaker\\Traits\\TaskControllerIndexMethods project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-107803-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"ProcessMaker is an open source workflow management software suite. Prior to 2026.14.3, the GET /api/1.0/tasks endpoint in ProcessMaker is vulnerable to SQL injection through the order_by parameter because ProcessMaker\\Traits\\TaskControllerIndexMethods::applyColumnOrdering() concatenates a user-controlled process_requests column name into a DB::raw() SQL subquery without validation or parameter binding. Any authenticated user can use blind, time-based queries to infer and extract data accessible to the ProcessMaker database account. This issue is fixed in version 2026.14.3.","source_quote_or_pointer":"Security Advisory CVE-2026-107803","fact_id":"SEA-CVE-2026-107803-F1","document_citation":"Security Advisory CVE-2026-107803"},{"id":"SEA-CVE-2026-107803-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"ProcessMaker is an open source workflow management software suite. Prior to 2026.14.3, the GET /api/1.0/tasks endpoint in ProcessMaker is vulnerable to SQL injection through the orderby parameter because ProcessMaker\\Traits\\TaskControllerIndexMethods::applyColumnOrdering() concatenates a user-controlled…","source_quote_or_pointer":"Advisory description (CVE-2026-107803)","fact_id":"SEA-CVE-2026-107803-F2","document_citation":"Advisory description (CVE-2026-107803)"}],"source_stated_contributors":["ProcessMaker is an open source workflow management software suite. Prior to 2026.14.3, the GET /api/1.0/tasks endpoint in ProcessMaker is vulnerable to SQL injection through the orderby parameter because ProcessMaker\\Traits\\TaskControllerIndexMethods::applyColumnOrdering() concatenates a user-controlled…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-107803","reporting_entity":"CVE-2026-107803","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-107803-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-107803-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-107803"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-106155","title":"In Progress® Telerik® Report Server prior to version 12.2.26.1007, a stored cross-site scripting vulnerability in the shared reporting engine allows an authenticated report author to embed javascript: or vbscript: URLs in report navigation actions or HTML text box links. When another user views the malicious report and the embedded navigation is triggered, attacker-controlled script can execute in the web report viewer's origin. In a multi-user Report Server deployment, this can enable privilege escalation by performing actions in a higher-privilege user's authenticated session, including an administrator's session.","display_title":"Software component issue could run attacker-controlled scripts in a browser","display_summary":"In Progress® Telerik® Report Server prior to version 12.2.26.1007, a stored cross-site scripting vulnerability in the shared reporting engine allows an authenticated report author to embed javascript: or vbscript: URLs…","display_reference":"CVE-2026-106155","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-106155","source_title":"In Progress® Telerik® Report Server prior to version 12.2.26.1007, a stored cross-site scripting vulnerability in the shared reporting engine allows an authenticated report author to embed javascript: or vbscript: URLs in report navigation actions or HTML text box links. When another user views the malicious report and the embedded navigation is triggered, attacker-controlled script can execute in the web report viewer's origin. In a multi-user Report Server deployment, this can enable privilege escalation by performing actions in a higher-privilege user's authenticated session, including an administrator's session.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-10T00:00:11.342Z","source_hash":"content-fingerprint:fnv1a-fd233159","affected_system":{"organization":"In Progress® Telerik® Report Server prior to version 12.2.26.1007, a stored cross-site scripting vulnerability in the shared reporting engine allows an authenticated report author to embed javascript project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-106155-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"In Progress® Telerik® Report Server prior to version 12.2.26.1007, a stored cross-site scripting vulnerability in the shared reporting engine allows an authenticated report author to embed javascript: or vbscript: URLs in report navigation actions or HTML text box links. When another user views the malicious report and the embedded navigation is triggered, attacker-controlled script can execute in the web report viewer's origin. In a multi-user Report Server deployment, this can enable privilege escalation by performing actions in a higher-privilege user's authenticated session, including an administrator's session.","source_quote_or_pointer":"Security Advisory CVE-2026-106155","fact_id":"SEA-CVE-2026-106155-F1","document_citation":"Security Advisory CVE-2026-106155"},{"id":"SEA-CVE-2026-106155-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"In Progress® Telerik® Report Server prior to version 12.2.26.1007, a stored cross-site scripting vulnerability in the shared reporting engine allows an authenticated report author to embed javascript: or vbscript: URLs in report navigation actions or HTML text box links.","source_quote_or_pointer":"Advisory description (CVE-2026-106155)","fact_id":"SEA-CVE-2026-106155-F2","document_citation":"Advisory description (CVE-2026-106155)"}],"source_stated_contributors":["In Progress® Telerik® Report Server prior to version 12.2.26.1007, a stored cross-site scripting vulnerability in the shared reporting engine allows an authenticated report author to embed javascript: or vbscript: URLs in report navigation actions or HTML text box links."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Elevated privileges","Boundary bypass"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-106155","reporting_entity":"CVE-2026-106155","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-106155-SG1","label":"Enforce privilege boundaries in code","description":"Require explicit, server-verified authorization for privileged operations and isolate components with separate identities.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-106155-SG1","label":"Enforce privilege boundaries in code","description":"Require explicit, server-verified authorization for privileged operations and isolate components with separate identities.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A low-privilege actor reached a high-privilege capability. Enforce approval and privilege boundaries in deterministic code, not by convention.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-106155"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-106145","title":"In Progress® Telerik® Report Server prior to version 12.2.26.1007, incorrect privilege assignment in the service-agent SignalR hub allows an authenticated user, including a low-privilege or guest account with a valid bearer token, to register as a trusted service agent. On the next server settings-synchronization event, the rogue agent receives storage settings and encryption private keys. This privilege escalation enables disclosure of protected secrets, including stored data-source credentials and connection strings, and allows agent impersonation and interference with task dispatch.","display_title":"Software component issue could expose accounts or credentials","display_summary":"In Progress® Telerik® Report Server prior to version 12.2.26.1007, incorrect privilege assignment in the service-agent SignalR hub allows an authenticated user, including a low-privilege or guest account with a valid…","display_reference":"CVE-2026-106145","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-106145","source_title":"In Progress® Telerik® Report Server prior to version 12.2.26.1007, incorrect privilege assignment in the service-agent SignalR hub allows an authenticated user, including a low-privilege or guest account with a valid bearer token, to register as a trusted service agent. On the next server settings-synchronization event, the rogue agent receives storage settings and encryption private keys. This privilege escalation enables disclosure of protected secrets, including stored data-source credentials and connection strings, and allows agent impersonation and interference with task dispatch.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T22:00:10.666Z","source_hash":"content-fingerprint:fnv1a-db289c94","affected_system":{"organization":"Software component project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-106145-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"In Progress® Telerik® Report Server prior to version 12.2.26.1007, incorrect privilege assignment in the service-agent SignalR hub allows an authenticated user, including a low-privilege or guest account with a valid bearer token, to register as a trusted service agent. On the next server settings-synchronization event, the rogue agent receives storage settings and encryption private keys. This privilege escalation enables disclosure of protected secrets, including stored data-source credentials and connection strings, and allows agent impersonation and interference with task dispatch.","source_quote_or_pointer":"Security Advisory CVE-2026-106145","fact_id":"SEA-CVE-2026-106145-F1","document_citation":"Security Advisory CVE-2026-106145"},{"id":"SEA-CVE-2026-106145-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"In Progress® Telerik® Report Server prior to version 12.2.26.1007, incorrect privilege assignment in the service-agent SignalR hub allows an authenticated user, including a low-privilege or guest account with a valid bearer token, to register as a trusted service agent.","source_quote_or_pointer":"Advisory description (CVE-2026-106145)","fact_id":"SEA-CVE-2026-106145-F2","document_citation":"Advisory description (CVE-2026-106145)"}],"source_stated_contributors":["In Progress® Telerik® Report Server prior to version 12.2.26.1007, incorrect privilege assignment in the service-agent SignalR hub allows an authenticated user, including a low-privilege or guest account with a valid bearer token, to register as a trusted service agent."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","data.credentials_secrets","arch.event_driven","arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-012","SEA-FM-010"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-106145","reporting_entity":"CVE-2026-106145","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-106145-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-106145-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-106145"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-104081","title":"KodExplorer before 4.55 contains a path traversal vulnerability in the unzip_pre_name() function within app/function/helper.function.php, where a single non-recursive str_replace() sanitization pass can be bypassed using crafted filenames like \"....//\", combined with PclZip's extract() call in KodArchive.class.php lacking the PCLZIP_OPT_EXTRACT_DIR_RESTRICTION option. Authenticated attackers can upload a malicious ZIP archive with traversal sequences to overwrite arbitrary files such as core JavaScript assets, enabling stored XSS that leads to admin account takeover and subsequent remote code execution via unrestricted PHP file upload.","display_title":"Software component issue could allow unintended commands to run","display_summary":"KodExplorer before 4.55 contains a path traversal vulnerability in the unzipprename() function within app/function/helper.function.php, where a single non-recursive strreplace() sanitization pass can be bypassed using…","display_reference":"CVE-2026-104081","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104081","source_title":"KodExplorer before 4.55 contains a path traversal vulnerability in the unzip_pre_name() function within app/function/helper.function.php, where a single non-recursive str_replace() sanitization pass can be bypassed using crafted filenames like \"....//\", combined with PclZip's extract() call in KodArchive.class.php lacking the PCLZIP_OPT_EXTRACT_DIR_RESTRICTION option. Authenticated attackers can upload a malicious ZIP archive with traversal sequences to overwrite arbitrary files such as core JavaScript assets, enabling stored XSS that leads to admin account takeover and subsequent remote code execution via unrestricted PHP file upload.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T22:00:10.666Z","source_hash":"content-fingerprint:fnv1a-6a670575","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-104081-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"KodExplorer before 4.55 contains a path traversal vulnerability in the unzip_pre_name() function within app/function/helper.function.php, where a single non-recursive str_replace() sanitization pass can be bypassed using crafted filenames like \"....//\", combined with PclZip's extract() call in KodArchive.class.php lacking the PCLZIP_OPT_EXTRACT_DIR_RESTRICTION option. Authenticated attackers can upload a malicious ZIP archive with traversal sequences to overwrite arbitrary files such as core JavaScript assets, enabling stored XSS that leads to admin account takeover and subsequent remote code execution via unrestricted PHP file upload.","source_quote_or_pointer":"Security Advisory CVE-2026-104081","fact_id":"SEA-CVE-2026-104081-F1","document_citation":"Security Advisory CVE-2026-104081"},{"id":"SEA-CVE-2026-104081-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"KodExplorer before 4.55 contains a path traversal vulnerability in the unzipprename() function within app/function/helper.function.php, where a single non-recursive strreplace() sanitization pass can be bypassed using crafted filenames like \"....//\", combined with PclZip's extract() call in KodArchive.class.php…","source_quote_or_pointer":"Advisory description (CVE-2026-104081)","fact_id":"SEA-CVE-2026-104081-F2","document_citation":"Advisory description (CVE-2026-104081)"}],"source_stated_contributors":["KodExplorer before 4.55 contains a path traversal vulnerability in the unzipprename() function within app/function/helper.function.php, where a single non-recursive strreplace() sanitization pass can be bypassed using crafted filenames like \"....//\", combined with PclZip's extract() call in KodArchive.class.php…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii","data.untrusted_external_text","data.uploaded_files"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-104081","reporting_entity":"CVE-2026-104081","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-104081-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-104081-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-104081"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-102554","title":"Allocation of resources without limits or throttling (CWE-770) during Java object deserialization in Google Guava versions 4.0 through 33.7.1 allows an attacker to cause a Denial of Service via OutOfMemoryError. When deserializing CompactHashMap, CompactHashSet, or MapMakerInternalMap instances, Guava eagerly allocates an array based on a caller-specified size parameter without throttling, permitting memory exhaustion from crafted serialization streams.","display_title":"Software component issue could make the service unavailable","display_summary":"Allocation of resources without limits or throttling (CWE-770) during Java object deserialization in Google Guava versions 4.0 through 33.7.1 allows an attacker to cause a Denial of Service via OutOfMemoryError.","display_reference":"CVE-2026-102554","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-102554","source_title":"Allocation of resources without limits or throttling (CWE-770) during Java object deserialization in Google Guava versions 4.0 through 33.7.1 allows an attacker to cause a Denial of Service via OutOfMemoryError. When deserializing CompactHashMap, CompactHashSet, or MapMakerInternalMap instances, Guava eagerly allocates an array based on a caller-specified size parameter without throttling, permitting memory exhaustion from crafted serialization streams.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T22:00:10.666Z","source_hash":"content-fingerprint:fnv1a-e8d0b1de","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-102554-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Allocation of resources without limits or throttling (CWE-770) during Java object deserialization in Google Guava versions 4.0 through 33.7.1 allows an attacker to cause a Denial of Service via OutOfMemoryError. When deserializing CompactHashMap, CompactHashSet, or MapMakerInternalMap instances, Guava eagerly allocates an array based on a caller-specified size parameter without throttling, permitting memory exhaustion from crafted serialization streams.","source_quote_or_pointer":"Security Advisory CVE-2026-102554","fact_id":"SEA-CVE-2026-102554-F1","document_citation":"Security Advisory CVE-2026-102554"},{"id":"SEA-CVE-2026-102554-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Allocation of resources without limits or throttling (CWE-770) during Java object deserialization in Google Guava versions 4.0 through 33.7.1 allows an attacker to cause a Denial of Service via OutOfMemoryError.","source_quote_or_pointer":"Advisory description (CVE-2026-102554)","fact_id":"SEA-CVE-2026-102554-F2","document_citation":"Advisory description (CVE-2026-102554)"}],"source_stated_contributors":["Allocation of resources without limits or throttling (CWE-770) during Java object deserialization in Google Guava versions 4.0 through 33.7.1 allows an attacker to cause a Denial of Service via OutOfMemoryError."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.infrastructure_modification","arch.async_job"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-102554","reporting_entity":"CVE-2026-102554","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-102554-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-102554-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-102554"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108159","title":"AstronRPA through 1.1.6 contains a cross-site scripting vulnerability in the desktop client's smart-component chat that allows remote attackers to execute OS commands by abusing unsanitized LLM output rendered via v-html. Attackers can embed prompt-injection content in a web page so the model emits HTML event handlers invoking the unrestricted open-path IPC handler with shell metacharacters, executing commands as the desktop user.","display_title":"Software component issue could run attacker-controlled scripts in a browser","display_summary":"AstronRPA through 1.1.6 contains a cross-site scripting vulnerability in the desktop client's smart-component chat that allows remote attackers to execute OS commands by abusing unsanitized LLM output rendered via…","display_reference":"CVE-2026-108159","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108159","source_title":"AstronRPA through 1.1.6 contains a cross-site scripting vulnerability in the desktop client's smart-component chat that allows remote attackers to execute OS commands by abusing unsanitized LLM output rendered via v-html. Attackers can embed prompt-injection content in a web page so the model emits HTML event handlers invoking the unrestricted open-path IPC handler with shell metacharacters, executing commands as the desktop user.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T22:00:10.666Z","source_hash":"content-fingerprint:fnv1a-19cce29f","affected_system":{"organization":"Software component project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108159-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"AstronRPA through 1.1.6 contains a cross-site scripting vulnerability in the desktop client's smart-component chat that allows remote attackers to execute OS commands by abusing unsanitized LLM output rendered via v-html. Attackers can embed prompt-injection content in a web page so the model emits HTML event handlers invoking the unrestricted open-path IPC handler with shell metacharacters, executing commands as the desktop user.","source_quote_or_pointer":"Security Advisory CVE-2026-108159","fact_id":"SEA-CVE-2026-108159-F1","document_citation":"Security Advisory CVE-2026-108159"},{"id":"SEA-CVE-2026-108159-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"AstronRPA through 1.1.6 contains a cross-site scripting vulnerability in the desktop client's smart-component chat that allows remote attackers to execute OS commands by abusing unsanitized LLM output rendered via v-html.","source_quote_or_pointer":"Advisory description (CVE-2026-108159)","fact_id":"SEA-CVE-2026-108159-F2","document_citation":"Advisory description (CVE-2026-108159)"}],"source_stated_contributors":["AstronRPA through 1.1.6 contains a cross-site scripting vulnerability in the desktop client's smart-component chat that allows remote attackers to execute OS commands by abusing unsanitized LLM output rendered via v-html."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","arch.event_driven","arch.tool_enabled_agent"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108159","reporting_entity":"CVE-2026-108159","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108159-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108159-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-108159"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-75347","title":"EIPStackGroup OpENer v2.3 and master up to commit 76b95cf contain an expired pointer dereference vulnerability in the EtherNet/IP Common Packet Format (CPF) handling logic. This allows a remote attacker to cause a denial of service.","display_title":"Software component issue could make the service unavailable","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-75347","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-75347","source_title":"EIPStackGroup OpENer v2.3 and master up to commit 76b95cf contain an expired pointer dereference vulnerability in the EtherNet/IP Common Packet Format (CPF) handling logic. This allows a remote attacker to cause a denial of service.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T22:00:10.666Z","source_hash":"content-fingerprint:fnv1a-e7a45bb9","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-75347-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"EIPStackGroup OpENer v2.3 and master up to commit 76b95cf contain an expired pointer dereference vulnerability in the EtherNet/IP Common Packet Format (CPF) handling logic. This allows a remote attacker to cause a denial of service.","source_quote_or_pointer":"Security Advisory CVE-2026-75347","fact_id":"SEA-CVE-2026-75347-F1","document_citation":"Security Advisory CVE-2026-75347"},{"id":"SEA-CVE-2026-75347-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"EIPStackGroup OpENer v2.3 and master up to commit 76b95cf contain an expired pointer dereference vulnerability in the EtherNet/IP Common Packet Format (CPF) handling logic. This allows a remote attacker to cause a denial of service.","source_quote_or_pointer":"Advisory description (CVE-2026-75347)","fact_id":"SEA-CVE-2026-75347-F2","document_citation":"Advisory description (CVE-2026-75347)"}],"source_stated_contributors":["EIPStackGroup OpENer v2.3 and master up to commit 76b95cf contain an expired pointer dereference vulnerability in the EtherNet/IP Common Packet Format (CPF) handling logic. This allows a remote attacker to cause a denial of service."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-75347","reporting_entity":"CVE-2026-75347","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-75347-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-75347-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-75347"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-107815","title":"MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the CONNECT engine's DOS table type used an incorrect boundary check that permitted a one-byte null write beyond a stack buffer at an attacker-controlled offset. An authenticated user able to use the CONNECT engine could cause a crash and potentially remote code execution. This issue is fixed in versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.","display_title":"Software component issue could allow unintended commands to run","display_summary":"MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the CONNECT engine's DOS table type used an incorrect boundary check that permitted…","display_reference":"CVE-2026-107815","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107815","source_title":"MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the CONNECT engine's DOS table type used an incorrect boundary check that permitted a one-byte null write beyond a stack buffer at an attacker-controlled offset. An authenticated user able to use the CONNECT engine could cause a crash and potentially remote code execution. This issue is fixed in versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T22:00:10.666Z","source_hash":"content-fingerprint:fnv1a-edfacab3","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-107815-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the CONNECT engine's DOS table type used an incorrect boundary check that permitted a one-byte null write beyond a stack buffer at an attacker-controlled offset. An authenticated user able to use the CONNECT engine could cause a crash and potentially remote code execution. This issue is fixed in versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.","source_quote_or_pointer":"Security Advisory CVE-2026-107815","fact_id":"SEA-CVE-2026-107815-F1","document_citation":"Security Advisory CVE-2026-107815"},{"id":"SEA-CVE-2026-107815-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the CONNECT engine's DOS table type used an incorrect boundary check that permitted a one-byte null write beyond a stack buffer at an attacker-controlled offset.","source_quote_or_pointer":"Advisory description (CVE-2026-107815)","fact_id":"SEA-CVE-2026-107815-F2","document_citation":"Advisory description (CVE-2026-107815)"}],"source_stated_contributors":["MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the CONNECT engine's DOS table type used an incorrect boundary check that permitted a one-byte null write beyond a stack buffer at an attacker-controlled offset."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-107815","reporting_entity":"CVE-2026-107815","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-107815-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-107815-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-107815"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2025-61560","title":"A race condition vulnerability in the SessionManager of CNCF: Cloud Native Computing Foundation Argo CD v3.0.6 allows attackers to bypass rate limiting and perform a brute force attack via repeated crafted requests.","display_title":"Software component issue could cause actions to run with inconsistent state","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2025-61560","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2025-61560","source_title":"A race condition vulnerability in the SessionManager of CNCF: Cloud Native Computing Foundation Argo CD v3.0.6 allows attackers to bypass rate limiting and perform a brute force attack via repeated crafted requests.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T22:00:10.666Z","source_hash":"content-fingerprint:fnv1a-4e529d76","affected_system":{"organization":"A race condition vulnerability in the SessionManager of CNCF project","product":"Software component","system_type":"Cloud & container infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2025-61560-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A race condition vulnerability in the SessionManager of CNCF: Cloud Native Computing Foundation Argo CD v3.0.6 allows attackers to bypass rate limiting and perform a brute force attack via repeated crafted requests.","source_quote_or_pointer":"Security Advisory CVE-2025-61560","fact_id":"SEA-CVE-2025-61560-F1","document_citation":"Security Advisory CVE-2025-61560"},{"id":"SEA-CVE-2025-61560-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A race condition vulnerability in the SessionManager of CNCF: Cloud Native Computing Foundation Argo CD v3.0.6 allows attackers to bypass rate limiting and perform a brute force attack via repeated crafted requests.","source_quote_or_pointer":"Advisory description (CVE-2025-61560)","fact_id":"SEA-CVE-2025-61560-F2","document_citation":"Advisory description (CVE-2025-61560)"}],"source_stated_contributors":["A race condition vulnerability in the SessionManager of CNCF: Cloud Native Computing Foundation Argo CD v3.0.6 allows attackers to bypass rate limiting and perform a brute force attack via repeated crafted requests."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-001","SEA-FM-008"],"consequences":["Duplicate or inconsistent actions","State divergence"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2025-61560","reporting_entity":"CVE-2025-61560","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2025-61560-SG1","label":"Idempotency and re-validation at execution","description":"Attach idempotency keys to mutations and re-verify state and permissions atomically when the action runs.","target_failure_mode":"SEA-FM-001","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2025-61560-SG1","label":"Idempotency and re-validation at execution","description":"Attach idempotency keys to mutations and re-verify state and permissions atomically when the action runs.","target_failure_mode":"SEA-FM-001","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Concurrent or repeated requests produced inconsistent state. Make state-changing operations idempotent and re-check authorization and state at execution time.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2025-61560"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-7827","title":"A stack-based buffer overflow in the _RdbLoadEntity function of the RDB graph decoders (src/serializers/decoders//decode_graph_entities.c) in FalkorDB before 4.18.4 allows a remote attacker who can issue Redis replication commands (for example, against an instance with no password configured) to cause a denial of service and possibly execute arbitrary code by supplying a crafted RDB stream with an attacker-controlled entity property count. The count sizes two variable-length arrays on the thread stack with no upper bound, and the decoder then fills them with attacker-supplied values.","display_title":"Software component issue could allow unintended commands to run","display_summary":"A stack-based buffer overflow in the RdbLoadEntity function of the RDB graph decoders (src/serializers/decoders//decodegraphentities.c) in FalkorDB before 4.18.4 allows a remote attacker who can issue Redis replication…","display_reference":"CVE-2026-7827","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-7827","source_title":"A stack-based buffer overflow in the _RdbLoadEntity function of the RDB graph decoders (src/serializers/decoders//decode_graph_entities.c) in FalkorDB before 4.18.4 allows a remote attacker who can issue Redis replication commands (for example, against an instance with no password configured) to cause a denial of service and possibly execute arbitrary code by supplying a crafted RDB stream with an attacker-controlled entity property count. The count sizes two variable-length arrays on the thread stack with no upper bound, and the decoder then fills them with attacker-supplied values.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T22:00:10.666Z","source_hash":"content-fingerprint:fnv1a-c34460bd","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-7827-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A stack-based buffer overflow in the _RdbLoadEntity function of the RDB graph decoders (src/serializers/decoders//decode_graph_entities.c) in FalkorDB before 4.18.4 allows a remote attacker who can issue Redis replication commands (for example, against an instance with no password configured) to cause a denial of service and possibly execute arbitrary code by supplying a crafted RDB stream with an attacker-controlled entity property count. The count sizes two variable-length arrays on the thread stack with no upper bound, and the decoder then fills them with attacker-supplied values.","source_quote_or_pointer":"Security Advisory CVE-2026-7827","fact_id":"SEA-CVE-2026-7827-F1","document_citation":"Security Advisory CVE-2026-7827"},{"id":"SEA-CVE-2026-7827-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A stack-based buffer overflow in the RdbLoadEntity function of the RDB graph decoders (src/serializers/decoders//decodegraphentities.c) in FalkorDB before 4.18.4 allows a remote attacker who can issue Redis replication commands (for example, against an instance with no password configured) to cause a denial of service…","source_quote_or_pointer":"Advisory description (CVE-2026-7827)","fact_id":"SEA-CVE-2026-7827-F2","document_citation":"Advisory description (CVE-2026-7827)"}],"source_stated_contributors":["A stack-based buffer overflow in the RdbLoadEntity function of the RDB graph decoders (src/serializers/decoders//decodegraphentities.c) in FalkorDB before 4.18.4 allows a remote attacker who can issue Redis replication commands (for example, against an instance with no password configured) to cause a denial of service…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.credentials_secrets","arch.caching","arch.async_job","arch.event_driven"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-7827","reporting_entity":"CVE-2026-7827","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-7827-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-7827-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-7827"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-107911","title":"A type confusion vulnerability in the _read_flags function (src/commands/cmd_dispatcher.c) in FalkorDB before 4.20.0 allows a remote authenticated attacker who can run GRAPH.QUERY to cause a denial of service and possibly disclose or corrupt memory. The function accepts a --bolt argument from any client and casts the following command argument, a Redis string object, to a Bolt client structure without checking its origin; the result-set code then dereferences pointers read from that object. The argument is parsed even when the Bolt endpoint is disabled, so default configurations are affected.","display_title":"Software component issue could make the service unavailable","display_summary":"A type confusion vulnerability in the readflags function (src/commands/cmddispatcher.c) in FalkorDB before 4.20.0 allows a remote authenticated attacker who can run GRAPH.QUERY to cause a denial of service and possibly…","display_reference":"CVE-2026-107911","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107911","source_title":"A type confusion vulnerability in the _read_flags function (src/commands/cmd_dispatcher.c) in FalkorDB before 4.20.0 allows a remote authenticated attacker who can run GRAPH.QUERY to cause a denial of service and possibly disclose or corrupt memory. The function accepts a --bolt argument from any client and casts the following command argument, a Redis string object, to a Bolt client structure without checking its origin; the result-set code then dereferences pointers read from that object. The argument is parsed even when the Bolt endpoint is disabled, so default configurations are affected.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T22:00:10.666Z","source_hash":"content-fingerprint:fnv1a-c8e83cc8","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-107911-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A type confusion vulnerability in the _read_flags function (src/commands/cmd_dispatcher.c) in FalkorDB before 4.20.0 allows a remote authenticated attacker who can run GRAPH.QUERY to cause a denial of service and possibly disclose or corrupt memory. The function accepts a --bolt argument from any client and casts the following command argument, a Redis string object, to a Bolt client structure without checking its origin; the result-set code then dereferences pointers read from that object. The argument is parsed even when the Bolt endpoint is disabled, so default configurations are affected.","source_quote_or_pointer":"Security Advisory CVE-2026-107911","fact_id":"SEA-CVE-2026-107911-F1","document_citation":"Security Advisory CVE-2026-107911"},{"id":"SEA-CVE-2026-107911-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A type confusion vulnerability in the readflags function (src/commands/cmddispatcher.c) in FalkorDB before 4.20.0 allows a remote authenticated attacker who can run GRAPH.QUERY to cause a denial of service and possibly disclose or corrupt memory.","source_quote_or_pointer":"Advisory description (CVE-2026-107911)","fact_id":"SEA-CVE-2026-107911-F2","document_citation":"Advisory description (CVE-2026-107911)"}],"source_stated_contributors":["A type confusion vulnerability in the readflags function (src/commands/cmddispatcher.c) in FalkorDB before 4.20.0 allows a remote authenticated attacker who can run GRAPH.QUERY to cause a denial of service and possibly disclose or corrupt memory."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","arch.caching"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-107911","reporting_entity":"CVE-2026-107911","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-107911-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-107911-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-107911"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-107814","title":"MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB RPM packages created the dedicated mysql service account with the database data directory as its home directory. A database user with the FILE privilege could write startup dot-files such as .bash_profile into $HOME, and those files could execute when an administrator opened a login shell for the mysql account. Debian packages are not affected because they use /nonexistent as the account home. This issue is fixed in versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.","display_title":"Security issue reported in Software component","display_summary":"MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB RPM packages created the dedicated mysql service account with the database…","display_reference":"CVE-2026-107814","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107814","source_title":"MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB RPM packages created the dedicated mysql service account with the database data directory as its home directory. A database user with the FILE privilege could write startup dot-files such as .bash_profile into $HOME, and those files could execute when an administrator opened a login shell for the mysql account. Debian packages are not affected because they use /nonexistent as the account home. This issue is fixed in versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T22:00:10.666Z","source_hash":"content-fingerprint:fnv1a-189d15b8","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-107814-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB RPM packages created the dedicated mysql service account with the database data directory as its home directory. A database user with the FILE privilege could write startup dot-files such as .bash_profile into $HOME, and those files could execute when an administrator opened a login shell for the mysql account. Debian packages are not affected because they use /nonexistent as the account home. This issue is fixed in versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.","source_quote_or_pointer":"Security Advisory CVE-2026-107814","fact_id":"SEA-CVE-2026-107814-F1","document_citation":"Security Advisory CVE-2026-107814"},{"id":"SEA-CVE-2026-107814-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB RPM packages created the dedicated mysql service account with the database data directory as its home directory.","source_quote_or_pointer":"Advisory description (CVE-2026-107814)","fact_id":"SEA-CVE-2026-107814-F2","document_citation":"Advisory description (CVE-2026-107814)"}],"source_stated_contributors":["MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB RPM packages created the dedicated mysql service account with the database data directory as its home directory."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.write_action","data.pii","data.credentials_secrets"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-107814","reporting_entity":"CVE-2026-107814","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-107814-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-107814-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-107814"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-107809","title":"Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, AuthRequired accepts a browser-managed token cookie as an API credential after the front end stores the JWT in that cookie. Because management endpoints do not universally require a CSRF token or perform Origin or Referer validation, a remote attacker can induce a logged-in administrator's browser to submit authenticated cross-site state-changing requests, including POST /api/configs. The attack requires an administrator account without OTP/Passkey or a target endpoint that does not require secure-session proof. The attacker cannot read the cross-origin response but can modify Nginx configuration, trigger reloads, or invoke other management operations reachable with the victim's session. This issue is fixed in version 2.5.0.","display_title":"Software component issue could expose accounts or credentials","display_summary":"Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, AuthRequired accepts a browser-managed token cookie as an API credential after the front end stores the JWT in that cookie.","display_reference":"CVE-2026-107809","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107809","source_title":"Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, AuthRequired accepts a browser-managed token cookie as an API credential after the front end stores the JWT in that cookie. Because management endpoints do not universally require a CSRF token or perform Origin or Referer validation, a remote attacker can induce a logged-in administrator's browser to submit authenticated cross-site state-changing requests, including POST /api/configs. The attack requires an administrator account without OTP/Passkey or a target endpoint that does not require secure-session proof. The attacker cannot read the cross-origin response but can modify Nginx configuration, trigger reloads, or invoke other management operations reachable with the victim's session. This issue is fixed in version 2.5.0.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T22:00:10.666Z","source_hash":"content-fingerprint:fnv1a-ab8114cc","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-107809-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, AuthRequired accepts a browser-managed token cookie as an API credential after the front end stores the JWT in that cookie. Because management endpoints do not universally require a CSRF token or perform Origin or Referer validation, a remote attacker can induce a logged-in administrator's browser to submit authenticated cross-site state-changing requests, including POST /api/configs. The attack requires an administrator account without OTP/Passkey or a target endpoint that does not require secure-session proof. The attacker cannot read the cross-origin response but can modify Nginx configuration, trigger reloads, or invoke other management operations reachable with the victim's session. This issue is fixed in version 2.5.0.","source_quote_or_pointer":"Security Advisory CVE-2026-107809","fact_id":"SEA-CVE-2026-107809-F1","document_citation":"Security Advisory CVE-2026-107809"},{"id":"SEA-CVE-2026-107809-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, AuthRequired accepts a browser-managed token cookie as an API credential after the front end stores the JWT in that cookie.","source_quote_or_pointer":"Advisory description (CVE-2026-107809)","fact_id":"SEA-CVE-2026-107809-F2","document_citation":"Advisory description (CVE-2026-107809)"}],"source_stated_contributors":["Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, AuthRequired accepts a browser-managed token cookie as an API credential after the front end stores the JWT in that cookie."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.write_action","data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-107809","reporting_entity":"CVE-2026-107809","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-107809-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-107809-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-107809"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-107785","title":"Crux Agent from 1.9.0 before 2.0.3 uses the full SKA bilocation key as the WireGuard preshared key. When a peering session negotiates use of SHA-512, the key produced is 64 bytes instead of the 32 bytes WireGuard requires. The agent does not validate this size; instead it attempts to use the wg set command to update the live tunnel, and write the invalid key to the WireGuard configuration file. The update fails, so the live tunnel keeps using its previous preshared key until the tunnel is shut down. The tunnel will fail to start when restarted. For a peer which has never successfully negotiated a 32-byte bilocation key in a Crux C2 organization which has the \"Enforce SKA Use\" setting turned off, no preshared key will be set for the tunnel. Therefore, an attacker who is able to intercept and store the peer's traffic, and has access (or will have access) to a cryptographically relevant quantum computer, will be able to decrypt the tunnel.","display_title":"Security issue reported in Software component","display_summary":"Crux Agent from 1.9.0 before 2.0.3 uses the full SKA bilocation key as the WireGuard preshared key. When a peering session negotiates use of SHA-512, the key produced is 64 bytes instead of the 32 bytes WireGuard…","display_reference":"CVE-2026-107785","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107785","source_title":"Crux Agent from 1.9.0 before 2.0.3 uses the full SKA bilocation key as the WireGuard preshared key. When a peering session negotiates use of SHA-512, the key produced is 64 bytes instead of the 32 bytes WireGuard requires. The agent does not validate this size; instead it attempts to use the wg set command to update the live tunnel, and write the invalid key to the WireGuard configuration file. The update fails, so the live tunnel keeps using its previous preshared key until the tunnel is shut down. The tunnel will fail to start when restarted. For a peer which has never successfully negotiated a 32-byte bilocation key in a Crux C2 organization which has the \"Enforce SKA Use\" setting turned off, no preshared key will be set for the tunnel. Therefore, an attacker who is able to intercept and store the peer's traffic, and has access (or will have access) to a cryptographically relevant quantum computer, will be able to decrypt the tunnel.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T22:00:10.666Z","source_hash":"content-fingerprint:fnv1a-aee52b91","affected_system":{"organization":"Software component project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-107785-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Crux Agent from 1.9.0 before 2.0.3 uses the full SKA bilocation key as the WireGuard preshared key. When a peering session negotiates use of SHA-512, the key produced is 64 bytes instead of the 32 bytes WireGuard requires. The agent does not validate this size; instead it attempts to use the wg set command to update the live tunnel, and write the invalid key to the WireGuard configuration file. The update fails, so the live tunnel keeps using its previous preshared key until the tunnel is shut down. The tunnel will fail to start when restarted. For a peer which has never successfully negotiated a 32-byte bilocation key in a Crux C2 organization which has the \"Enforce SKA Use\" setting turned off, no preshared key will be set for the tunnel. Therefore, an attacker who is able to intercept and store the peer's traffic, and has access (or will have access) to a cryptographically relevant quantum computer, will be able to decrypt the tunnel.","source_quote_or_pointer":"Security Advisory CVE-2026-107785","fact_id":"SEA-CVE-2026-107785-F1","document_citation":"Security Advisory CVE-2026-107785"},{"id":"SEA-CVE-2026-107785-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Crux Agent from 1.9.0 before 2.0.3 uses the full SKA bilocation key as the WireGuard preshared key. When a peering session negotiates use of SHA-512, the key produced is 64 bytes instead of the 32 bytes WireGuard requires.","source_quote_or_pointer":"Advisory description (CVE-2026-107785)","fact_id":"SEA-CVE-2026-107785-F2","document_citation":"Advisory description (CVE-2026-107785)"}],"source_stated_contributors":["Crux Agent from 1.9.0 before 2.0.3 uses the full SKA bilocation key as the WireGuard preshared key. When a peering session negotiates use of SHA-512, the key produced is 64 bytes instead of the 32 bytes WireGuard requires."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-010"],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-107785","reporting_entity":"CVE-2026-107785","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-107785-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-107785-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-107785"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-104629","title":"A component loading mechanism in openPDC and openHistorian will construct and run any specified type, which may be an invalid component to load. An attacker with an authenticated user account and the ability to place a file on the host filesystem can use this to run arbitrary constructor code, and this code runs with the privileges of the affected service account.","display_title":"Security issue reported in Software component","display_summary":"A component loading mechanism in openPDC and openHistorian will construct and run any specified type, which may be an invalid component to load.","display_reference":"CVE-2026-104629","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104629","source_title":"A component loading mechanism in openPDC and openHistorian will construct and run any specified type, which may be an invalid component to load. An attacker with an authenticated user account and the ability to place a file on the host filesystem can use this to run arbitrary constructor code, and this code runs with the privileges of the affected service account.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T22:00:10.666Z","source_hash":"content-fingerprint:fnv1a-cc712f55","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-104629-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A component loading mechanism in openPDC and openHistorian will construct and run any specified type, which may be an invalid component to load. An attacker with an authenticated user account and the ability to place a file on the host filesystem can use this to run arbitrary constructor code, and this code runs with the privileges of the affected service account.","source_quote_or_pointer":"Security Advisory CVE-2026-104629","fact_id":"SEA-CVE-2026-104629-F1","document_citation":"Security Advisory CVE-2026-104629"},{"id":"SEA-CVE-2026-104629-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A component loading mechanism in openPDC and openHistorian will construct and run any specified type, which may be an invalid component to load. An attacker with an authenticated user account and the ability to place a file on the host filesystem can use this to run arbitrary constructor code, and this code runs with…","source_quote_or_pointer":"Advisory description (CVE-2026-104629)","fact_id":"SEA-CVE-2026-104629-F2","document_citation":"Advisory description (CVE-2026-104629)"}],"source_stated_contributors":["A component loading mechanism in openPDC and openHistorian will construct and run any specified type, which may be an invalid component to load. An attacker with an authenticated user account and the ability to place a file on the host filesystem can use this to run arbitrary constructor code, and this code runs with…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","data.credentials_secrets"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-104629","reporting_entity":"CVE-2026-104629","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-104629-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-104629-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-104629"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-104116","title":"A missing authorization check in the illumos zones statistics daemon (zonestatd) allows a local user in any zone to disrupt zonestat in other zones and to determine which zones are running. The zonestatd door server procedure, zsd_server() in usr/src/cmd/zonestat/zonestatd/zonestatd.c, handles the ZSD_CMD_NEW_ZONE command, which is intended to be sent by zoneadmd, without checking the caller's credentials. Because the zonestatd door is accessible to all users in every zone, an unprivileged user can send this command with an arbitrary zone ID, causing zonestatd to re-create its door file in that zone, so that new zonestat requests in that zone can fail while the file is replaced. The time taken to handle the command also reveals whether a given zone ID belongs to a running zone. The flaw has existed since 2010 (illumos-gate commit efd4c9b6), and affects any illumos distribution prior to illumos-gate commit 865b58d2.","display_title":"Software component issue could expose accounts or credentials","display_summary":"A missing authorization check in the illumos zones statistics daemon (zonestatd) allows a local user in any zone to disrupt zonestat in other zones and to determine which zones are running.","display_reference":"CVE-2026-104116","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104116","source_title":"A missing authorization check in the illumos zones statistics daemon (zonestatd) allows a local user in any zone to disrupt zonestat in other zones and to determine which zones are running. The zonestatd door server procedure, zsd_server() in usr/src/cmd/zonestat/zonestatd/zonestatd.c, handles the ZSD_CMD_NEW_ZONE command, which is intended to be sent by zoneadmd, without checking the caller's credentials. Because the zonestatd door is accessible to all users in every zone, an unprivileged user can send this command with an arbitrary zone ID, causing zonestatd to re-create its door file in that zone, so that new zonestat requests in that zone can fail while the file is replaced. The time taken to handle the command also reveals whether a given zone ID belongs to a running zone. The flaw has existed since 2010 (illumos-gate commit efd4c9b6), and affects any illumos distribution prior to illumos-gate commit 865b58d2.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T22:00:10.666Z","source_hash":"content-fingerprint:fnv1a-40a7cfe0","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-104116-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A missing authorization check in the illumos zones statistics daemon (zonestatd) allows a local user in any zone to disrupt zonestat in other zones and to determine which zones are running. The zonestatd door server procedure, zsd_server() in usr/src/cmd/zonestat/zonestatd/zonestatd.c, handles the ZSD_CMD_NEW_ZONE command, which is intended to be sent by zoneadmd, without checking the caller's credentials. Because the zonestatd door is accessible to all users in every zone, an unprivileged user can send this command with an arbitrary zone ID, causing zonestatd to re-create its door file in that zone, so that new zonestat requests in that zone can fail while the file is replaced. The time taken to handle the command also reveals whether a given zone ID belongs to a running zone. The flaw has existed since 2010 (illumos-gate commit efd4c9b6), and affects any illumos distribution prior to illumos-gate commit 865b58d2.","source_quote_or_pointer":"Security Advisory CVE-2026-104116","fact_id":"SEA-CVE-2026-104116-F1","document_citation":"Security Advisory CVE-2026-104116"},{"id":"SEA-CVE-2026-104116-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A missing authorization check in the illumos zones statistics daemon (zonestatd) allows a local user in any zone to disrupt zonestat in other zones and to determine which zones are running.","source_quote_or_pointer":"Advisory description (CVE-2026-104116)","fact_id":"SEA-CVE-2026-104116-F2","document_citation":"Advisory description (CVE-2026-104116)"}],"source_stated_contributors":["A missing authorization check in the illumos zones statistics daemon (zonestatd) allows a local user in any zone to disrupt zonestat in other zones and to determine which zones are running."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-104116","reporting_entity":"CVE-2026-104116","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-104116-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-104116-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-104116"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-92990","title":"The SendPress Newsletters WordPress plugin through 1.26.1.20 protects a logging endpoint with a hardcoded token that is the same on every site rather than a per-site secret, allowing unauthenticated users to read newsletter sending logs, including recipient email addresses.","display_title":"Software component issue could expose accounts or credentials","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-92990","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92990","source_title":"The SendPress Newsletters WordPress plugin through 1.26.1.20 protects a logging endpoint with a hardcoded token that is the same on every site rather than a per-site secret, allowing unauthenticated users to read newsletter sending logs, including recipient email addresses.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T18:00:33.805Z","source_hash":"content-fingerprint:fnv1a-edef4f7c","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-92990-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The SendPress Newsletters WordPress plugin through 1.26.1.20 protects a logging endpoint with a hardcoded token that is the same on every site rather than a per-site secret, allowing unauthenticated users to read newsletter sending logs, including recipient email addresses.","source_quote_or_pointer":"Security Advisory CVE-2026-92990","fact_id":"SEA-CVE-2026-92990-F1","document_citation":"Security Advisory CVE-2026-92990"},{"id":"SEA-CVE-2026-92990-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The SendPress Newsletters WordPress plugin through 1.26.1.20 protects a logging endpoint with a hardcoded token that is the same on every site rather than a per-site secret, allowing unauthenticated users to read newsletter sending logs, including recipient email addresses.","source_quote_or_pointer":"Advisory description (CVE-2026-92990)","fact_id":"SEA-CVE-2026-92990-F2","document_citation":"Advisory description (CVE-2026-92990)"}],"source_stated_contributors":["The SendPress Newsletters WordPress plugin through 1.26.1.20 protects a logging endpoint with a hardcoded token that is the same on every site rather than a per-site secret, allowing unauthenticated users to read newsletter sending logs, including recipient email addresses."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-92990","reporting_entity":"CVE-2026-92990","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-92990-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-92990-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-92990"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-88931","title":"The Social Web Suite WordPress plugin through 4.1.12 does not restrict which of its settings may be written through an unauthenticated endpoint, allowing attackers to overwrite arbitrary Social Web Suite WordPress plugin through 4.1.12 options, including the shared secret that guards its own privileged endpoints.","display_title":"Software component issue could expose accounts or credentials","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-88931","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-88931","source_title":"The Social Web Suite WordPress plugin through 4.1.12 does not restrict which of its settings may be written through an unauthenticated endpoint, allowing attackers to overwrite arbitrary Social Web Suite WordPress plugin through 4.1.12 options, including the shared secret that guards its own privileged endpoints.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T18:00:33.805Z","source_hash":"content-fingerprint:fnv1a-ee71e7d8","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-88931-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Social Web Suite WordPress plugin through 4.1.12 does not restrict which of its settings may be written through an unauthenticated endpoint, allowing attackers to overwrite arbitrary Social Web Suite WordPress plugin through 4.1.12 options, including the shared secret that guards its own privileged endpoints.","source_quote_or_pointer":"Security Advisory CVE-2026-88931","fact_id":"SEA-CVE-2026-88931-F1","document_citation":"Security Advisory CVE-2026-88931"},{"id":"SEA-CVE-2026-88931-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Social Web Suite WordPress plugin through 4.1.12 does not restrict which of its settings may be written through an unauthenticated endpoint, allowing attackers to overwrite arbitrary Social Web Suite WordPress plugin through 4.1.12 options, including the shared secret that guards its own privileged endpoints.","source_quote_or_pointer":"Advisory description (CVE-2026-88931)","fact_id":"SEA-CVE-2026-88931-F2","document_citation":"Advisory description (CVE-2026-88931)"}],"source_stated_contributors":["The Social Web Suite WordPress plugin through 4.1.12 does not restrict which of its settings may be written through an unauthenticated endpoint, allowing attackers to overwrite arbitrary Social Web Suite WordPress plugin through 4.1.12 options, including the shared secret that guards its own privileged endpoints."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-88931","reporting_entity":"CVE-2026-88931","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-88931-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-88931-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-88931"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-87846","title":"The Shipping for Nova Poshta WordPress plugin through 1.19.8 does not perform any authorisation, nonce or ownership checks on one of its AJAX actions available to unauthenticated users, allowing anyone to delete the shipment records of arbitrary orders and to make the store issue the carrier's waybill-deletion request for those orders using the store's own stored API credentials.","display_title":"Software component issue could expose accounts or credentials","display_summary":"The Shipping for Nova Poshta WordPress plugin through 1.19.8 does not perform any authorisation, nonce or ownership checks on one of its AJAX actions available to unauthenticated users, allowing anyone to delete the…","display_reference":"CVE-2026-87846","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87846","source_title":"The Shipping for Nova Poshta WordPress plugin through 1.19.8 does not perform any authorisation, nonce or ownership checks on one of its AJAX actions available to unauthenticated users, allowing anyone to delete the shipment records of arbitrary orders and to make the store issue the carrier's waybill-deletion request for those orders using the store's own stored API credentials.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T18:00:33.805Z","source_hash":"content-fingerprint:fnv1a-61bad80a","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-87846-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Shipping for Nova Poshta WordPress plugin through 1.19.8 does not perform any authorisation, nonce or ownership checks on one of its AJAX actions available to unauthenticated users, allowing anyone to delete the shipment records of arbitrary orders and to make the store issue the carrier's waybill-deletion request for those orders using the store's own stored API credentials.","source_quote_or_pointer":"Security Advisory CVE-2026-87846","fact_id":"SEA-CVE-2026-87846-F1","document_citation":"Security Advisory CVE-2026-87846"},{"id":"SEA-CVE-2026-87846-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Shipping for Nova Poshta WordPress plugin through 1.19.8 does not perform any authorisation, nonce or ownership checks on one of its AJAX actions available to unauthenticated users, allowing anyone to delete the shipment records of arbitrary orders and to make the store issue the carrier's waybill-deletion request…","source_quote_or_pointer":"Advisory description (CVE-2026-87846)","fact_id":"SEA-CVE-2026-87846-F2","document_citation":"Advisory description (CVE-2026-87846)"}],"source_stated_contributors":["The Shipping for Nova Poshta WordPress plugin through 1.19.8 does not perform any authorisation, nonce or ownership checks on one of its AJAX actions available to unauthenticated users, allowing anyone to delete the shipment records of arbitrary orders and to make the store issue the carrier's waybill-deletion request…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.financial_action","auth.destructive_action","auth.write_action","data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-87846","reporting_entity":"CVE-2026-87846","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-87846-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-87846-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-87846"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-78027","title":"Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Server-Side Request Forgery (SSRF) vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure and Server-side request forgery.","display_title":"Software component issue could reach internal services","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-78027","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-78027","source_title":"Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Server-Side Request Forgery (SSRF) vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure and Server-side request forgery.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T18:00:33.805Z","source_hash":"content-fingerprint:fnv1a-964f1e6d","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-78027-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Server-Side Request Forgery (SSRF) vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure and Server-side request forgery.","source_quote_or_pointer":"Security Advisory CVE-2026-78027","fact_id":"SEA-CVE-2026-78027-F1","document_citation":"Security Advisory CVE-2026-78027"},{"id":"SEA-CVE-2026-78027-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Server-Side Request Forgery (SSRF) vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure and Server-side request forgery.","source_quote_or_pointer":"Advisory description (CVE-2026-78027)","fact_id":"SEA-CVE-2026-78027-F2","document_citation":"Advisory description (CVE-2026-78027)"}],"source_stated_contributors":["Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Server-Side Request Forgery (SSRF) vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure and Server-side request forgery."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Internal network access","Cloud metadata or credential exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-78027","reporting_entity":"CVE-2026-78027","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-78027-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-78027-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"The service fetched a URL chosen by the caller and could be steered at internal systems. Restrict outbound destinations and block internal address ranges.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-78027"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108107","title":"PHPNuxBill through 2025.3.20 contains an unauthenticated SQL injection vulnerability in the radius.php FreeRADIUS REST endpoint that interpolates request parameters into whereRaw() queries. Attackers can send crafted username, macAddr or nasid parameters to the accounting or authenticate actions to extract customer records and credentials via time-based blind SQL injection.","display_title":"Software component issue could expose or alter stored data","display_summary":"PHPNuxBill through 2025.3.20 contains an unauthenticated SQL injection vulnerability in the radius.php FreeRADIUS REST endpoint that interpolates request parameters into whereRaw() queries.","display_reference":"CVE-2026-108107","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108107","source_title":"PHPNuxBill through 2025.3.20 contains an unauthenticated SQL injection vulnerability in the radius.php FreeRADIUS REST endpoint that interpolates request parameters into whereRaw() queries. Attackers can send crafted username, macAddr or nasid parameters to the accounting or authenticate actions to extract customer records and credentials via time-based blind SQL injection.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T18:00:33.805Z","source_hash":"content-fingerprint:fnv1a-f4746654","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108107-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"PHPNuxBill through 2025.3.20 contains an unauthenticated SQL injection vulnerability in the radius.php FreeRADIUS REST endpoint that interpolates request parameters into whereRaw() queries. Attackers can send crafted username, macAddr or nasid parameters to the accounting or authenticate actions to extract customer records and credentials via time-based blind SQL injection.","source_quote_or_pointer":"Security Advisory CVE-2026-108107","fact_id":"SEA-CVE-2026-108107-F1","document_citation":"Security Advisory CVE-2026-108107"},{"id":"SEA-CVE-2026-108107-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"PHPNuxBill through 2025.3.20 contains an unauthenticated SQL injection vulnerability in the radius.php FreeRADIUS REST endpoint that interpolates request parameters into whereRaw() queries.","source_quote_or_pointer":"Advisory description (CVE-2026-108107)","fact_id":"SEA-CVE-2026-108107-F2","document_citation":"Advisory description (CVE-2026-108107)"}],"source_stated_contributors":["PHPNuxBill through 2025.3.20 contains an unauthenticated SQL injection vulnerability in the radius.php FreeRADIUS REST endpoint that interpolates request parameters into whereRaw() queries."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108107","reporting_entity":"CVE-2026-108107","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108107-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108107-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108107"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108106","title":"Xerial snappy-java before 1.1.10.9 contains an unbounded memory allocation vulnerability that allows attackers to exhaust JVM memory by declaring a large uncompressed length in compressed input. Attackers can supply a few crafted bytes to Snappy.uncompress, uncompressString, SnappyInputStream or SnappyFramedInputStream to force allocations up to 2 GB, causing OutOfMemoryError and denial of service.","display_title":"Software component issue could make the service unavailable","display_summary":"Xerial snappy-java before 1.1.10.9 contains an unbounded memory allocation vulnerability that allows attackers to exhaust JVM memory by declaring a large uncompressed length in compressed input.","display_reference":"CVE-2026-108106","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108106","source_title":"Xerial snappy-java before 1.1.10.9 contains an unbounded memory allocation vulnerability that allows attackers to exhaust JVM memory by declaring a large uncompressed length in compressed input. Attackers can supply a few crafted bytes to Snappy.uncompress, uncompressString, SnappyInputStream or SnappyFramedInputStream to force allocations up to 2 GB, causing OutOfMemoryError and denial of service.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T18:00:33.805Z","source_hash":"content-fingerprint:fnv1a-72df351b","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108106-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Xerial snappy-java before 1.1.10.9 contains an unbounded memory allocation vulnerability that allows attackers to exhaust JVM memory by declaring a large uncompressed length in compressed input. Attackers can supply a few crafted bytes to Snappy.uncompress, uncompressString, SnappyInputStream or SnappyFramedInputStream to force allocations up to 2 GB, causing OutOfMemoryError and denial of service.","source_quote_or_pointer":"Security Advisory CVE-2026-108106","fact_id":"SEA-CVE-2026-108106-F1","document_citation":"Security Advisory CVE-2026-108106"},{"id":"SEA-CVE-2026-108106-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Xerial snappy-java before 1.1.10.9 contains an unbounded memory allocation vulnerability that allows attackers to exhaust JVM memory by declaring a large uncompressed length in compressed input.","source_quote_or_pointer":"Advisory description (CVE-2026-108106)","fact_id":"SEA-CVE-2026-108106-F2","document_citation":"Advisory description (CVE-2026-108106)"}],"source_stated_contributors":["Xerial snappy-java before 1.1.10.9 contains an unbounded memory allocation vulnerability that allows attackers to exhaust JVM memory by declaring a large uncompressed length in compressed input."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108106","reporting_entity":"CVE-2026-108106","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108106-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108106-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108106"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108100","title":"HortusFox (hortusfox-web) before 6.2 contains an SQL injection vulnerability that allows API token holders to inject SQL by supplying crafted include_info values to the /api/locations/list endpoint. Attackers can place subqueries in include_info, which PlantsModel::getSpecificInfo() concatenates into the column list, to read any database table including user password hashes.","display_title":"Software component issue could expose or alter stored data","display_summary":"HortusFox (hortusfox-web) before 6.2 contains an SQL injection vulnerability that allows API token holders to inject SQL by supplying crafted includeinfo values to the /api/locations/list endpoint.","display_reference":"CVE-2026-108100","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108100","source_title":"HortusFox (hortusfox-web) before 6.2 contains an SQL injection vulnerability that allows API token holders to inject SQL by supplying crafted include_info values to the /api/locations/list endpoint. Attackers can place subqueries in include_info, which PlantsModel::getSpecificInfo() concatenates into the column list, to read any database table including user password hashes.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T18:00:33.805Z","source_hash":"content-fingerprint:fnv1a-880e0dfd","affected_system":{"organization":"HortusFox (hortusfox-web) before 6.2 contains an SQL injection vulnerability that allows API token holders to inject SQL by supplying crafted includeinfo values to the /api/locations/list endpoint. Attackers can place subqueries in includeinfo, which PlantsModel project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108100-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"HortusFox (hortusfox-web) before 6.2 contains an SQL injection vulnerability that allows API token holders to inject SQL by supplying crafted include_info values to the /api/locations/list endpoint. Attackers can place subqueries in include_info, which PlantsModel::getSpecificInfo() concatenates into the column list, to read any database table including user password hashes.","source_quote_or_pointer":"Security Advisory CVE-2026-108100","fact_id":"SEA-CVE-2026-108100-F1","document_citation":"Security Advisory CVE-2026-108100"},{"id":"SEA-CVE-2026-108100-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"HortusFox (hortusfox-web) before 6.2 contains an SQL injection vulnerability that allows API token holders to inject SQL by supplying crafted includeinfo values to the /api/locations/list endpoint.","source_quote_or_pointer":"Advisory description (CVE-2026-108100)","fact_id":"SEA-CVE-2026-108100-F2","document_citation":"Advisory description (CVE-2026-108100)"}],"source_stated_contributors":["HortusFox (hortusfox-web) before 6.2 contains an SQL injection vulnerability that allows API token holders to inject SQL by supplying crafted includeinfo values to the /api/locations/list endpoint."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108100","reporting_entity":"CVE-2026-108100","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108100-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108100-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108100"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-107806","title":"Nginx UI is a web user interface for the Nginx web server. From 2.3.8 until 2.5.0, an authenticated administrator with an active secure session can submit attacker-controlled portable backup key material and a matching manifest to POST /api/restore. The restore flow trusts the supplied key, decrypts attacker-controlled contents, and replaces the live app.ini, including protected nginx command settings such as TestConfigCmd. Triggering POST /api/nginx/test then executes the restored command in the Nginx UI runtime context, affecting confidentiality, integrity, and availability. This issue is fixed in version 2.5.0.","display_title":"Security issue reported in Software component","display_summary":"Nginx UI is a web user interface for the Nginx web server. From 2.3.8 until 2.5.0, an authenticated administrator with an active secure session can submit attacker-controlled portable backup key material and a matching…","display_reference":"CVE-2026-107806","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107806","source_title":"Nginx UI is a web user interface for the Nginx web server. From 2.3.8 until 2.5.0, an authenticated administrator with an active secure session can submit attacker-controlled portable backup key material and a matching manifest to POST /api/restore. The restore flow trusts the supplied key, decrypts attacker-controlled contents, and replaces the live app.ini, including protected nginx command settings such as TestConfigCmd. Triggering POST /api/nginx/test then executes the restored command in the Nginx UI runtime context, affecting confidentiality, integrity, and availability. This issue is fixed in version 2.5.0.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T18:00:33.805Z","source_hash":"content-fingerprint:fnv1a-396819d3","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-107806-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Nginx UI is a web user interface for the Nginx web server. From 2.3.8 until 2.5.0, an authenticated administrator with an active secure session can submit attacker-controlled portable backup key material and a matching manifest to POST /api/restore. The restore flow trusts the supplied key, decrypts attacker-controlled contents, and replaces the live app.ini, including protected nginx command settings such as TestConfigCmd. Triggering POST /api/nginx/test then executes the restored command in the Nginx UI runtime context, affecting confidentiality, integrity, and availability. This issue is fixed in version 2.5.0.","source_quote_or_pointer":"Security Advisory CVE-2026-107806","fact_id":"SEA-CVE-2026-107806-F1","document_citation":"Security Advisory CVE-2026-107806"},{"id":"SEA-CVE-2026-107806-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Nginx UI is a web user interface for the Nginx web server. From 2.3.8 until 2.5.0, an authenticated administrator with an active secure session can submit attacker-controlled portable backup key material and a matching manifest to POST /api/restore.","source_quote_or_pointer":"Advisory description (CVE-2026-107806)","fact_id":"SEA-CVE-2026-107806-F2","document_citation":"Advisory description (CVE-2026-107806)"}],"source_stated_contributors":["Nginx UI is a web user interface for the Nginx web server. From 2.3.8 until 2.5.0, an authenticated administrator with an active secure session can submit attacker-controlled portable backup key material and a matching manifest to POST /api/restore."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-107806","reporting_entity":"CVE-2026-107806","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-107806-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-107806-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-107806"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-106097","title":"The Code Snippets WordPress plugin before 3.10.0 does not sanitise and escape a user-supplied parameter before using it in a SQL query in some of its snippet-migration import endpoints, which are accessible to any user holding site-administration capabilities; on a WordPress Multisite network those belong to subsite Administrators, allowing a subsite Administrator who is not a network Super Admin to perform UNION-based SQL injection against shared network tables and disclose network-wide data such as other users' password hashes.","display_title":"Software component issue could expose or alter stored data","display_summary":"The Code Snippets WordPress plugin before 3.10.0 does not sanitise and escape a user-supplied parameter before using it in a SQL query in some of its snippet-migration import endpoints, which are accessible to any user…","display_reference":"CVE-2026-106097","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-106097","source_title":"The Code Snippets WordPress plugin before 3.10.0 does not sanitise and escape a user-supplied parameter before using it in a SQL query in some of its snippet-migration import endpoints, which are accessible to any user holding site-administration capabilities; on a WordPress Multisite network those belong to subsite Administrators, allowing a subsite Administrator who is not a network Super Admin to perform UNION-based SQL injection against shared network tables and disclose network-wide data such as other users' password hashes.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T18:00:33.805Z","source_hash":"content-fingerprint:fnv1a-2f67ab6e","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-106097-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Code Snippets WordPress plugin before 3.10.0 does not sanitise and escape a user-supplied parameter before using it in a SQL query in some of its snippet-migration import endpoints, which are accessible to any user holding site-administration capabilities; on a WordPress Multisite network those belong to subsite Administrators, allowing a subsite Administrator who is not a network Super Admin to perform UNION-based SQL injection against shared network tables and disclose network-wide data such as other users' password hashes.","source_quote_or_pointer":"Security Advisory CVE-2026-106097","fact_id":"SEA-CVE-2026-106097-F1","document_citation":"Security Advisory CVE-2026-106097"},{"id":"SEA-CVE-2026-106097-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Code Snippets WordPress plugin before 3.10.0 does not sanitise and escape a user-supplied parameter before using it in a SQL query in some of its snippet-migration import endpoints, which are accessible to any user holding site-administration capabilities; on a WordPress Multisite network those belong to subsite…","source_quote_or_pointer":"Advisory description (CVE-2026-106097)","fact_id":"SEA-CVE-2026-106097-F2","document_citation":"Advisory description (CVE-2026-106097)"}],"source_stated_contributors":["The Code Snippets WordPress plugin before 3.10.0 does not sanitise and escape a user-supplied parameter before using it in a SQL query in some of its snippet-migration import endpoints, which are accessible to any user holding site-administration capabilities; on a WordPress Multisite network those belong to subsite…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-106097","reporting_entity":"CVE-2026-106097","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-106097-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-106097-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-106097"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-104115","title":"A stack-based buffer overflow in the illumos reparse point daemon (reparsed) allows a local user to crash the daemon. get_fs_locations() in usr/src/cmd/fs.d/nfs/rp_basic/libnfs_basic.c, part of the nfs-basic reparse plugin, copies the host and path components of a reparse string into a fixed 1024-byte stack buffer without checking their length. The reparsed door at /var/run/reparsed_door is readable by all users and the door server does not check the caller's credentials, so an unprivileged local user can send an nfs-basic request with an overlong host or path component to overflow the buffer. On systems built with stack protection, which is the default, this causes reparsed to abort; repeated requests place the svc:/system/filesystem/reparse service into maintenance. The service is disabled by default. The flaw has existed since 2009 (illumos-gate commit 2f172c55), and affects any illumos distribution prior to illumos-gate commit 6a2df4aa.","display_title":"Software component issue could expose accounts or credentials","display_summary":"A stack-based buffer overflow in the illumos reparse point daemon (reparsed) allows a local user to crash the daemon. getfslocations() in usr/src/cmd/fs.d/nfs/rpbasic/libnfsbasic.c, part of the nfs-basic reparse plugin,…","display_reference":"CVE-2026-104115","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104115","source_title":"A stack-based buffer overflow in the illumos reparse point daemon (reparsed) allows a local user to crash the daemon. get_fs_locations() in usr/src/cmd/fs.d/nfs/rp_basic/libnfs_basic.c, part of the nfs-basic reparse plugin, copies the host and path components of a reparse string into a fixed 1024-byte stack buffer without checking their length. The reparsed door at /var/run/reparsed_door is readable by all users and the door server does not check the caller's credentials, so an unprivileged local user can send an nfs-basic request with an overlong host or path component to overflow the buffer. On systems built with stack protection, which is the default, this causes reparsed to abort; repeated requests place the svc:/system/filesystem/reparse service into maintenance. The service is disabled by default. The flaw has existed since 2009 (illumos-gate commit 2f172c55), and affects any illumos distribution prior to illumos-gate commit 6a2df4aa.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T18:00:33.805Z","source_hash":"content-fingerprint:fnv1a-d18826b1","affected_system":{"organization":"A stack-based buffer overflow in the illumos reparse point daemon (reparsed) allows a local user to crash the daemon. getfslocations() in usr/src/cmd/fs.d/nfs/rpbasic/libnfsbasic.c, part of the nfs-basic reparse plugin, copies the host and path components of a reparse string into a fixed 1024-byte stack buffer without checking their length. The reparsed door at /var/run/reparseddoor is readable by all users and the door server does not check the caller's credentials, so an unprivileged local user can send an nfs-basic request with an overlong host or path component to overflow the buffer. On systems built with stack protection, which is the default, this causes reparsed to abort; repeated requests place the svc project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-104115-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A stack-based buffer overflow in the illumos reparse point daemon (reparsed) allows a local user to crash the daemon. get_fs_locations() in usr/src/cmd/fs.d/nfs/rp_basic/libnfs_basic.c, part of the nfs-basic reparse plugin, copies the host and path components of a reparse string into a fixed 1024-byte stack buffer without checking their length. The reparsed door at /var/run/reparsed_door is readable by all users and the door server does not check the caller's credentials, so an unprivileged local user can send an nfs-basic request with an overlong host or path component to overflow the buffer. On systems built with stack protection, which is the default, this causes reparsed to abort; repeated requests place the svc:/system/filesystem/reparse service into maintenance. The service is disabled by default. The flaw has existed since 2009 (illumos-gate commit 2f172c55), and affects any illumos distribution prior to illumos-gate commit 6a2df4aa.","source_quote_or_pointer":"Security Advisory CVE-2026-104115","fact_id":"SEA-CVE-2026-104115-F1","document_citation":"Security Advisory CVE-2026-104115"},{"id":"SEA-CVE-2026-104115-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A stack-based buffer overflow in the illumos reparse point daemon (reparsed) allows a local user to crash the daemon. getfslocations() in usr/src/cmd/fs.d/nfs/rpbasic/libnfsbasic.c, part of the nfs-basic reparse plugin, copies the host and path components of a reparse string into a fixed 1024-byte stack buffer without…","source_quote_or_pointer":"Advisory description (CVE-2026-104115)","fact_id":"SEA-CVE-2026-104115-F2","document_citation":"Advisory description (CVE-2026-104115)"}],"source_stated_contributors":["A stack-based buffer overflow in the illumos reparse point daemon (reparsed) allows a local user to crash the daemon. getfslocations() in usr/src/cmd/fs.d/nfs/rpbasic/libnfsbasic.c, part of the nfs-basic reparse plugin, copies the host and path components of a reparse string into a fixed 1024-byte stack buffer without…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-104115","reporting_entity":"CVE-2026-104115","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-104115-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-104115-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-104115"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-104114","title":"A NULL pointer dereference in the illumos Network Auto-Magic daemon (nwamd) allows a local user to crash the daemon. nwamd_door_switch() in usr/src/cmd/cmd-inet/lib/nwamd/door_if.c writes to the caller's request structure before checking that a request was supplied, and before checking the caller's credentials. Because the nwamd door at /etc/svc/volatile/nwam/nwam_door is accessible to all local users, an unprivileged user can issue a door_call() with no argument data to crash nwamd; repeated calls place the svc:/network/physical:nwam service into maintenance, stopping automatic network configuration. nwamd runs only when svc:/network/physical:nwam is enabled, which is not the default. The flaw has existed since 2010 (illumos-gate commit 6ba597c5), and affects any illumos distribution prior to illumos-gate commit 0f1064d9.","display_title":"Software component issue could expose accounts or credentials","display_summary":"A NULL pointer dereference in the illumos Network Auto-Magic daemon (nwamd) allows a local user to crash the daemon. nwamddoorswitch() in usr/src/cmd/cmd-inet/lib/nwamd/doorif.c writes to the caller's request structure…","display_reference":"CVE-2026-104114","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104114","source_title":"A NULL pointer dereference in the illumos Network Auto-Magic daemon (nwamd) allows a local user to crash the daemon. nwamd_door_switch() in usr/src/cmd/cmd-inet/lib/nwamd/door_if.c writes to the caller's request structure before checking that a request was supplied, and before checking the caller's credentials. Because the nwamd door at /etc/svc/volatile/nwam/nwam_door is accessible to all local users, an unprivileged user can issue a door_call() with no argument data to crash nwamd; repeated calls place the svc:/network/physical:nwam service into maintenance, stopping automatic network configuration. nwamd runs only when svc:/network/physical:nwam is enabled, which is not the default. The flaw has existed since 2010 (illumos-gate commit 6ba597c5), and affects any illumos distribution prior to illumos-gate commit 0f1064d9.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T18:00:33.805Z","source_hash":"content-fingerprint:fnv1a-316924b0","affected_system":{"organization":"A NULL pointer dereference in the illumos Network Auto-Magic daemon (nwamd) allows a local user to crash the daemon. nwamddoorswitch() in usr/src/cmd/cmd-inet/lib/nwamd/doorif.c writes to the caller's request structure before checking that a request was supplied, and before checking the caller's credentials. Because the nwamd door at /etc/svc/volatile/nwam/nwamdoor is accessible to all local users, an unprivileged user can issue a doorcall() with no argument data to crash nwamd; repeated calls place the svc project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-104114-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A NULL pointer dereference in the illumos Network Auto-Magic daemon (nwamd) allows a local user to crash the daemon. nwamd_door_switch() in usr/src/cmd/cmd-inet/lib/nwamd/door_if.c writes to the caller's request structure before checking that a request was supplied, and before checking the caller's credentials. Because the nwamd door at /etc/svc/volatile/nwam/nwam_door is accessible to all local users, an unprivileged user can issue a door_call() with no argument data to crash nwamd; repeated calls place the svc:/network/physical:nwam service into maintenance, stopping automatic network configuration. nwamd runs only when svc:/network/physical:nwam is enabled, which is not the default. The flaw has existed since 2010 (illumos-gate commit 6ba597c5), and affects any illumos distribution prior to illumos-gate commit 0f1064d9.","source_quote_or_pointer":"Security Advisory CVE-2026-104114","fact_id":"SEA-CVE-2026-104114-F1","document_citation":"Security Advisory CVE-2026-104114"},{"id":"SEA-CVE-2026-104114-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A NULL pointer dereference in the illumos Network Auto-Magic daemon (nwamd) allows a local user to crash the daemon. nwamddoorswitch() in usr/src/cmd/cmd-inet/lib/nwamd/doorif.c writes to the caller's request structure before checking that a request was supplied, and before checking the caller's credentials.","source_quote_or_pointer":"Advisory description (CVE-2026-104114)","fact_id":"SEA-CVE-2026-104114-F2","document_citation":"Advisory description (CVE-2026-104114)"}],"source_stated_contributors":["A NULL pointer dereference in the illumos Network Auto-Magic daemon (nwamd) allows a local user to crash the daemon. nwamddoorswitch() in usr/src/cmd/cmd-inet/lib/nwamd/doorif.c writes to the caller's request structure before checking that a request was supplied, and before checking the caller's credentials."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-104114","reporting_entity":"CVE-2026-104114","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-104114-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-104114-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-104114"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-104113","title":"A double free in the IP management daemon (ipmgmtd) of OmniOS and SmartOS allows a local user to crash the daemon. When authorizing a door request that modifies interface configuration, ipmgmt_handler() in usr/src/cmd/cmd-inet/lib/ipmgmtd/ipmgmt_door.c frees the caller's credential with ucred_free() immediately after reading the user ID, and frees it a second time on the error path if the authorization check fails. An unprivileged local user who does not hold the solaris.network.interface.config authorization can send such a request, for example IPMGMT_CMD_RESETIF, to the ipmgmtd door, causing ipmgmtd to abort; repeated requests place the svc:/network/ip-interface-management service into maintenance, preventing IP interface configuration. The early free was introduced in 2014 to support lx-branded zones (OmniOS commit 4c170900) and is not present in upstream illumos-gate. It affects OmniOS r151020 and later, and SmartOS, prior to the fix.","display_title":"Software component issue could expose accounts or credentials","display_summary":"A double free in the IP management daemon (ipmgmtd) of OmniOS and SmartOS allows a local user to crash the daemon. When authorizing a door request that modifies interface configuration, ipmgmthandler() in…","display_reference":"CVE-2026-104113","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104113","source_title":"A double free in the IP management daemon (ipmgmtd) of OmniOS and SmartOS allows a local user to crash the daemon. When authorizing a door request that modifies interface configuration, ipmgmt_handler() in usr/src/cmd/cmd-inet/lib/ipmgmtd/ipmgmt_door.c frees the caller's credential with ucred_free() immediately after reading the user ID, and frees it a second time on the error path if the authorization check fails. An unprivileged local user who does not hold the solaris.network.interface.config authorization can send such a request, for example IPMGMT_CMD_RESETIF, to the ipmgmtd door, causing ipmgmtd to abort; repeated requests place the svc:/network/ip-interface-management service into maintenance, preventing IP interface configuration. The early free was introduced in 2014 to support lx-branded zones (OmniOS commit 4c170900) and is not present in upstream illumos-gate. It affects OmniOS r151020 and later, and SmartOS, prior to the fix.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T18:00:33.805Z","source_hash":"content-fingerprint:fnv1a-332e952d","affected_system":{"organization":"A double free in the IP management daemon (ipmgmtd) of OmniOS and SmartOS allows a local user to crash the daemon. When authorizing a door request that modifies interface configuration, ipmgmthandler() in usr/src/cmd/cmd-inet/lib/ipmgmtd/ipmgmtdoor.c frees the caller's credential with ucredfree() immediately after reading the user ID, and frees it a second time on the error path if the authorization check fails. An unprivileged local user who does not hold the solaris.network.interface.config authorization can send such a request, for example IPMGMTCMDRESETIF, to the ipmgmtd door, causing ipmgmtd to abort; repeated requests place the svc project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-104113-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A double free in the IP management daemon (ipmgmtd) of OmniOS and SmartOS allows a local user to crash the daemon. When authorizing a door request that modifies interface configuration, ipmgmt_handler() in usr/src/cmd/cmd-inet/lib/ipmgmtd/ipmgmt_door.c frees the caller's credential with ucred_free() immediately after reading the user ID, and frees it a second time on the error path if the authorization check fails. An unprivileged local user who does not hold the solaris.network.interface.config authorization can send such a request, for example IPMGMT_CMD_RESETIF, to the ipmgmtd door, causing ipmgmtd to abort; repeated requests place the svc:/network/ip-interface-management service into maintenance, preventing IP interface configuration. The early free was introduced in 2014 to support lx-branded zones (OmniOS commit 4c170900) and is not present in upstream illumos-gate. It affects OmniOS r151020 and later, and SmartOS, prior to the fix.","source_quote_or_pointer":"Security Advisory CVE-2026-104113","fact_id":"SEA-CVE-2026-104113-F1","document_citation":"Security Advisory CVE-2026-104113"},{"id":"SEA-CVE-2026-104113-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A double free in the IP management daemon (ipmgmtd) of OmniOS and SmartOS allows a local user to crash the daemon. When authorizing a door request that modifies interface configuration, ipmgmthandler() in usr/src/cmd/cmd-inet/lib/ipmgmtd/ipmgmtdoor.c frees the caller's credential with ucredfree() immediately after…","source_quote_or_pointer":"Advisory description (CVE-2026-104113)","fact_id":"SEA-CVE-2026-104113-F2","document_citation":"Advisory description (CVE-2026-104113)"}],"source_stated_contributors":["A double free in the IP management daemon (ipmgmtd) of OmniOS and SmartOS allows a local user to crash the daemon. When authorizing a door request that modifies interface configuration, ipmgmthandler() in usr/src/cmd/cmd-inet/lib/ipmgmtd/ipmgmtdoor.c frees the caller's credential with ucredfree() immediately after…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.pii"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-104113","reporting_entity":"CVE-2026-104113","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-104113-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-104113-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-104113"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-104112","title":"A missing release of resources in the illumos name service cache daemon (nscd) allows a local user to exhaust kernel memory. The nscd door server procedure, switcher() in usr/src/cmd/nscd/nscd_frontend.c, does not close file descriptors that are passed with a door call but not used by the request, and the main nscd door at /var/run/name_service_door accepts passed descriptors from any user in its zone. Because nscd also runs with an unlimited file descriptor limit, an unprivileged local user, including one in a non-global zone, can repeatedly pass a descriptor to its zone's nscd in a door_call() loop, causing the file descriptor table of nscd to grow without bound in kernel memory. This causes a denial of service of nscd and can render processes in all zones on the host unresponsive. The flaw has existed since 2006 (illumos-gate commit cb5caa98), and affects any illumos distribution prior to illumos-gate commit af810a72.","display_title":"Software component issue could make the service unavailable","display_summary":"A missing release of resources in the illumos name service cache daemon (nscd) allows a local user to exhaust kernel memory.","display_reference":"CVE-2026-104112","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104112","source_title":"A missing release of resources in the illumos name service cache daemon (nscd) allows a local user to exhaust kernel memory. The nscd door server procedure, switcher() in usr/src/cmd/nscd/nscd_frontend.c, does not close file descriptors that are passed with a door call but not used by the request, and the main nscd door at /var/run/name_service_door accepts passed descriptors from any user in its zone. Because nscd also runs with an unlimited file descriptor limit, an unprivileged local user, including one in a non-global zone, can repeatedly pass a descriptor to its zone's nscd in a door_call() loop, causing the file descriptor table of nscd to grow without bound in kernel memory. This causes a denial of service of nscd and can render processes in all zones on the host unresponsive. The flaw has existed since 2006 (illumos-gate commit cb5caa98), and affects any illumos distribution prior to illumos-gate commit af810a72.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T18:00:33.805Z","source_hash":"content-fingerprint:fnv1a-47cf4a4e","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-104112-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A missing release of resources in the illumos name service cache daemon (nscd) allows a local user to exhaust kernel memory. The nscd door server procedure, switcher() in usr/src/cmd/nscd/nscd_frontend.c, does not close file descriptors that are passed with a door call but not used by the request, and the main nscd door at /var/run/name_service_door accepts passed descriptors from any user in its zone. Because nscd also runs with an unlimited file descriptor limit, an unprivileged local user, including one in a non-global zone, can repeatedly pass a descriptor to its zone's nscd in a door_call() loop, causing the file descriptor table of nscd to grow without bound in kernel memory. This causes a denial of service of nscd and can render processes in all zones on the host unresponsive. The flaw has existed since 2006 (illumos-gate commit cb5caa98), and affects any illumos distribution prior to illumos-gate commit af810a72.","source_quote_or_pointer":"Security Advisory CVE-2026-104112","fact_id":"SEA-CVE-2026-104112-F1","document_citation":"Security Advisory CVE-2026-104112"},{"id":"SEA-CVE-2026-104112-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A missing release of resources in the illumos name service cache daemon (nscd) allows a local user to exhaust kernel memory. The nscd door server procedure, switcher() in usr/src/cmd/nscd/nscdfrontend.c, does not close file descriptors that are passed with a door call but not used by the request, and the main nscd…","source_quote_or_pointer":"Advisory description (CVE-2026-104112)","fact_id":"SEA-CVE-2026-104112-F2","document_citation":"Advisory description (CVE-2026-104112)"}],"source_stated_contributors":["A missing release of resources in the illumos name service cache daemon (nscd) allows a local user to exhaust kernel memory. The nscd door server procedure, switcher() in usr/src/cmd/nscd/nscdfrontend.c, does not close file descriptors that are passed with a door call but not used by the request, and the main nscd…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","arch.caching"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-104112","reporting_entity":"CVE-2026-104112","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-104112-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-104112-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-104112"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-103329","title":"The Super Payments WordPress plugin before 1.43.1 does not properly verify the authenticity of incoming payment webhook notifications, as the signing key used to validate their signature is empty by default, allowing unauthenticated attackers to forge a valid signature and mark arbitrary WooCommerce orders as paid without payment.","display_title":"Security issue reported in Software component","display_summary":"The Super Payments WordPress plugin before 1.43.1 does not properly verify the authenticity of incoming payment webhook notifications, as the signing key used to validate their signature is empty by default, allowing…","display_reference":"CVE-2026-103329","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103329","source_title":"The Super Payments WordPress plugin before 1.43.1 does not properly verify the authenticity of incoming payment webhook notifications, as the signing key used to validate their signature is empty by default, allowing unauthenticated attackers to forge a valid signature and mark arbitrary WooCommerce orders as paid without payment.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T18:00:33.805Z","source_hash":"content-fingerprint:fnv1a-6075f37f","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-103329-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Super Payments WordPress plugin before 1.43.1 does not properly verify the authenticity of incoming payment webhook notifications, as the signing key used to validate their signature is empty by default, allowing unauthenticated attackers to forge a valid signature and mark arbitrary WooCommerce orders as paid without payment.","source_quote_or_pointer":"Security Advisory CVE-2026-103329","fact_id":"SEA-CVE-2026-103329-F1","document_citation":"Security Advisory CVE-2026-103329"},{"id":"SEA-CVE-2026-103329-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Super Payments WordPress plugin before 1.43.1 does not properly verify the authenticity of incoming payment webhook notifications, as the signing key used to validate their signature is empty by default, allowing unauthenticated attackers to forge a valid signature and mark arbitrary WooCommerce orders as paid…","source_quote_or_pointer":"Advisory description (CVE-2026-103329)","fact_id":"SEA-CVE-2026-103329-F2","document_citation":"Advisory description (CVE-2026-103329)"}],"source_stated_contributors":["The Super Payments WordPress plugin before 1.43.1 does not properly verify the authenticity of incoming payment webhook notifications, as the signing key used to validate their signature is empty by default, allowing unauthenticated attackers to forge a valid signature and mark arbitrary WooCommerce orders as paid…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.financial_action","arch.external_api","arch.event_driven"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-103329","reporting_entity":"CVE-2026-103329","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-103329-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-103329-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-103329"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2025-15700","title":"The AWP Classifieds WordPress plugin before 4.4.9 does not validate the type of files extracted from an uploaded ZIP archive during its listing-import feature, allowing users with the AWP Classifieds WordPress plugin before 4.4.9's management capability to upload arbitrary PHP files to a publicly accessible, network-shared directory and achieve remote code execution.","display_title":"Software component issue could allow unintended commands to run","display_summary":"The AWP Classifieds WordPress plugin before 4.4.9 does not validate the type of files extracted from an uploaded ZIP archive during its listing-import feature, allowing users with the AWP Classifieds WordPress plugin…","display_reference":"CVE-2025-15700","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2025-15700","source_title":"The AWP Classifieds WordPress plugin before 4.4.9 does not validate the type of files extracted from an uploaded ZIP archive during its listing-import feature, allowing users with the AWP Classifieds WordPress plugin before 4.4.9's management capability to upload arbitrary PHP files to a publicly accessible, network-shared directory and achieve remote code execution.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T18:00:33.805Z","source_hash":"content-fingerprint:fnv1a-a1942365","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2025-15700-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The AWP Classifieds WordPress plugin before 4.4.9 does not validate the type of files extracted from an uploaded ZIP archive during its listing-import feature, allowing users with the AWP Classifieds WordPress plugin before 4.4.9's management capability to upload arbitrary PHP files to a publicly accessible, network-shared directory and achieve remote code execution.","source_quote_or_pointer":"Security Advisory CVE-2025-15700","fact_id":"SEA-CVE-2025-15700-F1","document_citation":"Security Advisory CVE-2025-15700"},{"id":"SEA-CVE-2025-15700-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The AWP Classifieds WordPress plugin before 4.4.9 does not validate the type of files extracted from an uploaded ZIP archive during its listing-import feature, allowing users with the AWP Classifieds WordPress plugin before 4.4.9's management capability to upload arbitrary PHP files to a publicly accessible,…","source_quote_or_pointer":"Advisory description (CVE-2025-15700)","fact_id":"SEA-CVE-2025-15700-F2","document_citation":"Advisory description (CVE-2025-15700)"}],"source_stated_contributors":["The AWP Classifieds WordPress plugin before 4.4.9 does not validate the type of files extracted from an uploaded ZIP archive during its listing-import feature, allowing users with the AWP Classifieds WordPress plugin before 4.4.9's management capability to upload arbitrary PHP files to a publicly accessible,…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","data.uploaded_files"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2025-15700","reporting_entity":"CVE-2025-15700","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2025-15700-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2025-15700-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2025-15700"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-108063","title":"A flaw was found in libhangul. When parsing Hanja dictionary files, the library fails to verify that an entry contains a valid value alongside its key. By providing a specially crafted dictionary file to an application that queries it, an attacker can trigger an unexpected application crash, resulting in a Denial of Service (DoS).","display_title":"Software component issue could make the service unavailable","display_summary":"A flaw was found in libhangul. When parsing Hanja dictionary files, the library fails to verify that an entry contains a valid value alongside its key.","display_reference":"CVE-2026-108063","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108063","source_title":"A flaw was found in libhangul. When parsing Hanja dictionary files, the library fails to verify that an entry contains a valid value alongside its key. By providing a specially crafted dictionary file to an application that queries it, an attacker can trigger an unexpected application crash, resulting in a Denial of Service (DoS).","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T18:00:33.805Z","source_hash":"content-fingerprint:fnv1a-625b413","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-108063-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A flaw was found in libhangul. When parsing Hanja dictionary files, the library fails to verify that an entry contains a valid value alongside its key. By providing a specially crafted dictionary file to an application that queries it, an attacker can trigger an unexpected application crash, resulting in a Denial of Service (DoS).","source_quote_or_pointer":"Security Advisory CVE-2026-108063","fact_id":"SEA-CVE-2026-108063-F1","document_citation":"Security Advisory CVE-2026-108063"},{"id":"SEA-CVE-2026-108063-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A flaw was found in libhangul. When parsing Hanja dictionary files, the library fails to verify that an entry contains a valid value alongside its key. By providing a specially crafted dictionary file to an application that queries it, an attacker can trigger an unexpected application crash, resulting in a Denial of…","source_quote_or_pointer":"Advisory description (CVE-2026-108063)","fact_id":"SEA-CVE-2026-108063-F2","document_citation":"Advisory description (CVE-2026-108063)"}],"source_stated_contributors":["A flaw was found in libhangul. When parsing Hanja dictionary files, the library fails to verify that an entry contains a valid value alongside its key. By providing a specially crafted dictionary file to an application that queries it, an attacker can trigger an unexpected application crash, resulting in a Denial of…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-108063","reporting_entity":"CVE-2026-108063","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-108063-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-108063-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-108063"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-107909","title":"A heap-based out-of-bounds write in the ws_read_frame function (src/bolt/ws.c) and the buffer_apply_mask function (src/bolt/buffer.c) in FalkorDB before 4.20.0 allows a remote unauthenticated attacker to cause a denial of service and possibly corrupt heap memory by sending a WebSocket frame with a 64-bit extended payload length to the Bolt port. The payload length is not bounded, and the only bounds check in buffer_apply_mask is an ASSERT(), which is compiled out in release builds, so the function XORs memory beyond the end of the receive buffer with the attacker-supplied mask key. Only deployments that enable the Bolt endpoint (BOLT_PORT, disabled by default) are affected.","display_title":"Software component issue could make the service unavailable","display_summary":"A heap-based out-of-bounds write in the wsreadframe function (src/bolt/ws.c) and the bufferapplymask function (src/bolt/buffer.c) in FalkorDB before 4.20.0 allows a remote unauthenticated attacker to cause a denial of…","display_reference":"CVE-2026-107909","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107909","source_title":"A heap-based out-of-bounds write in the ws_read_frame function (src/bolt/ws.c) and the buffer_apply_mask function (src/bolt/buffer.c) in FalkorDB before 4.20.0 allows a remote unauthenticated attacker to cause a denial of service and possibly corrupt heap memory by sending a WebSocket frame with a 64-bit extended payload length to the Bolt port. The payload length is not bounded, and the only bounds check in buffer_apply_mask is an ASSERT(), which is compiled out in release builds, so the function XORs memory beyond the end of the receive buffer with the attacker-supplied mask key. Only deployments that enable the Bolt endpoint (BOLT_PORT, disabled by default) are affected.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T16:00:38.904Z","source_hash":"content-fingerprint:fnv1a-9dcd7ea7","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-107909-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A heap-based out-of-bounds write in the ws_read_frame function (src/bolt/ws.c) and the buffer_apply_mask function (src/bolt/buffer.c) in FalkorDB before 4.20.0 allows a remote unauthenticated attacker to cause a denial of service and possibly corrupt heap memory by sending a WebSocket frame with a 64-bit extended payload length to the Bolt port. The payload length is not bounded, and the only bounds check in buffer_apply_mask is an ASSERT(), which is compiled out in release builds, so the function XORs memory beyond the end of the receive buffer with the attacker-supplied mask key. Only deployments that enable the Bolt endpoint (BOLT_PORT, disabled by default) are affected.","source_quote_or_pointer":"Security Advisory CVE-2026-107909","fact_id":"SEA-CVE-2026-107909-F1","document_citation":"Security Advisory CVE-2026-107909"},{"id":"SEA-CVE-2026-107909-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A heap-based out-of-bounds write in the wsreadframe function (src/bolt/ws.c) and the bufferapplymask function (src/bolt/buffer.c) in FalkorDB before 4.20.0 allows a remote unauthenticated attacker to cause a denial of service and possibly corrupt heap memory by sending a WebSocket frame with a 64-bit extended payload…","source_quote_or_pointer":"Advisory description (CVE-2026-107909)","fact_id":"SEA-CVE-2026-107909-F2","document_citation":"Advisory description (CVE-2026-107909)"}],"source_stated_contributors":["A heap-based out-of-bounds write in the wsreadframe function (src/bolt/ws.c) and the bufferapplymask function (src/bolt/buffer.c) in FalkorDB before 4.20.0 allows a remote unauthenticated attacker to cause a denial of service and possibly corrupt heap memory by sending a WebSocket frame with a 64-bit extended payload…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","arch.event_driven"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-107909","reporting_entity":"CVE-2026-107909","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-107909-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-107909-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-107909"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-107908","title":"A heap-based out-of-bounds write in the BoltReadHandler function (src/bolt/bolt_api.c) in FalkorDB before 4.20.0 allows a remote unauthenticated attacker to cause a denial of service and possibly execute arbitrary code by sending a Bolt RESET message with an attacker-chosen chunk size to the Bolt port. The handler checks the size only with ASSERT(), which is compiled out in release builds, then computes a destination pointer from the wire-supplied 16-bit size and moves buffered data up to about 64 KiB backwards past the start of the read buffer. Only deployments that enable the Bolt endpoint (BOLT_PORT, disabled by default) are affected.","display_title":"Software component issue could allow unintended commands to run","display_summary":"A heap-based out-of-bounds write in the BoltReadHandler function (src/bolt/boltapi.c) in FalkorDB before 4.20.0 allows a remote unauthenticated attacker to cause a denial of service and possibly execute arbitrary code by…","display_reference":"CVE-2026-107908","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107908","source_title":"A heap-based out-of-bounds write in the BoltReadHandler function (src/bolt/bolt_api.c) in FalkorDB before 4.20.0 allows a remote unauthenticated attacker to cause a denial of service and possibly execute arbitrary code by sending a Bolt RESET message with an attacker-chosen chunk size to the Bolt port. The handler checks the size only with ASSERT(), which is compiled out in release builds, then computes a destination pointer from the wire-supplied 16-bit size and moves buffered data up to about 64 KiB backwards past the start of the read buffer. Only deployments that enable the Bolt endpoint (BOLT_PORT, disabled by default) are affected.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T16:00:38.904Z","source_hash":"content-fingerprint:fnv1a-eda0e534","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-107908-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A heap-based out-of-bounds write in the BoltReadHandler function (src/bolt/bolt_api.c) in FalkorDB before 4.20.0 allows a remote unauthenticated attacker to cause a denial of service and possibly execute arbitrary code by sending a Bolt RESET message with an attacker-chosen chunk size to the Bolt port. The handler checks the size only with ASSERT(), which is compiled out in release builds, then computes a destination pointer from the wire-supplied 16-bit size and moves buffered data up to about 64 KiB backwards past the start of the read buffer. Only deployments that enable the Bolt endpoint (BOLT_PORT, disabled by default) are affected.","source_quote_or_pointer":"Security Advisory CVE-2026-107908","fact_id":"SEA-CVE-2026-107908-F1","document_citation":"Security Advisory CVE-2026-107908"},{"id":"SEA-CVE-2026-107908-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A heap-based out-of-bounds write in the BoltReadHandler function (src/bolt/boltapi.c) in FalkorDB before 4.20.0 allows a remote unauthenticated attacker to cause a denial of service and possibly execute arbitrary code by sending a Bolt RESET message with an attacker-chosen chunk size to the Bolt port.","source_quote_or_pointer":"Advisory description (CVE-2026-107908)","fact_id":"SEA-CVE-2026-107908-F2","document_citation":"Advisory description (CVE-2026-107908)"}],"source_stated_contributors":["A heap-based out-of-bounds write in the BoltReadHandler function (src/bolt/boltapi.c) in FalkorDB before 4.20.0 allows a remote unauthenticated attacker to cause a denial of service and possibly execute arbitrary code by sending a Bolt RESET message with an attacker-chosen chunk size to the Bolt port."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.financial_action","auth.write_action","data.financial_records"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-107908","reporting_entity":"CVE-2026-107908","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-107908-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-107908-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-107908"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-7826","title":"A heap-based out-of-bounds read in the BufferSerializerIOv2_ReadBuffer function (src/serializers/serializer_io.c) in FalkorDB before 4.18.4 allows a remote attacker who can issue Redis replication commands (for example, against an instance with no password configured) to cause a denial of service or disclose heap memory by supplying a crafted RDB stream whose sub-buffer length field exceeds the remaining buffer size. The only bounds check is an ASSERT(), which is compiled out in release builds, so memcpy() reads past the end of the heap allocation.","display_title":"Software component issue could make the service unavailable","display_summary":"A heap-based out-of-bounds read in the BufferSerializerIOv2ReadBuffer function (src/serializers/serializerio.c) in FalkorDB before 4.18.4 allows a remote attacker who can issue Redis replication commands (for example,…","display_reference":"CVE-2026-7826","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-7826","source_title":"A heap-based out-of-bounds read in the BufferSerializerIOv2_ReadBuffer function (src/serializers/serializer_io.c) in FalkorDB before 4.18.4 allows a remote attacker who can issue Redis replication commands (for example, against an instance with no password configured) to cause a denial of service or disclose heap memory by supplying a crafted RDB stream whose sub-buffer length field exceeds the remaining buffer size. The only bounds check is an ASSERT(), which is compiled out in release builds, so memcpy() reads past the end of the heap allocation.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T16:00:38.904Z","source_hash":"content-fingerprint:fnv1a-3a80695a","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-7826-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A heap-based out-of-bounds read in the BufferSerializerIOv2_ReadBuffer function (src/serializers/serializer_io.c) in FalkorDB before 4.18.4 allows a remote attacker who can issue Redis replication commands (for example, against an instance with no password configured) to cause a denial of service or disclose heap memory by supplying a crafted RDB stream whose sub-buffer length field exceeds the remaining buffer size. The only bounds check is an ASSERT(), which is compiled out in release builds, so memcpy() reads past the end of the heap allocation.","source_quote_or_pointer":"Security Advisory CVE-2026-7826","fact_id":"SEA-CVE-2026-7826-F1","document_citation":"Security Advisory CVE-2026-7826"},{"id":"SEA-CVE-2026-7826-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A heap-based out-of-bounds read in the BufferSerializerIOv2ReadBuffer function (src/serializers/serializerio.c) in FalkorDB before 4.18.4 allows a remote attacker who can issue Redis replication commands (for example, against an instance with no password configured) to cause a denial of service or disclose heap memory…","source_quote_or_pointer":"Advisory description (CVE-2026-7826)","fact_id":"SEA-CVE-2026-7826-F2","document_citation":"Advisory description (CVE-2026-7826)"}],"source_stated_contributors":["A heap-based out-of-bounds read in the BufferSerializerIOv2ReadBuffer function (src/serializers/serializerio.c) in FalkorDB before 4.18.4 allows a remote attacker who can issue Redis replication commands (for example, against an instance with no password configured) to cause a denial of service or disclose heap memory…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.credentials_secrets","arch.caching","arch.async_job","arch.event_driven"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-7826","reporting_entity":"CVE-2026-7826","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-7826-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-7826-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-7826"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-107890","title":"OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference caused by repeated IPP group tags in job-creation requests. IPP parsing creates unnamed separator attributes with IPP_TAG_ZERO, but add_job() converts these separators to IPP_TAG_JOB. During job startup, get_options()/ipp_length() subsequently calls strlen() on a NULL attribute name, terminating cupsd and disrupting all queues. A single crafted Print-Job request can trigger the crash when the client can reach the scheduler and submit jobs to an accepting, enabled queue supporting the submitted document format. Anonymous submission is possible when permitted by listener and access-control configuration.","display_title":"Software component issue could allow unauthorized access","display_summary":"OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference caused by repeated IPP group tags in job-creation requests.","display_reference":"CVE-2026-107890","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107890","source_title":"OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference caused by repeated IPP group tags in job-creation requests. IPP parsing creates unnamed separator attributes with IPP_TAG_ZERO, but add_job() converts these separators to IPP_TAG_JOB. During job startup, get_options()/ipp_length() subsequently calls strlen() on a NULL attribute name, terminating cupsd and disrupting all queues. A single crafted Print-Job request can trigger the crash when the client can reach the scheduler and submit jobs to an accepting, enabled queue supporting the submitted document format. Anonymous submission is possible when permitted by listener and access-control configuration.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T16:00:38.904Z","source_hash":"content-fingerprint:fnv1a-8a59bfb0","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-107890-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference caused by repeated IPP group tags in job-creation requests. IPP parsing creates unnamed separator attributes with IPP_TAG_ZERO, but add_job() converts these separators to IPP_TAG_JOB. During job startup, get_options()/ipp_length() subsequently calls strlen() on a NULL attribute name, terminating cupsd and disrupting all queues. A single crafted Print-Job request can trigger the crash when the client can reach the scheduler and submit jobs to an accepting, enabled queue supporting the submitted document format. Anonymous submission is possible when permitted by listener and access-control configuration.","source_quote_or_pointer":"Security Advisory CVE-2026-107890","fact_id":"SEA-CVE-2026-107890-F1","document_citation":"Security Advisory CVE-2026-107890"},{"id":"SEA-CVE-2026-107890-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference caused by repeated IPP group tags in job-creation requests. IPP parsing creates unnamed separator attributes with IPPTAGZERO, but addjob() converts these separators to IPPTAGJOB.","source_quote_or_pointer":"Advisory description (CVE-2026-107890)","fact_id":"SEA-CVE-2026-107890-F2","document_citation":"Advisory description (CVE-2026-107890)"}],"source_stated_contributors":["OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference caused by repeated IPP group tags in job-creation requests. IPP parsing creates unnamed separator attributes with IPPTAGZERO, but addjob() converts these separators to IPPTAGJOB."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","arch.async_job"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-107890","reporting_entity":"CVE-2026-107890","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-107890-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-107890-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-107890"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-107889","title":"A flaw was found in the login theme rendering component of Keycloak. The issue occurs because the security filter responsible for cleaning user input can be bypassed, allowing a realm administrator to store malicious scripts in display fields. This could result in unauthorized JavaScript execution in the browsers of users visiting the login page, potentially leading to data exposure or session interference.","display_title":"Security issue reported in Software component","display_summary":"A flaw was found in the login theme rendering component of Keycloak. The issue occurs because the security filter responsible for cleaning user input can be bypassed, allowing a realm administrator to store malicious…","display_reference":"CVE-2026-107889","display_source_type":"Security advisory","incident_date":"2026-10-09","disclosure_date":"2026-10-09","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107889","source_title":"A flaw was found in the login theme rendering component of Keycloak. The issue occurs because the security filter responsible for cleaning user input can be bypassed, allowing a realm administrator to store malicious scripts in display fields. This could result in unauthorized JavaScript execution in the browsers of users visiting the login page, potentially leading to data exposure or session interference.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T16:00:38.904Z","source_hash":"content-fingerprint:fnv1a-6a2d2586","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-107889-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A flaw was found in the login theme rendering component of Keycloak. The issue occurs because the security filter responsible for cleaning user input can be bypassed, allowing a realm administrator to store malicious scripts in display fields. This could result in unauthorized JavaScript execution in the browsers of users visiting the login page, potentially leading to data exposure or session interference.","source_quote_or_pointer":"Security Advisory CVE-2026-107889","fact_id":"SEA-CVE-2026-107889-F1","document_citation":"Security Advisory CVE-2026-107889"},{"id":"SEA-CVE-2026-107889-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A flaw was found in the login theme rendering component of Keycloak. The issue occurs because the security filter responsible for cleaning user input can be bypassed, allowing a realm administrator to store malicious scripts in display fields.","source_quote_or_pointer":"Advisory description (CVE-2026-107889)","fact_id":"SEA-CVE-2026-107889-F2","document_citation":"Advisory description (CVE-2026-107889)"}],"source_stated_contributors":["A flaw was found in the login theme rendering component of Keycloak. The issue occurs because the security filter responsible for cleaning user input can be bypassed, allowing a realm administrator to store malicious scripts in display fields."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.write_action","data.pii","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-107889","reporting_entity":"CVE-2026-107889","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-107889-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-107889-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-107889"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CISA-2015-5477","title":"ISC BIND Data Processing Errors Vulnerability","display_title":"Security issue reported in BIND","display_summary":"ISC BIND contains a data processing errors vulnerability that could allow remote attackers to cause a denial of service via TKEY queries.","display_reference":"CVE-2015-5477","display_source_type":"CISA advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"vendor_postmortem","source_url":"https://web.archive.org/web/20150729014733/https://kb.isc.org/article/AA-01272","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T16:55:27.513Z","source_hash":"content-fingerprint:fnv1a-f1541481","affected_system":{"organization":"ISC","product":"BIND","system_type":"Enterprise Software Platform & Infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Enterprise Software"},"documented_facts":[{"id":"SEA-CISA-2015-5477-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"ISC BIND contains a data processing errors vulnerability that could allow remote attackers to cause a denial of service via TKEY queries.","source_quote_or_pointer":"CISA BOD 22-01 Catalog (CVE-2015-5477)","fact_id":"SEA-CISA-2015-5477-F1","document_citation":"CISA BOD 22-01 Catalog (CVE-2015-5477)"},{"id":"SEA-CISA-2015-5477-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Mandatory remediation: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","source_quote_or_pointer":"Remediation Deadline: 2026-10-11","fact_id":"SEA-CISA-2015-5477-F2","document_citation":"Remediation Deadline: 2026-10-11"}],"source_stated_contributors":["Actively exploited in production systems pursuant to CISA Binding Operational Directive BOD 22-01","Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-004"],"consequences":["Actively exploited in the wild"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-cisa-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"CISA Known Exploited Vulnerabilities Directive","filing_id":"CVE-2015-5477","reporting_entity":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","regulatory_body":"U.S. Department of Homeland Security / CISA"},"safeguards":[{"safeguard_id":"SEA-CISA-2015-5477-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CISA-2015-5477-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2015-5477"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CISA-2023-22894","title":"Strapi Cleartext Storage of Sensitive Information Vulnerability","display_title":"Security issue reported in Strapi","display_summary":"Strapi contains a cleartext storage of sensitive information vulnerability that could allow attackers with access to the admin panel to discover sensitive user details via the query filter.","display_reference":"CVE-2023-22894","display_source_type":"CISA advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://strapi.io/blog/security-disclosure-of-vulnerabilities-cve","source_title":"Strapi Cleartext Storage of Sensitive Information Vulnerability","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T16:55:27.514Z","source_hash":"content-fingerprint:fnv1a-4c43ce99","affected_system":{"organization":"Strapi","product":"Strapi","system_type":"Enterprise Software Platform & Infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Enterprise Software"},"documented_facts":[{"id":"SEA-CISA-2023-22894-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Strapi contains a cleartext storage of sensitive information vulnerability that could allow attackers with access to the admin panel to discover sensitive user details via the query filter. The impacted product(s) could be end-of-life (EoL) and/or end-of-service (EoS). Users are advised to discontinue use and/or transition to a supported version. This vulnerability can be chained with CVE-2023-22621 to achieve remote code execution. ","source_quote_or_pointer":"CISA BOD 22-01 Catalog (CVE-2023-22894)","fact_id":"SEA-CISA-2023-22894-F1","document_citation":"CISA BOD 22-01 Catalog (CVE-2023-22894)"},{"id":"SEA-CISA-2023-22894-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Mandatory remediation: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","source_quote_or_pointer":"Remediation Deadline: 2026-10-11","fact_id":"SEA-CISA-2023-22894-F2","document_citation":"Remediation Deadline: 2026-10-11"}],"source_stated_contributors":["Actively exploited in production systems pursuant to CISA Binding Operational Directive BOD 22-01","Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii"],"failure_mechanisms":["SEA-FM-004"],"consequences":["Actively exploited in the wild"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-cisa-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"CISA Known Exploited Vulnerabilities Directive","filing_id":"CVE-2023-22894","reporting_entity":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","regulatory_body":"U.S. Department of Homeland Security / CISA"},"safeguards":[{"safeguard_id":"SEA-CISA-2023-22894-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CISA-2023-22894-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2023-22894"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CISA-2021-3199","title":"ONLYOFFICE Docs Server Path Traversal Vulnerability","display_title":"Docs issue could expose restricted files","display_summary":"ONLYOFFICE Docs contains a path traversal vulnerability that can occur when JWT is used, via a /.. sequence in an image upload parameter and could allow for remote code execution.","display_reference":"CVE-2021-3199","display_source_type":"CISA advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"vendor_postmortem","source_url":"https://github.com/ONLYOFFICE/DocumentServer/blob/903fe5ab7a275bd69c3c3346af2d21cf87ebeabf/CHANGELOG.md#563","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T16:55:27.514Z","source_hash":"content-fingerprint:fnv1a-b4ced4a7","affected_system":{"organization":"ONLYOFFICE","product":"Docs","system_type":"Enterprise Software Platform & Infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Enterprise Software"},"documented_facts":[{"id":"SEA-CISA-2021-3199-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"ONLYOFFICE Docs contains a path traversal vulnerability that can occur when JWT is used, via a /.. sequence in an image upload parameter and could allow for remote code execution.","source_quote_or_pointer":"CISA BOD 22-01 Catalog (CVE-2021-3199)","fact_id":"SEA-CISA-2021-3199-F1","document_citation":"CISA BOD 22-01 Catalog (CVE-2021-3199)"},{"id":"SEA-CISA-2021-3199-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Mandatory remediation: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","source_quote_or_pointer":"Remediation Deadline: 2026-10-11","fact_id":"SEA-CISA-2021-3199-F2","document_citation":"Remediation Deadline: 2026-10-11"}],"source_stated_contributors":["Actively exploited in production systems pursuant to CISA Binding Operational Directive BOD 22-01","Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.credentials_secrets","data.uploaded_files"],"failure_mechanisms":["SEA-FM-004"],"consequences":["Actively exploited in the wild"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-cisa-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"CISA Known Exploited Vulnerabilities Directive","filing_id":"CVE-2021-3199","reporting_entity":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","regulatory_body":"U.S. Department of Homeland Security / CISA"},"safeguards":[{"safeguard_id":"SEA-CISA-2021-3199-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CISA-2021-3199-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2021-3199"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-x937-hj6v-793p","title":"fast-jwt: Verifier cache accepts expired JWTs without iat.","display_title":"Security issue reported in fast-jwt","display_summary":"cacheSet only derives its exp cache deadline inside hasIat (src/verifier.js:127-140). JWT iat is optional. For a valid token with exp but no iat, cacheSet substitutes clockTimestamp + clockTolerance + cacheTTL…","display_reference":"CVE-2026-107719","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-x937-hj6v-793p","source_title":"fast-jwt: Verifier cache accepts expired JWTs without iat.","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T16:55:27.181Z","source_hash":"content-fingerprint:fnv1a-1dc034a3","affected_system":{"organization":"fast-jwt project","product":"fast-jwt","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"JavaScript / TypeScript"},"documented_facts":[{"id":"SEA-GHSA-x937-hj6v-793p-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"fast-jwt: Verifier cache accepts expired JWTs without iat.","source_quote_or_pointer":"Security Advisory GHSA-x937-hj6v-793p","fact_id":"SEA-GHSA-x937-hj6v-793p-F1","document_citation":"Security Advisory GHSA-x937-hj6v-793p"},{"id":"SEA-GHSA-x937-hj6v-793p-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"cacheSet only derives its exp cache deadline inside hasIat (src/verifier.js:127-140). JWT iat is optional. For a valid token with exp but no iat, cacheSet substitutes clockTimestamp + clockTolerance + cacheTTL (src/verifier.js:142-146).","source_quote_or_pointer":"Advisory description (GHSA-x937-hj6v-793p)","fact_id":"SEA-GHSA-x937-hj6v-793p-F2","document_citation":"Advisory description (GHSA-x937-hj6v-793p)"}],"source_stated_contributors":["cacheSet only derives its exp cache deadline inside hasIat (src/verifier.js:127-140). JWT iat is optional. For a valid token with exp but no iat, cacheSet substitutes clockTimestamp + clockTolerance + cacheTTL (src/verifier.js:142-146)."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.credentials_secrets","arch.caching"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-x937-hj6v-793p","reporting_entity":"CVE-2026-107719","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-x937-hj6v-793p-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-x937-hj6v-793p-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-107719"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-556j-vv39-8rqv","title":"Banks: Symlink traversal and arbitrary file disclosure/overwrite in DirectoryPromptRegistry","display_title":"Security issue reported in banks","display_summary":"In banks.registries.DirectoryPromptRegistry, prompt file paths and the index file (index.json) do not refuse symbolic links. When a prompt directory contains or accepts untrusted files (e.g.","display_reference":"CVE-2026-107716","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-556j-vv39-8rqv","source_title":"Banks: Symlink traversal and arbitrary file disclosure/overwrite in DirectoryPromptRegistry","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T16:55:27.181Z","source_hash":"content-fingerprint:fnv1a-d8b9b106","affected_system":{"organization":"banks project","product":"banks","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Python"},"documented_facts":[{"id":"SEA-GHSA-556j-vv39-8rqv-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Banks: Symlink traversal and arbitrary file disclosure/overwrite in DirectoryPromptRegistry","source_quote_or_pointer":"Security Advisory GHSA-556j-vv39-8rqv","fact_id":"SEA-GHSA-556j-vv39-8rqv-F1","document_citation":"Security Advisory GHSA-556j-vv39-8rqv"},{"id":"SEA-GHSA-556j-vv39-8rqv-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"In banks.registries.DirectoryPromptRegistry, prompt file paths and the index file (index.json) do not refuse symbolic links. When a prompt directory contains or accepts untrusted files (e.g.","source_quote_or_pointer":"Advisory description (GHSA-556j-vv39-8rqv)","fact_id":"SEA-GHSA-556j-vv39-8rqv-F2","document_citation":"Advisory description (GHSA-556j-vv39-8rqv)"}],"source_stated_contributors":["In banks.registries.DirectoryPromptRegistry, prompt file paths and the index file (index.json) do not refuse symbolic links. When a prompt directory contains or accepts untrusted files (e.g."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-556j-vv39-8rqv","reporting_entity":"CVE-2026-107716","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-556j-vv39-8rqv-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-556j-vv39-8rqv-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-107716"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-hmq2-7hp6-7crh","title":"Banks: User-controlled prompt input can be parsed as privileged chat messages","display_title":"Security issue reported in banks","display_summary":"Banks' Prompt.chatmessages() method parses every rendered output line as a potential ChatMessage JSON","display_reference":"CVE-2026-107717","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-hmq2-7hp6-7crh","source_title":"Banks: User-controlled prompt input can be parsed as privileged chat messages","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T16:55:27.181Z","source_hash":"content-fingerprint:fnv1a-1cb4486c","affected_system":{"organization":"banks project","product":"banks","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Python"},"documented_facts":[{"id":"SEA-GHSA-hmq2-7hp6-7crh-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Banks: User-controlled prompt input can be parsed as privileged chat messages","source_quote_or_pointer":"Security Advisory GHSA-hmq2-7hp6-7crh","fact_id":"SEA-GHSA-hmq2-7hp6-7crh-F1","document_citation":"Security Advisory GHSA-hmq2-7hp6-7crh"},{"id":"SEA-GHSA-hmq2-7hp6-7crh-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Banks' Prompt.chatmessages() method parses every rendered output line as a potential ChatMessage JSON","source_quote_or_pointer":"Advisory description (GHSA-hmq2-7hp6-7crh)","fact_id":"SEA-GHSA-hmq2-7hp6-7crh-F2","document_citation":"Advisory description (GHSA-hmq2-7hp6-7crh)"}],"source_stated_contributors":["Banks' Prompt.chatmessages() method parses every rendered output line as a potential ChatMessage JSON"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-hmq2-7hp6-7crh","reporting_entity":"CVE-2026-107717","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-hmq2-7hp6-7crh-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-hmq2-7hp6-7crh-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-107717"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-2v95-h47v-g4x9","title":"Indico: Incomplete Server-Side Request Forgery (SSRF) check","display_title":"indico issue could reach internal services","display_summary":"Indico makes outgoing requests to user-provides URLs in various places. This is mostly intentional and part of Indico's functionality, but of course it is never intended to let you access \"special\" targets such as…","display_reference":"CVE-2026-107394","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-2v95-h47v-g4x9","source_title":"Indico: Incomplete Server-Side Request Forgery (SSRF) check","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T16:55:27.181Z","source_hash":"content-fingerprint:fnv1a-d6349d54","affected_system":{"organization":"indico project","product":"indico","system_type":"Cloud & container infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Python"},"documented_facts":[{"id":"SEA-GHSA-2v95-h47v-g4x9-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Indico: Incomplete Server-Side Request Forgery (SSRF) check","source_quote_or_pointer":"Security Advisory GHSA-2v95-h47v-g4x9","fact_id":"SEA-GHSA-2v95-h47v-g4x9-F1","document_citation":"Security Advisory GHSA-2v95-h47v-g4x9"},{"id":"SEA-GHSA-2v95-h47v-g4x9-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Indico makes outgoing requests to user-provides URLs in various places. This is mostly intentional and part of Indico's functionality, but of course it is never intended to let you access \"special\" targets such as localhost or cloud metadata endpoints.","source_quote_or_pointer":"Advisory description (GHSA-2v95-h47v-g4x9)","fact_id":"SEA-GHSA-2v95-h47v-g4x9-F2","document_citation":"Advisory description (GHSA-2v95-h47v-g4x9)"}],"source_stated_contributors":["Indico makes outgoing requests to user-provides URLs in various places. This is mostly intentional and part of Indico's functionality, but of course it is never intended to let you access \"special\" targets such as localhost or cloud metadata endpoints."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Internal network access","Cloud metadata or credential exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-2v95-h47v-g4x9","reporting_entity":"CVE-2026-107394","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-2v95-h47v-g4x9-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-2v95-h47v-g4x9-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"The service fetched a URL chosen by the caller and could be steered at internal systems. Restrict outbound destinations and block internal address ranges.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-107394"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-6p4f-j8j6-463q","title":"Indico: Missing access check in legacy session export API","display_title":"Security issue reported in indico","display_summary":"A legacy API to retrieve session details could be misused to retrieve metadata (such as title, description and conveners) of a restricted session within without having access to that session, as long as the event itself…","display_reference":"CVE-2026-107395","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-6p4f-j8j6-463q","source_title":"Indico: Missing access check in legacy session export API","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T16:55:27.181Z","source_hash":"content-fingerprint:fnv1a-5461233","affected_system":{"organization":"indico project","product":"indico","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Python"},"documented_facts":[{"id":"SEA-GHSA-6p4f-j8j6-463q-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Indico: Missing access check in legacy session export API","source_quote_or_pointer":"Security Advisory GHSA-6p4f-j8j6-463q","fact_id":"SEA-GHSA-6p4f-j8j6-463q-F1","document_citation":"Security Advisory GHSA-6p4f-j8j6-463q"},{"id":"SEA-GHSA-6p4f-j8j6-463q-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A legacy API to retrieve session details could be misused to retrieve metadata (such as title, description and conveners) of a restricted session within without having access to that session, as long as the event itself was accessible.","source_quote_or_pointer":"Advisory description (GHSA-6p4f-j8j6-463q)","fact_id":"SEA-GHSA-6p4f-j8j6-463q-F2","document_citation":"Advisory description (GHSA-6p4f-j8j6-463q)"}],"source_stated_contributors":["A legacy API to retrieve session details could be misused to retrieve metadata (such as title, description and conveners) of a restricted session within without having access to that session, as long as the event itself was accessible."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["arch.event_driven"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-6p4f-j8j6-463q","reporting_entity":"CVE-2026-107395","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-6p4f-j8j6-463q-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-6p4f-j8j6-463q-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-107395"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-w294-6q5q-53p8","title":"Hazelcast has an authorization bypass in IMap Predicates API","display_title":"com.hazelcast:hazelcast issue could allow unauthorized access","display_summary":"Missing authorization checks in the Predicates API may allow a malicious client to execute arbitrary code on a Hazelcast member.","display_reference":"CVE-2026-107725","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-w294-6q5q-53p8","source_title":"Hazelcast has an authorization bypass in IMap Predicates API","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T16:55:27.182Z","source_hash":"content-fingerprint:fnv1a-28b2595c","affected_system":{"organization":"com.hazelcast:hazelcast project","product":"com.hazelcast:hazelcast","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Java"},"documented_facts":[{"id":"SEA-GHSA-w294-6q5q-53p8-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Hazelcast has an authorization bypass in IMap Predicates API","source_quote_or_pointer":"Security Advisory GHSA-w294-6q5q-53p8","fact_id":"SEA-GHSA-w294-6q5q-53p8-F1","document_citation":"Security Advisory GHSA-w294-6q5q-53p8"},{"id":"SEA-GHSA-w294-6q5q-53p8-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Missing authorization checks in the Predicates API may allow a malicious client to execute arbitrary code on a Hazelcast member.","source_quote_or_pointer":"Advisory description (GHSA-w294-6q5q-53p8)","fact_id":"SEA-GHSA-w294-6q5q-53p8-F2","document_citation":"Advisory description (GHSA-w294-6q5q-53p8)"}],"source_stated_contributors":["Missing authorization checks in the Predicates API may allow a malicious client to execute arbitrary code on a Hazelcast member."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-w294-6q5q-53p8","reporting_entity":"CVE-2026-107725","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-w294-6q5q-53p8-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-w294-6q5q-53p8-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-107725"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-c6rp-p8xm-4q9f","title":"Mechanize sends credential headers to another origin after a meta refresh","display_title":"mechanize issue could expose accounts or credentials","display_summary":"mechanize applied no trust boundary to a meta refresh, so credentials set through Mechanizerequestheaders= followed a refresh that pointed at another origin.","display_reference":"CVE-2026-107399","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-c6rp-p8xm-4q9f","source_title":"Mechanize sends credential headers to another origin after a meta refresh","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T16:55:27.182Z","source_hash":"content-fingerprint:fnv1a-3ecb8153","affected_system":{"organization":"mechanize project","product":"mechanize","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Ruby"},"documented_facts":[{"id":"SEA-GHSA-c6rp-p8xm-4q9f-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Mechanize sends credential headers to another origin after a meta refresh","source_quote_or_pointer":"Security Advisory GHSA-c6rp-p8xm-4q9f","fact_id":"SEA-GHSA-c6rp-p8xm-4q9f-F1","document_citation":"Security Advisory GHSA-c6rp-p8xm-4q9f"},{"id":"SEA-GHSA-c6rp-p8xm-4q9f-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"mechanize applied no trust boundary to a meta refresh, so credentials set through Mechanizerequestheaders= followed a refresh that pointed at another origin.","source_quote_or_pointer":"Advisory description (GHSA-c6rp-p8xm-4q9f)","fact_id":"SEA-GHSA-c6rp-p8xm-4q9f-F2","document_citation":"Advisory description (GHSA-c6rp-p8xm-4q9f)"}],"source_stated_contributors":["mechanize applied no trust boundary to a meta refresh, so credentials set through Mechanizerequestheaders= followed a refresh that pointed at another origin."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-c6rp-p8xm-4q9f","reporting_entity":"CVE-2026-107399","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-c6rp-p8xm-4q9f-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-c6rp-p8xm-4q9f-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-107399"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-2mwr-xjcg-37j7","title":"Mechanize sends credential headers to another host after an HTTP redirect","display_title":"mechanize issue could expose accounts or credentials","display_summary":"mechanize leaked credentials to the redirect target when an HTTP redirect crossed to another host. Credentials set through Mechanizerequestheaders= leaked even when they were Authorization.","display_reference":"CVE-2026-107715","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-2mwr-xjcg-37j7","source_title":"Mechanize sends credential headers to another host after an HTTP redirect","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T16:55:27.182Z","source_hash":"content-fingerprint:fnv1a-5e702af8","affected_system":{"organization":"mechanize project","product":"mechanize","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Ruby"},"documented_facts":[{"id":"SEA-GHSA-2mwr-xjcg-37j7-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Mechanize sends credential headers to another host after an HTTP redirect","source_quote_or_pointer":"Security Advisory GHSA-2mwr-xjcg-37j7","fact_id":"SEA-GHSA-2mwr-xjcg-37j7-F1","document_citation":"Security Advisory GHSA-2mwr-xjcg-37j7"},{"id":"SEA-GHSA-2mwr-xjcg-37j7-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"mechanize leaked credentials to the redirect target when an HTTP redirect crossed to another host. Credentials set through Mechanizerequestheaders= leaked even when they were Authorization.","source_quote_or_pointer":"Advisory description (GHSA-2mwr-xjcg-37j7)","fact_id":"SEA-GHSA-2mwr-xjcg-37j7-F2","document_citation":"Advisory description (GHSA-2mwr-xjcg-37j7)"}],"source_stated_contributors":["mechanize leaked credentials to the redirect target when an HTTP redirect crossed to another host. Credentials set through Mechanizerequestheaders= leaked even when they were Authorization."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-2mwr-xjcg-37j7","reporting_entity":"CVE-2026-107715","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-2mwr-xjcg-37j7-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-2mwr-xjcg-37j7-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-107715"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-8wpc-h4q6-8fxv","title":"fast-jwt: createVerifier accepts unsigned JWTs when key is '' or null and algorithms is explicitly set","display_title":"Security issue reported in fast-jwt","display_summary":"createVerifier in fast-jwt ≤ 6.3.0 skips signature verification entirely when the key option is a falsy synchronous value ('' or null) and the algorithms option is set to a non-empty allowlist.","display_reference":"CVE-2026-107720","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-8wpc-h4q6-8fxv","source_title":"fast-jwt: createVerifier accepts unsigned JWTs when key is '' or null and algorithms is explicitly set","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T16:55:27.182Z","source_hash":"content-fingerprint:fnv1a-911c6aea","affected_system":{"organization":"fast-jwt project","product":"fast-jwt","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"JavaScript / TypeScript"},"documented_facts":[{"id":"SEA-GHSA-8wpc-h4q6-8fxv-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"fast-jwt: createVerifier accepts unsigned JWTs when key is '' or null and algorithms is explicitly set","source_quote_or_pointer":"Security Advisory GHSA-8wpc-h4q6-8fxv","fact_id":"SEA-GHSA-8wpc-h4q6-8fxv-F1","document_citation":"Security Advisory GHSA-8wpc-h4q6-8fxv"},{"id":"SEA-GHSA-8wpc-h4q6-8fxv-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"createVerifier in fast-jwt ≤ 6.3.0 skips signature verification entirely when the key option is a falsy synchronous value ('' or null) and the algorithms option is set to a non-empty allowlist.","source_quote_or_pointer":"Advisory description (GHSA-8wpc-h4q6-8fxv)","fact_id":"SEA-GHSA-8wpc-h4q6-8fxv-F2","document_citation":"Advisory description (GHSA-8wpc-h4q6-8fxv)"}],"source_stated_contributors":["createVerifier in fast-jwt ≤ 6.3.0 skips signature verification entirely when the key option is a falsy synchronous value ('' or null) and the algorithms option is set to a non-empty allowlist."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.credentials_secrets"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-8wpc-h4q6-8fxv","reporting_entity":"CVE-2026-107720","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-8wpc-h4q6-8fxv-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-8wpc-h4q6-8fxv-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-107720"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-ww5h-9m49-7xx4","title":"fast-jwt: Incomplete patch of CVE-2026-34950: Non-whitespace key-prefix re-enables RSA→HS256 algorithm confusion","display_title":"Security issue reported in fast-jwt","display_summary":"The fix for CVE-2026-34950 (CVSS 9.1, released in v6.2.0) is incomplete. It adds key.trim() to the PEM-detection path in src/crypto.js, but String.prototype.trim() only strips characters classified as whitespace by the…","display_reference":"CVE-2026-107722","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-ww5h-9m49-7xx4","source_title":"fast-jwt: Incomplete patch of CVE-2026-34950: Non-whitespace key-prefix re-enables RSA→HS256 algorithm confusion","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T16:55:27.183Z","source_hash":"content-fingerprint:fnv1a-dbfc767a","affected_system":{"organization":"fast-jwt project","product":"fast-jwt","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"JavaScript / TypeScript"},"documented_facts":[{"id":"SEA-GHSA-ww5h-9m49-7xx4-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"fast-jwt: Incomplete patch of CVE-2026-34950: Non-whitespace key-prefix re-enables RSA→HS256 algorithm confusion","source_quote_or_pointer":"Security Advisory GHSA-ww5h-9m49-7xx4","fact_id":"SEA-GHSA-ww5h-9m49-7xx4-F1","document_citation":"Security Advisory GHSA-ww5h-9m49-7xx4"},{"id":"SEA-GHSA-ww5h-9m49-7xx4-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The fix for CVE-2026-34950 (CVSS 9.1, released in v6.2.0) is incomplete. It adds key.trim() to the PEM-detection path in src/crypto.js, but String.prototype.trim() only strips characters classified as whitespace by the ECMAScript specification.","source_quote_or_pointer":"Advisory description (GHSA-ww5h-9m49-7xx4)","fact_id":"SEA-GHSA-ww5h-9m49-7xx4-F2","document_citation":"Advisory description (GHSA-ww5h-9m49-7xx4)"}],"source_stated_contributors":["The fix for CVE-2026-34950 (CVSS 9.1, released in v6.2.0) is incomplete. It adds key.trim() to the PEM-detection path in src/crypto.js, but String.prototype.trim() only strips characters classified as whitespace by the ECMAScript specification."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.financial_action","data.financial_records","data.credentials_secrets"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-ww5h-9m49-7xx4","reporting_entity":"CVE-2026-107722","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-ww5h-9m49-7xx4-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-ww5h-9m49-7xx4-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-107722"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-687g-22h4-j4w4","title":"fast-jwt clockTolerance: Infinity silently bypasses both exp and nbf validation (and persists in the verifier cache)","display_title":"Security issue reported in fast-jwt","display_summary":"createVerifier({ clockTolerance: Infinity }) silently bypasses both exp (expiry) AND nbf (not-before) validation. Any expired or not-yet-active token is accepted as valid.","display_reference":"CVE-2026-107721","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-687g-22h4-j4w4","source_title":"fast-jwt clockTolerance: Infinity silently bypasses both exp and nbf validation (and persists in the verifier cache)","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T16:55:27.183Z","source_hash":"content-fingerprint:fnv1a-9687e112","affected_system":{"organization":"fast-jwt project","product":"fast-jwt","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"JavaScript / TypeScript"},"documented_facts":[{"id":"SEA-GHSA-687g-22h4-j4w4-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"fast-jwt clockTolerance: Infinity silently bypasses both exp and nbf validation (and persists in the verifier cache)","source_quote_or_pointer":"Security Advisory GHSA-687g-22h4-j4w4","fact_id":"SEA-GHSA-687g-22h4-j4w4-F1","document_citation":"Security Advisory GHSA-687g-22h4-j4w4"},{"id":"SEA-GHSA-687g-22h4-j4w4-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"createVerifier({ clockTolerance: Infinity }) silently bypasses both exp (expiry) AND nbf (not-before) validation. Any expired or not-yet-active token is accepted as valid.","source_quote_or_pointer":"Advisory description (GHSA-687g-22h4-j4w4)","fact_id":"SEA-GHSA-687g-22h4-j4w4-F2","document_citation":"Advisory description (GHSA-687g-22h4-j4w4)"}],"source_stated_contributors":["createVerifier({ clockTolerance: Infinity }) silently bypasses both exp (expiry) AND nbf (not-before) validation. Any expired or not-yet-active token is accepted as valid."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.credentials_secrets","arch.caching"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-687g-22h4-j4w4","reporting_entity":"CVE-2026-107721","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-687g-22h4-j4w4-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-687g-22h4-j4w4-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-107721"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-5hjw-83fp-phq9","title":"fast-jwt : Silent claim-validator bypass when JWT payload is a JSON array","display_title":"Security issue reported in fast-jwt","display_summary":"fast-jwt's createVerifier silently skips all configured claim validators (exp, nbf, iss, aud, sub, jti, nonce) when a validly-signed JWT carries a JSON array as its payload instead of an object.","display_reference":"CVE-2026-107723","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-5hjw-83fp-phq9","source_title":"fast-jwt : Silent claim-validator bypass when JWT payload is a JSON array","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T16:55:27.184Z","source_hash":"content-fingerprint:fnv1a-df531038","affected_system":{"organization":"fast-jwt project","product":"fast-jwt","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"JavaScript / TypeScript"},"documented_facts":[{"id":"SEA-GHSA-5hjw-83fp-phq9-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"fast-jwt : Silent claim-validator bypass when JWT payload is a JSON array","source_quote_or_pointer":"Security Advisory GHSA-5hjw-83fp-phq9","fact_id":"SEA-GHSA-5hjw-83fp-phq9-F1","document_citation":"Security Advisory GHSA-5hjw-83fp-phq9"},{"id":"SEA-GHSA-5hjw-83fp-phq9-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"fast-jwt's createVerifier silently skips all configured claim validators (exp, nbf, iss, aud, sub, jti, nonce) when a validly-signed JWT carries a JSON array as its payload instead of an object. The verifier reports success while having enforced only the signature.","source_quote_or_pointer":"Advisory description (GHSA-5hjw-83fp-phq9)","fact_id":"SEA-GHSA-5hjw-83fp-phq9-F2","document_citation":"Advisory description (GHSA-5hjw-83fp-phq9)"}],"source_stated_contributors":["fast-jwt's createVerifier silently skips all configured claim validators (exp, nbf, iss, aud, sub, jti, nonce) when a validly-signed JWT carries a JSON array as its payload instead of an object. The verifier reports success while having enforced only the signature."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.credentials_secrets"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-5hjw-83fp-phq9","reporting_entity":"CVE-2026-107723","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-5hjw-83fp-phq9-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-5hjw-83fp-phq9-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-107723"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-g3jj-5cmm-3hxx","title":"fast-jwt treats raw public JWK JSON as an HMAC secret, enabling HS256 token forgery","display_title":"fast-jwt issue could expose accounts or credentials","display_summary":"fast-jwt 6.2.4 silently classifies raw serialized public JWK JSON","display_reference":"CVE-2026-107724","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-g3jj-5cmm-3hxx","source_title":"fast-jwt treats raw public JWK JSON as an HMAC secret, enabling HS256 token forgery","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T16:55:27.184Z","source_hash":"content-fingerprint:fnv1a-6e090a72","affected_system":{"organization":"fast-jwt project","product":"fast-jwt","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"JavaScript / TypeScript"},"documented_facts":[{"id":"SEA-GHSA-g3jj-5cmm-3hxx-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"fast-jwt treats raw public JWK JSON as an HMAC secret, enabling HS256 token forgery","source_quote_or_pointer":"Security Advisory GHSA-g3jj-5cmm-3hxx","fact_id":"SEA-GHSA-g3jj-5cmm-3hxx-F1","document_citation":"Security Advisory GHSA-g3jj-5cmm-3hxx"},{"id":"SEA-GHSA-g3jj-5cmm-3hxx-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"fast-jwt 6.2.4 silently classifies raw serialized public JWK JSON","source_quote_or_pointer":"Advisory description (GHSA-g3jj-5cmm-3hxx)","fact_id":"SEA-GHSA-g3jj-5cmm-3hxx-F2","document_citation":"Advisory description (GHSA-g3jj-5cmm-3hxx)"}],"source_stated_contributors":["fast-jwt 6.2.4 silently classifies raw serialized public JWK JSON"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.public_publication","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-g3jj-5cmm-3hxx","reporting_entity":"CVE-2026-107724","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-g3jj-5cmm-3hxx-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-g3jj-5cmm-3hxx-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-107724"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-6wjp-v33h-5cvq","title":"PraisonAI: AgentOS defaults to network-exposed no-auth mode, allowing unauthenticated agent invocation and instruction disclosure","display_title":"Security issue reported in praisonai","display_summary":"The AgentOS server in the praisonai TypeScript/npm package ships an insecure default: it binds 0.0.0.0, sets no API key, and uses CORS with credentials.","display_reference":"CVE-2026-61426","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-6wjp-v33h-5cvq","source_title":"PraisonAI: AgentOS defaults to network-exposed no-auth mode, allowing unauthenticated agent invocation and instruction disclosure","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T16:55:27.185Z","source_hash":"content-fingerprint:fnv1a-d500109b","affected_system":{"organization":"praisonai project","product":"praisonai","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"JavaScript / TypeScript"},"documented_facts":[{"id":"SEA-GHSA-6wjp-v33h-5cvq-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"PraisonAI: AgentOS defaults to network-exposed no-auth mode, allowing unauthenticated agent invocation and instruction disclosure","source_quote_or_pointer":"Security Advisory GHSA-6wjp-v33h-5cvq","fact_id":"SEA-GHSA-6wjp-v33h-5cvq-F1","document_citation":"Security Advisory GHSA-6wjp-v33h-5cvq"},{"id":"SEA-GHSA-6wjp-v33h-5cvq-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The AgentOS server in the praisonai TypeScript/npm package ships an insecure default: it binds 0.0.0.0, sets no API key, and uses CORS with credentials. The API-key middleware is only registered when an API key is configured, so the documented quickstart (new AgentOS({agents:[...]}).serve({port})) exposes,…","source_quote_or_pointer":"Advisory description (GHSA-6wjp-v33h-5cvq)","fact_id":"SEA-GHSA-6wjp-v33h-5cvq-F2","document_citation":"Advisory description (GHSA-6wjp-v33h-5cvq)"}],"source_stated_contributors":["The AgentOS server in the praisonai TypeScript/npm package ships an insecure default: it binds 0.0.0.0, sets no API key, and uses CORS with credentials. The API-key middleware is only registered when an API key is configured, so the documented quickstart (new AgentOS({agents:[...]}).serve({port})) exposes,…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.credentials_secrets","arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-012","SEA-FM-010"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-6wjp-v33h-5cvq","reporting_entity":"CVE-2026-61426","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-6wjp-v33h-5cvq-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-6wjp-v33h-5cvq-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-61426"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-c78w-2q4r-68r7","title":"PraisonAI: Platform member PATCH routes allow owner resource rewrites and project lead reassignment delete bypass","display_title":"Security issue reported in praisonai-platform","display_summary":"praisonai-platform lets an ordinary workspace member patch owner-created project, issue, and agent records even though the paired delete routes enforce owner/admin authorization.","display_reference":"CVE-2026-61442","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-c78w-2q4r-68r7","source_title":"PraisonAI: Platform member PATCH routes allow owner resource rewrites and project lead reassignment delete bypass","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T16:55:27.185Z","source_hash":"content-fingerprint:fnv1a-bc2e5be8","affected_system":{"organization":"praisonai-platform project","product":"praisonai-platform","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Python"},"documented_facts":[{"id":"SEA-GHSA-c78w-2q4r-68r7-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"PraisonAI: Platform member PATCH routes allow owner resource rewrites and project lead reassignment delete bypass","source_quote_or_pointer":"Security Advisory GHSA-c78w-2q4r-68r7","fact_id":"SEA-GHSA-c78w-2q4r-68r7-F1","document_citation":"Security Advisory GHSA-c78w-2q4r-68r7"},{"id":"SEA-GHSA-c78w-2q4r-68r7-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"praisonai-platform lets an ordinary workspace member patch owner-created project, issue, and agent records even though the paired delete routes enforce owner/admin authorization.","source_quote_or_pointer":"Advisory description (GHSA-c78w-2q4r-68r7)","fact_id":"SEA-GHSA-c78w-2q4r-68r7-F2","document_citation":"Advisory description (GHSA-c78w-2q4r-68r7)"}],"source_stated_contributors":["praisonai-platform lets an ordinary workspace member patch owner-created project, issue, and agent records even though the paired delete routes enforce owner/admin authorization."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.privileged_action","auth.write_action","arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-010"],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-c78w-2q4r-68r7","reporting_entity":"CVE-2026-61442","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-c78w-2q4r-68r7-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-c78w-2q4r-68r7-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-61442"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-cv3g-hj65-pcfh","title":"PraisonAI: Shell command allowlist bypass via find -exec built-in action","display_title":"Security issue reported in praisonai","display_summary":"The shell command execution hardening introduced in PraisonAI npm 1.7.2 / Python 4.6.58 to fix GHSA-5jv7-2mjm-h6qj (utility-tools shell chaining) and GHSA-vjv9-7m7j-h833 (SandboxExecutor chaining) can be bypassed via…","display_reference":"CVE-2026-61434","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-cv3g-hj65-pcfh","source_title":"PraisonAI: Shell command allowlist bypass via find -exec built-in action","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T16:55:27.186Z","source_hash":"content-fingerprint:fnv1a-fd2f1ab8","affected_system":{"organization":"praisonai project","product":"praisonai","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Python"},"documented_facts":[{"id":"SEA-GHSA-cv3g-hj65-pcfh-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"PraisonAI: Shell command allowlist bypass via find -exec built-in action","source_quote_or_pointer":"Security Advisory GHSA-cv3g-hj65-pcfh","fact_id":"SEA-GHSA-cv3g-hj65-pcfh-F1","document_citation":"Security Advisory GHSA-cv3g-hj65-pcfh"},{"id":"SEA-GHSA-cv3g-hj65-pcfh-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The shell command execution hardening introduced in PraisonAI npm 1.7.2 / Python 4.6.58 to fix GHSA-5jv7-2mjm-h6qj (utility-tools shell chaining) and GHSA-vjv9-7m7j-h833 (SandboxExecutor chaining) can be bypassed via find's built-in -exec action.","source_quote_or_pointer":"Advisory description (GHSA-cv3g-hj65-pcfh)","fact_id":"SEA-GHSA-cv3g-hj65-pcfh-F2","document_citation":"Advisory description (GHSA-cv3g-hj65-pcfh)"}],"source_stated_contributors":["The shell command execution hardening introduced in PraisonAI npm 1.7.2 / Python 4.6.58 to fix GHSA-5jv7-2mjm-h6qj (utility-tools shell chaining) and GHSA-vjv9-7m7j-h833 (SandboxExecutor chaining) can be bypassed via find's built-in -exec action."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.code_execution"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-cv3g-hj65-pcfh","reporting_entity":"CVE-2026-61434","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-cv3g-hj65-pcfh-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-cv3g-hj65-pcfh-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-61434"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-9mp3-24cc-77mg","title":"PraisonAI: AICoder Arbitrary File Write and Command Execution via LLM Tool Calls","display_title":"Security issue reported in praisonai","display_summary":"The AICoder UI component exposes writetofile and executecommand tools to the LLM with no path validation and no command sanitization.","display_reference":"CVE-2026-61445","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-9mp3-24cc-77mg","source_title":"PraisonAI: AICoder Arbitrary File Write and Command Execution via LLM Tool Calls","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T16:55:27.187Z","source_hash":"content-fingerprint:fnv1a-ddcd2d2a","affected_system":{"organization":"praisonai project","product":"praisonai","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":false,"primary_language":"Python"},"documented_facts":[{"id":"SEA-GHSA-9mp3-24cc-77mg-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"PraisonAI: AICoder Arbitrary File Write and Command Execution via LLM Tool Calls","source_quote_or_pointer":"Security Advisory GHSA-9mp3-24cc-77mg","fact_id":"SEA-GHSA-9mp3-24cc-77mg-F1","document_citation":"Security Advisory GHSA-9mp3-24cc-77mg"},{"id":"SEA-GHSA-9mp3-24cc-77mg-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The AICoder UI component exposes writetofile and executecommand tools to the LLM with no path validation and no command sanitization. An attacker can achieve arbitrary file write to any location on the filesystem (including /root/.ssh/authorizedkeys, /etc/crontab) and arbitrary command execution through prompt…","source_quote_or_pointer":"Advisory description (GHSA-9mp3-24cc-77mg)","fact_id":"SEA-GHSA-9mp3-24cc-77mg-F2","document_citation":"Advisory description (GHSA-9mp3-24cc-77mg)"}],"source_stated_contributors":["The AICoder UI component exposes writetofile and executecommand tools to the LLM with no path validation and no command sanitization. An attacker can achieve arbitrary file write to any location on the filesystem (including /root/.ssh/authorizedkeys, /etc/crontab) and arbitrary command execution through prompt…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.write_action","arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-004","SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-9mp3-24cc-77mg","reporting_entity":"CVE-2026-61445","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-9mp3-24cc-77mg-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-9mp3-24cc-77mg-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-61445"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-hc5v-gxvj-58wh","title":"PraisonAI: MCP HTTP-stream transport is unauthenticated by default, exposing tool enumeration and an unvalidated tool-call surface","display_title":"Security issue reported in praisonai","display_summary":"PraisonAI's MCP HTTP-stream server authenticates requests only when an API key is configured; the CLI defaults --api-key to None, so praisonai mcp serve --transport http-stream exposes the full MCP surface…","display_reference":"CVE-2026-61427","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-hc5v-gxvj-58wh","source_title":"PraisonAI: MCP HTTP-stream transport is unauthenticated by default, exposing tool enumeration and an unvalidated tool-call surface","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T16:55:27.187Z","source_hash":"content-fingerprint:fnv1a-ccbfdb44","affected_system":{"organization":"praisonai project","product":"praisonai","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Python"},"documented_facts":[{"id":"SEA-GHSA-hc5v-gxvj-58wh-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"PraisonAI: MCP HTTP-stream transport is unauthenticated by default, exposing tool enumeration and an unvalidated tool-call surface","source_quote_or_pointer":"Security Advisory GHSA-hc5v-gxvj-58wh","fact_id":"SEA-GHSA-hc5v-gxvj-58wh-F1","document_citation":"Security Advisory GHSA-hc5v-gxvj-58wh"},{"id":"SEA-GHSA-hc5v-gxvj-58wh-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"PraisonAI's MCP HTTP-stream server authenticates requests only when an API key is configured; the CLI defaults --api-key to None, so praisonai mcp serve --transport http-stream exposes the full MCP surface unauthenticated.","source_quote_or_pointer":"Advisory description (GHSA-hc5v-gxvj-58wh)","fact_id":"SEA-GHSA-hc5v-gxvj-58wh-F2","document_citation":"Advisory description (GHSA-hc5v-gxvj-58wh)"}],"source_stated_contributors":["PraisonAI's MCP HTTP-stream server authenticates requests only when an API key is configured; the CLI defaults --api-key to None, so praisonai mcp serve --transport http-stream exposes the full MCP surface unauthenticated."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.credentials_secrets","arch.async_job","arch.event_driven","arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-012","SEA-FM-010"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-hc5v-gxvj-58wh","reporting_entity":"CVE-2026-61427","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-hc5v-gxvj-58wh-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-hc5v-gxvj-58wh-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-61427"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-xxgv-vgvj-qvxh","title":"PraisonAI: Platform members can rewrite shared labels and owner issue labels without owner/admin authorization","display_title":"Security issue reported in praisonai-platform","display_summary":"praisonai-platform lets an ordinary workspace member rename and recolor shared labels and add/remove labels on an owner-created issue even though direct label deletion is restricted to workspace admin/owner authority in…","display_reference":"CVE-2026-61440","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-xxgv-vgvj-qvxh","source_title":"PraisonAI: Platform members can rewrite shared labels and owner issue labels without owner/admin authorization","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T16:55:27.187Z","source_hash":"content-fingerprint:fnv1a-f99672d8","affected_system":{"organization":"praisonai-platform project","product":"praisonai-platform","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Python"},"documented_facts":[{"id":"SEA-GHSA-xxgv-vgvj-qvxh-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"PraisonAI: Platform members can rewrite shared labels and owner issue labels without owner/admin authorization","source_quote_or_pointer":"Security Advisory GHSA-xxgv-vgvj-qvxh","fact_id":"SEA-GHSA-xxgv-vgvj-qvxh-F1","document_citation":"Security Advisory GHSA-xxgv-vgvj-qvxh"},{"id":"SEA-GHSA-xxgv-vgvj-qvxh-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"praisonai-platform lets an ordinary workspace member rename and recolor shared labels and add/remove labels on an owner-created issue even though direct label deletion is restricted to workspace admin/owner authority in current releases.","source_quote_or_pointer":"Advisory description (GHSA-xxgv-vgvj-qvxh)","fact_id":"SEA-GHSA-xxgv-vgvj-qvxh-F2","document_citation":"Advisory description (GHSA-xxgv-vgvj-qvxh)"}],"source_stated_contributors":["praisonai-platform lets an ordinary workspace member rename and recolor shared labels and add/remove labels on an owner-created issue even though direct label deletion is restricted to workspace admin/owner authority in current releases."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.privileged_action"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-xxgv-vgvj-qvxh","reporting_entity":"CVE-2026-61440","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-xxgv-vgvj-qvxh-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-xxgv-vgvj-qvxh-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-61440"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-5r6c-gj4g-r697","title":"PraisonAI: SecurityPolicy command/path/import restrictions are completely unenforced by the default SubprocessSandbox backend","display_title":"Security issue reported in praisonai","display_summary":"SecurityPolicy in praisonaiagents/sandbox/config.py is a documented configuration data class with fields for allowsubprocess, allowedpaths, blockedpaths, allowedcommands, blockedcommands, allowedimports, and…","display_reference":"CVE-2026-60085","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-5r6c-gj4g-r697","source_title":"PraisonAI: SecurityPolicy command/path/import restrictions are completely unenforced by the default SubprocessSandbox backend","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T16:55:27.187Z","source_hash":"content-fingerprint:fnv1a-e120aa83","affected_system":{"organization":"praisonai project","product":"praisonai","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Python"},"documented_facts":[{"id":"SEA-GHSA-5r6c-gj4g-r697-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"PraisonAI: SecurityPolicy command/path/import restrictions are completely unenforced by the default SubprocessSandbox backend","source_quote_or_pointer":"Security Advisory GHSA-5r6c-gj4g-r697","fact_id":"SEA-GHSA-5r6c-gj4g-r697-F1","document_citation":"Security Advisory GHSA-5r6c-gj4g-r697"},{"id":"SEA-GHSA-5r6c-gj4g-r697-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"SecurityPolicy in praisonaiagents/sandbox/config.py is a documented configuration data class with fields for allowsubprocess, allowedpaths, blockedpaths, allowedcommands, blockedcommands, allowedimports, and blockedimports.","source_quote_or_pointer":"Advisory description (GHSA-5r6c-gj4g-r697)","fact_id":"SEA-GHSA-5r6c-gj4g-r697-F2","document_citation":"Advisory description (GHSA-5r6c-gj4g-r697)"}],"source_stated_contributors":["SecurityPolicy in praisonaiagents/sandbox/config.py is a documented configuration data class with fields for allowsubprocess, allowedpaths, blockedpaths, allowedcommands, blockedcommands, allowedimports, and blockedimports."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.code_execution"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-5r6c-gj4g-r697","reporting_entity":"CVE-2026-60085","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-5r6c-gj4g-r697-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-5r6c-gj4g-r697-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-60085"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-f94x-6692-553q","title":"music-metadata: MP4 stsd sample-entry size==0 causes a synchronous infinite loop (DoS) — unreleased regression on master","display_title":"music-metadata issue could make the service unavailable","display_summary":"StsdAtom.get() in lib/mp4/AtomToken.ts parses an MP4 stsd (sample description) box's entry table by advancing a cursor with off += size - 4, where size is a 32-bit, attacker-controlled per-entry length read straight from…","display_reference":"CVE-2026-107391","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-f94x-6692-553q","source_title":"music-metadata: MP4 stsd sample-entry size==0 causes a synchronous infinite loop (DoS) — unreleased regression on master","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T16:55:27.188Z","source_hash":"content-fingerprint:fnv1a-4df3185","affected_system":{"organization":"music-metadata project","product":"music-metadata","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"JavaScript / TypeScript"},"documented_facts":[{"id":"SEA-GHSA-f94x-6692-553q-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"music-metadata: MP4 stsd sample-entry size==0 causes a synchronous infinite loop (DoS) — unreleased regression on master","source_quote_or_pointer":"Security Advisory GHSA-f94x-6692-553q","fact_id":"SEA-GHSA-f94x-6692-553q-F1","document_citation":"Security Advisory GHSA-f94x-6692-553q"},{"id":"SEA-GHSA-f94x-6692-553q-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"StsdAtom.get() in lib/mp4/AtomToken.ts parses an MP4 stsd (sample description) box's entry table by advancing a cursor with off += size - 4, where size is a 32-bit, attacker-controlled per-entry length read straight from the file.","source_quote_or_pointer":"Advisory description (GHSA-f94x-6692-553q)","fact_id":"SEA-GHSA-f94x-6692-553q-F2","document_citation":"Advisory description (GHSA-f94x-6692-553q)"}],"source_stated_contributors":["StsdAtom.get() in lib/mp4/AtomToken.ts parses an MP4 stsd (sample description) box's entry table by advancing a cursor with off += size - 4, where size is a 32-bit, attacker-controlled per-entry length read straight from the file."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-f94x-6692-553q","reporting_entity":"CVE-2026-107391","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-f94x-6692-553q-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-f94x-6692-553q-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-107391"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-53v6-4h7p-p4gj","title":"music-metadata: Uncontrolled memory allocation in APEv2 parser","display_title":"Security issue reported in music-metadata","display_summary":"music-metadata 11.15.0 is vulnerable to uncontrolled memory allocation in the APEv2 parser.","display_reference":"CVE-2026-107387","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-53v6-4h7p-p4gj","source_title":"music-metadata: Uncontrolled memory allocation in APEv2 parser","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T16:55:27.188Z","source_hash":"content-fingerprint:fnv1a-26cd3def","affected_system":{"organization":"music-metadata project","product":"music-metadata","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"JavaScript / TypeScript"},"documented_facts":[{"id":"SEA-GHSA-53v6-4h7p-p4gj-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"music-metadata: Uncontrolled memory allocation in APEv2 parser","source_quote_or_pointer":"Security Advisory GHSA-53v6-4h7p-p4gj","fact_id":"SEA-GHSA-53v6-4h7p-p4gj-F1","document_citation":"Security Advisory GHSA-53v6-4h7p-p4gj"},{"id":"SEA-GHSA-53v6-4h7p-p4gj-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"music-metadata 11.15.0 is vulnerable to uncontrolled memory allocation in the APEv2 parser.","source_quote_or_pointer":"Advisory description (GHSA-53v6-4h7p-p4gj)","fact_id":"SEA-GHSA-53v6-4h7p-p4gj-F2","document_citation":"Advisory description (GHSA-53v6-4h7p-p4gj)"}],"source_stated_contributors":["music-metadata 11.15.0 is vulnerable to uncontrolled memory allocation in the APEv2 parser."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-53v6-4h7p-p4gj","reporting_entity":"CVE-2026-107387","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-53v6-4h7p-p4gj-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-53v6-4h7p-p4gj-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-107387"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-jjpr-9cvf-cq55","title":"music-metadata: ID3v2 tag size not validated before allocation, causing memory exhaustion DoS","display_title":"music-metadata issue could make the service unavailable","display_summary":"The ID3v2 parser in music-metadata trusts the tag size field without validation and allocates the full requested buffer before reading.","display_reference":"CVE-2026-107388","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-jjpr-9cvf-cq55","source_title":"music-metadata: ID3v2 tag size not validated before allocation, causing memory exhaustion DoS","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T16:55:27.188Z","source_hash":"content-fingerprint:fnv1a-ddf77bc9","affected_system":{"organization":"music-metadata project","product":"music-metadata","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"JavaScript / TypeScript"},"documented_facts":[{"id":"SEA-GHSA-jjpr-9cvf-cq55-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"music-metadata: ID3v2 tag size not validated before allocation, causing memory exhaustion DoS","source_quote_or_pointer":"Security Advisory GHSA-jjpr-9cvf-cq55","fact_id":"SEA-GHSA-jjpr-9cvf-cq55-F1","document_citation":"Security Advisory GHSA-jjpr-9cvf-cq55"},{"id":"SEA-GHSA-jjpr-9cvf-cq55-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The ID3v2 parser in music-metadata trusts the tag size field without validation and allocates the full requested buffer before reading. A specially crafted MP3 file with a truncated ID3v2 tag can force allocation of up to 268 MB from a 10-byte file, causing server memory exhaustion.","source_quote_or_pointer":"Advisory description (GHSA-jjpr-9cvf-cq55)","fact_id":"SEA-GHSA-jjpr-9cvf-cq55-F2","document_citation":"Advisory description (GHSA-jjpr-9cvf-cq55)"}],"source_stated_contributors":["The ID3v2 parser in music-metadata trusts the tag size field without validation and allocates the full requested buffer before reading. A specially crafted MP3 file with a truncated ID3v2 tag can force allocation of up to 268 MB from a 10-byte file, causing server memory exhaustion."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-jjpr-9cvf-cq55","reporting_entity":"CVE-2026-107388","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-jjpr-9cvf-cq55-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-jjpr-9cvf-cq55-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-107388"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-5gfj-9q3v-qfp3","title":"music-metadata: EBML parser trusts element lengths, allowing memory exhaustion or process abort","display_title":"Security issue reported in music-metadata","display_summary":"The Matroska/WebM EBML parser decodes attacker-controlled variable-length integer (VINT) element lengths without first validating that the declared element fits within its enclosing container or the available input.","display_reference":"CVE-2026-107389","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-5gfj-9q3v-qfp3","source_title":"music-metadata: EBML parser trusts element lengths, allowing memory exhaustion or process abort","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T16:55:27.188Z","source_hash":"content-fingerprint:fnv1a-198fcca0","affected_system":{"organization":"music-metadata project","product":"music-metadata","system_type":"Cloud & container infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"JavaScript / TypeScript"},"documented_facts":[{"id":"SEA-GHSA-5gfj-9q3v-qfp3-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"music-metadata: EBML parser trusts element lengths, allowing memory exhaustion or process abort","source_quote_or_pointer":"Security Advisory GHSA-5gfj-9q3v-qfp3","fact_id":"SEA-GHSA-5gfj-9q3v-qfp3-F1","document_citation":"Security Advisory GHSA-5gfj-9q3v-qfp3"},{"id":"SEA-GHSA-5gfj-9q3v-qfp3-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Matroska/WebM EBML parser decodes attacker-controlled variable-length integer (VINT) element lengths without first validating that the declared element fits within its enclosing container or the available input. Leaf lengths are then used directly for string-token and Uint8Array allocations.","source_quote_or_pointer":"Advisory description (GHSA-5gfj-9q3v-qfp3)","fact_id":"SEA-GHSA-5gfj-9q3v-qfp3-F2","document_citation":"Advisory description (GHSA-5gfj-9q3v-qfp3)"}],"source_stated_contributors":["The Matroska/WebM EBML parser decodes attacker-controlled variable-length integer (VINT) element lengths without first validating that the declared element fits within its enclosing container or the available input. Leaf lengths are then used directly for string-token and Uint8Array allocations."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-5gfj-9q3v-qfp3","reporting_entity":"CVE-2026-107389","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-5gfj-9q3v-qfp3-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-5gfj-9q3v-qfp3-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-107389"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-6fqq-452j-qhrp","title":"Pydantic AI: Concurrency-limited models can keep their slot when a streamed request ends early","display_title":"Security issue reported in pydantic-ai","display_summary":"Applications that wrap a model with ConcurrencyLimitedModel or limitmodelconcurrency can permanently lose shared concurrency capacity when a streamed request releases its slot from a different task than the one that…","display_reference":"CVE-2026-107286","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-6fqq-452j-qhrp","source_title":"Pydantic AI: Concurrency-limited models can keep their slot when a streamed request ends early","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T16:55:27.188Z","source_hash":"content-fingerprint:fnv1a-56318301","affected_system":{"organization":"pydantic-ai project","product":"pydantic-ai","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":false,"primary_language":"Python"},"documented_facts":[{"id":"SEA-GHSA-6fqq-452j-qhrp-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Pydantic AI: Concurrency-limited models can keep their slot when a streamed request ends early","source_quote_or_pointer":"Security Advisory GHSA-6fqq-452j-qhrp","fact_id":"SEA-GHSA-6fqq-452j-qhrp-F1","document_citation":"Security Advisory GHSA-6fqq-452j-qhrp"},{"id":"SEA-GHSA-6fqq-452j-qhrp-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Applications that wrap a model with ConcurrencyLimitedModel or limitmodelconcurrency can permanently lose shared concurrency capacity when a streamed request releases its slot from a different task than the one that acquired it.","source_quote_or_pointer":"Advisory description (GHSA-6fqq-452j-qhrp)","fact_id":"SEA-GHSA-6fqq-452j-qhrp-F2","document_citation":"Advisory description (GHSA-6fqq-452j-qhrp)"}],"source_stated_contributors":["Applications that wrap a model with ConcurrencyLimitedModel or limitmodelconcurrency can permanently lose shared concurrency capacity when a streamed request releases its slot from a different task than the one that acquired it."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-6fqq-452j-qhrp","reporting_entity":"CVE-2026-107286","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-6fqq-452j-qhrp-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-6fqq-452j-qhrp-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-107286"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-r3rv-jm3r-62q2","title":"MariaDB Connector/Node.js: SQL injection in the text protocol when the session uses NO_BACKSLASH_ESCAPES","display_title":"mariadb issue could expose or alter stored data","display_summary":"When escaping string and binary parameters for the text protocol, the connector always escaped the quote character with a backslash, without ever consulting the session's NOBACKSLASHESCAPES SQL mode.","display_reference":"CVE-2026-107385","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-r3rv-jm3r-62q2","source_title":"MariaDB Connector/Node.js: SQL injection in the text protocol when the session uses NO_BACKSLASH_ESCAPES","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T16:55:27.188Z","source_hash":"content-fingerprint:fnv1a-4547502d","affected_system":{"organization":"mariadb project","product":"mariadb","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"JavaScript / TypeScript"},"documented_facts":[{"id":"SEA-GHSA-r3rv-jm3r-62q2-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"MariaDB Connector/Node.js: SQL injection in the text protocol when the session uses NO_BACKSLASH_ESCAPES","source_quote_or_pointer":"Security Advisory GHSA-r3rv-jm3r-62q2","fact_id":"SEA-GHSA-r3rv-jm3r-62q2-F1","document_citation":"Security Advisory GHSA-r3rv-jm3r-62q2"},{"id":"SEA-GHSA-r3rv-jm3r-62q2-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"When escaping string and binary parameters for the text protocol, the connector always escaped the quote character with a backslash, without ever consulting the session's NOBACKSLASHESCAPES SQL mode. The server status flag was declared (STATUSNOBACKSLASHESCAPES) but never read.","source_quote_or_pointer":"Advisory description (GHSA-r3rv-jm3r-62q2)","fact_id":"SEA-GHSA-r3rv-jm3r-62q2-F2","document_citation":"Advisory description (GHSA-r3rv-jm3r-62q2)"}],"source_stated_contributors":["When escaping string and binary parameters for the text protocol, the connector always escaped the quote character with a backslash, without ever consulting the session's NOBACKSLASHESCAPES SQL mode. The server status flag was declared (STATUSNOBACKSLASHESCAPES) but never read."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-r3rv-jm3r-62q2","reporting_entity":"CVE-2026-107385","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-r3rv-jm3r-62q2-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-r3rv-jm3r-62q2-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-107385"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-v6pj-gxxw-phfw","title":"MariaDB Connector/Node.js: SQL injection through object keys in SET expansion (permitSetMultiParamEntries)","display_title":"mariadb issue could expose or alter stored data","display_summary":"With the non-default permitSetMultiParamEntries option enabled, an object passed as a query parameter is expanded into a SET clause, each key becoming a column name.","display_reference":"CVE-2026-107384","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-v6pj-gxxw-phfw","source_title":"MariaDB Connector/Node.js: SQL injection through object keys in SET expansion (permitSetMultiParamEntries)","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T16:55:27.189Z","source_hash":"content-fingerprint:fnv1a-abaf5cac","affected_system":{"organization":"mariadb project","product":"mariadb","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"JavaScript / TypeScript"},"documented_facts":[{"id":"SEA-GHSA-v6pj-gxxw-phfw-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"MariaDB Connector/Node.js: SQL injection through object keys in SET expansion (permitSetMultiParamEntries)","source_quote_or_pointer":"Security Advisory GHSA-v6pj-gxxw-phfw","fact_id":"SEA-GHSA-v6pj-gxxw-phfw-F1","document_citation":"Security Advisory GHSA-v6pj-gxxw-phfw"},{"id":"SEA-GHSA-v6pj-gxxw-phfw-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"With the non-default permitSetMultiParamEntries option enabled, an object passed as a query parameter is expanded into a SET clause, each key becoming a column name.","source_quote_or_pointer":"Advisory description (GHSA-v6pj-gxxw-phfw)","fact_id":"SEA-GHSA-v6pj-gxxw-phfw-F2","document_citation":"Advisory description (GHSA-v6pj-gxxw-phfw)"}],"source_stated_contributors":["With the non-default permitSetMultiParamEntries option enabled, an object passed as a query parameter is expanded into a SET clause, each key becoming a column name."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-v6pj-gxxw-phfw","reporting_entity":"CVE-2026-107384","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-v6pj-gxxw-phfw-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-v6pj-gxxw-phfw-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-107384"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-48qf-xh34-q73r","title":"MariaDB Connector/Node.js exposes uninitialized process memory through malformed GeoJSON parameters","display_title":"Security issue reported in mariadb","display_summary":"When encoding a GeoJSON Polygon or MultiPolygon parameter for the binary protocol, the connector sized its output buffer from the length property of each ring, then wrote each ring only if it was a real array.","display_reference":"CVE-2026-107383","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-48qf-xh34-q73r","source_title":"MariaDB Connector/Node.js exposes uninitialized process memory through malformed GeoJSON parameters","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T16:55:27.189Z","source_hash":"content-fingerprint:fnv1a-133151f0","affected_system":{"organization":"mariadb project","product":"mariadb","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"JavaScript / TypeScript"},"documented_facts":[{"id":"SEA-GHSA-48qf-xh34-q73r-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"MariaDB Connector/Node.js exposes uninitialized process memory through malformed GeoJSON parameters","source_quote_or_pointer":"Security Advisory GHSA-48qf-xh34-q73r","fact_id":"SEA-GHSA-48qf-xh34-q73r-F1","document_citation":"Security Advisory GHSA-48qf-xh34-q73r"},{"id":"SEA-GHSA-48qf-xh34-q73r-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"When encoding a GeoJSON Polygon or MultiPolygon parameter for the binary protocol, the connector sized its output buffer from the length property of each ring, then wrote each ring only if it was a real array.","source_quote_or_pointer":"Advisory description (GHSA-48qf-xh34-q73r)","fact_id":"SEA-GHSA-48qf-xh34-q73r-F2","document_citation":"Advisory description (GHSA-48qf-xh34-q73r)"}],"source_stated_contributors":["When encoding a GeoJSON Polygon or MultiPolygon parameter for the binary protocol, the connector sized its output buffer from the length property of each ring, then wrote each ring only if it was a real array."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-48qf-xh34-q73r","reporting_entity":"CVE-2026-107383","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-48qf-xh34-q73r-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-48qf-xh34-q73r-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-107383"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-cx2f-j9fh-8g68","title":"MariaDB Connector/Node.js: Uncaught exception crashes the client during ed25519 authentication with zero-configuration TLS","display_title":"Security issue reported in mariadb","display_summary":"On the zero-configuration TLS path, the connector accepts a self-signed server certificate at the TLS level and then validates the server's identity from the fingerprint hash the server appends to the final OKPacket…","display_reference":"CVE-2026-107382","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-cx2f-j9fh-8g68","source_title":"MariaDB Connector/Node.js: Uncaught exception crashes the client during ed25519 authentication with zero-configuration TLS","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T16:55:27.189Z","source_hash":"content-fingerprint:fnv1a-6923ae8a","affected_system":{"organization":"mariadb project","product":"mariadb","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"JavaScript / TypeScript"},"documented_facts":[{"id":"SEA-GHSA-cx2f-j9fh-8g68-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"MariaDB Connector/Node.js: Uncaught exception crashes the client during ed25519 authentication with zero-configuration TLS","source_quote_or_pointer":"Security Advisory GHSA-cx2f-j9fh-8g68","fact_id":"SEA-GHSA-cx2f-j9fh-8g68-F1","document_citation":"Security Advisory GHSA-cx2f-j9fh-8g68"},{"id":"SEA-GHSA-cx2f-j9fh-8g68-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"On the zero-configuration TLS path, the connector accepts a self-signed server certificate at the TLS level and then validates the server's identity from the fingerprint hash the server appends to the final OKPacket (Authentication.validateFingerPrint).","source_quote_or_pointer":"Advisory description (GHSA-cx2f-j9fh-8g68)","fact_id":"SEA-GHSA-cx2f-j9fh-8g68-F2","document_citation":"Advisory description (GHSA-cx2f-j9fh-8g68)"}],"source_stated_contributors":["On the zero-configuration TLS path, the connector accepts a self-signed server certificate at the TLS level and then validates the server's identity from the fingerprint hash the server appends to the final OKPacket (Authentication.validateFingerPrint)."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-cx2f-j9fh-8g68","reporting_entity":"CVE-2026-107382","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-cx2f-j9fh-8g68-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-cx2f-j9fh-8g68-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-107382"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-c3jg-qh8m-j3h2","title":"CairoSVG: Quadratic-time DoS parsing a crafted SVG <path>","display_title":"cairosvg issue could make the service unavailable","display_summary":"Rendering an untrusted SVG whose contains many segments is O(n²) CPU. A single under 1 MiB burns tens of seconds. Two independent O(n²) sites in cairosvg/path.py:","display_reference":"CVE-2026-107378","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-c3jg-qh8m-j3h2","source_title":"CairoSVG: Quadratic-time DoS parsing a crafted SVG <path>","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T16:55:27.189Z","source_hash":"content-fingerprint:fnv1a-2ba82e2b","affected_system":{"organization":"cairosvg project","product":"cairosvg","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Python"},"documented_facts":[{"id":"SEA-GHSA-c3jg-qh8m-j3h2-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"CairoSVG: Quadratic-time DoS parsing a crafted SVG <path>","source_quote_or_pointer":"Security Advisory GHSA-c3jg-qh8m-j3h2","fact_id":"SEA-GHSA-c3jg-qh8m-j3h2-F1","document_citation":"Security Advisory GHSA-c3jg-qh8m-j3h2"},{"id":"SEA-GHSA-c3jg-qh8m-j3h2-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Rendering an untrusted SVG whose contains many segments is O(n²) CPU. A single under 1 MiB burns tens of seconds. Two independent O(n²) sites in cairosvg/path.py:","source_quote_or_pointer":"Advisory description (GHSA-c3jg-qh8m-j3h2)","fact_id":"SEA-GHSA-c3jg-qh8m-j3h2-F2","document_citation":"Advisory description (GHSA-c3jg-qh8m-j3h2)"}],"source_stated_contributors":["Rendering an untrusted SVG whose contains many segments is O(n²) CPU. A single under 1 MiB burns tens of seconds. Two independent O(n²) sites in cairosvg/path.py:"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-c3jg-qh8m-j3h2","reporting_entity":"CVE-2026-107378","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-c3jg-qh8m-j3h2-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-c3jg-qh8m-j3h2-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-107378"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-9rjx-3jch-6vjf","title":"enshrined/svg-sanitize: Stored XSS via DTD Entity / HTML5 Named Character Reference Collision","display_title":"enshrined/svg-sanitize issue could run attacker-controlled scripts in a browser","display_summary":"A crafted SVG bypasses enshrined/svg-sanitize's href validation and delivers a javascript: URL through the sanitizer unchanged.","display_reference":"CVE-2026-107380","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-9rjx-3jch-6vjf","source_title":"enshrined/svg-sanitize: Stored XSS via DTD Entity / HTML5 Named Character Reference Collision","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T18:00:21.788Z","source_hash":"content-fingerprint:fnv1a-cbdac44","affected_system":{"organization":"enshrined/svg-sanitize project","product":"enshrined/svg-sanitize","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"PHP"},"documented_facts":[{"id":"SEA-GHSA-9rjx-3jch-6vjf-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"enshrined/svg-sanitize: Stored XSS via DTD Entity / HTML5 Named Character Reference Collision","source_quote_or_pointer":"Security Advisory GHSA-9rjx-3jch-6vjf","fact_id":"SEA-GHSA-9rjx-3jch-6vjf-F1","document_citation":"Security Advisory GHSA-9rjx-3jch-6vjf"},{"id":"SEA-GHSA-9rjx-3jch-6vjf-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A crafted SVG bypasses enshrined/svg-sanitize's href validation and delivers a javascript: URL through the sanitizer unchanged. The bypass exploits a semantic mismatch between XML entity resolution (used during sanitization) and HTML5 Named Character Reference resolution (used by the browser when the SVG is rendered…","source_quote_or_pointer":"Advisory description (GHSA-9rjx-3jch-6vjf)","fact_id":"SEA-GHSA-9rjx-3jch-6vjf-F2","document_citation":"Advisory description (GHSA-9rjx-3jch-6vjf)"}],"source_stated_contributors":["A crafted SVG bypasses enshrined/svg-sanitize's href validation and delivers a javascript: URL through the sanitizer unchanged. The bypass exploits a semantic mismatch between XML entity resolution (used during sanitization) and HTML5 Named Character Reference resolution (used by the browser when the SVG is rendered…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-9rjx-3jch-6vjf","reporting_entity":"CVE-2026-107380","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-9rjx-3jch-6vjf-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-9rjx-3jch-6vjf-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-107380"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-m9xh-6747-9r6f","title":"svg-sanitizer: Mixed-case xlink:HrEf skips the <use> nesting-DoS check in Resolver::processReferences","display_title":"enshrined/svg-sanitize issue could make the service unavailable","display_summary":"Resolver::processReferences() collects elements with the XPath predicate use[@href or @xlink:href], which is case sensitive.","display_reference":"CVE-2026-107381","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-m9xh-6747-9r6f","source_title":"svg-sanitizer: Mixed-case xlink:HrEf skips the <use> nesting-DoS check in Resolver::processReferences","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T18:00:21.788Z","source_hash":"content-fingerprint:fnv1a-ae0fefa4","affected_system":{"organization":"enshrined/svg-sanitize project","product":"enshrined/svg-sanitize","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"PHP"},"documented_facts":[{"id":"SEA-GHSA-m9xh-6747-9r6f-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"svg-sanitizer: Mixed-case xlink:HrEf skips the <use> nesting-DoS check in Resolver::processReferences","source_quote_or_pointer":"Security Advisory GHSA-m9xh-6747-9r6f","fact_id":"SEA-GHSA-m9xh-6747-9r6f-F1","document_citation":"Security Advisory GHSA-m9xh-6747-9r6f"},{"id":"SEA-GHSA-m9xh-6747-9r6f-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Resolver::processReferences() collects elements with the XPath predicate use[@href or @xlink:href], which is case sensitive. A element written as xlink:HrEf is therefore never added to the reference graph, so the nesting-DoS nullification never marks it for removal.","source_quote_or_pointer":"Advisory description (GHSA-m9xh-6747-9r6f)","fact_id":"SEA-GHSA-m9xh-6747-9r6f-F2","document_citation":"Advisory description (GHSA-m9xh-6747-9r6f)"}],"source_stated_contributors":["Resolver::processReferences() collects elements with the XPath predicate use[@href or @xlink:href], which is case sensitive. A element written as xlink:HrEf is therefore never added to the reference graph, so the nesting-DoS nullification never marks it for removal."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-m9xh-6747-9r6f","reporting_entity":"CVE-2026-107381","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-m9xh-6747-9r6f-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-m9xh-6747-9r6f-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-107381"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-v383-3rw5-q8rf","title":"enshrined/svg-sanitize: Denial of Service via DTD Attribute Declaration Crash","display_title":"enshrined/svg-sanitize issue could make the service unavailable","display_summary":"A crafted SVG file (1009 bytes) crashes the PHP process when sanitized by enshrined/svg-sanitize (any version through 0.22.x).","display_reference":"CVE-2026-107379","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-v383-3rw5-q8rf","source_title":"enshrined/svg-sanitize: Denial of Service via DTD Attribute Declaration Crash","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T18:00:21.788Z","source_hash":"content-fingerprint:fnv1a-bcf805d9","affected_system":{"organization":"enshrined/svg-sanitize project","product":"enshrined/svg-sanitize","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"PHP"},"documented_facts":[{"id":"SEA-GHSA-v383-3rw5-q8rf-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"enshrined/svg-sanitize: Denial of Service via DTD Attribute Declaration Crash","source_quote_or_pointer":"Security Advisory GHSA-v383-3rw5-q8rf","fact_id":"SEA-GHSA-v383-3rw5-q8rf-F1","document_citation":"Security Advisory GHSA-v383-3rw5-q8rf"},{"id":"SEA-GHSA-v383-3rw5-q8rf-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A crafted SVG file (1009 bytes) crashes the PHP process when sanitized by enshrined/svg-sanitize (any version through 0.22.x). The sanitizer's cleanAttributesOnWhitelist() method calls DOMElement::removeAttribute() twice on the same attribute name — first removing the explicit attribute, then attempting to remove the…","source_quote_or_pointer":"Advisory description (GHSA-v383-3rw5-q8rf)","fact_id":"SEA-GHSA-v383-3rw5-q8rf-F2","document_citation":"Advisory description (GHSA-v383-3rw5-q8rf)"}],"source_stated_contributors":["A crafted SVG file (1009 bytes) crashes the PHP process when sanitized by enshrined/svg-sanitize (any version through 0.22.x). The sanitizer's cleanAttributesOnWhitelist() method calls DOMElement::removeAttribute() twice on the same attribute name — first removing the explicit attribute, then attempting to remove the…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-v383-3rw5-q8rf","reporting_entity":"CVE-2026-107379","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-v383-3rw5-q8rf-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-v383-3rw5-q8rf-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-107379"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-w6r9-248c-frg8","title":"amqp091-go: Pre-negotiation frame limit is not enforced to 4KB","display_title":"Security issue reported in github.com/rabbitmq/amqp091-go","display_summary":"The frame-size mitigation released in amqp091-go v1.13.0 can be bypassed before connection.tune completes. A malicious or compromised AMQP peer can send only a seven-byte body-frame header containing a large…","display_reference":"CVE-2026-107386","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-w6r9-248c-frg8","source_title":"amqp091-go: Pre-negotiation frame limit is not enforced to 4KB","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T18:00:21.788Z","source_hash":"content-fingerprint:fnv1a-c1ad61d5","affected_system":{"organization":"github.com/rabbitmq/amqp091-go project","product":"github.com/rabbitmq/amqp091-go","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Go"},"documented_facts":[{"id":"SEA-GHSA-w6r9-248c-frg8-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"amqp091-go: Pre-negotiation frame limit is not enforced to 4KB","source_quote_or_pointer":"Security Advisory GHSA-w6r9-248c-frg8","fact_id":"SEA-GHSA-w6r9-248c-frg8-F1","document_citation":"Security Advisory GHSA-w6r9-248c-frg8"},{"id":"SEA-GHSA-w6r9-248c-frg8-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The frame-size mitigation released in amqp091-go v1.13.0 can be bypassed before connection.tune completes. A malicious or compromised AMQP peer can send only a seven-byte body-frame header containing a large attacker-controlled uint32 payload length.","source_quote_or_pointer":"Advisory description (GHSA-w6r9-248c-frg8)","fact_id":"SEA-GHSA-w6r9-248c-frg8-F2","document_citation":"Advisory description (GHSA-w6r9-248c-frg8)"}],"source_stated_contributors":["The frame-size mitigation released in amqp091-go v1.13.0 can be bypassed before connection.tune completes. A malicious or compromised AMQP peer can send only a seven-byte body-frame header containing a large attacker-controlled uint32 payload length."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-w6r9-248c-frg8","reporting_entity":"CVE-2026-107386","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-w6r9-248c-frg8-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-w6r9-248c-frg8-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-107386"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-4r3p-w3mc-5v34","title":"PraisonAI: Prompt-injection defense blocks only when 3+ detector families fire simultaneously; realistic single-vector injections pass through unblocked","display_title":"Security issue reported in praisonai","display_summary":"PraisonAI's opt-in prompt-injection defense (enableinjectiondefense()) only blocks at ThreatLevel.CRITICAL, which requires three or more distinct detector families to match simultaneously.","display_reference":"CVE-2026-60086","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-4r3p-w3mc-5v34","source_title":"PraisonAI: Prompt-injection defense blocks only when 3+ detector families fire simultaneously; realistic single-vector injections pass through unblocked","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T18:00:21.788Z","source_hash":"content-fingerprint:fnv1a-cd27eec8","affected_system":{"organization":"praisonai project","product":"praisonai","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":false,"primary_language":"Python"},"documented_facts":[{"id":"SEA-GHSA-4r3p-w3mc-5v34-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"PraisonAI: Prompt-injection defense blocks only when 3+ detector families fire simultaneously; realistic single-vector injections pass through unblocked","source_quote_or_pointer":"Security Advisory GHSA-4r3p-w3mc-5v34","fact_id":"SEA-GHSA-4r3p-w3mc-5v34-F1","document_citation":"Security Advisory GHSA-4r3p-w3mc-5v34"},{"id":"SEA-GHSA-4r3p-w3mc-5v34-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"PraisonAI's opt-in prompt-injection defense (enableinjectiondefense()) only blocks at ThreatLevel.CRITICAL, which requires three or more distinct detector families to match simultaneously. A realistic single- or double-vector prompt injection (e.g.","source_quote_or_pointer":"Advisory description (GHSA-4r3p-w3mc-5v34)","fact_id":"SEA-GHSA-4r3p-w3mc-5v34-F2","document_citation":"Advisory description (GHSA-4r3p-w3mc-5v34)"}],"source_stated_contributors":["PraisonAI's opt-in prompt-injection defense (enableinjectiondefense()) only blocks at ThreatLevel.CRITICAL, which requires three or more distinct detector families to match simultaneously. A realistic single- or double-vector prompt injection (e.g."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["arch.content_ingestion_rag"],"failure_mechanisms":["SEA-FM-004","SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-4r3p-w3mc-5v34","reporting_entity":"CVE-2026-60086","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-4r3p-w3mc-5v34-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-4r3p-w3mc-5v34-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-60086"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-79fv-7hq9-w7xg","title":"PraisonAI: API deploy code generator embeds unescaped YAML fields into Python source","display_title":"Security issue reported in praisonai","display_summary":"PraisonAI's API deployment generator copies deploy.api.host from agents.yaml directly into generated Python source without safe literal encoding.","display_reference":"CVE-2026-61433","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-79fv-7hq9-w7xg","source_title":"PraisonAI: API deploy code generator embeds unescaped YAML fields into Python source","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T18:00:21.788Z","source_hash":"content-fingerprint:fnv1a-fe080af7","affected_system":{"organization":"praisonai project","product":"praisonai","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Python"},"documented_facts":[{"id":"SEA-GHSA-79fv-7hq9-w7xg-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"PraisonAI: API deploy code generator embeds unescaped YAML fields into Python source","source_quote_or_pointer":"Security Advisory GHSA-79fv-7hq9-w7xg","fact_id":"SEA-GHSA-79fv-7hq9-w7xg-F1","document_citation":"Security Advisory GHSA-79fv-7hq9-w7xg"},{"id":"SEA-GHSA-79fv-7hq9-w7xg-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"PraisonAI's API deployment generator copies deploy.api.host from agents.yaml directly into generated Python source without safe literal encoding. A malicious PraisonAI project can set that host value to a Python expression splice; when an operator runs the API deploy flow, the generated server source compiles and…","source_quote_or_pointer":"Advisory description (GHSA-79fv-7hq9-w7xg)","fact_id":"SEA-GHSA-79fv-7hq9-w7xg-F2","document_citation":"Advisory description (GHSA-79fv-7hq9-w7xg)"}],"source_stated_contributors":["PraisonAI's API deployment generator copies deploy.api.host from agents.yaml directly into generated Python source without safe literal encoding. A malicious PraisonAI project can set that host value to a Python expression splice; when an operator runs the API deploy flow, the generated server source compiles and…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.code_execution","arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-010"],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-79fv-7hq9-w7xg","reporting_entity":"CVE-2026-61433","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-79fv-7hq9-w7xg-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-79fv-7hq9-w7xg-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-61433"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-q7m5-3jmv-vm48","title":"PraisonAI: ContextGatherer include resolution permits absolute and traversal reads outside the workspace","display_title":"Security issue reported in praisonai","display_summary":"PraisonAI's praisonai.ui.context.ContextGatherer treats the configured directory as the project workspace, but project-controlled .praisoncontext and .praisoninclude files can name absolute paths or .. traversal paths.","display_reference":"CVE-2026-61431","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-q7m5-3jmv-vm48","source_title":"PraisonAI: ContextGatherer include resolution permits absolute and traversal reads outside the workspace","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T18:00:21.788Z","source_hash":"content-fingerprint:fnv1a-d4d277ca","affected_system":{"organization":"praisonai project","product":"praisonai","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Python"},"documented_facts":[{"id":"SEA-GHSA-q7m5-3jmv-vm48-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"PraisonAI: ContextGatherer include resolution permits absolute and traversal reads outside the workspace","source_quote_or_pointer":"Security Advisory GHSA-q7m5-3jmv-vm48","fact_id":"SEA-GHSA-q7m5-3jmv-vm48-F1","document_citation":"Security Advisory GHSA-q7m5-3jmv-vm48"},{"id":"SEA-GHSA-q7m5-3jmv-vm48-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"PraisonAI's praisonai.ui.context.ContextGatherer treats the configured directory as the project workspace, but project-controlled .praisoncontext and .praisoninclude files can name absolute paths or .. traversal paths.","source_quote_or_pointer":"Advisory description (GHSA-q7m5-3jmv-vm48)","fact_id":"SEA-GHSA-q7m5-3jmv-vm48-F2","document_citation":"Advisory description (GHSA-q7m5-3jmv-vm48)"}],"source_stated_contributors":["PraisonAI's praisonai.ui.context.ContextGatherer treats the configured directory as the project workspace, but project-controlled .praisoncontext and .praisoninclude files can name absolute paths or .. traversal paths."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-q7m5-3jmv-vm48","reporting_entity":"CVE-2026-61431","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-q7m5-3jmv-vm48-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-q7m5-3jmv-vm48-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-61431"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-77xj-x4rm-935c","title":"datamodel-code-generator: Protobuf weak-import path traversal allows files to be written outside the temporary directory","display_title":"datamodel-code-generator issue could expose restricted files","display_summary":"When processing an attacker-controlled Protobuf schema, vulnerable versions of","display_reference":"CVE-2026-107377","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-77xj-x4rm-935c","source_title":"datamodel-code-generator: Protobuf weak-import path traversal allows files to be written outside the temporary directory","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T18:00:21.788Z","source_hash":"content-fingerprint:fnv1a-dbc18052","affected_system":{"organization":"datamodel-code-generator project","product":"datamodel-code-generator","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Python"},"documented_facts":[{"id":"SEA-GHSA-77xj-x4rm-935c-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"datamodel-code-generator: Protobuf weak-import path traversal allows files to be written outside the temporary directory","source_quote_or_pointer":"Security Advisory GHSA-77xj-x4rm-935c","fact_id":"SEA-GHSA-77xj-x4rm-935c-F1","document_citation":"Security Advisory GHSA-77xj-x4rm-935c"},{"id":"SEA-GHSA-77xj-x4rm-935c-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"When processing an attacker-controlled Protobuf schema, vulnerable versions of","source_quote_or_pointer":"Advisory description (GHSA-77xj-x4rm-935c)","fact_id":"SEA-GHSA-77xj-x4rm-935c-F2","document_citation":"Advisory description (GHSA-77xj-x4rm-935c)"}],"source_stated_contributors":["When processing an attacker-controlled Protobuf schema, vulnerable versions of"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Restricted file exposure","File overwrite"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-77xj-x4rm-935c","reporting_entity":"CVE-2026-107377","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-77xj-x4rm-935c-SG1","label":"Confine file access to a fixed root","description":"Resolve paths to canonical form and reject anything outside the intended directory before opening files.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-77xj-x4rm-935c-SG1","label":"Confine file access to a fixed root","description":"Resolve paths to canonical form and reject anything outside the intended directory before opening files.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"File paths supplied by a caller escaped the intended directory. Canonicalise paths and confine file access to a fixed root.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-107377"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-xpx6-x8c2-mw5w","title":"PraisonAI: Project custom command templates can read outside-workspace files into model prompts","display_title":"Security issue reported in praisonai","display_summary":"PraisonAI's new file-based custom command feature auto-discovers project commands from .praisonai/commands/.md. When a user runs praisonai run --command inside a repository, the command body is interpolated before it is…","display_reference":"CVE-2026-60088","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-xpx6-x8c2-mw5w","source_title":"PraisonAI: Project custom command templates can read outside-workspace files into model prompts","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T18:00:21.788Z","source_hash":"content-fingerprint:fnv1a-dddfdbbe","affected_system":{"organization":"praisonai project","product":"praisonai","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Python"},"documented_facts":[{"id":"SEA-GHSA-xpx6-x8c2-mw5w-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"PraisonAI: Project custom command templates can read outside-workspace files into model prompts","source_quote_or_pointer":"Security Advisory GHSA-xpx6-x8c2-mw5w","fact_id":"SEA-GHSA-xpx6-x8c2-mw5w-F1","document_citation":"Security Advisory GHSA-xpx6-x8c2-mw5w"},{"id":"SEA-GHSA-xpx6-x8c2-mw5w-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"PraisonAI's new file-based custom command feature auto-discovers project commands from .praisonai/commands/.md. When a user runs praisonai run --command inside a repository, the command body is interpolated before it is sent as the model prompt.","source_quote_or_pointer":"Advisory description (GHSA-xpx6-x8c2-mw5w)","fact_id":"SEA-GHSA-xpx6-x8c2-mw5w-F2","document_citation":"Advisory description (GHSA-xpx6-x8c2-mw5w)"}],"source_stated_contributors":["PraisonAI's new file-based custom command feature auto-discovers project commands from .praisonai/commands/.md. When a user runs praisonai run --command inside a repository, the command body is interpolated before it is sent as the model prompt."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-xpx6-x8c2-mw5w","reporting_entity":"CVE-2026-60088","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-xpx6-x8c2-mw5w-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-xpx6-x8c2-mw5w-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-60088"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-xw65-4hp5-5hc7","title":"Handlebars: JavaScript Injection via Unsafe Inline Embedding of Precompiled Templates","display_title":"Security issue reported in handlebars","display_summary":"Handlebars.precompile() generates JavaScript source that is commonly embedded in browser elements. Before the fix, static template text containing was emitted unchanged.","display_reference":"CVE-2026-106444","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-xw65-4hp5-5hc7","source_title":"Handlebars: JavaScript Injection via Unsafe Inline Embedding of Precompiled Templates","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T18:00:21.788Z","source_hash":"content-fingerprint:fnv1a-7e3420d1","affected_system":{"organization":"handlebars project","product":"handlebars","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":false,"primary_language":"JavaScript / TypeScript"},"documented_facts":[{"id":"SEA-GHSA-xw65-4hp5-5hc7-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Handlebars: JavaScript Injection via Unsafe Inline Embedding of Precompiled Templates","source_quote_or_pointer":"Security Advisory GHSA-xw65-4hp5-5hc7","fact_id":"SEA-GHSA-xw65-4hp5-5hc7-F1","document_citation":"Security Advisory GHSA-xw65-4hp5-5hc7"},{"id":"SEA-GHSA-xw65-4hp5-5hc7-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Handlebars.precompile() generates JavaScript source that is commonly embedded in browser elements. Before the fix, static template text containing was emitted unchanged.","source_quote_or_pointer":"Advisory description (GHSA-xw65-4hp5-5hc7)","fact_id":"SEA-GHSA-xw65-4hp5-5hc7-F2","document_citation":"Advisory description (GHSA-xw65-4hp5-5hc7)"}],"source_stated_contributors":["Handlebars.precompile() generates JavaScript source that is commonly embedded in browser elements. Before the fix, static template text containing was emitted unchanged."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-xw65-4hp5-5hc7","reporting_entity":"CVE-2026-106444","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-xw65-4hp5-5hc7-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-xw65-4hp5-5hc7-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-106444"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-8r5x-fm3f-whwj","title":"Handlebars: JavaScript Injection via AST Type Confusion in compile (bypass of CVE-2026-33937)","display_title":"Security issue reported in handlebars","display_summary":"Handlebars.compile() and Handlebars.precompile() accept a pre-parsed AST as well as a template string. Handlebars 4.7.9 added validation for such ASTs.","display_reference":"CVE-2026-106446","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-8r5x-fm3f-whwj","source_title":"Handlebars: JavaScript Injection via AST Type Confusion in compile (bypass of CVE-2026-33937)","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T18:00:21.788Z","source_hash":"content-fingerprint:fnv1a-913302fc","affected_system":{"organization":"handlebars project","product":"handlebars","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"JavaScript / TypeScript"},"documented_facts":[{"id":"SEA-GHSA-8r5x-fm3f-whwj-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Handlebars: JavaScript Injection via AST Type Confusion in compile (bypass of CVE-2026-33937)","source_quote_or_pointer":"Security Advisory GHSA-8r5x-fm3f-whwj","fact_id":"SEA-GHSA-8r5x-fm3f-whwj-F1","document_citation":"Security Advisory GHSA-8r5x-fm3f-whwj"},{"id":"SEA-GHSA-8r5x-fm3f-whwj-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Handlebars.compile() and Handlebars.precompile() accept a pre-parsed AST as well as a template string. Handlebars 4.7.9 added validation for such ASTs. It only checks values on PathExpression, NumberLiteral and BooleanLiteral nodes, and the compiler still writes several other AST values into the generated JavaScript…","source_quote_or_pointer":"Advisory description (GHSA-8r5x-fm3f-whwj)","fact_id":"SEA-GHSA-8r5x-fm3f-whwj-F2","document_citation":"Advisory description (GHSA-8r5x-fm3f-whwj)"}],"source_stated_contributors":["Handlebars.compile() and Handlebars.precompile() accept a pre-parsed AST as well as a template string. Handlebars 4.7.9 added validation for such ASTs. It only checks values on PathExpression, NumberLiteral and BooleanLiteral nodes, and the compiler still writes several other AST values into the generated JavaScript…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.infrastructure_modification","auth.write_action"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-8r5x-fm3f-whwj","reporting_entity":"CVE-2026-106446","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-8r5x-fm3f-whwj-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-8r5x-fm3f-whwj-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-106446"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-p8wg-vrv2-v86f","title":"Handlebars: JavaScript Injection via Own Property Check Bypass","display_title":"Security issue reported in handlebars","display_summary":"Handlebars can expose the Function constructor despite its prototype-access deny list. When a template reaches Function.prototype, its own constructor property is returned before the deny list is checked.","display_reference":"CVE-2026-106445","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-p8wg-vrv2-v86f","source_title":"Handlebars: JavaScript Injection via Own Property Check Bypass","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T18:00:21.788Z","source_hash":"content-fingerprint:fnv1a-2fad45b3","affected_system":{"organization":"handlebars project","product":"handlebars","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"JavaScript / TypeScript"},"documented_facts":[{"id":"SEA-GHSA-p8wg-vrv2-v86f-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Handlebars: JavaScript Injection via Own Property Check Bypass","source_quote_or_pointer":"Security Advisory GHSA-p8wg-vrv2-v86f","fact_id":"SEA-GHSA-p8wg-vrv2-v86f-F1","document_citation":"Security Advisory GHSA-p8wg-vrv2-v86f"},{"id":"SEA-GHSA-p8wg-vrv2-v86f-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Handlebars can expose the Function constructor despite its prototype-access deny list. When a template reaches Function.prototype, its own constructor property is returned before the deny list is checked.","source_quote_or_pointer":"Advisory description (GHSA-p8wg-vrv2-v86f)","fact_id":"SEA-GHSA-p8wg-vrv2-v86f-F2","document_citation":"Advisory description (GHSA-p8wg-vrv2-v86f)"}],"source_stated_contributors":["Handlebars can expose the Function constructor despite its prototype-access deny list. When a template reaches Function.prototype, its own constructor property is returned before the deny list is checked."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-p8wg-vrv2-v86f","reporting_entity":"CVE-2026-106445","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-p8wg-vrv2-v86f-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-p8wg-vrv2-v86f-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-106445"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-m6rx-h84q-8r95","title":"LangChain: MongoDBChatMessageHistory query injection can allow cross-session access","display_title":"Security issue reported in @langchain/mongodb","display_summary":"MongoDBChatMessageHistory did not enforce the documented string type for session identifiers at runtime. In affected applications, a structured session identifier could be interpreted as a MongoDB query condition rather…","display_reference":"CVE-2026-106119","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-m6rx-h84q-8r95","source_title":"LangChain: MongoDBChatMessageHistory query injection can allow cross-session access","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T18:00:21.788Z","source_hash":"content-fingerprint:fnv1a-92136d89","affected_system":{"organization":"@langchain/mongodb project","product":"@langchain/mongodb","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":false,"primary_language":"JavaScript / TypeScript"},"documented_facts":[{"id":"SEA-GHSA-m6rx-h84q-8r95-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"LangChain: MongoDBChatMessageHistory query injection can allow cross-session access","source_quote_or_pointer":"Security Advisory GHSA-m6rx-h84q-8r95","fact_id":"SEA-GHSA-m6rx-h84q-8r95-F1","document_citation":"Security Advisory GHSA-m6rx-h84q-8r95"},{"id":"SEA-GHSA-m6rx-h84q-8r95-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"MongoDBChatMessageHistory did not enforce the documented string type for session identifiers at runtime. In affected applications, a structured session identifier could be interpreted as a MongoDB query condition rather than as a literal identifier.","source_quote_or_pointer":"Advisory description (GHSA-m6rx-h84q-8r95)","fact_id":"SEA-GHSA-m6rx-h84q-8r95-F2","document_citation":"Advisory description (GHSA-m6rx-h84q-8r95)"}],"source_stated_contributors":["MongoDBChatMessageHistory did not enforce the documented string type for session identifiers at runtime. In affected applications, a structured session identifier could be interpreted as a MongoDB query condition rather than as a literal identifier."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-m6rx-h84q-8r95","reporting_entity":"CVE-2026-106119","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-m6rx-h84q-8r95-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-m6rx-h84q-8r95-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-106119"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-rp9v-7xv3-r6g3","title":"Coraza: Resource exhaustion via deferred file handle accumulation in multipart body processor","display_title":"github.com/corazawaf/coraza/v3 issue could make the service unavailable","display_summary":"defer temp.Close() sits inside a for loop in the multipart processor. Go defers run at function return, not loop end, so every file part in the request holds an open fd until ProcessRequest() exits.","display_reference":"CVE-2026-107834","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-rp9v-7xv3-r6g3","source_title":"Coraza: Resource exhaustion via deferred file handle accumulation in multipart body processor","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T18:00:21.788Z","source_hash":"content-fingerprint:fnv1a-468c213c","affected_system":{"organization":"github.com/corazawaf/coraza/v3 project","product":"github.com/corazawaf/coraza/v3","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Go"},"documented_facts":[{"id":"SEA-GHSA-rp9v-7xv3-r6g3-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Coraza: Resource exhaustion via deferred file handle accumulation in multipart body processor","source_quote_or_pointer":"Security Advisory GHSA-rp9v-7xv3-r6g3","fact_id":"SEA-GHSA-rp9v-7xv3-r6g3-F1","document_citation":"Security Advisory GHSA-rp9v-7xv3-r6g3"},{"id":"SEA-GHSA-rp9v-7xv3-r6g3-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"defer temp.Close() sits inside a for loop in the multipart processor. Go defers run at function return, not loop end, so every file part in the request holds an open fd until ProcessRequest() exits. Send enough parts and you hit EMFILE.","source_quote_or_pointer":"Advisory description (GHSA-rp9v-7xv3-r6g3)","fact_id":"SEA-GHSA-rp9v-7xv3-r6g3-F2","document_citation":"Advisory description (GHSA-rp9v-7xv3-r6g3)"}],"source_stated_contributors":["defer temp.Close() sits inside a for loop in the multipart processor. Go defers run at function return, not loop end, so every file part in the request holds an open fd until ProcessRequest() exits. Send enough parts and you hit EMFILE."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-rp9v-7xv3-r6g3","reporting_entity":"CVE-2026-107834","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-rp9v-7xv3-r6g3-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-rp9v-7xv3-r6g3-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-107834"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-w253-m66g-rx24","title":"Coraza: URL-encoded form Content-Type parameters bypass Coraza body inspection","display_title":"Security issue reported in github.com/corazawaf/coraza/v3","display_summary":"Coraza fails to inspect URL-encoded form bodies when their valid Content-Type contains a media-type parameter, for example:","display_reference":"GHSA-w253-m66g-rx24","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-w253-m66g-rx24","source_title":"Coraza: URL-encoded form Content-Type parameters bypass Coraza body inspection","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T18:00:21.788Z","source_hash":"content-fingerprint:fnv1a-a5456372","affected_system":{"organization":"github.com/corazawaf/coraza/v3 project","product":"github.com/corazawaf/coraza/v3","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Go"},"documented_facts":[{"id":"SEA-GHSA-w253-m66g-rx24-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Coraza: URL-encoded form Content-Type parameters bypass Coraza body inspection","source_quote_or_pointer":"Security Advisory GHSA-w253-m66g-rx24","fact_id":"SEA-GHSA-w253-m66g-rx24-F1","document_citation":"Security Advisory GHSA-w253-m66g-rx24"},{"id":"SEA-GHSA-w253-m66g-rx24-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Coraza fails to inspect URL-encoded form bodies when their valid Content-Type contains a media-type parameter, for example:","source_quote_or_pointer":"Advisory description (GHSA-w253-m66g-rx24)","fact_id":"SEA-GHSA-w253-m66g-rx24-F2","document_citation":"Advisory description (GHSA-w253-m66g-rx24)"}],"source_stated_contributors":["Coraza fails to inspect URL-encoded form bodies when their valid Content-Type contains a media-type parameter, for example:"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-w253-m66g-rx24","reporting_entity":"GitHub Security Advisory Database","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-w253-m66g-rx24-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-w253-m66g-rx24-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-3wr7-993q-jrff","title":"Coraza: Multipart filename (RFC 5987) charset restriction lets a decoy filename bypass FILES-based rules","display_title":"Security issue reported in github.com/corazawaf/coraza/v3","display_summary":"Coraza extracts a multipart file upload's filename using Go's standard-library mime.ParseMediaType, which only decodes the RFC 5987/6266 extended filename Content-Disposition parameter when its declared charset is…","display_reference":"GHSA-3wr7-993q-jrff","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-3wr7-993q-jrff","source_title":"Coraza: Multipart filename (RFC 5987) charset restriction lets a decoy filename bypass FILES-based rules","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T18:00:21.788Z","source_hash":"content-fingerprint:fnv1a-a47f74de","affected_system":{"organization":"github.com/corazawaf/coraza/v3 project","product":"github.com/corazawaf/coraza/v3","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Go"},"documented_facts":[{"id":"SEA-GHSA-3wr7-993q-jrff-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Coraza: Multipart filename (RFC 5987) charset restriction lets a decoy filename bypass FILES-based rules","source_quote_or_pointer":"Security Advisory GHSA-3wr7-993q-jrff","fact_id":"SEA-GHSA-3wr7-993q-jrff-F1","document_citation":"Security Advisory GHSA-3wr7-993q-jrff"},{"id":"SEA-GHSA-3wr7-993q-jrff-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Coraza extracts a multipart file upload's filename using Go's standard-library mime.ParseMediaType, which only decodes the RFC 5987/6266 extended filename Content-Disposition parameter when its declared charset is exactly us-ascii or utf-8.","source_quote_or_pointer":"Advisory description (GHSA-3wr7-993q-jrff)","fact_id":"SEA-GHSA-3wr7-993q-jrff-F2","document_citation":"Advisory description (GHSA-3wr7-993q-jrff)"}],"source_stated_contributors":["Coraza extracts a multipart file upload's filename using Go's standard-library mime.ParseMediaType, which only decodes the RFC 5987/6266 extended filename Content-Disposition parameter when its declared charset is exactly us-ascii or utf-8."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.uploaded_files"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-3wr7-993q-jrff","reporting_entity":"GitHub Security Advisory Database","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-3wr7-993q-jrff-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-3wr7-993q-jrff-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-g4qm-m288-5cp9","title":"Coraza has Cookie Parser Confusion","display_title":"Security issue reported in github.com/corazawaf/coraza/v3","display_summary":"Coraza's cookie parser (internal/cookies.ParseCookies) does not strip ASCII control characters (CTLs) from the edges of a cookie name/value before they're matched against REQUESTCOOKIES / REQUESTCOOKIESNAMES.","display_reference":"GHSA-g4qm-m288-5cp9","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-g4qm-m288-5cp9","source_title":"Coraza has Cookie Parser Confusion","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T18:00:21.788Z","source_hash":"content-fingerprint:fnv1a-bf130eb8","affected_system":{"organization":"github.com/corazawaf/coraza/v3 project","product":"github.com/corazawaf/coraza/v3","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Go"},"documented_facts":[{"id":"SEA-GHSA-g4qm-m288-5cp9-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Coraza has Cookie Parser Confusion","source_quote_or_pointer":"Security Advisory GHSA-g4qm-m288-5cp9","fact_id":"SEA-GHSA-g4qm-m288-5cp9-F1","document_citation":"Security Advisory GHSA-g4qm-m288-5cp9"},{"id":"SEA-GHSA-g4qm-m288-5cp9-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Coraza's cookie parser (internal/cookies.ParseCookies) does not strip ASCII control characters (CTLs) from the edges of a cookie name/value before they're matched against REQUESTCOOKIES / REQUESTCOOKIESNAMES.","source_quote_or_pointer":"Advisory description (GHSA-g4qm-m288-5cp9)","fact_id":"SEA-GHSA-g4qm-m288-5cp9-F2","document_citation":"Advisory description (GHSA-g4qm-m288-5cp9)"}],"source_stated_contributors":["Coraza's cookie parser (internal/cookies.ParseCookies) does not strip ASCII control characters (CTLs) from the edges of a cookie name/value before they're matched against REQUESTCOOKIES / REQUESTCOOKIESNAMES."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-g4qm-m288-5cp9","reporting_entity":"GitHub Security Advisory Database","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-g4qm-m288-5cp9-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-g4qm-m288-5cp9-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-x26q-wvhg-fh4m","title":"Coraza: ProcessURI silently drops QUERY_STRING and ARGS_GET on URI parse failure — defense-in-depth bypass for non-net/http integrations","display_title":"Security issue reported in github.com/corazawaf/coraza/v3","display_summary":"File: internal/corazawaf/transaction.go, lines 834–866.","display_reference":"CVE-2026-107825","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-x26q-wvhg-fh4m","source_title":"Coraza: ProcessURI silently drops QUERY_STRING and ARGS_GET on URI parse failure — defense-in-depth bypass for non-net/http integrations","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T18:00:21.788Z","source_hash":"content-fingerprint:fnv1a-e3be87c5","affected_system":{"organization":"github.com/corazawaf/coraza/v3 project","product":"github.com/corazawaf/coraza/v3","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Go"},"documented_facts":[{"id":"SEA-GHSA-x26q-wvhg-fh4m-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Coraza: ProcessURI silently drops QUERY_STRING and ARGS_GET on URI parse failure — defense-in-depth bypass for non-net/http integrations","source_quote_or_pointer":"Security Advisory GHSA-x26q-wvhg-fh4m","fact_id":"SEA-GHSA-x26q-wvhg-fh4m-F1","document_citation":"Security Advisory GHSA-x26q-wvhg-fh4m"},{"id":"SEA-GHSA-x26q-wvhg-fh4m-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"File: internal/corazawaf/transaction.go, lines 834–866.","source_quote_or_pointer":"Advisory description (GHSA-x26q-wvhg-fh4m)","fact_id":"SEA-GHSA-x26q-wvhg-fh4m-F2","document_citation":"Advisory description (GHSA-x26q-wvhg-fh4m)"}],"source_stated_contributors":["File: internal/corazawaf/transaction.go, lines 834–866."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-x26q-wvhg-fh4m","reporting_entity":"CVE-2026-107825","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-x26q-wvhg-fh4m-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-x26q-wvhg-fh4m-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-107825"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-pc5q-qfxp-ggqv","title":"Coraza: jsDecode Off-by-One in Octal Escape Handling Enables WAF Bypass","display_title":"Security issue reported in github.com/corazawaf/coraza/v3","display_summary":"The t:jsDecode transformation in Coraza WAF contains an off-by-one error when parsing octal escape sequences. A backslash character was incorrectly included in the octal number buffer, causing strconv.ParseInt to fail…","display_reference":"CVE-2026-104774","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-pc5q-qfxp-ggqv","source_title":"Coraza: jsDecode Off-by-One in Octal Escape Handling Enables WAF Bypass","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T18:00:21.788Z","source_hash":"content-fingerprint:fnv1a-6b52e24e","affected_system":{"organization":"github.com/corazawaf/coraza/v3 project","product":"github.com/corazawaf/coraza/v3","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Go"},"documented_facts":[{"id":"SEA-GHSA-pc5q-qfxp-ggqv-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Coraza: jsDecode Off-by-One in Octal Escape Handling Enables WAF Bypass","source_quote_or_pointer":"Security Advisory GHSA-pc5q-qfxp-ggqv","fact_id":"SEA-GHSA-pc5q-qfxp-ggqv-F1","document_citation":"Security Advisory GHSA-pc5q-qfxp-ggqv"},{"id":"SEA-GHSA-pc5q-qfxp-ggqv-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The t:jsDecode transformation in Coraza WAF contains an off-by-one error when parsing octal escape sequences. A backslash character was incorrectly included in the octal number buffer, causing strconv.ParseInt to fail for every octal escape sequence and return a null byte instead of the decoded value that would…","source_quote_or_pointer":"Advisory description (GHSA-pc5q-qfxp-ggqv)","fact_id":"SEA-GHSA-pc5q-qfxp-ggqv-F2","document_citation":"Advisory description (GHSA-pc5q-qfxp-ggqv)"}],"source_stated_contributors":["The t:jsDecode transformation in Coraza WAF contains an off-by-one error when parsing octal escape sequences. A backslash character was incorrectly included in the octal number buffer, causing strconv.ParseInt to fail for every octal escape sequence and return a null byte instead of the decoded value that would…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.credentials_secrets","arch.external_api"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-pc5q-qfxp-ggqv","reporting_entity":"CVE-2026-104774","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-pc5q-qfxp-ggqv-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-pc5q-qfxp-ggqv-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-104774"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-6gcq-wc29-5xf2","title":"Coraza JSON body processor: argument-limit truncation reopens an unbounded-depth gjson.Valid stack overflow (process crash)","display_title":"Security issue reported in github.com/corazawaf/coraza/v3","display_summary":"The JSON body processor (internal/bodyprocessors/json.go) can be made to","display_reference":"CVE-2026-107826","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-6gcq-wc29-5xf2","source_title":"Coraza JSON body processor: argument-limit truncation reopens an unbounded-depth gjson.Valid stack overflow (process crash)","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T18:00:21.788Z","source_hash":"content-fingerprint:fnv1a-f7d697d2","affected_system":{"organization":"github.com/corazawaf/coraza/v3 project","product":"github.com/corazawaf/coraza/v3","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Go"},"documented_facts":[{"id":"SEA-GHSA-6gcq-wc29-5xf2-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Coraza JSON body processor: argument-limit truncation reopens an unbounded-depth gjson.Valid stack overflow (process crash)","source_quote_or_pointer":"Security Advisory GHSA-6gcq-wc29-5xf2","fact_id":"SEA-GHSA-6gcq-wc29-5xf2-F1","document_citation":"Security Advisory GHSA-6gcq-wc29-5xf2"},{"id":"SEA-GHSA-6gcq-wc29-5xf2-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The JSON body processor (internal/bodyprocessors/json.go) can be made to","source_quote_or_pointer":"Advisory description (GHSA-6gcq-wc29-5xf2)","fact_id":"SEA-GHSA-6gcq-wc29-5xf2-F2","document_citation":"Advisory description (GHSA-6gcq-wc29-5xf2)"}],"source_stated_contributors":["The JSON body processor (internal/bodyprocessors/json.go) can be made to"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-6gcq-wc29-5xf2","reporting_entity":"CVE-2026-107826","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-6gcq-wc29-5xf2-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-6gcq-wc29-5xf2-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-107826"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-5gj4-9gm7-2fx2","title":"Coraza body processor has a JSON key collision that allows unauthenticated attackers to bypass OWASP CRS inspection","display_title":"Security issue reported in github.com/corazawaf/coraza/v3","display_summary":"Coraza's JSON body processor converts nested JSON properties into dot-separated ARGSPOST names without escaping dots contained in literal property names.","display_reference":"GHSA-5gj4-9gm7-2fx2","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-5gj4-9gm7-2fx2","source_title":"Coraza body processor has a JSON key collision that allows unauthenticated attackers to bypass OWASP CRS inspection","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T18:00:21.788Z","source_hash":"content-fingerprint:fnv1a-2d1256db","affected_system":{"organization":"github.com/corazawaf/coraza/v3 project","product":"github.com/corazawaf/coraza/v3","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Go"},"documented_facts":[{"id":"SEA-GHSA-5gj4-9gm7-2fx2-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Coraza body processor has a JSON key collision that allows unauthenticated attackers to bypass OWASP CRS inspection","source_quote_or_pointer":"Security Advisory GHSA-5gj4-9gm7-2fx2","fact_id":"SEA-GHSA-5gj4-9gm7-2fx2-F1","document_citation":"Security Advisory GHSA-5gj4-9gm7-2fx2"},{"id":"SEA-GHSA-5gj4-9gm7-2fx2-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Coraza's JSON body processor converts nested JSON properties into dot-separated ARGSPOST names without escaping dots contained in literal property names. Two distinct JSON properties can therefore collapse into the same Coraza variable","source_quote_or_pointer":"Advisory description (GHSA-5gj4-9gm7-2fx2)","fact_id":"SEA-GHSA-5gj4-9gm7-2fx2-F2","document_citation":"Advisory description (GHSA-5gj4-9gm7-2fx2)"}],"source_stated_contributors":["Coraza's JSON body processor converts nested JSON properties into dot-separated ARGSPOST names without escaping dots contained in literal property names. Two distinct JSON properties can therefore collapse into the same Coraza variable"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-5gj4-9gm7-2fx2","reporting_entity":"GitHub Security Advisory Database","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-5gj4-9gm7-2fx2-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-5gj4-9gm7-2fx2-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-v36g-jcw9-x7cw","title":"Pydantic AI: Excessive resource use when local web fetching converts nested HTML","display_title":"Security issue reported in pydantic-ai","display_summary":"Applications using Pydantic AI's local web-fetch tool can experience excessive CPU and memory use when it converts attacker-controlled HTML. An agent must fetch the affected page;","display_reference":"CVE-2026-107287","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-v36g-jcw9-x7cw","source_title":"Pydantic AI: Excessive resource use when local web fetching converts nested HTML","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T18:00:21.788Z","source_hash":"content-fingerprint:fnv1a-e5731f69","affected_system":{"organization":"pydantic-ai project","product":"pydantic-ai","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Python"},"documented_facts":[{"id":"SEA-GHSA-v36g-jcw9-x7cw-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Pydantic AI: Excessive resource use when local web fetching converts nested HTML","source_quote_or_pointer":"Security Advisory GHSA-v36g-jcw9-x7cw","fact_id":"SEA-GHSA-v36g-jcw9-x7cw-F1","document_citation":"Security Advisory GHSA-v36g-jcw9-x7cw"},{"id":"SEA-GHSA-v36g-jcw9-x7cw-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Applications using Pydantic AI's local web-fetch tool can experience excessive CPU and memory use when it converts attacker-controlled HTML. An agent must fetch the affected page; provider-native web fetching is not affected.","source_quote_or_pointer":"Advisory description (GHSA-v36g-jcw9-x7cw)","fact_id":"SEA-GHSA-v36g-jcw9-x7cw-F2","document_citation":"Advisory description (GHSA-v36g-jcw9-x7cw)"}],"source_stated_contributors":["Applications using Pydantic AI's local web-fetch tool can experience excessive CPU and memory use when it converts attacker-controlled HTML. An agent must fetch the affected page; provider-native web fetching is not affected."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-010"],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-v36g-jcw9-x7cw","reporting_entity":"CVE-2026-107287","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-v36g-jcw9-x7cw-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-v36g-jcw9-x7cw-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-107287"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-r223-96jv-q533","title":"JHipster: SQL Injection in the Parameter of JHipster-Generated Reactive (WebFlux + R2DBC) Applicationssort","display_title":"generator-jhipster issue could expose or alter stored data","display_summary":"Every reactive (Spring WebFlux + Spring Data R2DBC + SQL) application generated by generator-jhipster contains an SQL injection in the paginated entity list endpoints (GET /api/?sort=...).","display_reference":"CVE-2026-107375","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-r223-96jv-q533","source_title":"JHipster: SQL Injection in the Parameter of JHipster-Generated Reactive (WebFlux + R2DBC) Applicationssort","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T18:00:21.788Z","source_hash":"content-fingerprint:fnv1a-b091a737","affected_system":{"organization":"generator-jhipster project","product":"generator-jhipster","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"JavaScript / TypeScript"},"documented_facts":[{"id":"SEA-GHSA-r223-96jv-q533-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"JHipster: SQL Injection in the Parameter of JHipster-Generated Reactive (WebFlux + R2DBC) Applicationssort","source_quote_or_pointer":"Security Advisory GHSA-r223-96jv-q533","fact_id":"SEA-GHSA-r223-96jv-q533-F1","document_citation":"Security Advisory GHSA-r223-96jv-q533"},{"id":"SEA-GHSA-r223-96jv-q533-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Every reactive (Spring WebFlux + Spring Data R2DBC + SQL) application generated by generator-jhipster contains an SQL injection in the paginated entity list endpoints (GET /api/?sort=...).","source_quote_or_pointer":"Advisory description (GHSA-r223-96jv-q533)","fact_id":"SEA-GHSA-r223-96jv-q533-F2","document_citation":"Advisory description (GHSA-r223-96jv-q533)"}],"source_stated_contributors":["Every reactive (Spring WebFlux + Spring Data R2DBC + SQL) application generated by generator-jhipster contains an SQL injection in the paginated entity list endpoints (GET /api/?sort=...)."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-r223-96jv-q533","reporting_entity":"CVE-2026-107375","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-r223-96jv-q533-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-r223-96jv-q533-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-107375"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-9ffp-22j7-56r2","title":"JHipster: Generated Applications Allow Stored XSS via Unrestricted Blob ContentType Opened as Same-Origin Blob","display_title":"generator-jhipster issue could run attacker-controlled scripts in a browser","display_summary":"Applications generated by generator-jhipster v9.2.0 can persist user-controlled Blob ContentType values and later use those values as the MIME type for client-side Blob objects.","display_reference":"CVE-2026-107303","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-9ffp-22j7-56r2","source_title":"JHipster: Generated Applications Allow Stored XSS via Unrestricted Blob ContentType Opened as Same-Origin Blob","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T18:00:21.788Z","source_hash":"content-fingerprint:fnv1a-a44f013e","affected_system":{"organization":"generator-jhipster project","product":"generator-jhipster","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"JavaScript / TypeScript"},"documented_facts":[{"id":"SEA-GHSA-9ffp-22j7-56r2-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"JHipster: Generated Applications Allow Stored XSS via Unrestricted Blob ContentType Opened as Same-Origin Blob","source_quote_or_pointer":"Security Advisory GHSA-9ffp-22j7-56r2","fact_id":"SEA-GHSA-9ffp-22j7-56r2-F1","document_citation":"Security Advisory GHSA-9ffp-22j7-56r2"},{"id":"SEA-GHSA-9ffp-22j7-56r2-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Applications generated by generator-jhipster v9.2.0 can persist user-controlled Blob ContentType values and later use those values as the MIME type for client-side Blob objects. The shared generated openFile helper creates an object URL from the Blob and opens it in a new window.","source_quote_or_pointer":"Advisory description (GHSA-9ffp-22j7-56r2)","fact_id":"SEA-GHSA-9ffp-22j7-56r2-F2","document_citation":"Advisory description (GHSA-9ffp-22j7-56r2)"}],"source_stated_contributors":["Applications generated by generator-jhipster v9.2.0 can persist user-controlled Blob ContentType values and later use those values as the MIME type for client-side Blob objects. The shared generated openFile helper creates an object URL from the Blob and opens it in a new window."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-9ffp-22j7-56r2","reporting_entity":"CVE-2026-107303","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-9ffp-22j7-56r2-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-9ffp-22j7-56r2-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-107303"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-wf65-4jjx-q444","title":"PraisonAI: PGVector and Cassandra knowledge stores interpolate vector dimensions into DDL","display_title":"Security issue reported in praisonai","display_summary":"The PGVector and Cassandra knowledge-store backends validate SQL/CQL identifiers such as schema, keyspace, and collection names, but still insert the caller-controlled dimension argument directly into CREATE TABLE vector…","display_reference":"CVE-2026-60090","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-wf65-4jjx-q444","source_title":"PraisonAI: PGVector and Cassandra knowledge stores interpolate vector dimensions into DDL","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T18:00:21.788Z","source_hash":"content-fingerprint:fnv1a-31249402","affected_system":{"organization":"praisonai project","product":"praisonai","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Python"},"documented_facts":[{"id":"SEA-GHSA-wf65-4jjx-q444-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"PraisonAI: PGVector and Cassandra knowledge stores interpolate vector dimensions into DDL","source_quote_or_pointer":"Security Advisory GHSA-wf65-4jjx-q444","fact_id":"SEA-GHSA-wf65-4jjx-q444-F1","document_citation":"Security Advisory GHSA-wf65-4jjx-q444"},{"id":"SEA-GHSA-wf65-4jjx-q444-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The PGVector and Cassandra knowledge-store backends validate SQL/CQL identifiers such as schema, keyspace, and collection names, but still insert the caller-controlled dimension argument directly into CREATE TABLE vector column declarations.","source_quote_or_pointer":"Advisory description (GHSA-wf65-4jjx-q444)","fact_id":"SEA-GHSA-wf65-4jjx-q444-F2","document_citation":"Advisory description (GHSA-wf65-4jjx-q444)"}],"source_stated_contributors":["The PGVector and Cassandra knowledge-store backends validate SQL/CQL identifiers such as schema, keyspace, and collection names, but still insert the caller-controlled dimension argument directly into CREATE TABLE vector column declarations."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","arch.content_ingestion_rag"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-wf65-4jjx-q444","reporting_entity":"CVE-2026-60090","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-wf65-4jjx-q444-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-wf65-4jjx-q444-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-60090"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-q2xc-rrxj-58x9","title":"Pydantic AI Web chat UI (Agent.to_web(), clai web): the local chat endpoint does not validate the Host header","display_title":"Security issue reported in pydantic-ai","display_summary":"The Pydantic AI development web chat UI (Agent.toweb(), clai web) does not validate the Host header of incoming requests. A website a developer visits can use DNS rebinding to make requests to a chat UI running on that…","display_reference":"CVE-2026-107292","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-q2xc-rrxj-58x9","source_title":"Pydantic AI Web chat UI (Agent.to_web(), clai web): the local chat endpoint does not validate the Host header","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T18:00:21.788Z","source_hash":"content-fingerprint:fnv1a-7d8380eb","affected_system":{"organization":"pydantic-ai project","product":"pydantic-ai","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Python"},"documented_facts":[{"id":"SEA-GHSA-q2xc-rrxj-58x9-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Pydantic AI Web chat UI (Agent.to_web(), clai web): the local chat endpoint does not validate the Host header","source_quote_or_pointer":"Security Advisory GHSA-q2xc-rrxj-58x9","fact_id":"SEA-GHSA-q2xc-rrxj-58x9-F1","document_citation":"Security Advisory GHSA-q2xc-rrxj-58x9"},{"id":"SEA-GHSA-q2xc-rrxj-58x9-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Pydantic AI development web chat UI (Agent.toweb(), clai web) does not validate the Host header of incoming requests. A website a developer visits can use DNS rebinding to make requests to a chat UI running on that developer's machine appear same-origin to the browser, causing the served agent to run and to…","source_quote_or_pointer":"Advisory description (GHSA-q2xc-rrxj-58x9)","fact_id":"SEA-GHSA-q2xc-rrxj-58x9-F2","document_citation":"Advisory description (GHSA-q2xc-rrxj-58x9)"}],"source_stated_contributors":["The Pydantic AI development web chat UI (Agent.toweb(), clai web) does not validate the Host header of incoming requests. A website a developer visits can use DNS rebinding to make requests to a chat UI running on that developer's machine appear same-origin to the browser, causing the served agent to run and to…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-010"],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-q2xc-rrxj-58x9","reporting_entity":"CVE-2026-107292","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-q2xc-rrxj-58x9-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-q2xc-rrxj-58x9-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-107292"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-h4xc-3qfq-jf93","title":"Pydantic AI Web chat UI (Agent.to_web(), clai web): a website visited by the developer can trigger agent runs and server-side tool execution on the local chat endpoint","display_title":"Security issue reported in pydantic-ai","display_summary":"The Pydantic AI development web chat UI (Agent.toweb(), clai web) did not check the content type of requests to its chat endpoint.","display_reference":"CVE-2026-107295","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-h4xc-3qfq-jf93","source_title":"Pydantic AI Web chat UI (Agent.to_web(), clai web): a website visited by the developer can trigger agent runs and server-side tool execution on the local chat endpoint","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T18:00:21.788Z","source_hash":"content-fingerprint:fnv1a-d53a051b","affected_system":{"organization":"pydantic-ai project","product":"pydantic-ai","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Python"},"documented_facts":[{"id":"SEA-GHSA-h4xc-3qfq-jf93-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Pydantic AI Web chat UI (Agent.to_web(), clai web): a website visited by the developer can trigger agent runs and server-side tool execution on the local chat endpoint","source_quote_or_pointer":"Security Advisory GHSA-h4xc-3qfq-jf93","fact_id":"SEA-GHSA-h4xc-3qfq-jf93-F1","document_citation":"Security Advisory GHSA-h4xc-3qfq-jf93"},{"id":"SEA-GHSA-h4xc-3qfq-jf93-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Pydantic AI development web chat UI (Agent.toweb(), clai web) did not check the content type of requests to its chat endpoint. This allowed a website visited by a developer to submit a request to a chat UI running on that developer's machine, causing the served agent to run and to execute its tools with the…","source_quote_or_pointer":"Advisory description (GHSA-h4xc-3qfq-jf93)","fact_id":"SEA-GHSA-h4xc-3qfq-jf93-F2","document_citation":"Advisory description (GHSA-h4xc-3qfq-jf93)"}],"source_stated_contributors":["The Pydantic AI development web chat UI (Agent.toweb(), clai web) did not check the content type of requests to its chat endpoint. This allowed a website visited by a developer to submit a request to a chat UI running on that developer's machine, causing the served agent to run and to execute its tools with the…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-010"],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-h4xc-3qfq-jf93","reporting_entity":"CVE-2026-107295","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-h4xc-3qfq-jf93-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-h4xc-3qfq-jf93-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-107295"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-3gh4-cghq-f8v4","title":"Pydantic AI OpenTelemetry instrumentation: retry prompt content is not redacted when include_content=False","display_title":"Security issue reported in pydantic-ai","display_summary":"Pydantic AI's OpenTelemetry instrumentation supports InstrumentationSettings(includecontent=False) to exclude message content — user prompts, model completions, tool call arguments and responses — from exported…","display_reference":"CVE-2026-107293","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-3gh4-cghq-f8v4","source_title":"Pydantic AI OpenTelemetry instrumentation: retry prompt content is not redacted when include_content=False","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T18:00:21.788Z","source_hash":"content-fingerprint:fnv1a-225f758e","affected_system":{"organization":"pydantic-ai project","product":"pydantic-ai","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Python"},"documented_facts":[{"id":"SEA-GHSA-3gh4-cghq-f8v4-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Pydantic AI OpenTelemetry instrumentation: retry prompt content is not redacted when include_content=False","source_quote_or_pointer":"Security Advisory GHSA-3gh4-cghq-f8v4","fact_id":"SEA-GHSA-3gh4-cghq-f8v4-F1","document_citation":"Security Advisory GHSA-3gh4-cghq-f8v4"},{"id":"SEA-GHSA-3gh4-cghq-f8v4-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Pydantic AI's OpenTelemetry instrumentation supports InstrumentationSettings(includecontent=False) to exclude message content — user prompts, model completions, tool call arguments and responses — from exported telemetry, so that agents can be monitored without sending sensitive content to the observability backend.","source_quote_or_pointer":"Advisory description (GHSA-3gh4-cghq-f8v4)","fact_id":"SEA-GHSA-3gh4-cghq-f8v4-F2","document_citation":"Advisory description (GHSA-3gh4-cghq-f8v4)"}],"source_stated_contributors":["Pydantic AI's OpenTelemetry instrumentation supports InstrumentationSettings(includecontent=False) to exclude message content — user prompts, model completions, tool call arguments and responses — from exported telemetry, so that agents can be monitored without sending sensitive content to the observability backend."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","data.untrusted_external_text","arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-010"],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-3gh4-cghq-f8v4","reporting_entity":"CVE-2026-107293","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-3gh4-cghq-f8v4-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-3gh4-cghq-f8v4-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-107293"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-v2xh-2vp8-57h8","title":"Pydantic AI: Unbounded memory use when downloading remote content via web_fetch or FileUrl","display_title":"Security issue reported in pydantic-ai","display_summary":"Several remote-content download paths in Pydantic AI buffered the entire HTTP response body into memory before enforcing any size limit.","display_reference":"CVE-2026-107294","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-v2xh-2vp8-57h8","source_title":"Pydantic AI: Unbounded memory use when downloading remote content via web_fetch or FileUrl","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T18:00:21.788Z","source_hash":"content-fingerprint:fnv1a-296f7f97","affected_system":{"organization":"pydantic-ai project","product":"pydantic-ai","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":false,"primary_language":"Python"},"documented_facts":[{"id":"SEA-GHSA-v2xh-2vp8-57h8-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Pydantic AI: Unbounded memory use when downloading remote content via web_fetch or FileUrl","source_quote_or_pointer":"Security Advisory GHSA-v2xh-2vp8-57h8","fact_id":"SEA-GHSA-v2xh-2vp8-57h8-F1","document_citation":"Security Advisory GHSA-v2xh-2vp8-57h8"},{"id":"SEA-GHSA-v2xh-2vp8-57h8-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Several remote-content download paths in Pydantic AI buffered the entire HTTP response body into memory before enforcing any size limit. An application that exposes the local web-fetch tool (webfetchtool, or the WebFetch capability's local fallback) to untrusted prompts can be driven to fetch an attacker-chosen URL…","source_quote_or_pointer":"Advisory description (GHSA-v2xh-2vp8-57h8)","fact_id":"SEA-GHSA-v2xh-2vp8-57h8-F2","document_citation":"Advisory description (GHSA-v2xh-2vp8-57h8)"}],"source_stated_contributors":["Several remote-content download paths in Pydantic AI buffered the entire HTTP response body into memory before enforcing any size limit. An application that exposes the local web-fetch tool (webfetchtool, or the WebFetch capability's local fallback) to untrusted prompts can be driven to fetch an attacker-chosen URL…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-v2xh-2vp8-57h8","reporting_entity":"CVE-2026-107294","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-v2xh-2vp8-57h8-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-v2xh-2vp8-57h8-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-107294"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-jw42-f3rr-4cc3","title":"Excelize: Unbounded row number in Rows.Columns makes GetRows and the Rows iterator loop for days","display_title":"Security issue reported in github.com/xuri/excelize/v2","display_summary":"A worksheet whose number is far past Excel's 1,048,576-row limit makes File.GetRows and the Rows iterator loop once for every missing row.","display_reference":"CVE-2026-107212","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-jw42-f3rr-4cc3","source_title":"Excelize: Unbounded row number in Rows.Columns makes GetRows and the Rows iterator loop for days","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T18:00:21.788Z","source_hash":"content-fingerprint:fnv1a-b0345124","affected_system":{"organization":"github.com/xuri/excelize/v2 project","product":"github.com/xuri/excelize/v2","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Go"},"documented_facts":[{"id":"SEA-GHSA-jw42-f3rr-4cc3-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Excelize: Unbounded row number in Rows.Columns makes GetRows and the Rows iterator loop for days","source_quote_or_pointer":"Security Advisory GHSA-jw42-f3rr-4cc3","fact_id":"SEA-GHSA-jw42-f3rr-4cc3-F1","document_citation":"Security Advisory GHSA-jw42-f3rr-4cc3"},{"id":"SEA-GHSA-jw42-f3rr-4cc3-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A worksheet whose number is far past Excel's 1,048,576-row limit makes File.GetRows and the Rows iterator loop once for every missing row. The row limit is checked in Rows.Next, but not in Rows.Columns, which also reads elements.","source_quote_or_pointer":"Advisory description (GHSA-jw42-f3rr-4cc3)","fact_id":"SEA-GHSA-jw42-f3rr-4cc3-F2","document_citation":"Advisory description (GHSA-jw42-f3rr-4cc3)"}],"source_stated_contributors":["A worksheet whose number is far past Excel's 1,048,576-row limit makes File.GetRows and the Rows iterator loop once for every missing row. The row limit is checked in Rows.Next, but not in Rows.Columns, which also reads elements."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-jw42-f3rr-4cc3","reporting_entity":"CVE-2026-107212","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-jw42-f3rr-4cc3-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-jw42-f3rr-4cc3-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-107212"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-r7x5-4969-99p7","title":"Excelize: Nil-pointer dereference in GetSlicers when a worksheet has extLst present but no drawing element","display_title":"Security issue reported in github.com/xuri/excelize/v2","display_summary":"GetSlicers guards only if ws.ExtLst == nil { return } (slicer.go:816-818) and then immediately dereferences ws.Drawing.RID with no nil check on ws.Drawing itself.","display_reference":"CVE-2026-107213","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-r7x5-4969-99p7","source_title":"Excelize: Nil-pointer dereference in GetSlicers when a worksheet has extLst present but no drawing element","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T18:00:21.788Z","source_hash":"content-fingerprint:fnv1a-ddbc498a","affected_system":{"organization":"github.com/xuri/excelize/v2 project","product":"github.com/xuri/excelize/v2","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Go"},"documented_facts":[{"id":"SEA-GHSA-r7x5-4969-99p7-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Excelize: Nil-pointer dereference in GetSlicers when a worksheet has extLst present but no drawing element","source_quote_or_pointer":"Security Advisory GHSA-r7x5-4969-99p7","fact_id":"SEA-GHSA-r7x5-4969-99p7-F1","document_citation":"Security Advisory GHSA-r7x5-4969-99p7"},{"id":"SEA-GHSA-r7x5-4969-99p7-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"GetSlicers guards only if ws.ExtLst == nil { return } (slicer.go:816-818) and then immediately dereferences ws.Drawing.RID with no nil check on ws.Drawing itself.","source_quote_or_pointer":"Advisory description (GHSA-r7x5-4969-99p7)","fact_id":"SEA-GHSA-r7x5-4969-99p7-F2","document_citation":"Advisory description (GHSA-r7x5-4969-99p7)"}],"source_stated_contributors":["GetSlicers guards only if ws.ExtLst == nil { return } (slicer.go:816-818) and then immediately dereferences ws.Drawing.RID with no nil check on ws.Drawing itself."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-r7x5-4969-99p7","reporting_entity":"CVE-2026-107213","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-r7x5-4969-99p7-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-r7x5-4969-99p7-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-107213"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-2jwh-9rmr-j4xf","title":"AsyncHttpClient CookieStore Silently Overrides Caller's Explicit Cookie Header via setHeader (Bypass of CVE-2024-53990 Fix)","display_title":"Security issue reported in org.asynchttpclient:async-http-client","display_summary":"With the cookie store enabled, which is the default, a Cookie header that the caller sets on a request with setHeader or addHeader is thrown away whenever the store holds any cookie for the request's origin: the…","display_reference":"CVE-2026-107228","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-2jwh-9rmr-j4xf","source_title":"AsyncHttpClient CookieStore Silently Overrides Caller's Explicit Cookie Header via setHeader (Bypass of CVE-2024-53990 Fix)","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T18:00:21.788Z","source_hash":"content-fingerprint:fnv1a-3655b7a","affected_system":{"organization":"org.asynchttpclient:async-http-client project","product":"org.asynchttpclient:async-http-client","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Java"},"documented_facts":[{"id":"SEA-GHSA-2jwh-9rmr-j4xf-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"AsyncHttpClient CookieStore Silently Overrides Caller's Explicit Cookie Header via setHeader (Bypass of CVE-2024-53990 Fix)","source_quote_or_pointer":"Security Advisory GHSA-2jwh-9rmr-j4xf","fact_id":"SEA-GHSA-2jwh-9rmr-j4xf-F1","document_citation":"Security Advisory GHSA-2jwh-9rmr-j4xf"},{"id":"SEA-GHSA-2jwh-9rmr-j4xf-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"With the cookie store enabled, which is the default, a Cookie header that the caller sets on a request with setHeader or addHeader is thrown away whenever the store holds any cookie for the request's origin: the request's cookie list is written into that header afterwards and replaces it.","source_quote_or_pointer":"Advisory description (GHSA-2jwh-9rmr-j4xf)","fact_id":"SEA-GHSA-2jwh-9rmr-j4xf-F2","document_citation":"Advisory description (GHSA-2jwh-9rmr-j4xf)"}],"source_stated_contributors":["With the cookie store enabled, which is the default, a Cookie header that the caller sets on a request with setHeader or addHeader is thrown away whenever the store holds any cookie for the request's origin: the request's cookie list is written into that header afterwards and replaces it."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-2jwh-9rmr-j4xf","reporting_entity":"CVE-2026-107228","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-2jwh-9rmr-j4xf-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-2jwh-9rmr-j4xf-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-107228"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-p2jm-6hj6-9rjg","title":"AsyncHttpClient: Cookies received over plaintext HTTP can plant, overwrite or delete Secure cookies set over HTTPS","display_title":"Security issue reported in org.asynchttpclient:async-http-client","display_summary":"The cookie store ignores the scheme a Set-Cookie arrived on. draft-ietf-httpbis-rfc6265bis-22 (approved to obsolete RFC 6265, in the RFC Editor queue) Section 5.7 requires a user agent to ignore a cookie with the Secure…","display_reference":"CVE-2026-107226","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-p2jm-6hj6-9rjg","source_title":"AsyncHttpClient: Cookies received over plaintext HTTP can plant, overwrite or delete Secure cookies set over HTTPS","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T18:00:21.788Z","source_hash":"content-fingerprint:fnv1a-88e615fc","affected_system":{"organization":"org.asynchttpclient:async-http-client project","product":"org.asynchttpclient:async-http-client","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Java"},"documented_facts":[{"id":"SEA-GHSA-p2jm-6hj6-9rjg-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"AsyncHttpClient: Cookies received over plaintext HTTP can plant, overwrite or delete Secure cookies set over HTTPS","source_quote_or_pointer":"Security Advisory GHSA-p2jm-6hj6-9rjg","fact_id":"SEA-GHSA-p2jm-6hj6-9rjg-F1","document_citation":"Security Advisory GHSA-p2jm-6hj6-9rjg"},{"id":"SEA-GHSA-p2jm-6hj6-9rjg-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The cookie store ignores the scheme a Set-Cookie arrived on. draft-ietf-httpbis-rfc6265bis-22 (approved to obsolete RFC 6265, in the RFC Editor queue) Section 5.7 requires a user agent to ignore a cookie with the Secure attribute unless it arrived over a secure connection (step 13), and to ignore a non-Secure cookie…","source_quote_or_pointer":"Advisory description (GHSA-p2jm-6hj6-9rjg)","fact_id":"SEA-GHSA-p2jm-6hj6-9rjg-F2","document_citation":"Advisory description (GHSA-p2jm-6hj6-9rjg)"}],"source_stated_contributors":["The cookie store ignores the scheme a Set-Cookie arrived on. draft-ietf-httpbis-rfc6265bis-22 (approved to obsolete RFC 6265, in the RFC Editor queue) Section 5.7 requires a user agent to ignore a cookie with the Secure attribute unless it arrived over a secure connection (step 13), and to ignore a non-Secure cookie…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.write_action","data.pii","arch.async_job","arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-010"],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-p2jm-6hj6-9rjg","reporting_entity":"CVE-2026-107226","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-p2jm-6hj6-9rjg-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-p2jm-6hj6-9rjg-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-107226"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-x8v2-478q-2hvg","title":"AsyncHttpClient: Unbounded WebSocket permessage-deflate decompression enables a decompression-bomb denial of service when compression is enabled","display_title":"org.asynchttpclient:async-http-client issue could make the service unavailable","display_summary":"With WebSocket compression enabled, the client inflates permessage-deflate messages with no limit on the decompressed size.","display_reference":"CVE-2026-107227","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-x8v2-478q-2hvg","source_title":"AsyncHttpClient: Unbounded WebSocket permessage-deflate decompression enables a decompression-bomb denial of service when compression is enabled","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T18:00:21.788Z","source_hash":"content-fingerprint:fnv1a-6feb46e8","affected_system":{"organization":"org.asynchttpclient:async-http-client project","product":"org.asynchttpclient:async-http-client","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Java"},"documented_facts":[{"id":"SEA-GHSA-x8v2-478q-2hvg-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"AsyncHttpClient: Unbounded WebSocket permessage-deflate decompression enables a decompression-bomb denial of service when compression is enabled","source_quote_or_pointer":"Security Advisory GHSA-x8v2-478q-2hvg","fact_id":"SEA-GHSA-x8v2-478q-2hvg-F1","document_citation":"Security Advisory GHSA-x8v2-478q-2hvg"},{"id":"SEA-GHSA-x8v2-478q-2hvg-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"With WebSocket compression enabled, the client inflates permessage-deflate messages with no limit on the decompressed size. It installed Netty's shared WebSocketClientCompressionHandler.INSTANCE, whose inflater is unbounded, and webSocketMaxFrameSize and webSocketMaxBufferSize only bound the compressed bytes, because…","source_quote_or_pointer":"Advisory description (GHSA-x8v2-478q-2hvg)","fact_id":"SEA-GHSA-x8v2-478q-2hvg-F2","document_citation":"Advisory description (GHSA-x8v2-478q-2hvg)"}],"source_stated_contributors":["With WebSocket compression enabled, the client inflates permessage-deflate messages with no limit on the decompressed size. It installed Netty's shared WebSocketClientCompressionHandler.INSTANCE, whose inflater is unbounded, and webSocketMaxFrameSize and webSocketMaxBufferSize only bound the compressed bytes, because…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["arch.event_driven"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-x8v2-478q-2hvg","reporting_entity":"CVE-2026-107227","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-x8v2-478q-2hvg-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-x8v2-478q-2hvg-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-107227"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-v2j5-22fr-j62r","title":"AsyncHttpClient: Pooled connections can still be shared across NTLM, Negotiate and proxy logins","display_title":"Security issue reported in org.asynchttpclient:async-http-client","display_summary":"The fix for GHSA-vvp4-63h8-v5pm in 3.0.13 folded the authenticated principal into the HTTP/1.1 connection pool key, so that a connection one principal authenticated with NTLM, Kerberos or SPNEGO is not handed to another.","display_reference":"CVE-2026-107230","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-v2j5-22fr-j62r","source_title":"AsyncHttpClient: Pooled connections can still be shared across NTLM, Negotiate and proxy logins","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T18:00:21.788Z","source_hash":"content-fingerprint:fnv1a-711ea436","affected_system":{"organization":"org.asynchttpclient:async-http-client project","product":"org.asynchttpclient:async-http-client","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Java"},"documented_facts":[{"id":"SEA-GHSA-v2j5-22fr-j62r-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"AsyncHttpClient: Pooled connections can still be shared across NTLM, Negotiate and proxy logins","source_quote_or_pointer":"Security Advisory GHSA-v2j5-22fr-j62r","fact_id":"SEA-GHSA-v2j5-22fr-j62r-F1","document_citation":"Security Advisory GHSA-v2j5-22fr-j62r"},{"id":"SEA-GHSA-v2j5-22fr-j62r-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The fix for GHSA-vvp4-63h8-v5pm in 3.0.13 folded the authenticated principal into the HTTP/1.1 connection pool key, so that a connection one principal authenticated with NTLM, Kerberos or SPNEGO is not handed to another. It left three cases out.","source_quote_or_pointer":"Advisory description (GHSA-v2j5-22fr-j62r)","fact_id":"SEA-GHSA-v2j5-22fr-j62r-F2","document_citation":"Advisory description (GHSA-v2j5-22fr-j62r)"}],"source_stated_contributors":["The fix for GHSA-vvp4-63h8-v5pm in 3.0.13 folded the authenticated principal into the HTTP/1.1 connection pool key, so that a connection one principal authenticated with NTLM, Kerberos or SPNEGO is not handed to another. It left three cases out."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-v2j5-22fr-j62r","reporting_entity":"CVE-2026-107230","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-v2j5-22fr-j62r-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-v2j5-22fr-j62r-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-107230"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-c44f-37qr-gw3f","title":"PraisonAI: SkillTools Executes Scripts Without Path Containment Validation","display_title":"Security issue reported in praisonaiagents","display_summary":"SkillTools.runskillscript() accepts a scriptpath parameter and executes it via subprocess.run() without any path containment validation.","display_reference":"CVE-2026-61443","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-c44f-37qr-gw3f","source_title":"PraisonAI: SkillTools Executes Scripts Without Path Containment Validation","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T16:00:19.976Z","source_hash":"content-fingerprint:fnv1a-a5efabfe","affected_system":{"organization":"praisonaiagents project","product":"praisonaiagents","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":false,"primary_language":"Python"},"documented_facts":[{"id":"SEA-GHSA-c44f-37qr-gw3f-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"PraisonAI: SkillTools Executes Scripts Without Path Containment Validation","source_quote_or_pointer":"Security Advisory GHSA-c44f-37qr-gw3f","fact_id":"SEA-GHSA-c44f-37qr-gw3f-F1","document_citation":"Security Advisory GHSA-c44f-37qr-gw3f"},{"id":"SEA-GHSA-c44f-37qr-gw3f-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"SkillTools.runskillscript() accepts a scriptpath parameter and executes it via subprocess.run() without any path containment validation. While FileTools has validatepath() with traversal detection, SkillTools performs none. An LLM-directed call can execute arbitrary scripts from any filesystem location.","source_quote_or_pointer":"Advisory description (GHSA-c44f-37qr-gw3f)","fact_id":"SEA-GHSA-c44f-37qr-gw3f-F2","document_citation":"Advisory description (GHSA-c44f-37qr-gw3f)"}],"source_stated_contributors":["SkillTools.runskillscript() accepts a scriptpath parameter and executes it via subprocess.run() without any path containment validation. While FileTools has validatepath() with traversal detection, SkillTools performs none. An LLM-directed call can execute arbitrary scripts from any filesystem location."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["arch.tool_enabled_agent"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-c44f-37qr-gw3f","reporting_entity":"CVE-2026-61443","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-c44f-37qr-gw3f-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-c44f-37qr-gw3f-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-61443"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-4gfv-wg42-7jw5","title":"PraisonAI: Unsafe Dynamic Module Loading Leads to Arbitrary Code Execution via tools.py in AgentFlow","display_title":"praisonaiagents issue could allow unintended commands to run","display_summary":"An unsafe dynamic module loading vulnerability allows an attacker who can control a workflow file and a sibling tools.py to execute arbitrary Python code when the workflow is executed.","display_reference":"CVE-2026-61437","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-4gfv-wg42-7jw5","source_title":"PraisonAI: Unsafe Dynamic Module Loading Leads to Arbitrary Code Execution via tools.py in AgentFlow","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T16:00:19.976Z","source_hash":"content-fingerprint:fnv1a-46c8797f","affected_system":{"organization":"praisonaiagents project","product":"praisonaiagents","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Python"},"documented_facts":[{"id":"SEA-GHSA-4gfv-wg42-7jw5-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"PraisonAI: Unsafe Dynamic Module Loading Leads to Arbitrary Code Execution via tools.py in AgentFlow","source_quote_or_pointer":"Security Advisory GHSA-4gfv-wg42-7jw5","fact_id":"SEA-GHSA-4gfv-wg42-7jw5-F1","document_citation":"Security Advisory GHSA-4gfv-wg42-7jw5"},{"id":"SEA-GHSA-4gfv-wg42-7jw5-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"An unsafe dynamic module loading vulnerability allows an attacker who can control a workflow file and a sibling tools.py to execute arbitrary Python code when the workflow is executed.","source_quote_or_pointer":"Advisory description (GHSA-4gfv-wg42-7jw5)","fact_id":"SEA-GHSA-4gfv-wg42-7jw5-F2","document_citation":"Advisory description (GHSA-4gfv-wg42-7jw5)"}],"source_stated_contributors":["An unsafe dynamic module loading vulnerability allows an attacker who can control a workflow file and a sibling tools.py to execute arbitrary Python code when the workflow is executed."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-4gfv-wg42-7jw5","reporting_entity":"CVE-2026-61437","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-4gfv-wg42-7jw5-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-4gfv-wg42-7jw5-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-61437"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-4xxv-6wmf-xf45","title":"PraisonAI: FastContext path resolution permits absolute and traversal reads outside the workspace","display_title":"Security issue reported in praisonaiagents","display_summary":"PraisonAI's praisonaiagents.context.fast FastContext feature treats workspacepath as the root directory for code search, but its model-facing search tools and high-level readcontext() helper accept absolute paths and ..","display_reference":"CVE-2026-61432","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-4xxv-6wmf-xf45","source_title":"PraisonAI: FastContext path resolution permits absolute and traversal reads outside the workspace","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T16:00:19.976Z","source_hash":"content-fingerprint:fnv1a-9c16fdc0","affected_system":{"organization":"praisonaiagents project","product":"praisonaiagents","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Python"},"documented_facts":[{"id":"SEA-GHSA-4xxv-6wmf-xf45-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"PraisonAI: FastContext path resolution permits absolute and traversal reads outside the workspace","source_quote_or_pointer":"Security Advisory GHSA-4xxv-6wmf-xf45","fact_id":"SEA-GHSA-4xxv-6wmf-xf45-F1","document_citation":"Security Advisory GHSA-4xxv-6wmf-xf45"},{"id":"SEA-GHSA-4xxv-6wmf-xf45-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"PraisonAI's praisonaiagents.context.fast FastContext feature treats workspacepath as the root directory for code search, but its model-facing search tools and high-level readcontext() helper accept absolute paths and .. traversal paths without checking that the resolved path remains under that workspace.","source_quote_or_pointer":"Advisory description (GHSA-4xxv-6wmf-xf45)","fact_id":"SEA-GHSA-4xxv-6wmf-xf45-F2","document_citation":"Advisory description (GHSA-4xxv-6wmf-xf45)"}],"source_stated_contributors":["PraisonAI's praisonaiagents.context.fast FastContext feature treats workspacepath as the root directory for code search, but its model-facing search tools and high-level readcontext() helper accept absolute paths and .. traversal paths without checking that the resolved path remains under that workspace."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-4xxv-6wmf-xf45","reporting_entity":"CVE-2026-61432","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-4xxv-6wmf-xf45-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-4xxv-6wmf-xf45-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-61432"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-fpf4-vwcp-v4hp","title":"Pydantic AI: Event loop blocked by quadratic title extraction in web_fetch","display_title":"Security issue reported in pydantic-ai","display_summary":"The local web-fetch tool (webfetchtool, also used as the WebFetch capability's local fallback) processed responses with several steps whose running time grows quadratically with the size of certain server-controlled…","display_reference":"CVE-2026-107290","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-fpf4-vwcp-v4hp","source_title":"Pydantic AI: Event loop blocked by quadratic title extraction in web_fetch","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T16:00:19.976Z","source_hash":"content-fingerprint:fnv1a-afef2967","affected_system":{"organization":"pydantic-ai project","product":"pydantic-ai","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":false,"primary_language":"Python"},"documented_facts":[{"id":"SEA-GHSA-fpf4-vwcp-v4hp-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Pydantic AI: Event loop blocked by quadratic title extraction in web_fetch","source_quote_or_pointer":"Security Advisory GHSA-fpf4-vwcp-v4hp","fact_id":"SEA-GHSA-fpf4-vwcp-v4hp-F1","document_citation":"Security Advisory GHSA-fpf4-vwcp-v4hp"},{"id":"SEA-GHSA-fpf4-vwcp-v4hp-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The local web-fetch tool (webfetchtool, also used as the WebFetch capability's local fallback) processed responses with several steps whose running time grows quadratically with the size of certain server-controlled inputs, and ran them on the event loop: decoding the body with whichever charset the server declared,…","source_quote_or_pointer":"Advisory description (GHSA-fpf4-vwcp-v4hp)","fact_id":"SEA-GHSA-fpf4-vwcp-v4hp-F2","document_citation":"Advisory description (GHSA-fpf4-vwcp-v4hp)"}],"source_stated_contributors":["The local web-fetch tool (webfetchtool, also used as the WebFetch capability's local fallback) processed responses with several steps whose running time grows quadratically with the size of certain server-controlled inputs, and ran them on the event loop: decoding the body with whichever charset the server declared,…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["arch.event_driven"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-fpf4-vwcp-v4hp","reporting_entity":"CVE-2026-107290","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-fpf4-vwcp-v4hp-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-fpf4-vwcp-v4hp-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-107290"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-4x9p-g9wm-8q7f","title":"Pydantic AI OpenTelemetry instrumentation: exception events on tool and agent run spans include content when include_content=False","display_title":"Security issue reported in pydantic-ai","display_summary":"Pydantic AI's OpenTelemetry instrumentation supports InstrumentationSettings(includecontent=False) to exclude message content — user prompts, model completions, tool call arguments and responses, and any other message…","display_reference":"CVE-2026-107291","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-4x9p-g9wm-8q7f","source_title":"Pydantic AI OpenTelemetry instrumentation: exception events on tool and agent run spans include content when include_content=False","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T16:00:19.976Z","source_hash":"content-fingerprint:fnv1a-88007aa8","affected_system":{"organization":"pydantic-ai project","product":"pydantic-ai","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Python"},"documented_facts":[{"id":"SEA-GHSA-4x9p-g9wm-8q7f-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Pydantic AI OpenTelemetry instrumentation: exception events on tool and agent run spans include content when include_content=False","source_quote_or_pointer":"Security Advisory GHSA-4x9p-g9wm-8q7f","fact_id":"SEA-GHSA-4x9p-g9wm-8q7f-F1","document_citation":"Security Advisory GHSA-4x9p-g9wm-8q7f"},{"id":"SEA-GHSA-4x9p-g9wm-8q7f-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Pydantic AI's OpenTelemetry instrumentation supports InstrumentationSettings(includecontent=False) to exclude message content — user prompts, model completions, tool call arguments and responses, and any other message content — from exported telemetry, so that agents can be monitored without sending sensitive content…","source_quote_or_pointer":"Advisory description (GHSA-4x9p-g9wm-8q7f)","fact_id":"SEA-GHSA-4x9p-g9wm-8q7f-F2","document_citation":"Advisory description (GHSA-4x9p-g9wm-8q7f)"}],"source_stated_contributors":["Pydantic AI's OpenTelemetry instrumentation supports InstrumentationSettings(includecontent=False) to exclude message content — user prompts, model completions, tool call arguments and responses, and any other message content — from exported telemetry, so that agents can be monitored without sending sensitive content…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","data.untrusted_external_text","arch.event_driven","arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-010"],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-4x9p-g9wm-8q7f","reporting_entity":"CVE-2026-107291","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-4x9p-g9wm-8q7f-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-4x9p-g9wm-8q7f-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-107291"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-vmxc-h2x2-jmf3","title":"Pydantic AI: SSRF cloud-metadata blocklist bypass via IPv6 zone identifiers","display_title":"pydantic-ai issue could reach internal services","display_summary":"When an application using Pydantic AI opts a URL into local network access — either a FileUrl with forcedownload='allow-local', or webfetchtool(allowlocalurls=True) — the cloud-metadata blocklist could be bypassed by…","display_reference":"CVE-2026-107289","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-vmxc-h2x2-jmf3","source_title":"Pydantic AI: SSRF cloud-metadata blocklist bypass via IPv6 zone identifiers","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T16:00:19.976Z","source_hash":"content-fingerprint:fnv1a-4c900477","affected_system":{"organization":"pydantic-ai project","product":"pydantic-ai","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":false,"primary_language":"Python"},"documented_facts":[{"id":"SEA-GHSA-vmxc-h2x2-jmf3-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Pydantic AI: SSRF cloud-metadata blocklist bypass via IPv6 zone identifiers","source_quote_or_pointer":"Security Advisory GHSA-vmxc-h2x2-jmf3","fact_id":"SEA-GHSA-vmxc-h2x2-jmf3-F1","document_citation":"Security Advisory GHSA-vmxc-h2x2-jmf3"},{"id":"SEA-GHSA-vmxc-h2x2-jmf3-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"When an application using Pydantic AI opts a URL into local network access — either a FileUrl with forcedownload='allow-local', or webfetchtool(allowlocalurls=True) — the cloud-metadata blocklist could be bypassed by appending an IPv6 zone identifier to a metadata address (for example fd00:ec2::254%251).","source_quote_or_pointer":"Advisory description (GHSA-vmxc-h2x2-jmf3)","fact_id":"SEA-GHSA-vmxc-h2x2-jmf3-F2","document_citation":"Advisory description (GHSA-vmxc-h2x2-jmf3)"}],"source_stated_contributors":["When an application using Pydantic AI opts a URL into local network access — either a FileUrl with forcedownload='allow-local', or webfetchtool(allowlocalurls=True) — the cloud-metadata blocklist could be bypassed by appending an IPv6 zone identifier to a metadata address (for example fd00:ec2::254%251)."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Internal network access","Cloud metadata or credential exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-vmxc-h2x2-jmf3","reporting_entity":"CVE-2026-107289","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-vmxc-h2x2-jmf3-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-vmxc-h2x2-jmf3-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"The service fetched a URL chosen by the caller and could be steered at internal systems. Restrict outbound destinations and block internal address ranges.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-107289"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-m6wp-h223-4c8g","title":"PraisonAI: Plugin Auto-Discovery Executes Arbitrary Python Files Without Verification","display_title":"Security issue reported in praisonaiagents","display_summary":"The plugin manager loads and executes arbitrary .py files from .praisonai/plugins/ directories (both project-level and user home) via importlib.util.specfromfilelocation() + execmodule() with zero code signing, integrity…","display_reference":"CVE-2026-61446","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-m6wp-h223-4c8g","source_title":"PraisonAI: Plugin Auto-Discovery Executes Arbitrary Python Files Without Verification","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T16:00:19.976Z","source_hash":"content-fingerprint:fnv1a-4235c6ce","affected_system":{"organization":"praisonaiagents project","product":"praisonaiagents","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Python"},"documented_facts":[{"id":"SEA-GHSA-m6wp-h223-4c8g-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"PraisonAI: Plugin Auto-Discovery Executes Arbitrary Python Files Without Verification","source_quote_or_pointer":"Security Advisory GHSA-m6wp-h223-4c8g","fact_id":"SEA-GHSA-m6wp-h223-4c8g-F1","document_citation":"Security Advisory GHSA-m6wp-h223-4c8g"},{"id":"SEA-GHSA-m6wp-h223-4c8g-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The plugin manager loads and executes arbitrary .py files from .praisonai/plugins/ directories (both project-level and user home) via importlib.util.specfromfilelocation() + execmodule() with zero code signing, integrity verification, or sandboxing.","source_quote_or_pointer":"Advisory description (GHSA-m6wp-h223-4c8g)","fact_id":"SEA-GHSA-m6wp-h223-4c8g-F2","document_citation":"Advisory description (GHSA-m6wp-h223-4c8g)"}],"source_stated_contributors":["The plugin manager loads and executes arbitrary .py files from .praisonai/plugins/ directories (both project-level and user home) via importlib.util.specfromfilelocation() + execmodule() with zero code signing, integrity verification, or sandboxing."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-m6wp-h223-4c8g","reporting_entity":"CVE-2026-61446","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-m6wp-h223-4c8g-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-m6wp-h223-4c8g-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-61446"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-2xv2-w8cq-5gxw","title":"PraisonAI: CodeAgent Executes LLM-Generated Code Without Sandboxing and Leaks All Environment Secrets","display_title":"praisonaiagents issue could expose accounts or credentials","display_summary":"CodeAgent.executepython() executes LLM-generated Python code in a subprocess with the complete parent-process environment (os.environ.copy()), zero AST validation, zero import restrictions, and no sandbox enforcement —…","display_reference":"CVE-2026-61447","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-2xv2-w8cq-5gxw","source_title":"PraisonAI: CodeAgent Executes LLM-Generated Code Without Sandboxing and Leaks All Environment Secrets","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T16:00:19.976Z","source_hash":"content-fingerprint:fnv1a-523a593f","affected_system":{"organization":"praisonaiagents project","product":"praisonaiagents","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":false,"primary_language":"Python"},"documented_facts":[{"id":"SEA-GHSA-2xv2-w8cq-5gxw-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"PraisonAI: CodeAgent Executes LLM-Generated Code Without Sandboxing and Leaks All Environment Secrets","source_quote_or_pointer":"Security Advisory GHSA-2xv2-w8cq-5gxw","fact_id":"SEA-GHSA-2xv2-w8cq-5gxw-F1","document_citation":"Security Advisory GHSA-2xv2-w8cq-5gxw"},{"id":"SEA-GHSA-2xv2-w8cq-5gxw-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"CodeAgent.executepython() executes LLM-generated Python code in a subprocess with the complete parent-process environment (os.environ.copy()), zero AST validation, zero import restrictions, and no sandbox enforcement — even when CodeConfig(sandbox=True) is explicitly set.","source_quote_or_pointer":"Advisory description (GHSA-2xv2-w8cq-5gxw)","fact_id":"SEA-GHSA-2xv2-w8cq-5gxw-F2","document_citation":"Advisory description (GHSA-2xv2-w8cq-5gxw)"}],"source_stated_contributors":["CodeAgent.executepython() executes LLM-generated Python code in a subprocess with the complete parent-process environment (os.environ.copy()), zero AST validation, zero import restrictions, and no sandbox enforcement — even when CodeConfig(sandbox=True) is explicitly set."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.code_execution","arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-2xv2-w8cq-5gxw","reporting_entity":"CVE-2026-61447","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-2xv2-w8cq-5gxw-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-2xv2-w8cq-5gxw-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-61447"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-29r9-67vg-qj56","title":"PraisonAI: Human-in-the-loop tool approval is cached by tool name and silently reused for all subsequent calls with arbitrary arguments","display_title":"Security issue reported in praisonaiagents","display_summary":"PraisonAI gates dangerous tools (file writes, deletes, shell/code execution) behind an interactive approval prompt. The first approval of a tool is cached for the remainder of the run and silently reused for all later…","display_reference":"CVE-2026-60087","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-29r9-67vg-qj56","source_title":"PraisonAI: Human-in-the-loop tool approval is cached by tool name and silently reused for all subsequent calls with arbitrary arguments","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T16:00:19.976Z","source_hash":"content-fingerprint:fnv1a-3b6271c5","affected_system":{"organization":"praisonaiagents project","product":"praisonaiagents","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Python"},"documented_facts":[{"id":"SEA-GHSA-29r9-67vg-qj56-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"PraisonAI: Human-in-the-loop tool approval is cached by tool name and silently reused for all subsequent calls with arbitrary arguments","source_quote_or_pointer":"Security Advisory GHSA-29r9-67vg-qj56","fact_id":"SEA-GHSA-29r9-67vg-qj56-F1","document_citation":"Security Advisory GHSA-29r9-67vg-qj56"},{"id":"SEA-GHSA-29r9-67vg-qj56-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"PraisonAI gates dangerous tools (file writes, deletes, shell/code execution) behind an interactive approval prompt. The first approval of a tool is cached for the remainder of the run and silently reused for all later invocations of that tool with arbitrary, unreviewed arguments.","source_quote_or_pointer":"Advisory description (GHSA-29r9-67vg-qj56)","fact_id":"SEA-GHSA-29r9-67vg-qj56-F2","document_citation":"Advisory description (GHSA-29r9-67vg-qj56)"}],"source_stated_contributors":["PraisonAI gates dangerous tools (file writes, deletes, shell/code execution) behind an interactive approval prompt. The first approval of a tool is cached for the remainder of the run and silently reused for all later invocations of that tool with arbitrary, unreviewed arguments."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.write_action"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-29r9-67vg-qj56","reporting_entity":"CVE-2026-60087","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-29r9-67vg-qj56-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-29r9-67vg-qj56-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-60087"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-qg25-6gc4-48mg","title":"PraisonAI: DNS rebinding bypass in web_crawl SSRF protection allows internal response disclosure","display_title":"praisonaiagents issue could reach internal services","display_summary":"PraisonAI's webcrawl agent tool performs a server-side HTTP fetch of an agent/attacker-influenced URL. SSRF is meant to be prevented by issafecrawlurl(), which resolves the hostname and rejects…","display_reference":"CVE-2026-61430","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-qg25-6gc4-48mg","source_title":"PraisonAI: DNS rebinding bypass in web_crawl SSRF protection allows internal response disclosure","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T16:00:19.976Z","source_hash":"content-fingerprint:fnv1a-270bd70e","affected_system":{"organization":"praisonaiagents project","product":"praisonaiagents","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Python"},"documented_facts":[{"id":"SEA-GHSA-qg25-6gc4-48mg-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"PraisonAI: DNS rebinding bypass in web_crawl SSRF protection allows internal response disclosure","source_quote_or_pointer":"Security Advisory GHSA-qg25-6gc4-48mg","fact_id":"SEA-GHSA-qg25-6gc4-48mg-F1","document_citation":"Security Advisory GHSA-qg25-6gc4-48mg"},{"id":"SEA-GHSA-qg25-6gc4-48mg-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"PraisonAI's webcrawl agent tool performs a server-side HTTP fetch of an agent/attacker-influenced URL. SSRF is meant to be prevented by issafecrawlurl(), which resolves the hostname and rejects private/loopback/link-local IPs at validation time.","source_quote_or_pointer":"Advisory description (GHSA-qg25-6gc4-48mg)","fact_id":"SEA-GHSA-qg25-6gc4-48mg-F2","document_citation":"Advisory description (GHSA-qg25-6gc4-48mg)"}],"source_stated_contributors":["PraisonAI's webcrawl agent tool performs a server-side HTTP fetch of an agent/attacker-influenced URL. SSRF is meant to be prevented by issafecrawlurl(), which resolves the hostname and rejects private/loopback/link-local IPs at validation time."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-002","SEA-FM-010"],"consequences":["Internal network access","Cloud metadata or credential exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-qg25-6gc4-48mg","reporting_entity":"CVE-2026-61430","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-qg25-6gc4-48mg-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-qg25-6gc4-48mg-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"The service fetched a URL chosen by the caller and could be steered at internal systems. Restrict outbound destinations and block internal address ranges.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-61430"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-qjw5-xwrp-xwpq","title":"PraisonAI: Project config can auto-save agent output outside the project root","display_title":"Security issue reported in praisonaiagents","display_summary":"praisonaiagents automatically reads project-local .praisonai/config.toml defaults when constructing an Agent. A repository-controlled config can set defaults.output.outputfile to an absolute path or a .. traversal path.","display_reference":"CVE-2026-60089","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-qjw5-xwrp-xwpq","source_title":"PraisonAI: Project config can auto-save agent output outside the project root","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T16:00:19.976Z","source_hash":"content-fingerprint:fnv1a-89da3a51","affected_system":{"organization":"praisonaiagents project","product":"praisonaiagents","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Python"},"documented_facts":[{"id":"SEA-GHSA-qjw5-xwrp-xwpq-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"PraisonAI: Project config can auto-save agent output outside the project root","source_quote_or_pointer":"Security Advisory GHSA-qjw5-xwrp-xwpq","fact_id":"SEA-GHSA-qjw5-xwrp-xwpq-F1","document_citation":"Security Advisory GHSA-qjw5-xwrp-xwpq"},{"id":"SEA-GHSA-qjw5-xwrp-xwpq-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"praisonaiagents automatically reads project-local .praisonai/config.toml defaults when constructing an Agent. A repository-controlled config can set defaults.output.outputfile to an absolute path or a .. traversal path.","source_quote_or_pointer":"Advisory description (GHSA-qjw5-xwrp-xwpq)","fact_id":"SEA-GHSA-qjw5-xwrp-xwpq-F2","document_citation":"Advisory description (GHSA-qjw5-xwrp-xwpq)"}],"source_stated_contributors":["praisonaiagents automatically reads project-local .praisonai/config.toml defaults when constructing an Agent. A repository-controlled config can set defaults.output.outputfile to an absolute path or a .. traversal path."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.write_action","arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-010"],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-qjw5-xwrp-xwpq","reporting_entity":"CVE-2026-60089","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-qjw5-xwrp-xwpq-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-qjw5-xwrp-xwpq-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-60089"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-2j4c-ffch-9f23","title":"Excelize Decrypt: unrecoverable panics on malformed OLE/CFB encrypted workbooks","display_title":"Security issue reported in github.com/xuri/excelize/v2","display_summary":"Any file whose first 8 bytes are the OLE compound-file signature (D0 CF 11 E0 A1 B1 1A E1) is routed by OpenFile/OpenReader/OpenBytes → openReaderAt → Decrypt.","display_reference":"CVE-2026-107214","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-2j4c-ffch-9f23","source_title":"Excelize Decrypt: unrecoverable panics on malformed OLE/CFB encrypted workbooks","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T16:00:19.976Z","source_hash":"content-fingerprint:fnv1a-69a7736f","affected_system":{"organization":"github.com/xuri/excelize/v2 project","product":"github.com/xuri/excelize/v2","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Go"},"documented_facts":[{"id":"SEA-GHSA-2j4c-ffch-9f23-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Excelize Decrypt: unrecoverable panics on malformed OLE/CFB encrypted workbooks","source_quote_or_pointer":"Security Advisory GHSA-2j4c-ffch-9f23","fact_id":"SEA-GHSA-2j4c-ffch-9f23-F1","document_citation":"Security Advisory GHSA-2j4c-ffch-9f23"},{"id":"SEA-GHSA-2j4c-ffch-9f23-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Any file whose first 8 bytes are the OLE compound-file signature (D0 CF 11 E0 A1 B1 1A E1) is routed by OpenFile/OpenReader/OpenBytes → openReaderAt → Decrypt. The version dispatch only guarantees len(EncryptionInfo) = 4 before handing attacker-controlled EncryptionInfo/EncryptedPackage buffers to…","source_quote_or_pointer":"Advisory description (GHSA-2j4c-ffch-9f23)","fact_id":"SEA-GHSA-2j4c-ffch-9f23-F2","document_citation":"Advisory description (GHSA-2j4c-ffch-9f23)"}],"source_stated_contributors":["Any file whose first 8 bytes are the OLE compound-file signature (D0 CF 11 E0 A1 B1 1A E1) is routed by OpenFile/OpenReader/OpenBytes → openReaderAt → Decrypt. The version dispatch only guarantees len(EncryptionInfo) = 4 before handing attacker-controlled EncryptionInfo/EncryptedPackage buffers to…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-2j4c-ffch-9f23","reporting_entity":"CVE-2026-107214","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-2j4c-ffch-9f23-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-2j4c-ffch-9f23-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-107214"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-x2q3-8cjh-766f","title":"Excelize: extractPart allocates attacker-controlled, unbounded and negative-sized buffers from CFB directory entries: remote panic / OOM DoS","display_title":"github.com/xuri/excelize/v2 issue could make the service unavailable","display_summary":"extractPart allocates directly from the mscfb directory-entry size with no clamping (crypt.go:198, same missing bound at crypt.go:204):","display_reference":"CVE-2026-107215","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-x2q3-8cjh-766f","source_title":"Excelize: extractPart allocates attacker-controlled, unbounded and negative-sized buffers from CFB directory entries: remote panic / OOM DoS","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T16:00:19.976Z","source_hash":"content-fingerprint:fnv1a-27dac76d","affected_system":{"organization":"github.com/xuri/excelize/v2 project","product":"github.com/xuri/excelize/v2","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Go"},"documented_facts":[{"id":"SEA-GHSA-x2q3-8cjh-766f-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Excelize: extractPart allocates attacker-controlled, unbounded and negative-sized buffers from CFB directory entries: remote panic / OOM DoS","source_quote_or_pointer":"Security Advisory GHSA-x2q3-8cjh-766f","fact_id":"SEA-GHSA-x2q3-8cjh-766f-F1","document_citation":"Security Advisory GHSA-x2q3-8cjh-766f"},{"id":"SEA-GHSA-x2q3-8cjh-766f-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"extractPart allocates directly from the mscfb directory-entry size with no clamping (crypt.go:198, same missing bound at crypt.go:204):","source_quote_or_pointer":"Advisory description (GHSA-x2q3-8cjh-766f)","fact_id":"SEA-GHSA-x2q3-8cjh-766f-F2","document_citation":"Advisory description (GHSA-x2q3-8cjh-766f)"}],"source_stated_contributors":["extractPart allocates directly from the mscfb directory-entry size with no clamping (crypt.go:198, same missing bound at crypt.go:204):"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-x2q3-8cjh-766f","reporting_entity":"CVE-2026-107215","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-x2q3-8cjh-766f-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-x2q3-8cjh-766f-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-107215"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-3wp9-xfwm-rjjf","title":"AsyncHttpClient: WebSocket proxy credentials sent to the origin server over a CONNECT tunnel","display_title":"org.asynchttpclient:async-http-client issue could expose accounts or credentials","display_summary":"When a ws:// request is routed through an HTTP proxy with proxy authentication configured, the client tunnels the connection with an HTTP CONNECT, the same as it does for https://.","display_reference":"CVE-2026-107285","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-3wp9-xfwm-rjjf","source_title":"AsyncHttpClient: WebSocket proxy credentials sent to the origin server over a CONNECT tunnel","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T16:00:19.976Z","source_hash":"content-fingerprint:fnv1a-d234d90","affected_system":{"organization":"org.asynchttpclient:async-http-client project","product":"org.asynchttpclient:async-http-client","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Java"},"documented_facts":[{"id":"SEA-GHSA-3wp9-xfwm-rjjf-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"AsyncHttpClient: WebSocket proxy credentials sent to the origin server over a CONNECT tunnel","source_quote_or_pointer":"Security Advisory GHSA-3wp9-xfwm-rjjf","fact_id":"SEA-GHSA-3wp9-xfwm-rjjf-F1","document_citation":"Security Advisory GHSA-3wp9-xfwm-rjjf"},{"id":"SEA-GHSA-3wp9-xfwm-rjjf-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"When a ws:// request is routed through an HTTP proxy with proxy authentication configured, the client tunnels the connection with an HTTP CONNECT, the same as it does for https://.","source_quote_or_pointer":"Advisory description (GHSA-3wp9-xfwm-rjjf)","fact_id":"SEA-GHSA-3wp9-xfwm-rjjf-F2","document_citation":"Advisory description (GHSA-3wp9-xfwm-rjjf)"}],"source_stated_contributors":["When a ws:// request is routed through an HTTP proxy with proxy authentication configured, the client tunnels the connection with an HTTP CONNECT, the same as it does for https://."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.credentials_secrets","arch.event_driven"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-3wp9-xfwm-rjjf","reporting_entity":"CVE-2026-107285","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-3wp9-xfwm-rjjf-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-3wp9-xfwm-rjjf-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-107285"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-f9m8-cv68-674w","title":"AsyncHttpClient: Cookie Domain attribute is not checked against the public suffix list, so a cookie can be set for co.uk","display_title":"Security issue reported in org.asynchttpclient:async-http-client","display_summary":"The cookie store decides whether a Domain attribute may be accepted using only the domain-matching rule of RFC 6265 Section 5.1.3, which asks whether the request host is the domain or ends with a dot followed by it.","display_reference":"CVE-2026-107280","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-f9m8-cv68-674w","source_title":"AsyncHttpClient: Cookie Domain attribute is not checked against the public suffix list, so a cookie can be set for co.uk","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T16:00:19.976Z","source_hash":"content-fingerprint:fnv1a-cc10bb28","affected_system":{"organization":"org.asynchttpclient:async-http-client project","product":"org.asynchttpclient:async-http-client","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Java"},"documented_facts":[{"id":"SEA-GHSA-f9m8-cv68-674w-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"AsyncHttpClient: Cookie Domain attribute is not checked against the public suffix list, so a cookie can be set for co.uk","source_quote_or_pointer":"Security Advisory GHSA-f9m8-cv68-674w","fact_id":"SEA-GHSA-f9m8-cv68-674w-F1","document_citation":"Security Advisory GHSA-f9m8-cv68-674w"},{"id":"SEA-GHSA-f9m8-cv68-674w-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The cookie store decides whether a Domain attribute may be accepted using only the domain-matching rule of RFC 6265 Section 5.1.3, which asks whether the request host is the domain or ends with a dot followed by it.","source_quote_or_pointer":"Advisory description (GHSA-f9m8-cv68-674w)","fact_id":"SEA-GHSA-f9m8-cv68-674w-F2","document_citation":"Advisory description (GHSA-f9m8-cv68-674w)"}],"source_stated_contributors":["The cookie store decides whether a Domain attribute may be accepted using only the domain-matching rule of RFC 6265 Section 5.1.3, which asks whether the request host is the domain or ends with a dot followed by it."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","auth.public_publication"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-f9m8-cv68-674w","reporting_entity":"CVE-2026-107280","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-f9m8-cv68-674w-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-f9m8-cv68-674w-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-107280"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-mjcv-p78q-w5fw","title":"github.com/moby/sys/user has a possible DoS via unbounded parsing of user and group database files","display_title":"github.com/moby/sys/user issue could make the service unavailable","display_summary":"A denial-of-service (DoS) vulnerability exists in github.com/moby/sys/user before v0.4.1 when parsing specially crafted user or group database files.","display_reference":"CVE-2026-61801","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-mjcv-p78q-w5fw","source_title":"github.com/moby/sys/user has a possible DoS via unbounded parsing of user and group database files","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-08T22:00:20.059Z","source_hash":"content-fingerprint:fnv1a-d2cddaa4","affected_system":{"organization":"github.com/moby/sys/user project","product":"github.com/moby/sys/user","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Go"},"documented_facts":[{"id":"SEA-GHSA-mjcv-p78q-w5fw-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"github.com/moby/sys/user has a possible DoS via unbounded parsing of user and group database files","source_quote_or_pointer":"Security Advisory GHSA-mjcv-p78q-w5fw","fact_id":"SEA-GHSA-mjcv-p78q-w5fw-F1","document_citation":"Security Advisory GHSA-mjcv-p78q-w5fw"},{"id":"SEA-GHSA-mjcv-p78q-w5fw-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A denial-of-service (DoS) vulnerability exists in github.com/moby/sys/user before v0.4.1 when parsing specially crafted user or group database files. An attacker able to supply a malicious /etc/passwd or /etc/group-style file may cause excessive memory consumption, potentially resulting in process termination due to…","source_quote_or_pointer":"Advisory description (GHSA-mjcv-p78q-w5fw)","fact_id":"SEA-GHSA-mjcv-p78q-w5fw-F2","document_citation":"Advisory description (GHSA-mjcv-p78q-w5fw)"}],"source_stated_contributors":["A denial-of-service (DoS) vulnerability exists in github.com/moby/sys/user before v0.4.1 when parsing specially crafted user or group database files. An attacker able to supply a malicious /etc/passwd or /etc/group-style file may cause excessive memory consumption, potentially resulting in process termination due to…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.pii"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-mjcv-p78q-w5fw","reporting_entity":"CVE-2026-61801","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-mjcv-p78q-w5fw-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-mjcv-p78q-w5fw-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-61801"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-107325","title":"Improper validation of a BSON array length in the MongoDB Go Driver can cause an out-of-bounds index and runtime panic when an application calls bson.RawArray.Validate or bsoncore.Array.Validate on a malformed four-byte array. An unauthenticated actor who can supply raw BSON array data to an affected application may terminate an unprotected application process, causing a denial of service. No confidentiality or integrity impact has been identified.","display_title":"Software component issue could make the service unavailable","display_summary":"Improper validation of a BSON array length in the MongoDB Go Driver can cause an out-of-bounds index and runtime panic when an application calls bson.RawArray.Validate or bsoncore.Array.Validate on a malformed four-byte…","display_reference":"CVE-2026-107325","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107325","source_title":"Improper validation of a BSON array length in the MongoDB Go Driver can cause an out-of-bounds index and runtime panic when an application calls bson.RawArray.Validate or bsoncore.Array.Validate on a malformed four-byte array. An unauthenticated actor who can supply raw BSON array data to an affected application may terminate an unprotected application process, causing a denial of service. No confidentiality or integrity impact has been identified.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T18:14:27.108Z","source_hash":"content-fingerprint:fnv1a-4972f39d","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-107325-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Improper validation of a BSON array length in the MongoDB Go Driver can cause an out-of-bounds index and runtime panic when an application calls bson.RawArray.Validate or bsoncore.Array.Validate on a malformed four-byte array. An unauthenticated actor who can supply raw BSON array data to an affected application may terminate an unprotected application process, causing a denial of service. No confidentiality or integrity impact has been identified.","source_quote_or_pointer":"Security Advisory CVE-2026-107325","fact_id":"SEA-CVE-2026-107325-F1","document_citation":"Security Advisory CVE-2026-107325"},{"id":"SEA-CVE-2026-107325-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Improper validation of a BSON array length in the MongoDB Go Driver can cause an out-of-bounds index and runtime panic when an application calls bson.RawArray.Validate or bsoncore.Array.Validate on a malformed four-byte array.","source_quote_or_pointer":"Advisory description (CVE-2026-107325)","fact_id":"SEA-CVE-2026-107325-F2","document_citation":"Advisory description (CVE-2026-107325)"}],"source_stated_contributors":["Improper validation of a BSON array length in the MongoDB Go Driver can cause an out-of-bounds index and runtime panic when an application calls bson.RawArray.Validate or bsoncore.Array.Validate on a malformed four-byte array."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-107325","reporting_entity":"CVE-2026-107325","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-107325-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-107325-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-107325"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-84230","title":"IBM Guardium Data Protection 12.2.2 could allow a remote attacker to cause a denial of service due to a race condition resulting from concurrent unsynchronized writes to a shared map.","display_title":"guardium data protection issue could make the service unavailable","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-84230","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84230","source_title":"IBM Guardium Data Protection 12.2.2 could allow a remote attacker to cause a denial of service due to a race condition resulting from concurrent unsynchronized writes to a shared map.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T07:22:13.609Z","source_hash":"content-fingerprint:fnv1a-dc6b2a64","affected_system":{"organization":"guardium data protection project","product":"guardium data protection","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-84230-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM Guardium Data Protection 12.2.2 could allow a remote attacker to cause a denial of service due to a race condition resulting from concurrent unsynchronized writes to a shared map.","source_quote_or_pointer":"Security Advisory CVE-2026-84230","fact_id":"SEA-CVE-2026-84230-F1","document_citation":"Security Advisory CVE-2026-84230"},{"id":"SEA-CVE-2026-84230-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM Guardium Data Protection 12.2.2 could allow a remote attacker to cause a denial of service due to a race condition resulting from concurrent unsynchronized writes to a shared map.","source_quote_or_pointer":"Advisory description (CVE-2026-84230)","fact_id":"SEA-CVE-2026-84230-F2","document_citation":"Advisory description (CVE-2026-84230)"}],"source_stated_contributors":["IBM Guardium Data Protection 12.2.2 could allow a remote attacker to cause a denial of service due to a race condition resulting from concurrent unsynchronized writes to a shared map."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-84230","reporting_entity":"CVE-2026-84230","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-84230-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-84230-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-84230"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-14521","title":"IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.","display_title":"datapower gateway issue could reach internal services","display_summary":"IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is vulnerable to server-side request forgery (SSRF).","display_reference":"CVE-2026-14521","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-14521","source_title":"IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T07:22:13.609Z","source_hash":"content-fingerprint:fnv1a-35eefa28","affected_system":{"organization":"datapower gateway project","product":"datapower gateway","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-14521-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.","source_quote_or_pointer":"Security Advisory CVE-2026-14521","fact_id":"SEA-CVE-2026-14521-F1","document_citation":"Security Advisory CVE-2026-14521"},{"id":"SEA-CVE-2026-14521-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is vulnerable to server-side request forgery (SSRF).","source_quote_or_pointer":"Advisory description (CVE-2026-14521)","fact_id":"SEA-CVE-2026-14521-F2","document_citation":"Advisory description (CVE-2026-14521)"}],"source_stated_contributors":["IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is vulnerable to server-side request forgery (SSRF)."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Internal network access","Cloud metadata or credential exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-14521","reporting_entity":"CVE-2026-14521","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-14521-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-14521-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"The service fetched a URL chosen by the caller and could be steered at internal systems. Restrict outbound destinations and block internal address ranges.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-14521"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-16169","title":"IBM DataPower Gateway 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.","display_title":"datapower gateway issue could make the service unavailable","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-16169","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-16169","source_title":"IBM DataPower Gateway 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T07:22:13.610Z","source_hash":"content-fingerprint:fnv1a-3cfe1360","affected_system":{"organization":"datapower gateway project","product":"datapower gateway","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-16169-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM DataPower Gateway 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.","source_quote_or_pointer":"Security Advisory CVE-2026-16169","fact_id":"SEA-CVE-2026-16169-F1","document_citation":"Security Advisory CVE-2026-16169"},{"id":"SEA-CVE-2026-16169-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM DataPower Gateway 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.","source_quote_or_pointer":"Advisory description (CVE-2026-16169)","fact_id":"SEA-CVE-2026-16169-F2","document_citation":"Advisory description (CVE-2026-16169)"}],"source_stated_contributors":["IBM DataPower Gateway 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-16169","reporting_entity":"CVE-2026-16169","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-16169-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-16169-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-16169"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-16176","title":"IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to improper validation of the length field during memory reallocation.","display_title":"datapower gateway issue could make the service unavailable","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-16176","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-16176","source_title":"IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to improper validation of the length field during memory reallocation.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T07:22:13.610Z","source_hash":"content-fingerprint:fnv1a-3b3caa60","affected_system":{"organization":"datapower gateway project","product":"datapower gateway","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-16176-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to improper validation of the length field during memory reallocation.","source_quote_or_pointer":"Security Advisory CVE-2026-16176","fact_id":"SEA-CVE-2026-16176-F1","document_citation":"Security Advisory CVE-2026-16176"},{"id":"SEA-CVE-2026-16176-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to improper validation of the length field during memory reallocation.","source_quote_or_pointer":"Advisory description (CVE-2026-16176)","fact_id":"SEA-CVE-2026-16176-F2","document_citation":"Advisory description (CVE-2026-16176)"}],"source_stated_contributors":["IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to improper validation of the length field during memory reallocation."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-16176","reporting_entity":"CVE-2026-16176","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-16176-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-16176-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-16176"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-16178","title":"IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to improper input validation.","display_title":"datapower gateway issue could make the service unavailable","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-16178","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-16178","source_title":"IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to improper input validation.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T07:22:13.610Z","source_hash":"content-fingerprint:fnv1a-2d133f2c","affected_system":{"organization":"datapower gateway project","product":"datapower gateway","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-16178-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to improper input validation.","source_quote_or_pointer":"Security Advisory CVE-2026-16178","fact_id":"SEA-CVE-2026-16178-F1","document_citation":"Security Advisory CVE-2026-16178"},{"id":"SEA-CVE-2026-16178-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to improper input validation.","source_quote_or_pointer":"Advisory description (CVE-2026-16178)","fact_id":"SEA-CVE-2026-16178-F2","document_citation":"Advisory description (CVE-2026-16178)"}],"source_stated_contributors":["IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to improper input validation."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-16178","reporting_entity":"CVE-2026-16178","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-16178-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-16178-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-16178"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-16182","title":"IBM DataPower Gateway 10.5.0.0 through 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow an attacker to cause a denial of service due to a NULL pointer dereference in GraphQL variable processing.","display_title":"datapower gateway issue could make the service unavailable","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-16182","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-16182","source_title":"IBM DataPower Gateway 10.5.0.0 through 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow an attacker to cause a denial of service due to a NULL pointer dereference in GraphQL variable processing.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T07:22:13.611Z","source_hash":"content-fingerprint:fnv1a-6b66e9f9","affected_system":{"organization":"datapower gateway project","product":"datapower gateway","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-16182-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM DataPower Gateway 10.5.0.0 through 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow an attacker to cause a denial of service due to a NULL pointer dereference in GraphQL variable processing.","source_quote_or_pointer":"Security Advisory CVE-2026-16182","fact_id":"SEA-CVE-2026-16182-F1","document_citation":"Security Advisory CVE-2026-16182"},{"id":"SEA-CVE-2026-16182-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM DataPower Gateway 10.5.0.0 through 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow an attacker to cause a denial of service due to a NULL pointer dereference in GraphQL variable processing.","source_quote_or_pointer":"Advisory description (CVE-2026-16182)","fact_id":"SEA-CVE-2026-16182-F2","document_citation":"Advisory description (CVE-2026-16182)"}],"source_stated_contributors":["IBM DataPower Gateway 10.5.0.0 through 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow an attacker to cause a denial of service due to a NULL pointer dereference in GraphQL variable processing."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-16182","reporting_entity":"CVE-2026-16182","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-16182-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-16182-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-16182"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-107698","title":"FFmpeg before 7.1.4 and 8.0.x before 8.0.2 contains a server-side request forgery vulnerability in ff_rtsp_connect() in libavformat/rtsp.c that follows RTSP 3xx redirects without validating the Location URL. Malicious RTSP servers can redirect FFmpeg to internal hosts and ports under other schemes, bypassing -protocol_whitelist, to probe internal network services.","display_title":"ffmpeg issue could reach internal services","display_summary":"FFmpeg before 7.1.4 and 8.0.x before 8.0.2 contains a server-side request forgery vulnerability in ffrtspconnect() in libavformat/rtsp.c that follows RTSP 3xx redirects without validating the Location URL.","display_reference":"CVE-2026-107698","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107698","source_title":"FFmpeg before 7.1.4 and 8.0.x before 8.0.2 contains a server-side request forgery vulnerability in ff_rtsp_connect() in libavformat/rtsp.c that follows RTSP 3xx redirects without validating the Location URL. Malicious RTSP servers can redirect FFmpeg to internal hosts and ports under other schemes, bypassing -protocol_whitelist, to probe internal network services.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T07:22:13.611Z","source_hash":"content-fingerprint:fnv1a-d70fee58","affected_system":{"organization":"ffmpeg project","product":"ffmpeg","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-107698-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"FFmpeg before 7.1.4 and 8.0.x before 8.0.2 contains a server-side request forgery vulnerability in ff_rtsp_connect() in libavformat/rtsp.c that follows RTSP 3xx redirects without validating the Location URL. Malicious RTSP servers can redirect FFmpeg to internal hosts and ports under other schemes, bypassing -protocol_whitelist, to probe internal network services.","source_quote_or_pointer":"Security Advisory CVE-2026-107698","fact_id":"SEA-CVE-2026-107698-F1","document_citation":"Security Advisory CVE-2026-107698"},{"id":"SEA-CVE-2026-107698-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"FFmpeg before 7.1.4 and 8.0.x before 8.0.2 contains a server-side request forgery vulnerability in ffrtspconnect() in libavformat/rtsp.c that follows RTSP 3xx redirects without validating the Location URL.","source_quote_or_pointer":"Advisory description (CVE-2026-107698)","fact_id":"SEA-CVE-2026-107698-F2","document_citation":"Advisory description (CVE-2026-107698)"}],"source_stated_contributors":["FFmpeg before 7.1.4 and 8.0.x before 8.0.2 contains a server-side request forgery vulnerability in ffrtspconnect() in libavformat/rtsp.c that follows RTSP 3xx redirects without validating the Location URL."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Internal network access","Cloud metadata or credential exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-107698","reporting_entity":"CVE-2026-107698","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-107698-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-107698-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"The service fetched a URL chosen by the caller and could be steered at internal systems. Restrict outbound destinations and block internal address ranges.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-107698"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-15819","title":"IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to out-of-bounds memory access caused by a strict-weak-ordering violation in a sorting comparator.","display_title":"datapower gateway issue could make the service unavailable","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-15819","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-15819","source_title":"IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to out-of-bounds memory access caused by a strict-weak-ordering violation in a sorting comparator.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T07:22:13.611Z","source_hash":"content-fingerprint:fnv1a-774fe15","affected_system":{"organization":"datapower gateway project","product":"datapower gateway","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-15819-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to out-of-bounds memory access caused by a strict-weak-ordering violation in a sorting comparator.","source_quote_or_pointer":"Security Advisory CVE-2026-15819","fact_id":"SEA-CVE-2026-15819-F1","document_citation":"Security Advisory CVE-2026-15819"},{"id":"SEA-CVE-2026-15819-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to out-of-bounds memory access caused by a strict-weak-ordering violation in a sorting comparator.","source_quote_or_pointer":"Advisory description (CVE-2026-15819)","fact_id":"SEA-CVE-2026-15819-F2","document_citation":"Advisory description (CVE-2026-15819)"}],"source_stated_contributors":["IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to out-of-bounds memory access caused by a strict-weak-ordering violation in a sorting comparator."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-15819","reporting_entity":"CVE-2026-15819","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-15819-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-15819-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-15819"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-15822","title":"IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to improper memoization of GraphQL fragment spreads.","display_title":"datapower gateway issue could make the service unavailable","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-15822","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-15822","source_title":"IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to improper memoization of GraphQL fragment spreads.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T07:22:13.612Z","source_hash":"content-fingerprint:fnv1a-aab4a59f","affected_system":{"organization":"datapower gateway project","product":"datapower gateway","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-15822-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to improper memoization of GraphQL fragment spreads.","source_quote_or_pointer":"Security Advisory CVE-2026-15822","fact_id":"SEA-CVE-2026-15822-F1","document_citation":"Security Advisory CVE-2026-15822"},{"id":"SEA-CVE-2026-15822-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to improper memoization of GraphQL fragment spreads.","source_quote_or_pointer":"Advisory description (CVE-2026-15822)","fact_id":"SEA-CVE-2026-15822-F2","document_citation":"Advisory description (CVE-2026-15822)"}],"source_stated_contributors":["IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to improper memoization of GraphQL fragment spreads."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-15822","reporting_entity":"CVE-2026-15822","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-15822-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-15822-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-15822"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-15824","title":"IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to a heap-based buffer overflow.","display_title":"datapower gateway issue could make the service unavailable","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-15824","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-15824","source_title":"IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to a heap-based buffer overflow.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T07:22:13.612Z","source_hash":"content-fingerprint:fnv1a-83d73ce5","affected_system":{"organization":"datapower gateway project","product":"datapower gateway","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-15824-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to a heap-based buffer overflow.","source_quote_or_pointer":"Security Advisory CVE-2026-15824","fact_id":"SEA-CVE-2026-15824-F1","document_citation":"Security Advisory CVE-2026-15824"},{"id":"SEA-CVE-2026-15824-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to a heap-based buffer overflow.","source_quote_or_pointer":"Advisory description (CVE-2026-15824)","fact_id":"SEA-CVE-2026-15824-F2","document_citation":"Advisory description (CVE-2026-15824)"}],"source_stated_contributors":["IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to a heap-based buffer overflow."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-15824","reporting_entity":"CVE-2026-15824","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-15824-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-15824-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-15824"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-16111","title":"IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow an attacker to cause a denial of service due to a type confusion flaw.","display_title":"datapower gateway issue could make the service unavailable","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-16111","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-16111","source_title":"IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow an attacker to cause a denial of service due to a type confusion flaw.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T07:22:13.612Z","source_hash":"content-fingerprint:fnv1a-63a11d17","affected_system":{"organization":"datapower gateway project","product":"datapower gateway","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-16111-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow an attacker to cause a denial of service due to a type confusion flaw.","source_quote_or_pointer":"Security Advisory CVE-2026-16111","fact_id":"SEA-CVE-2026-16111-F1","document_citation":"Security Advisory CVE-2026-16111"},{"id":"SEA-CVE-2026-16111-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow an attacker to cause a denial of service due to a type confusion flaw.","source_quote_or_pointer":"Advisory description (CVE-2026-16111)","fact_id":"SEA-CVE-2026-16111-F2","document_citation":"Advisory description (CVE-2026-16111)"}],"source_stated_contributors":["IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow an attacker to cause a denial of service due to a type confusion flaw."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-16111","reporting_entity":"CVE-2026-16111","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-16111-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-16111-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-16111"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-16159","title":"IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to obtain sensitive information and cause a denial of service due to an out-of-bounds write.","display_title":"datapower gateway issue could make the service unavailable","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-16159","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-16159","source_title":"IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to obtain sensitive information and cause a denial of service due to an out-of-bounds write.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T07:22:13.613Z","source_hash":"content-fingerprint:fnv1a-f4c2525f","affected_system":{"organization":"datapower gateway project","product":"datapower gateway","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-16159-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to obtain sensitive information and cause a denial of service due to an out-of-bounds write.","source_quote_or_pointer":"Security Advisory CVE-2026-16159","fact_id":"SEA-CVE-2026-16159-F1","document_citation":"Security Advisory CVE-2026-16159"},{"id":"SEA-CVE-2026-16159-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to obtain sensitive information and cause a denial of service due to an out-of-bounds write.","source_quote_or_pointer":"Advisory description (CVE-2026-16159)","fact_id":"SEA-CVE-2026-16159-F2","document_citation":"Advisory description (CVE-2026-16159)"}],"source_stated_contributors":["IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to obtain sensitive information and cause a denial of service due to an out-of-bounds write."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-16159","reporting_entity":"CVE-2026-16159","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-16159-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-16159-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-16159"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-16161","title":"IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to an out-of-bounds read.","display_title":"datapower gateway issue could make the service unavailable","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-16161","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-16161","source_title":"IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to an out-of-bounds read.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T07:22:13.613Z","source_hash":"content-fingerprint:fnv1a-adcce86a","affected_system":{"organization":"datapower gateway project","product":"datapower gateway","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-16161-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to an out-of-bounds read.","source_quote_or_pointer":"Security Advisory CVE-2026-16161","fact_id":"SEA-CVE-2026-16161-F1","document_citation":"Security Advisory CVE-2026-16161"},{"id":"SEA-CVE-2026-16161-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to an out-of-bounds read.","source_quote_or_pointer":"Advisory description (CVE-2026-16161)","fact_id":"SEA-CVE-2026-16161-F2","document_citation":"Advisory description (CVE-2026-16161)"}],"source_stated_contributors":["IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to an out-of-bounds read."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-16161","reporting_entity":"CVE-2026-16161","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-16161-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-16161-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-16161"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-16164","title":"IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to a buffer overflow.","display_title":"datapower gateway issue could make the service unavailable","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-16164","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-16164","source_title":"IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to a buffer overflow.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T07:22:13.613Z","source_hash":"content-fingerprint:fnv1a-cd277fb","affected_system":{"organization":"datapower gateway project","product":"datapower gateway","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-16164-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to a buffer overflow.","source_quote_or_pointer":"Security Advisory CVE-2026-16164","fact_id":"SEA-CVE-2026-16164-F1","document_citation":"Security Advisory CVE-2026-16164"},{"id":"SEA-CVE-2026-16164-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to a buffer overflow.","source_quote_or_pointer":"Advisory description (CVE-2026-16164)","fact_id":"SEA-CVE-2026-16164-F2","document_citation":"Advisory description (CVE-2026-16164)"}],"source_stated_contributors":["IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to a buffer overflow."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-16164","reporting_entity":"CVE-2026-16164","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-16164-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-16164-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-16164"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-16165","title":"IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to a null pointer dereference.","display_title":"datapower gateway issue could make the service unavailable","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-16165","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-16165","source_title":"IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to a null pointer dereference.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T01:57:40.302Z","source_hash":"content-fingerprint:fnv1a-8e7d2970","affected_system":{"organization":"datapower gateway project","product":"datapower gateway","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-16165-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to a null pointer dereference.","source_quote_or_pointer":"Security Advisory CVE-2026-16165","fact_id":"SEA-CVE-2026-16165-F1","document_citation":"Security Advisory CVE-2026-16165"},{"id":"SEA-CVE-2026-16165-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to a null pointer dereference.","source_quote_or_pointer":"Advisory description (CVE-2026-16165)","fact_id":"SEA-CVE-2026-16165-F2","document_citation":"Advisory description (CVE-2026-16165)"}],"source_stated_contributors":["IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to a null pointer dereference."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-16165","reporting_entity":"CVE-2026-16165","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-16165-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-16165-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-16165"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-16167","title":"IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to improper bounds checking.","display_title":"datapower gateway issue could make the service unavailable","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-16167","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-16167","source_title":"IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to improper bounds checking.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T01:57:40.304Z","source_hash":"content-fingerprint:fnv1a-cb5b119a","affected_system":{"organization":"datapower gateway project","product":"datapower gateway","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-16167-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to improper bounds checking.","source_quote_or_pointer":"Security Advisory CVE-2026-16167","fact_id":"SEA-CVE-2026-16167-F1","document_citation":"Security Advisory CVE-2026-16167"},{"id":"SEA-CVE-2026-16167-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to improper bounds checking.","source_quote_or_pointer":"Advisory description (CVE-2026-16167)","fact_id":"SEA-CVE-2026-16167-F2","document_citation":"Advisory description (CVE-2026-16167)"}],"source_stated_contributors":["IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to improper bounds checking."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-16167","reporting_entity":"CVE-2026-16167","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-16167-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-16167-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-16167"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-13258","title":"IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.","display_title":"datapower gateway issue could run attacker-controlled scripts in a browser","display_summary":"IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is vulnerable to cross-site scripting.","display_reference":"CVE-2026-13258","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-13258","source_title":"IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T01:57:40.305Z","source_hash":"content-fingerprint:fnv1a-41bd3aa","affected_system":{"organization":"datapower gateway project","product":"datapower gateway","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-13258-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.","source_quote_or_pointer":"Security Advisory CVE-2026-13258","fact_id":"SEA-CVE-2026-13258-F1","document_citation":"Security Advisory CVE-2026-13258"},{"id":"SEA-CVE-2026-13258-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is vulnerable to cross-site scripting.","source_quote_or_pointer":"Advisory description (CVE-2026-13258)","fact_id":"SEA-CVE-2026-13258-F2","document_citation":"Advisory description (CVE-2026-13258)"}],"source_stated_contributors":["IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is vulnerable to cross-site scripting."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-13258","reporting_entity":"CVE-2026-13258","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-13258-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-13258-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-13258"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-14496","title":"IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to a heap-based buffer overflow.","display_title":"datapower gateway issue could make the service unavailable","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-14496","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-14496","source_title":"IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to a heap-based buffer overflow.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T01:57:40.305Z","source_hash":"content-fingerprint:fnv1a-c48032cd","affected_system":{"organization":"datapower gateway project","product":"datapower gateway","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-14496-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to a heap-based buffer overflow.","source_quote_or_pointer":"Security Advisory CVE-2026-14496","fact_id":"SEA-CVE-2026-14496-F1","document_citation":"Security Advisory CVE-2026-14496"},{"id":"SEA-CVE-2026-14496-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to a heap-based buffer overflow.","source_quote_or_pointer":"Advisory description (CVE-2026-14496)","fact_id":"SEA-CVE-2026-14496-F2","document_citation":"Advisory description (CVE-2026-14496)"}],"source_stated_contributors":["IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to a heap-based buffer overflow."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-14496","reporting_entity":"CVE-2026-14496","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-14496-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-14496-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-14496"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-107677","title":"FFmpeg through 9.0.2 contains a denial of service vulnerability in the DASH demuxer that allows attackers to trigger an infinite loop by supplying an empty SegmentTemplate media URL. Attackers can craft an .mpd manifest declaring SegmentTemplate media=\"\" so get_current_fragment() calls av_strireplace() with an empty search string, consuming CPU indefinitely.","display_title":"ffmpeg issue could make the service unavailable","display_summary":"FFmpeg through 9.0.2 contains a denial of service vulnerability in the DASH demuxer that allows attackers to trigger an infinite loop by supplying an empty SegmentTemplate media URL.","display_reference":"CVE-2026-107677","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107677","source_title":"FFmpeg through 9.0.2 contains a denial of service vulnerability in the DASH demuxer that allows attackers to trigger an infinite loop by supplying an empty SegmentTemplate media URL. Attackers can craft an .mpd manifest declaring SegmentTemplate media=\"\" so get_current_fragment() calls av_strireplace() with an empty search string, consuming CPU indefinitely.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T01:57:40.305Z","source_hash":"content-fingerprint:fnv1a-ca06cad7","affected_system":{"organization":"ffmpeg project","product":"ffmpeg","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-107677-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"FFmpeg through 9.0.2 contains a denial of service vulnerability in the DASH demuxer that allows attackers to trigger an infinite loop by supplying an empty SegmentTemplate media URL. Attackers can craft an .mpd manifest declaring SegmentTemplate media=\"\" so get_current_fragment() calls av_strireplace() with an empty search string, consuming CPU indefinitely.","source_quote_or_pointer":"Security Advisory CVE-2026-107677","fact_id":"SEA-CVE-2026-107677-F1","document_citation":"Security Advisory CVE-2026-107677"},{"id":"SEA-CVE-2026-107677-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"FFmpeg through 9.0.2 contains a denial of service vulnerability in the DASH demuxer that allows attackers to trigger an infinite loop by supplying an empty SegmentTemplate media URL.","source_quote_or_pointer":"Advisory description (CVE-2026-107677)","fact_id":"SEA-CVE-2026-107677-F2","document_citation":"Advisory description (CVE-2026-107677)"}],"source_stated_contributors":["FFmpeg through 9.0.2 contains a denial of service vulnerability in the DASH demuxer that allows attackers to trigger an infinite loop by supplying an empty SegmentTemplate media URL."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-107677","reporting_entity":"CVE-2026-107677","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-107677-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-107677-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-107677"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-107695","title":"FFmpeg before 8.1.3 contains an infinite loop vulnerability in the HLS demuxer that allows remote attackers to cause denial of service because parse_playlist() accepts Master Playlist tags inside Media Playlists. Attackers can trick victims into opening a crafted self-referencing playlist that endlessly adds variants in hls_read_header(), causing unbounded CPU and I/O consumption.","display_title":"ffmpeg issue could make the service unavailable","display_summary":"FFmpeg before 8.1.3 contains an infinite loop vulnerability in the HLS demuxer that allows remote attackers to cause denial of service because parseplaylist() accepts Master Playlist tags inside Media Playlists.","display_reference":"CVE-2026-107695","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107695","source_title":"FFmpeg before 8.1.3 contains an infinite loop vulnerability in the HLS demuxer that allows remote attackers to cause denial of service because parse_playlist() accepts Master Playlist tags inside Media Playlists. Attackers can trick victims into opening a crafted self-referencing playlist that endlessly adds variants in hls_read_header(), causing unbounded CPU and I/O consumption.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-15T01:57:40.305Z","source_hash":"content-fingerprint:fnv1a-de89d54d","affected_system":{"organization":"ffmpeg project","product":"ffmpeg","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-107695-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"FFmpeg before 8.1.3 contains an infinite loop vulnerability in the HLS demuxer that allows remote attackers to cause denial of service because parse_playlist() accepts Master Playlist tags inside Media Playlists. Attackers can trick victims into opening a crafted self-referencing playlist that endlessly adds variants in hls_read_header(), causing unbounded CPU and I/O consumption.","source_quote_or_pointer":"Security Advisory CVE-2026-107695","fact_id":"SEA-CVE-2026-107695-F1","document_citation":"Security Advisory CVE-2026-107695"},{"id":"SEA-CVE-2026-107695-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"FFmpeg before 8.1.3 contains an infinite loop vulnerability in the HLS demuxer that allows remote attackers to cause denial of service because parseplaylist() accepts Master Playlist tags inside Media Playlists.","source_quote_or_pointer":"Advisory description (CVE-2026-107695)","fact_id":"SEA-CVE-2026-107695-F2","document_citation":"Advisory description (CVE-2026-107695)"}],"source_stated_contributors":["FFmpeg before 8.1.3 contains an infinite loop vulnerability in the HLS demuxer that allows remote attackers to cause denial of service because parseplaylist() accepts Master Playlist tags inside Media Playlists."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-107695","reporting_entity":"CVE-2026-107695","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-107695-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-107695-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-107695"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-84276","title":"IBM Guardium Data Protection 12.2.2 is affected by a denial-of-service vulnerability in the edge-controller. An unauthenticated remote attacker with network access to the edge-controller gRPC service can provide malformed task data that triggers an unchecked type assertion, causing the edge-controller process to terminate unexpectedly.","display_title":"Security issue reported in guardium data protection","display_summary":"IBM Guardium Data Protection 12.2.2 is affected by a denial-of-service vulnerability in the edge-controller. An unauthenticated remote attacker with network access to the edge-controller gRPC service can provide…","display_reference":"CVE-2026-84276","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84276","source_title":"IBM Guardium Data Protection 12.2.2 is affected by a denial-of-service vulnerability in the edge-controller. An unauthenticated remote attacker with network access to the edge-controller gRPC service can provide malformed task data that triggers an unchecked type assertion, causing the edge-controller process to terminate unexpectedly.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T01:59:40.544Z","source_hash":"content-fingerprint:fnv1a-cff48326","affected_system":{"organization":"guardium data protection project","product":"guardium data protection","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-84276-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM Guardium Data Protection 12.2.2 is affected by a denial-of-service vulnerability in the edge-controller. An unauthenticated remote attacker with network access to the edge-controller gRPC service can provide malformed task data that triggers an unchecked type assertion, causing the edge-controller process to terminate unexpectedly.","source_quote_or_pointer":"Security Advisory CVE-2026-84276","fact_id":"SEA-CVE-2026-84276-F1","document_citation":"Security Advisory CVE-2026-84276"},{"id":"SEA-CVE-2026-84276-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM Guardium Data Protection 12.2.2 is affected by a denial-of-service vulnerability in the edge-controller. An unauthenticated remote attacker with network access to the edge-controller gRPC service can provide malformed task data that triggers an unchecked type assertion, causing the edge-controller process to…","source_quote_or_pointer":"Advisory description (CVE-2026-84276)","fact_id":"SEA-CVE-2026-84276-F2","document_citation":"Advisory description (CVE-2026-84276)"}],"source_stated_contributors":["IBM Guardium Data Protection 12.2.2 is affected by a denial-of-service vulnerability in the edge-controller. An unauthenticated remote attacker with network access to the edge-controller gRPC service can provide malformed task data that triggers an unchecked type assertion, causing the edge-controller process to…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-84276","reporting_entity":"CVE-2026-84276","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-84276-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-84276-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-84276"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-81932","title":"IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to SQL injection. A remote unauthenticated attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.","display_title":"Software component issue could expose or alter stored data","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-81932","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-81932","source_title":"IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to SQL injection. A remote unauthenticated attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T01:59:40.546Z","source_hash":"content-fingerprint:fnv1a-6722a6ce","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-81932-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to SQL injection. A remote unauthenticated attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.","source_quote_or_pointer":"Security Advisory CVE-2026-81932","fact_id":"SEA-CVE-2026-81932-F1","document_citation":"Security Advisory CVE-2026-81932"},{"id":"SEA-CVE-2026-81932-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to SQL injection. A remote unauthenticated attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.","source_quote_or_pointer":"Advisory description (CVE-2026-81932)","fact_id":"SEA-CVE-2026-81932-F2","document_citation":"Advisory description (CVE-2026-81932)"}],"source_stated_contributors":["IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to SQL injection. A remote unauthenticated attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.write_action"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-81932","reporting_entity":"CVE-2026-81932","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-81932-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-81932-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-81932"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-78399","title":"IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow an authenticated user to cause a denial of service using a specially crafted HTTP query due to improper allocation of system resources","display_title":"security verify access issue could make the service unavailable","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-78399","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-78399","source_title":"IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow an authenticated user to cause a denial of service using a specially crafted HTTP query due to improper allocation of system resources","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T01:59:40.547Z","source_hash":"content-fingerprint:fnv1a-a60dedf","affected_system":{"organization":"security verify access project","product":"security verify access","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-78399-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow an authenticated user to cause a denial of service using a specially crafted HTTP query due to improper allocation of system resources","source_quote_or_pointer":"Security Advisory CVE-2026-78399","fact_id":"SEA-CVE-2026-78399-F1","document_citation":"Security Advisory CVE-2026-78399"},{"id":"SEA-CVE-2026-78399-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow an authenticated user to cause a denial of service using a specially crafted HTTP query due to improper allocation of system resources","source_quote_or_pointer":"Advisory description (CVE-2026-78399)","fact_id":"SEA-CVE-2026-78399-F2","document_citation":"Advisory description (CVE-2026-78399)"}],"source_stated_contributors":["IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow an authenticated user to cause a denial of service using a specially crafted HTTP query due to improper allocation of system resources"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-78399","reporting_entity":"CVE-2026-78399","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-78399-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-78399-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-78399"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-16830","title":"IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to modify data and cause a denial of service due to an SQL injection vulnerability.","display_title":"security verify access issue could expose or alter stored data","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-16830","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-16830","source_title":"IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to modify data and cause a denial of service due to an SQL injection vulnerability.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T01:59:40.550Z","source_hash":"content-fingerprint:fnv1a-fffbde11","affected_system":{"organization":"security verify access project","product":"security verify access","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-16830-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to modify data and cause a denial of service due to an SQL injection vulnerability.","source_quote_or_pointer":"Security Advisory CVE-2026-16830","fact_id":"SEA-CVE-2026-16830-F1","document_citation":"Security Advisory CVE-2026-16830"},{"id":"SEA-CVE-2026-16830-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to modify data and cause a denial of service due to an SQL injection vulnerability.","source_quote_or_pointer":"Advisory description (CVE-2026-16830)","fact_id":"SEA-CVE-2026-16830-F2","document_citation":"Advisory description (CVE-2026-16830)"}],"source_stated_contributors":["IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to modify data and cause a denial of service due to an SQL injection vulnerability."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-16830","reporting_entity":"CVE-2026-16830","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-16830-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-16830-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-16830"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-12091","title":"IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a denial of service due to a heap-based out-of-bounds read. A remote attacker could send a specially crafted request that causes a limited out‑of‑bounds memory read.","display_title":"security verify access issue could make the service unavailable","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-12091","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-12091","source_title":"IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a denial of service due to a heap-based out-of-bounds read. A remote attacker could send a specially crafted request that causes a limited out‑of‑bounds memory read.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T01:59:40.551Z","source_hash":"content-fingerprint:fnv1a-5dd65ede","affected_system":{"organization":"security verify access project","product":"security verify access","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-12091-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a denial of service due to a heap-based out-of-bounds read. A remote attacker could send a specially crafted request that causes a limited out‑of‑bounds memory read.","source_quote_or_pointer":"Security Advisory CVE-2026-12091","fact_id":"SEA-CVE-2026-12091-F1","document_citation":"Security Advisory CVE-2026-12091"},{"id":"SEA-CVE-2026-12091-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a denial of service due to a heap-based out-of-bounds read. A remote attacker could send a specially crafted request that causes a limited out‑of‑bounds memory read.","source_quote_or_pointer":"Advisory description (CVE-2026-12091)","fact_id":"SEA-CVE-2026-12091-F2","document_citation":"Advisory description (CVE-2026-12091)"}],"source_stated_contributors":["IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a denial of service due to a heap-based out-of-bounds read. A remote attacker could send a specially crafted request that causes a limited out‑of‑bounds memory read."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-12091","reporting_entity":"CVE-2026-12091","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-12091-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-12091-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-12091"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-11936","title":"IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 local management interface in certain configurations is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.","display_title":"security verify access issue could run attacker-controlled scripts in a browser","display_summary":"IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 local management interface in certain configurations is vulnerable to cross-site scripting.","display_reference":"CVE-2026-11936","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-11936","source_title":"IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 local management interface in certain configurations is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T01:59:40.552Z","source_hash":"content-fingerprint:fnv1a-d2190f5b","affected_system":{"organization":"security verify access project","product":"security verify access","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-11936-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 local management interface in certain configurations is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.","source_quote_or_pointer":"Security Advisory CVE-2026-11936","fact_id":"SEA-CVE-2026-11936-F1","document_citation":"Security Advisory CVE-2026-11936"},{"id":"SEA-CVE-2026-11936-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 local management interface in certain configurations is vulnerable to cross-site scripting.","source_quote_or_pointer":"Advisory description (CVE-2026-11936)","fact_id":"SEA-CVE-2026-11936-F2","document_citation":"Advisory description (CVE-2026-11936)"}],"source_stated_contributors":["IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 local management interface in certain configurations is vulnerable to cross-site scripting."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-11936","reporting_entity":"CVE-2026-11936","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-11936-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-11936-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-11936"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-84272","title":"IBM Guardium Data Protection 12.1 and 12.2.2 are vulnerable to missing authentication in the edge-controller component. An unauthenticated remote attacker could exploit this vulnerability to execute arbitrary container images and gain control of managed edge clusters.","display_title":"Security issue reported in guardium data protection","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-84272","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84272","source_title":"IBM Guardium Data Protection 12.1 and 12.2.2 are vulnerable to missing authentication in the edge-controller component. An unauthenticated remote attacker could exploit this vulnerability to execute arbitrary container images and gain control of managed edge clusters.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-10T20:00:54.468Z","source_hash":"content-fingerprint:fnv1a-da16d6cc","affected_system":{"organization":"guardium data protection project","product":"guardium data protection","system_type":"Cloud & container infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-84272-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM Guardium Data Protection 12.1 and 12.2.2 are vulnerable to missing authentication in the edge-controller component. An unauthenticated remote attacker could exploit this vulnerability to execute arbitrary container images and gain control of managed edge clusters.","source_quote_or_pointer":"Security Advisory CVE-2026-84272","fact_id":"SEA-CVE-2026-84272-F1","document_citation":"Security Advisory CVE-2026-84272"},{"id":"SEA-CVE-2026-84272-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM Guardium Data Protection 12.1 and 12.2.2 are vulnerable to missing authentication in the edge-controller component. An unauthenticated remote attacker could exploit this vulnerability to execute arbitrary container images and gain control of managed edge clusters.","source_quote_or_pointer":"Advisory description (CVE-2026-84272)","fact_id":"SEA-CVE-2026-84272-F2","document_citation":"Advisory description (CVE-2026-84272)"}],"source_stated_contributors":["IBM Guardium Data Protection 12.1 and 12.2.2 are vulnerable to missing authentication in the edge-controller component. An unauthenticated remote attacker could exploit this vulnerability to execute arbitrary container images and gain control of managed edge clusters."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.infrastructure_modification","data.uploaded_files"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-84272","reporting_entity":"CVE-2026-84272","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-84272-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-84272-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-84272"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-93017","title":"The insights-operator-gather ClusterRole grants the operator's service account read access to secrets in the core API group with no namespace or resourceNames restriction — therefore, access to every secret in every namespace in the cluster. Ref: https://github.com/openshift/insights-operator/blob/8f15e3157ff09f54ab22801f5b21da35a195cc6d/manifests/03-clusterrole.yamlL368-L373 - apiGroups: - \"\" resources: - secrets verbs: - get - list By spawning a pod with the gather service account mounted, an attacker will be able to access any secret in any namespace. spec: serviceAccountName:\"gather\"","display_title":"Software component issue could expose accounts or credentials","display_summary":"The insights-operator-gather ClusterRole grants the operator's service account read access to secrets in the core API group with no namespace or resourceNames restriction — therefore, access to every secret in every…","display_reference":"CVE-2026-93017","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93017","source_title":"The insights-operator-gather ClusterRole grants the operator's service account read access to secrets in the core API group with no namespace or resourceNames restriction — therefore, access to every secret in every namespace in the cluster. Ref: https://github.com/openshift/insights-operator/blob/8f15e3157ff09f54ab22801f5b21da35a195cc6d/manifests/03-clusterrole.yamlL368-L373 - apiGroups: - \"\" resources: - secrets verbs: - get - list By spawning a pod with the gather service account mounted, an attacker will be able to access any secret in any namespace. spec: serviceAccountName:\"gather\"","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-10T12:00:23.439Z","source_hash":"content-fingerprint:fnv1a-ad97942f","affected_system":{"organization":"The insights-operator-gather ClusterRole grants the operator's service account read access to secrets in the core API group with no namespace or resourceNames restriction — therefore, access to every secret in every namespace in the cluster. Ref project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-93017-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The insights-operator-gather ClusterRole grants the operator's service account read access to secrets in the core API group with no namespace or resourceNames restriction — therefore, access to every secret in every namespace in the cluster. Ref: https://github.com/openshift/insights-operator/blob/8f15e3157ff09f54ab22801f5b21da35a195cc6d/manifests/03-clusterrole.yamlL368-L373 - apiGroups: - \"\" resources: - secrets verbs: - get - list By spawning a pod with the gather service account mounted, an attacker will be able to access any secret in any namespace. spec: serviceAccountName:\"gather\"","source_quote_or_pointer":"Security Advisory CVE-2026-93017","fact_id":"SEA-CVE-2026-93017-F1","document_citation":"Security Advisory CVE-2026-93017"},{"id":"SEA-CVE-2026-93017-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The insights-operator-gather ClusterRole grants the operator's service account read access to secrets in the core API group with no namespace or resourceNames restriction — therefore, access to every secret in every namespace in the cluster.","source_quote_or_pointer":"Advisory description (CVE-2026-93017)","fact_id":"SEA-CVE-2026-93017-F2","document_citation":"Advisory description (CVE-2026-93017)"}],"source_stated_contributors":["The insights-operator-gather ClusterRole grants the operator's service account read access to secrets in the core API group with no namespace or resourceNames restriction — therefore, access to every secret in every namespace in the cluster."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-93017","reporting_entity":"CVE-2026-93017","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-93017-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-93017-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-93017"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-84058","title":"IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to a buffer overrun in the TDS (Microsoft SQL Server) PRELOGIN packet decoder. A remote attacker who can send a specially crafted TDS PRELOGIN packet to a network monitored by an IBM Guardium Collector may cause a denial of service or potentially execute arbitrary code on the Collector appliance.","display_title":"Software component issue could allow unintended commands to run","display_summary":"IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to a buffer overrun in the TDS (Microsoft SQL Server) PRELOGIN packet decoder.","display_reference":"CVE-2026-84058","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84058","source_title":"IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to a buffer overrun in the TDS (Microsoft SQL Server) PRELOGIN packet decoder. A remote attacker who can send a specially crafted TDS PRELOGIN packet to a network monitored by an IBM Guardium Collector may cause a denial of service or potentially execute arbitrary code on the Collector appliance.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-10T10:00:11.147Z","source_hash":"content-fingerprint:fnv1a-3a272324","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-84058-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to a buffer overrun in the TDS (Microsoft SQL Server) PRELOGIN packet decoder. A remote attacker who can send a specially crafted TDS PRELOGIN packet to a network monitored by an IBM Guardium Collector may cause a denial of service or potentially execute arbitrary code on the Collector appliance.","source_quote_or_pointer":"Security Advisory CVE-2026-84058","fact_id":"SEA-CVE-2026-84058-F1","document_citation":"Security Advisory CVE-2026-84058"},{"id":"SEA-CVE-2026-84058-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to a buffer overrun in the TDS (Microsoft SQL Server) PRELOGIN packet decoder. A remote attacker who can send a specially crafted TDS PRELOGIN packet to a network monitored by an IBM Guardium Collector may cause a denial of service or potentially execute…","source_quote_or_pointer":"Advisory description (CVE-2026-84058)","fact_id":"SEA-CVE-2026-84058-F2","document_citation":"Advisory description (CVE-2026-84058)"}],"source_stated_contributors":["IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to a buffer overrun in the TDS (Microsoft SQL Server) PRELOGIN packet decoder. A remote attacker who can send a specially crafted TDS PRELOGIN packet to a network monitored by an IBM Guardium Collector may cause a denial of service or potentially execute…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-84058","reporting_entity":"CVE-2026-84058","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-84058-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-84058-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-84058"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-82344","title":"IBM Guardium Data Protection 12.0, 12.1 is vulnerable to a heap-based buffer overflow in the S-TAP TrafficTap TDS login reassembly functionality. An unauthenticated remote attacker can send crafted TDS login fragments that exceed the fixed-size reassembly buffer, potentially resulting in denial of service or arbitrary code execution on the affected system.","display_title":"guardium data protection issue could allow unintended commands to run","display_summary":"IBM Guardium Data Protection 12.0, 12.1 is vulnerable to a heap-based buffer overflow in the S-TAP TrafficTap TDS login reassembly functionality.","display_reference":"CVE-2026-82344","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-82344","source_title":"IBM Guardium Data Protection 12.0, 12.1 is vulnerable to a heap-based buffer overflow in the S-TAP TrafficTap TDS login reassembly functionality. An unauthenticated remote attacker can send crafted TDS login fragments that exceed the fixed-size reassembly buffer, potentially resulting in denial of service or arbitrary code execution on the affected system.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-10T10:00:11.147Z","source_hash":"content-fingerprint:fnv1a-3b56a3fc","affected_system":{"organization":"guardium data protection project","product":"guardium data protection","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-82344-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM Guardium Data Protection 12.0, 12.1 is vulnerable to a heap-based buffer overflow in the S-TAP TrafficTap TDS login reassembly functionality. An unauthenticated remote attacker can send crafted TDS login fragments that exceed the fixed-size reassembly buffer, potentially resulting in denial of service or arbitrary code execution on the affected system.","source_quote_or_pointer":"Security Advisory CVE-2026-82344","fact_id":"SEA-CVE-2026-82344-F1","document_citation":"Security Advisory CVE-2026-82344"},{"id":"SEA-CVE-2026-82344-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM Guardium Data Protection 12.0, 12.1 is vulnerable to a heap-based buffer overflow in the S-TAP TrafficTap TDS login reassembly functionality. An unauthenticated remote attacker can send crafted TDS login fragments that exceed the fixed-size reassembly buffer, potentially resulting in denial of service or arbitrary…","source_quote_or_pointer":"Advisory description (CVE-2026-82344)","fact_id":"SEA-CVE-2026-82344-F2","document_citation":"Advisory description (CVE-2026-82344)"}],"source_stated_contributors":["IBM Guardium Data Protection 12.0, 12.1 is vulnerable to a heap-based buffer overflow in the S-TAP TrafficTap TDS login reassembly functionality. An unauthenticated remote attacker can send crafted TDS login fragments that exceed the fixed-size reassembly buffer, potentially resulting in denial of service or arbitrary…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-82344","reporting_entity":"CVE-2026-82344","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-82344-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-82344-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-82344"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-82335","title":"IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based buffer overflow in the MongoDB protocol parser. A remote attacker could send a specially crafted MongoDB SCRAM username containing an excessive length and cause memory corruption, potentially resulting in denial of service or arbitrary code execution.","display_title":"guardium data protection issue could allow unintended commands to run","display_summary":"IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based buffer overflow in the MongoDB protocol parser.","display_reference":"CVE-2026-82335","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-82335","source_title":"IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based buffer overflow in the MongoDB protocol parser. A remote attacker could send a specially crafted MongoDB SCRAM username containing an excessive length and cause memory corruption, potentially resulting in denial of service or arbitrary code execution.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-10T10:00:11.147Z","source_hash":"content-fingerprint:fnv1a-4c11e32e","affected_system":{"organization":"guardium data protection project","product":"guardium data protection","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-82335-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based buffer overflow in the MongoDB protocol parser. A remote attacker could send a specially crafted MongoDB SCRAM username containing an excessive length and cause memory corruption, potentially resulting in denial of service or arbitrary code execution.","source_quote_or_pointer":"Security Advisory CVE-2026-82335","fact_id":"SEA-CVE-2026-82335-F1","document_citation":"Security Advisory CVE-2026-82335"},{"id":"SEA-CVE-2026-82335-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based buffer overflow in the MongoDB protocol parser. A remote attacker could send a specially crafted MongoDB SCRAM username containing an excessive length and cause memory corruption, potentially resulting in denial of service or arbitrary code…","source_quote_or_pointer":"Advisory description (CVE-2026-82335)","fact_id":"SEA-CVE-2026-82335-F2","document_citation":"Advisory description (CVE-2026-82335)"}],"source_stated_contributors":["IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based buffer overflow in the MongoDB protocol parser. A remote attacker could send a specially crafted MongoDB SCRAM username containing an excessive length and cause memory corruption, potentially resulting in denial of service or arbitrary code…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-82335","reporting_entity":"CVE-2026-82335","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-82335-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-82335-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-82335"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-82334","title":"IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based out-of-bounds read in the TDS7 LOGIN7 protocol parser. A remote attacker could send a specially crafted TDS LOGIN7 packet containing invalid offset or length values, potentially causing information disclosure or denial of service.","display_title":"guardium data protection issue could make the service unavailable","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-82334","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-82334","source_title":"IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based out-of-bounds read in the TDS7 LOGIN7 protocol parser. A remote attacker could send a specially crafted TDS LOGIN7 packet containing invalid offset or length values, potentially causing information disclosure or denial of service.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-10T10:00:11.147Z","source_hash":"content-fingerprint:fnv1a-3ec40e1d","affected_system":{"organization":"guardium data protection project","product":"guardium data protection","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-82334-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based out-of-bounds read in the TDS7 LOGIN7 protocol parser. A remote attacker could send a specially crafted TDS LOGIN7 packet containing invalid offset or length values, potentially causing information disclosure or denial of service.","source_quote_or_pointer":"Security Advisory CVE-2026-82334","fact_id":"SEA-CVE-2026-82334-F1","document_citation":"Security Advisory CVE-2026-82334"},{"id":"SEA-CVE-2026-82334-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based out-of-bounds read in the TDS7 LOGIN7 protocol parser. A remote attacker could send a specially crafted TDS LOGIN7 packet containing invalid offset or length values, potentially causing information disclosure or denial of service.","source_quote_or_pointer":"Advisory description (CVE-2026-82334)","fact_id":"SEA-CVE-2026-82334-F2","document_citation":"Advisory description (CVE-2026-82334)"}],"source_stated_contributors":["IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based out-of-bounds read in the TDS7 LOGIN7 protocol parser. A remote attacker could send a specially crafted TDS LOGIN7 packet containing invalid offset or length values, potentially causing information disclosure or denial of service."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-82334","reporting_entity":"CVE-2026-82334","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-82334-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-82334-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-82334"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-80381","title":"IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute unauthorized SQL statements due to SQL injection.","display_title":"Software component issue could expose or alter stored data","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-80381","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80381","source_title":"IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute unauthorized SQL statements due to SQL injection.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-10T10:00:11.147Z","source_hash":"content-fingerprint:fnv1a-b4ee25b3","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-80381-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute unauthorized SQL statements due to SQL injection.","source_quote_or_pointer":"Security Advisory CVE-2026-80381","fact_id":"SEA-CVE-2026-80381-F1","document_citation":"Security Advisory CVE-2026-80381"},{"id":"SEA-CVE-2026-80381-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute unauthorized SQL statements due to SQL injection.","source_quote_or_pointer":"Advisory description (CVE-2026-80381)","fact_id":"SEA-CVE-2026-80381-F2","document_citation":"Advisory description (CVE-2026-80381)"}],"source_stated_contributors":["IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute unauthorized SQL statements due to SQL injection."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-80381","reporting_entity":"CVE-2026-80381","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-80381-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-80381-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-80381"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-77900","title":"Missing authentication for critical function in Azure App Service allows an unauthorized attacker to execute code over a network.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-77900","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-77900","source_title":"Missing authentication for critical function in Azure App Service allows an unauthorized attacker to execute code over a network.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-10T10:00:11.147Z","source_hash":"content-fingerprint:fnv1a-4b756a68","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-77900-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Missing authentication for critical function in Azure App Service allows an unauthorized attacker to execute code over a network.","source_quote_or_pointer":"Security Advisory CVE-2026-77900","fact_id":"SEA-CVE-2026-77900-F1","document_citation":"Security Advisory CVE-2026-77900"},{"id":"SEA-CVE-2026-77900-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Missing authentication for critical function in Azure App Service allows an unauthorized attacker to execute code over a network.","source_quote_or_pointer":"Advisory description (CVE-2026-77900)","fact_id":"SEA-CVE-2026-77900-F2","document_citation":"Advisory description (CVE-2026-77900)"}],"source_stated_contributors":["Missing authentication for critical function in Azure App Service allows an unauthorized attacker to execute code over a network."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.code_execution","auth.infrastructure_modification"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-77900","reporting_entity":"CVE-2026-77900","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-77900-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-77900-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-77900"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-69435","title":"Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-69435","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-69435","source_title":"Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-10T10:00:11.147Z","source_hash":"content-fingerprint:fnv1a-96215544","affected_system":{"organization":"Software component project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-69435-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network.","source_quote_or_pointer":"Security Advisory CVE-2026-69435","fact_id":"SEA-CVE-2026-69435-F1","document_citation":"Security Advisory CVE-2026-69435"},{"id":"SEA-CVE-2026-69435-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network.","source_quote_or_pointer":"Advisory description (CVE-2026-69435)","fact_id":"SEA-CVE-2026-69435-F2","document_citation":"Advisory description (CVE-2026-69435)"}],"source_stated_contributors":["Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.infrastructure_modification","arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-003","SEA-FM-010"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-69435","reporting_entity":"CVE-2026-69435","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-69435-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-69435-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-69435"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-107639","title":"ILIAS before 9.24, 10.x before 10.12 and 11.x before 11.5 contains an argument injection vulnerability in assImagemapQuestionGUI that allows question authors to inject ImageMagick convert options via uploaded image filenames. Attackers can embed tab-separated options, which escapeshellcmd() does not neutralise, to write a PHP file under the web root and achieve remote code execution.","display_title":"Software component issue could allow unintended commands to run","display_summary":"ILIAS before 9.24, 10.x before 10.12 and 11.x before 11.5 contains an argument injection vulnerability in assImagemapQuestionGUI that allows question authors to inject ImageMagick convert options via uploaded image…","display_reference":"CVE-2026-107639","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107639","source_title":"ILIAS before 9.24, 10.x before 10.12 and 11.x before 11.5 contains an argument injection vulnerability in assImagemapQuestionGUI that allows question authors to inject ImageMagick convert options via uploaded image filenames. Attackers can embed tab-separated options, which escapeshellcmd() does not neutralise, to write a PHP file under the web root and achieve remote code execution.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-10T10:00:11.147Z","source_hash":"content-fingerprint:fnv1a-acce50a9","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-107639-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"ILIAS before 9.24, 10.x before 10.12 and 11.x before 11.5 contains an argument injection vulnerability in assImagemapQuestionGUI that allows question authors to inject ImageMagick convert options via uploaded image filenames. Attackers can embed tab-separated options, which escapeshellcmd() does not neutralise, to write a PHP file under the web root and achieve remote code execution.","source_quote_or_pointer":"Security Advisory CVE-2026-107639","fact_id":"SEA-CVE-2026-107639-F1","document_citation":"Security Advisory CVE-2026-107639"},{"id":"SEA-CVE-2026-107639-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"ILIAS before 9.24, 10.x before 10.12 and 11.x before 11.5 contains an argument injection vulnerability in assImagemapQuestionGUI that allows question authors to inject ImageMagick convert options via uploaded image filenames.","source_quote_or_pointer":"Advisory description (CVE-2026-107639)","fact_id":"SEA-CVE-2026-107639-F2","document_citation":"Advisory description (CVE-2026-107639)"}],"source_stated_contributors":["ILIAS before 9.24, 10.x before 10.12 and 11.x before 11.5 contains an argument injection vulnerability in assImagemapQuestionGUI that allows question authors to inject ImageMagick convert options via uploaded image filenames."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.write_action"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-107639","reporting_entity":"CVE-2026-107639","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-107639-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-107639-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-107639"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-107406","title":"Memory overflow vulnerability leading to Remote Code Execution or Denial of Service Vulnerability in NetScaler ADC. NetScaler ADC or NetScaler Gateway must be configured as a SAML SP or SAML IdP, subject to the following version-specific requirements: For the following versions: Applicable only when configured as a SAML IdP: NetScaler ADC and NetScaler Gateway between 14.1-73.37 and 14.1-73.41, inclusive NetScaler ADC 14.1-FIPS between 14.1-73.37 FIPS and 14.1-73.41 FIPS, inclusive NetScaler ADC and NetScaler Gateway between 13.1-64.23 and 13.1-64.28, inclusive NetScaler ADC 13.1-FIPS between 13.1-NDcPP 13.1-37.279 and 13.1- 37.282, inclusive For the following versions: Applicable only when configured as a SAML SP or SAML IdP: NetScaler ADC and NetScaler Gateway before 14.1-73.37 NetScaler ADC 14.1-FIPS before 14.1-73.37 FIPS NetScaler ADC and NetScaler Gateway before 13.1-64.23 NetScaler ADC 13.1-FIPS before13.1-NDcPP 13.1-37.279","display_title":"Software component issue could allow unintended commands to run","display_summary":"Memory overflow vulnerability leading to Remote Code Execution or Denial of Service Vulnerability in NetScaler ADC.","display_reference":"CVE-2026-107406","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107406","source_title":"Memory overflow vulnerability leading to Remote Code Execution or Denial of Service Vulnerability in NetScaler ADC. NetScaler ADC or NetScaler Gateway must be configured as a SAML SP or SAML IdP, subject to the following version-specific requirements: For the following versions: Applicable only when configured as a SAML IdP: NetScaler ADC and NetScaler Gateway between 14.1-73.37 and 14.1-73.41, inclusive NetScaler ADC 14.1-FIPS between 14.1-73.37 FIPS and 14.1-73.41 FIPS, inclusive NetScaler ADC and NetScaler Gateway between 13.1-64.23 and 13.1-64.28, inclusive NetScaler ADC 13.1-FIPS between 13.1-NDcPP 13.1-37.279 and 13.1- 37.282, inclusive For the following versions: Applicable only when configured as a SAML SP or SAML IdP: NetScaler ADC and NetScaler Gateway before 14.1-73.37 NetScaler ADC 14.1-FIPS before 14.1-73.37 FIPS NetScaler ADC and NetScaler Gateway before 13.1-64.23 NetScaler ADC 13.1-FIPS before13.1-NDcPP 13.1-37.279","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-10T10:00:11.147Z","source_hash":"content-fingerprint:fnv1a-147515ed","affected_system":{"organization":"Memory overflow vulnerability leading to Remote Code Execution or Denial of Service Vulnerability in NetScaler ADC. NetScaler ADC or NetScaler Gateway must be configured as a SAML SP or SAML IdP, subject to the following version-specific requirements project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-107406-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Memory overflow vulnerability leading to Remote Code Execution or Denial of Service Vulnerability in NetScaler ADC. NetScaler ADC or NetScaler Gateway must be configured as a SAML SP or SAML IdP, subject to the following version-specific requirements: For the following versions: Applicable only when configured as a SAML IdP: NetScaler ADC and NetScaler Gateway between 14.1-73.37 and 14.1-73.41, inclusive NetScaler ADC 14.1-FIPS between 14.1-73.37 FIPS and 14.1-73.41 FIPS, inclusive NetScaler ADC and NetScaler Gateway between 13.1-64.23 and 13.1-64.28, inclusive NetScaler ADC 13.1-FIPS between 13.1-NDcPP 13.1-37.279 and 13.1- 37.282, inclusive For the following versions: Applicable only when configured as a SAML SP or SAML IdP: NetScaler ADC and NetScaler Gateway before 14.1-73.37 NetScaler ADC 14.1-FIPS before 14.1-73.37 FIPS NetScaler ADC and NetScaler Gateway before 13.1-64.23 NetScaler ADC 13.1-FIPS before13.1-NDcPP 13.1-37.279","source_quote_or_pointer":"Security Advisory CVE-2026-107406","fact_id":"SEA-CVE-2026-107406-F1","document_citation":"Security Advisory CVE-2026-107406"},{"id":"SEA-CVE-2026-107406-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Memory overflow vulnerability leading to Remote Code Execution or Denial of Service Vulnerability in NetScaler ADC.","source_quote_or_pointer":"Advisory description (CVE-2026-107406)","fact_id":"SEA-CVE-2026-107406-F2","document_citation":"Advisory description (CVE-2026-107406)"}],"source_stated_contributors":["Memory overflow vulnerability leading to Remote Code Execution or Denial of Service Vulnerability in NetScaler ADC."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-107406","reporting_entity":"CVE-2026-107406","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-107406-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-107406-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-107406"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-95116","title":"An issue in libming through 0.4.8 allows a remote attacker to cause a denial of service via the readtag_file() in src/blocks/fromswf.c.","display_title":"Software component issue could make the service unavailable","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-95116","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95116","source_title":"An issue in libming through 0.4.8 allows a remote attacker to cause a denial of service via the readtag_file() in src/blocks/fromswf.c.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-10T10:00:11.147Z","source_hash":"content-fingerprint:fnv1a-5b1af5a3","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-95116-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"An issue in libming through 0.4.8 allows a remote attacker to cause a denial of service via the readtag_file() in src/blocks/fromswf.c.","source_quote_or_pointer":"Security Advisory CVE-2026-95116","fact_id":"SEA-CVE-2026-95116-F1","document_citation":"Security Advisory CVE-2026-95116"},{"id":"SEA-CVE-2026-95116-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"An issue in libming through 0.4.8 allows a remote attacker to cause a denial of service via the readtagfile() in src/blocks/fromswf.c.","source_quote_or_pointer":"Advisory description (CVE-2026-95116)","fact_id":"SEA-CVE-2026-95116-F2","document_citation":"Advisory description (CVE-2026-95116)"}],"source_stated_contributors":["An issue in libming through 0.4.8 allows a remote attacker to cause a denial of service via the readtagfile() in src/blocks/fromswf.c."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-95116","reporting_entity":"CVE-2026-95116","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-95116-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-95116-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-95116"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-78407","title":"IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 are vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.","display_title":"security verify access issue could run attacker-controlled scripts in a browser","display_summary":"IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 are vulnerable to cross-site scripting.","display_reference":"CVE-2026-78407","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-78407","source_title":"IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 are vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-10T02:00:30.356Z","source_hash":"content-fingerprint:fnv1a-cf0e2c67","affected_system":{"organization":"security verify access project","product":"security verify access","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-78407-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 are vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.","source_quote_or_pointer":"Security Advisory CVE-2026-78407","fact_id":"SEA-CVE-2026-78407-F1","document_citation":"Security Advisory CVE-2026-78407"},{"id":"SEA-CVE-2026-78407-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 are vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials…","source_quote_or_pointer":"Advisory description (CVE-2026-78407)","fact_id":"SEA-CVE-2026-78407-F2","document_citation":"Advisory description (CVE-2026-78407)"}],"source_stated_contributors":["IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 are vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-78407","reporting_entity":"CVE-2026-78407","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-78407-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-78407-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-78407"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-84247","title":"IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to cause a denial of service due to a path traversal vulnerability.","display_title":"Software component issue could expose restricted files","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-84247","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84247","source_title":"IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to cause a denial of service due to a path traversal vulnerability.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T18:00:33.805Z","source_hash":"content-fingerprint:fnv1a-a39e7156","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-84247-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to cause a denial of service due to a path traversal vulnerability.","source_quote_or_pointer":"Security Advisory CVE-2026-84247","fact_id":"SEA-CVE-2026-84247-F1","document_citation":"Security Advisory CVE-2026-84247"},{"id":"SEA-CVE-2026-84247-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to cause a denial of service due to a path traversal vulnerability.","source_quote_or_pointer":"Advisory description (CVE-2026-84247)","fact_id":"SEA-CVE-2026-84247-F2","document_citation":"Advisory description (CVE-2026-84247)"}],"source_stated_contributors":["IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to cause a denial of service due to a path traversal vulnerability."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Restricted file exposure","File overwrite"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-84247","reporting_entity":"CVE-2026-84247","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-84247-SG1","label":"Confine file access to a fixed root","description":"Resolve paths to canonical form and reject anything outside the intended directory before opening files.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-84247-SG1","label":"Confine file access to a fixed root","description":"Resolve paths to canonical form and reject anything outside the intended directory before opening files.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"File paths supplied by a caller escaped the intended directory. Canonicalise paths and confine file access to a fixed root.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-84247"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-107797","title":"Jivejdon through 5.0 contains a reflected cross-site scripting vulnerability in application/message/postThread.jsp that allows attackers to inject script via the to and tag parameters. Attackers can send crafted links to authenticated users, breaking out of unencoded inline JavaScript string literals to execute arbitrary JavaScript in the victim's session.","display_title":"Software component issue could run attacker-controlled scripts in a browser","display_summary":"Jivejdon through 5.0 contains a reflected cross-site scripting vulnerability in application/message/postThread.jsp that allows attackers to inject script via the to and tag parameters.","display_reference":"CVE-2026-107797","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107797","source_title":"Jivejdon through 5.0 contains a reflected cross-site scripting vulnerability in application/message/postThread.jsp that allows attackers to inject script via the to and tag parameters. Attackers can send crafted links to authenticated users, breaking out of unencoded inline JavaScript string literals to execute arbitrary JavaScript in the victim's session.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T18:00:33.805Z","source_hash":"content-fingerprint:fnv1a-ffe583c0","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-107797-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Jivejdon through 5.0 contains a reflected cross-site scripting vulnerability in application/message/postThread.jsp that allows attackers to inject script via the to and tag parameters. Attackers can send crafted links to authenticated users, breaking out of unencoded inline JavaScript string literals to execute arbitrary JavaScript in the victim's session.","source_quote_or_pointer":"Security Advisory CVE-2026-107797","fact_id":"SEA-CVE-2026-107797-F1","document_citation":"Security Advisory CVE-2026-107797"},{"id":"SEA-CVE-2026-107797-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Jivejdon through 5.0 contains a reflected cross-site scripting vulnerability in application/message/postThread.jsp that allows attackers to inject script via the to and tag parameters.","source_quote_or_pointer":"Advisory description (CVE-2026-107797)","fact_id":"SEA-CVE-2026-107797-F2","document_citation":"Advisory description (CVE-2026-107797)"}],"source_stated_contributors":["Jivejdon through 5.0 contains a reflected cross-site scripting vulnerability in application/message/postThread.jsp that allows attackers to inject script via the to and tag parameters."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-107797","reporting_entity":"CVE-2026-107797","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-107797-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-107797-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-107797"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-107781","title":"Dromara Skyeye through commit 003549ae5615bd114ba5bb8ddf6a8e8ead97c321 contains a server-side request forgery and missing authorization vulnerability in the OnlyOffice save callback editUploadOfficeFileById. Unauthenticated attackers can supply arbitrary url and key parameters to make the server fetch internal URLs and overwrite any user's stored file, then read results via queryFileToShowById.","display_title":"Software component issue could reach internal services","display_summary":"Dromara Skyeye through commit 003549ae5615bd114ba5bb8ddf6a8e8ead97c321 contains a server-side request forgery and missing authorization vulnerability in the OnlyOffice save callback editUploadOfficeFileById.","display_reference":"CVE-2026-107781","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107781","source_title":"Dromara Skyeye through commit 003549ae5615bd114ba5bb8ddf6a8e8ead97c321 contains a server-side request forgery and missing authorization vulnerability in the OnlyOffice save callback editUploadOfficeFileById. Unauthenticated attackers can supply arbitrary url and key parameters to make the server fetch internal URLs and overwrite any user's stored file, then read results via queryFileToShowById.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T18:00:33.805Z","source_hash":"content-fingerprint:fnv1a-b131c47b","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-107781-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Dromara Skyeye through commit 003549ae5615bd114ba5bb8ddf6a8e8ead97c321 contains a server-side request forgery and missing authorization vulnerability in the OnlyOffice save callback editUploadOfficeFileById. Unauthenticated attackers can supply arbitrary url and key parameters to make the server fetch internal URLs and overwrite any user's stored file, then read results via queryFileToShowById.","source_quote_or_pointer":"Security Advisory CVE-2026-107781","fact_id":"SEA-CVE-2026-107781-F1","document_citation":"Security Advisory CVE-2026-107781"},{"id":"SEA-CVE-2026-107781-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Dromara Skyeye through commit 003549ae5615bd114ba5bb8ddf6a8e8ead97c321 contains a server-side request forgery and missing authorization vulnerability in the OnlyOffice save callback editUploadOfficeFileById.","source_quote_or_pointer":"Advisory description (CVE-2026-107781)","fact_id":"SEA-CVE-2026-107781-F2","document_citation":"Advisory description (CVE-2026-107781)"}],"source_stated_contributors":["Dromara Skyeye through commit 003549ae5615bd114ba5bb8ddf6a8e8ead97c321 contains a server-side request forgery and missing authorization vulnerability in the OnlyOffice save callback editUploadOfficeFileById."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.pii"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-107781","reporting_entity":"CVE-2026-107781","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-107781-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-107781-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-107781"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-107704","title":"The image_optimizer Ruby gem 1.3.0 through 1.9.0 contains an OS command injection vulnerability in ImageOptimizeridentify_format that allows attackers to execute commands by supplying a crafted image path when the identify option is enabled. Attackers controlling the path, such as an uploaded file name, can append shell metacharacters like ';' that are executed via Ruby backticks with the Ruby process privileges.","display_title":"Software component issue could allow unintended commands to run","display_summary":"The imageoptimizer Ruby gem 1.3.0 through 1.9.0 contains an OS command injection vulnerability in ImageOptimizeridentifyformat that allows attackers to execute commands by supplying a crafted image path when the identify…","display_reference":"CVE-2026-107704","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107704","source_title":"The image_optimizer Ruby gem 1.3.0 through 1.9.0 contains an OS command injection vulnerability in ImageOptimizeridentify_format that allows attackers to execute commands by supplying a crafted image path when the identify option is enabled. Attackers controlling the path, such as an uploaded file name, can append shell metacharacters like ';' that are executed via Ruby backticks with the Ruby process privileges.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T18:00:33.805Z","source_hash":"content-fingerprint:fnv1a-6065ff9e","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-107704-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The image_optimizer Ruby gem 1.3.0 through 1.9.0 contains an OS command injection vulnerability in ImageOptimizeridentify_format that allows attackers to execute commands by supplying a crafted image path when the identify option is enabled. Attackers controlling the path, such as an uploaded file name, can append shell metacharacters like ';' that are executed via Ruby backticks with the Ruby process privileges.","source_quote_or_pointer":"Security Advisory CVE-2026-107704","fact_id":"SEA-CVE-2026-107704-F1","document_citation":"Security Advisory CVE-2026-107704"},{"id":"SEA-CVE-2026-107704-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The imageoptimizer Ruby gem 1.3.0 through 1.9.0 contains an OS command injection vulnerability in ImageOptimizeridentifyformat that allows attackers to execute commands by supplying a crafted image path when the identify option is enabled.","source_quote_or_pointer":"Advisory description (CVE-2026-107704)","fact_id":"SEA-CVE-2026-107704-F2","document_citation":"Advisory description (CVE-2026-107704)"}],"source_stated_contributors":["The imageoptimizer Ruby gem 1.3.0 through 1.9.0 contains an OS command injection vulnerability in ImageOptimizeridentifyformat that allows attackers to execute commands by supplying a crafted image path when the identify option is enabled."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-107704","reporting_entity":"CVE-2026-107704","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-107704-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-107704-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-107704"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-19498","title":"IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote attacker to cause a denial of service due to uncontrolled recursion.","display_title":"security verify access issue could make the service unavailable","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-19498","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-19498","source_title":"IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote attacker to cause a denial of service due to uncontrolled recursion.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T18:00:33.805Z","source_hash":"content-fingerprint:fnv1a-28907226","affected_system":{"organization":"security verify access project","product":"security verify access","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-19498-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote attacker to cause a denial of service due to uncontrolled recursion.","source_quote_or_pointer":"Security Advisory CVE-2026-19498","fact_id":"SEA-CVE-2026-19498-F1","document_citation":"Security Advisory CVE-2026-19498"},{"id":"SEA-CVE-2026-19498-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote attacker to cause a denial of service due to uncontrolled recursion.","source_quote_or_pointer":"Advisory description (CVE-2026-19498)","fact_id":"SEA-CVE-2026-19498-F2","document_citation":"Advisory description (CVE-2026-19498)"}],"source_stated_contributors":["IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote attacker to cause a denial of service due to uncontrolled recursion."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-19498","reporting_entity":"CVE-2026-19498","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-19498-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-19498-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-19498"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-84274","title":"IBM Guardium Data Protection 12.2.2 is affected by a sensitive information exposure vulnerability. During SECRET and API_KEY rotation processing, sensitive credential material is logged at INFO level by the edge-controller/edge-manager components. An authenticated attacker with access to the relevant application or container logs could obtain these credentials and use them to impersonate services or gain unauthorized access to the Guardium control plane.","display_title":"guardium data protection issue could allow unauthorized access","display_summary":"IBM Guardium Data Protection 12.2.2 is affected by a sensitive information exposure vulnerability. During SECRET and APIKEY rotation processing, sensitive credential material is logged at INFO level by the…","display_reference":"CVE-2026-84274","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84274","source_title":"IBM Guardium Data Protection 12.2.2 is affected by a sensitive information exposure vulnerability. During SECRET and API_KEY rotation processing, sensitive credential material is logged at INFO level by the edge-controller/edge-manager components. An authenticated attacker with access to the relevant application or container logs could obtain these credentials and use them to impersonate services or gain unauthorized access to the Guardium control plane.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T18:00:33.805Z","source_hash":"content-fingerprint:fnv1a-132c671a","affected_system":{"organization":"guardium data protection project","product":"guardium data protection","system_type":"Cloud & container infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-84274-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM Guardium Data Protection 12.2.2 is affected by a sensitive information exposure vulnerability. During SECRET and API_KEY rotation processing, sensitive credential material is logged at INFO level by the edge-controller/edge-manager components. An authenticated attacker with access to the relevant application or container logs could obtain these credentials and use them to impersonate services or gain unauthorized access to the Guardium control plane.","source_quote_or_pointer":"Security Advisory CVE-2026-84274","fact_id":"SEA-CVE-2026-84274-F1","document_citation":"Security Advisory CVE-2026-84274"},{"id":"SEA-CVE-2026-84274-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM Guardium Data Protection 12.2.2 is affected by a sensitive information exposure vulnerability. During SECRET and APIKEY rotation processing, sensitive credential material is logged at INFO level by the edge-controller/edge-manager components.","source_quote_or_pointer":"Advisory description (CVE-2026-84274)","fact_id":"SEA-CVE-2026-84274-F2","document_citation":"Advisory description (CVE-2026-84274)"}],"source_stated_contributors":["IBM Guardium Data Protection 12.2.2 is affected by a sensitive information exposure vulnerability. During SECRET and APIKEY rotation processing, sensitive credential material is logged at INFO level by the edge-controller/edge-manager components."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.credentials_secrets"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-84274","reporting_entity":"CVE-2026-84274","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-84274-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-84274-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-84274"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-11318","title":"Deskin through 3.3.4.3 contains a privilege escalation vulnerability in the com.deskin.service.installer XPC service that allows local unprivileged attackers to execute arbitrary installer packages as root by connecting to the root-owned service without authentication. Attackers can invoke the privileged installer method to run an attacker-supplied installer, achieving full root compromise of the macOS host.","display_title":"Software component issue could grant elevated privileges","display_summary":"Deskin through 3.3.4.3 contains a privilege escalation vulnerability in the com.deskin.service.installer XPC service that allows local unprivileged attackers to execute arbitrary installer packages as root by connecting…","display_reference":"CVE-2026-11318","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-11318","source_title":"Deskin through 3.3.4.3 contains a privilege escalation vulnerability in the com.deskin.service.installer XPC service that allows local unprivileged attackers to execute arbitrary installer packages as root by connecting to the root-owned service without authentication. Attackers can invoke the privileged installer method to run an attacker-supplied installer, achieving full root compromise of the macOS host.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T18:00:33.805Z","source_hash":"content-fingerprint:fnv1a-27f159d5","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-11318-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Deskin through 3.3.4.3 contains a privilege escalation vulnerability in the com.deskin.service.installer XPC service that allows local unprivileged attackers to execute arbitrary installer packages as root by connecting to the root-owned service without authentication. Attackers can invoke the privileged installer method to run an attacker-supplied installer, achieving full root compromise of the macOS host.","source_quote_or_pointer":"Security Advisory CVE-2026-11318","fact_id":"SEA-CVE-2026-11318-F1","document_citation":"Security Advisory CVE-2026-11318"},{"id":"SEA-CVE-2026-11318-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Deskin through 3.3.4.3 contains a privilege escalation vulnerability in the com.deskin.service.installer XPC service that allows local unprivileged attackers to execute arbitrary installer packages as root by connecting to the root-owned service without authentication.","source_quote_or_pointer":"Advisory description (CVE-2026-11318)","fact_id":"SEA-CVE-2026-11318-F2","document_citation":"Advisory description (CVE-2026-11318)"}],"source_stated_contributors":["Deskin through 3.3.4.3 contains a privilege escalation vulnerability in the com.deskin.service.installer XPC service that allows local unprivileged attackers to execute arbitrary installer packages as root by connecting to the root-owned service without authentication."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Elevated privileges","Boundary bypass"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-11318","reporting_entity":"CVE-2026-11318","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-11318-SG1","label":"Enforce privilege boundaries in code","description":"Require explicit, server-verified authorization for privileged operations and isolate components with separate identities.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-11318-SG1","label":"Enforce privilege boundaries in code","description":"Require explicit, server-verified authorization for privileged operations and isolate components with separate identities.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A low-privilege actor reached a high-privilege capability. Enforce approval and privilege boundaries in deterministic code, not by convention.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-11318"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-101024","title":"Satel Netco Design versions prior to v2.1.7 contains a relative path traversal vulnerability in its data export functionality. An authenticated user with Viewer privileges could write attacker influenced content to file system locations accessible to the application service. Successful exploitation could result in unauthorized file creation or modification and, under certain conditions, arbitrary code execution.","display_title":"Software component issue could allow unintended commands to run","display_summary":"Satel Netco Design versions prior to v2.1.7 contains a relative path traversal vulnerability in its data export functionality.","display_reference":"CVE-2026-101024","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-101024","source_title":"Satel Netco Design versions prior to v2.1.7 contains a relative path traversal vulnerability in its data export functionality. An authenticated user with Viewer privileges could write attacker influenced content to file system locations accessible to the application service. Successful exploitation could result in unauthorized file creation or modification and, under certain conditions, arbitrary code execution.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T18:00:33.805Z","source_hash":"content-fingerprint:fnv1a-a98da089","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-101024-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Satel Netco Design versions prior to v2.1.7 contains a relative path traversal vulnerability in its data export functionality. An authenticated user with Viewer privileges could write attacker influenced content to file system locations accessible to the application service. Successful exploitation could result in unauthorized file creation or modification and, under certain conditions, arbitrary code execution.","source_quote_or_pointer":"Security Advisory CVE-2026-101024","fact_id":"SEA-CVE-2026-101024-F1","document_citation":"Security Advisory CVE-2026-101024"},{"id":"SEA-CVE-2026-101024-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Satel Netco Design versions prior to v2.1.7 contains a relative path traversal vulnerability in its data export functionality. An authenticated user with Viewer privileges could write attacker influenced content to file system locations accessible to the application service.","source_quote_or_pointer":"Advisory description (CVE-2026-101024)","fact_id":"SEA-CVE-2026-101024-F2","document_citation":"Advisory description (CVE-2026-101024)"}],"source_stated_contributors":["Satel Netco Design versions prior to v2.1.7 contains a relative path traversal vulnerability in its data export functionality. An authenticated user with Viewer privileges could write attacker influenced content to file system locations accessible to the application service."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-101024","reporting_entity":"CVE-2026-101024","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-101024-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-101024-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-101024"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-17189","title":"IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session","display_title":"security verify access issue could run attacker-controlled scripts in a browser","display_summary":"IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 is vulnerable to cross-site scripting.","display_reference":"CVE-2026-17189","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-17189","source_title":"IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T18:00:33.805Z","source_hash":"content-fingerprint:fnv1a-2116ca0d","affected_system":{"organization":"security verify access project","product":"security verify access","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-17189-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session","source_quote_or_pointer":"Security Advisory CVE-2026-17189","fact_id":"SEA-CVE-2026-17189-F1","document_citation":"Security Advisory CVE-2026-17189"},{"id":"SEA-CVE-2026-17189-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials…","source_quote_or_pointer":"Advisory description (CVE-2026-17189)","fact_id":"SEA-CVE-2026-17189-F2","document_citation":"Advisory description (CVE-2026-17189)"}],"source_stated_contributors":["IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-17189","reporting_entity":"CVE-2026-17189","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-17189-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-17189-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-17189"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-94581","title":"An OS command injection vulnerability exists in the REST API management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 allows an authenticated, high-privileged remote attacker to execute arbitrary system commands with root permissions. An attacker with administrative privileges to configure SSH known host settings can supply specially crafted parameter values containing shell metacharacters to trigger command execution on the host system.","display_title":"Software component issue could allow unintended commands to run","display_summary":"An OS command injection vulnerability exists in the REST API management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 allows an authenticated, high-privileged remote attacker to…","display_reference":"CVE-2026-94581","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-94581","source_title":"An OS command injection vulnerability exists in the REST API management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 allows an authenticated, high-privileged remote attacker to execute arbitrary system commands with root permissions. An attacker with administrative privileges to configure SSH known host settings can supply specially crafted parameter values containing shell metacharacters to trigger command execution on the host system.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T16:00:38.904Z","source_hash":"content-fingerprint:fnv1a-39b221b0","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-94581-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"An OS command injection vulnerability exists in the REST API management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 allows an authenticated, high-privileged remote attacker to execute arbitrary system commands with root permissions. An attacker with administrative privileges to configure SSH known host settings can supply specially crafted parameter values containing shell metacharacters to trigger command execution on the host system.","source_quote_or_pointer":"Security Advisory CVE-2026-94581","fact_id":"SEA-CVE-2026-94581-F1","document_citation":"Security Advisory CVE-2026-94581"},{"id":"SEA-CVE-2026-94581-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"An OS command injection vulnerability exists in the REST API management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 allows an authenticated, high-privileged remote attacker to execute arbitrary system commands with root permissions.","source_quote_or_pointer":"Advisory description (CVE-2026-94581)","fact_id":"SEA-CVE-2026-94581-F2","document_citation":"Advisory description (CVE-2026-94581)"}],"source_stated_contributors":["An OS command injection vulnerability exists in the REST API management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 allows an authenticated, high-privileged remote attacker to execute arbitrary system commands with root permissions."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-94581","reporting_entity":"CVE-2026-94581","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-94581-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-94581-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-94581"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-87685","title":"An arbitrary file manipulation vulnerability exists in the WebTools management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When processing configuration transfer requests, the application fails to properly validate and sanitize a user-supplied status file path parameter. An authenticated administrative user can exploit this issue by submitting a specially crafted status file parameter, causing the underlying process to move an arbitrary system file to a predictable, world-readable temporary directory. This can lead to persistent Denial of Service (DoS), critical system file destruction, host compromise, or sensitive data leakage.","display_title":"Software component issue could make the service unavailable","display_summary":"An arbitrary file manipulation vulnerability exists in the WebTools management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1.","display_reference":"CVE-2026-87685","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87685","source_title":"An arbitrary file manipulation vulnerability exists in the WebTools management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When processing configuration transfer requests, the application fails to properly validate and sanitize a user-supplied status file path parameter. An authenticated administrative user can exploit this issue by submitting a specially crafted status file parameter, causing the underlying process to move an arbitrary system file to a predictable, world-readable temporary directory. This can lead to persistent Denial of Service (DoS), critical system file destruction, host compromise, or sensitive data leakage.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T16:00:38.904Z","source_hash":"content-fingerprint:fnv1a-e941ebb5","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-87685-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"An arbitrary file manipulation vulnerability exists in the WebTools management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When processing configuration transfer requests, the application fails to properly validate and sanitize a user-supplied status file path parameter. An authenticated administrative user can exploit this issue by submitting a specially crafted status file parameter, causing the underlying process to move an arbitrary system file to a predictable, world-readable temporary directory. This can lead to persistent Denial of Service (DoS), critical system file destruction, host compromise, or sensitive data leakage.","source_quote_or_pointer":"Security Advisory CVE-2026-87685","fact_id":"SEA-CVE-2026-87685-F1","document_citation":"Security Advisory CVE-2026-87685"},{"id":"SEA-CVE-2026-87685-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"An arbitrary file manipulation vulnerability exists in the WebTools management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When processing configuration transfer requests, the application fails to properly validate and sanitize a user-supplied status file path parameter.","source_quote_or_pointer":"Advisory description (CVE-2026-87685)","fact_id":"SEA-CVE-2026-87685-F2","document_citation":"Advisory description (CVE-2026-87685)"}],"source_stated_contributors":["An arbitrary file manipulation vulnerability exists in the WebTools management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When processing configuration transfer requests, the application fails to properly validate and sanitize a user-supplied status file path parameter."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-87685","reporting_entity":"CVE-2026-87685","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-87685-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-87685-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-87685"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-87674","title":"A local privilege escalation vulnerability exists in the system logging daemon of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. Insufficient access controls on internal inter-process communication (IPC) channels allow an unprivileged local user to submit malformed logging configurations. Due to improper input sanitization during configuration file generation, an attacker can inject arbitrary directives that execute with elevated privileges when the logging service reloads, leading to local privilege escalation.","display_title":"Software component issue could allow unauthorized access","display_summary":"A local privilege escalation vulnerability exists in the system logging daemon of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1.","display_reference":"CVE-2026-87674","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87674","source_title":"A local privilege escalation vulnerability exists in the system logging daemon of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. Insufficient access controls on internal inter-process communication (IPC) channels allow an unprivileged local user to submit malformed logging configurations. Due to improper input sanitization during configuration file generation, an attacker can inject arbitrary directives that execute with elevated privileges when the logging service reloads, leading to local privilege escalation.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T16:00:38.904Z","source_hash":"content-fingerprint:fnv1a-1cc168dd","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-87674-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A local privilege escalation vulnerability exists in the system logging daemon of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. Insufficient access controls on internal inter-process communication (IPC) channels allow an unprivileged local user to submit malformed logging configurations. Due to improper input sanitization during configuration file generation, an attacker can inject arbitrary directives that execute with elevated privileges when the logging service reloads, leading to local privilege escalation.","source_quote_or_pointer":"Security Advisory CVE-2026-87674","fact_id":"SEA-CVE-2026-87674-F1","document_citation":"Security Advisory CVE-2026-87674"},{"id":"SEA-CVE-2026-87674-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A local privilege escalation vulnerability exists in the system logging daemon of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. Insufficient access controls on internal inter-process communication (IPC) channels allow an unprivileged local user to submit malformed logging configurations.","source_quote_or_pointer":"Advisory description (CVE-2026-87674)","fact_id":"SEA-CVE-2026-87674-F2","document_citation":"Advisory description (CVE-2026-87674)"}],"source_stated_contributors":["A local privilege escalation vulnerability exists in the system logging daemon of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. Insufficient access controls on internal inter-process communication (IPC) channels allow an unprivileged local user to submit malformed logging configurations."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-87674","reporting_entity":"CVE-2026-87674","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-87674-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-87674-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-87674"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-87666","title":"An OS command injection vulnerability exists in the time and zone management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When updating system timezone settings via the REST API or configuration download routines, the system fails to sanitize input values before processing them in underlying shell execution routines. An authenticated user with low-privilege administrative access can exploit this vulnerability by submitting a crafted timezone string containing shell metacharacters. Successful exploitation allows the attacker to escape the restricted management environment and execute arbitrary shell commands with elevated privileges.","display_title":"Software component issue could allow unintended commands to run","display_summary":"An OS command injection vulnerability exists in the time and zone management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1.","display_reference":"CVE-2026-87666","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87666","source_title":"An OS command injection vulnerability exists in the time and zone management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When updating system timezone settings via the REST API or configuration download routines, the system fails to sanitize input values before processing them in underlying shell execution routines. An authenticated user with low-privilege administrative access can exploit this vulnerability by submitting a crafted timezone string containing shell metacharacters. Successful exploitation allows the attacker to escape the restricted management environment and execute arbitrary shell commands with elevated privileges.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T16:00:38.904Z","source_hash":"content-fingerprint:fnv1a-7ea72282","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-87666-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"An OS command injection vulnerability exists in the time and zone management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When updating system timezone settings via the REST API or configuration download routines, the system fails to sanitize input values before processing them in underlying shell execution routines. An authenticated user with low-privilege administrative access can exploit this vulnerability by submitting a crafted timezone string containing shell metacharacters. Successful exploitation allows the attacker to escape the restricted management environment and execute arbitrary shell commands with elevated privileges.","source_quote_or_pointer":"Security Advisory CVE-2026-87666","fact_id":"SEA-CVE-2026-87666-F1","document_citation":"Security Advisory CVE-2026-87666"},{"id":"SEA-CVE-2026-87666-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"An OS command injection vulnerability exists in the time and zone management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When updating system timezone settings via the REST API or configuration download routines, the system fails to sanitize input values before processing them in…","source_quote_or_pointer":"Advisory description (CVE-2026-87666)","fact_id":"SEA-CVE-2026-87666-F2","document_citation":"Advisory description (CVE-2026-87666)"}],"source_stated_contributors":["An OS command injection vulnerability exists in the time and zone management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When updating system timezone settings via the REST API or configuration download routines, the system fails to sanitize input values before processing them in…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-87666","reporting_entity":"CVE-2026-87666","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-87666-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-87666-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-87666"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-87664","title":"A session context forgery vulnerability exists in the web management daemon of Brocade Fabric OS versions 9.2.2d and 10.0.0 through 10.0.0a1. When processing local inter-process communication (IPC) storage callbacks, the service accepts and registers session structures including administrative role permissions, user identifiers, and authorization flags—without verifying the identity or authenticity of the sending process. An attacker can obtain elevated administrative privileges on the web management interface without legitimate authentication.","display_title":"Security issue reported in Software component","display_summary":"A session context forgery vulnerability exists in the web management daemon of Brocade Fabric OS versions 9.2.2d and 10.0.0 through 10.0.0a1.","display_reference":"CVE-2026-87664","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87664","source_title":"A session context forgery vulnerability exists in the web management daemon of Brocade Fabric OS versions 9.2.2d and 10.0.0 through 10.0.0a1. When processing local inter-process communication (IPC) storage callbacks, the service accepts and registers session structures including administrative role permissions, user identifiers, and authorization flags—without verifying the identity or authenticity of the sending process. An attacker can obtain elevated administrative privileges on the web management interface without legitimate authentication.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T16:00:38.904Z","source_hash":"content-fingerprint:fnv1a-5e70336c","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-87664-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A session context forgery vulnerability exists in the web management daemon of Brocade Fabric OS versions 9.2.2d and 10.0.0 through 10.0.0a1. When processing local inter-process communication (IPC) storage callbacks, the service accepts and registers session structures including administrative role permissions, user identifiers, and authorization flags—without verifying the identity or authenticity of the sending process. An attacker can obtain elevated administrative privileges on the web management interface without legitimate authentication.","source_quote_or_pointer":"Security Advisory CVE-2026-87664","fact_id":"SEA-CVE-2026-87664-F1","document_citation":"Security Advisory CVE-2026-87664"},{"id":"SEA-CVE-2026-87664-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A session context forgery vulnerability exists in the web management daemon of Brocade Fabric OS versions 9.2.2d and 10.0.0 through 10.0.0a1. When processing local inter-process communication (IPC) storage callbacks, the service accepts and registers session structures including administrative role permissions, user…","source_quote_or_pointer":"Advisory description (CVE-2026-87664)","fact_id":"SEA-CVE-2026-87664-F2","document_citation":"Advisory description (CVE-2026-87664)"}],"source_stated_contributors":["A session context forgery vulnerability exists in the web management daemon of Brocade Fabric OS versions 9.2.2d and 10.0.0 through 10.0.0a1. When processing local inter-process communication (IPC) storage callbacks, the service accepts and registers session structures including administrative role permissions, user…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-87664","reporting_entity":"CVE-2026-87664","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-87664-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-87664-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-87664"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-105331","title":"Local privilege escalation in Checkmk 2.5.0 before 2.5.0p10 allows a user with access to edit the Oracle Instant Client referenced by the agent plugin 'mk-oracle' to escalate their privileges if an agent has this plugin enabled.","display_title":"Software component issue could grant elevated privileges","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-105331","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105331","source_title":"Local privilege escalation in Checkmk 2.5.0 before 2.5.0p10 allows a user with access to edit the Oracle Instant Client referenced by the agent plugin 'mk-oracle' to escalate their privileges if an agent has this plugin enabled.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T16:00:38.904Z","source_hash":"content-fingerprint:fnv1a-988903a0","affected_system":{"organization":"Software component project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-105331-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Local privilege escalation in Checkmk 2.5.0 before 2.5.0p10 allows a user with access to edit the Oracle Instant Client referenced by the agent plugin 'mk-oracle' to escalate their privileges if an agent has this plugin enabled.","source_quote_or_pointer":"Security Advisory CVE-2026-105331","fact_id":"SEA-CVE-2026-105331-F1","document_citation":"Security Advisory CVE-2026-105331"},{"id":"SEA-CVE-2026-105331-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Local privilege escalation in Checkmk 2.5.0 before 2.5.0p10 allows a user with access to edit the Oracle Instant Client referenced by the agent plugin 'mk-oracle' to escalate their privileges if an agent has this plugin enabled.","source_quote_or_pointer":"Advisory description (CVE-2026-105331)","fact_id":"SEA-CVE-2026-105331-F2","document_citation":"Advisory description (CVE-2026-105331)"}],"source_stated_contributors":["Local privilege escalation in Checkmk 2.5.0 before 2.5.0p10 allows a user with access to edit the Oracle Instant Client referenced by the agent plugin 'mk-oracle' to escalate their privileges if an agent has this plugin enabled."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-002","SEA-FM-010"],"consequences":["Elevated privileges","Boundary bypass"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-105331","reporting_entity":"CVE-2026-105331","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-105331-SG1","label":"Enforce privilege boundaries in code","description":"Require explicit, server-verified authorization for privileged operations and isolate components with separate identities.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-105331-SG1","label":"Enforce privilege boundaries in code","description":"Require explicit, server-verified authorization for privileged operations and isolate components with separate identities.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A low-privilege actor reached a high-privilege capability. Enforce approval and privilege boundaries in deterministic code, not by convention.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-105331"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-107733","title":"SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, FrameOnCommand() handles CmdExec by passing a null current-tab pointer to RunWithExe(), which dereferences WindowTab::filePath. A local process in the same interactive Windows session, at an integrity level greater than or equal to SumatraPDF's under Windows UIPI, can dispatch CmdExec over DDE or WM_COPYDATA while no document tab is open, causing abrupt process termination and loss of unsaved state. No broader impact is claimed beyond the advisory-supported conditions. No fixed version is available as of this review.","display_title":"Security issue reported in Software component","display_summary":"SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, FrameOnCommand() handles CmdExec by passing a null current-tab pointer to RunWithExe(), which dereferences WindowTab::filePath.","display_reference":"CVE-2026-107733","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107733","source_title":"SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, FrameOnCommand() handles CmdExec by passing a null current-tab pointer to RunWithExe(), which dereferences WindowTab::filePath. A local process in the same interactive Windows session, at an integrity level greater than or equal to SumatraPDF's under Windows UIPI, can dispatch CmdExec over DDE or WM_COPYDATA while no document tab is open, causing abrupt process termination and loss of unsaved state. No broader impact is claimed beyond the advisory-supported conditions. No fixed version is available as of this review.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T16:00:38.904Z","source_hash":"content-fingerprint:fnv1a-1ea46646","affected_system":{"organization":"SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, FrameOnCommand() handles CmdExec by passing a null current-tab pointer to RunWithExe(), which dereferences WindowTab project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-107733-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, FrameOnCommand() handles CmdExec by passing a null current-tab pointer to RunWithExe(), which dereferences WindowTab::filePath. A local process in the same interactive Windows session, at an integrity level greater than or equal to SumatraPDF's under Windows UIPI, can dispatch CmdExec over DDE or WM_COPYDATA while no document tab is open, causing abrupt process termination and loss of unsaved state. No broader impact is claimed beyond the advisory-supported conditions. No fixed version is available as of this review.","source_quote_or_pointer":"Security Advisory CVE-2026-107733","fact_id":"SEA-CVE-2026-107733-F1","document_citation":"Security Advisory CVE-2026-107733"},{"id":"SEA-CVE-2026-107733-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, FrameOnCommand() handles CmdExec by passing a null current-tab pointer to RunWithExe(), which dereferences WindowTab::filePath.","source_quote_or_pointer":"Advisory description (CVE-2026-107733)","fact_id":"SEA-CVE-2026-107733-F2","document_citation":"Advisory description (CVE-2026-107733)"}],"source_stated_contributors":["SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, FrameOnCommand() handles CmdExec by passing a null current-tab pointer to RunWithExe(), which dereferences WindowTab::filePath."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-107733","reporting_entity":"CVE-2026-107733","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-107733-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-107733-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-107733"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-107651","title":"A flaw was found in Eye of GNOME (eog). A heap-based buffer overflow exists in the PNG metadata reader due to improper state handling when parsing split metadata chunks. A remote attacker could exploit this flaw by enticing a user into opening a specially crafted PNG file, potentially leading to arbitrary code execution or a Denial of Service (DoS) via application crash.","display_title":"Software component issue could allow unintended commands to run","display_summary":"A flaw was found in Eye of GNOME (eog). A heap-based buffer overflow exists in the PNG metadata reader due to improper state handling when parsing split metadata chunks.","display_reference":"CVE-2026-107651","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107651","source_title":"A flaw was found in Eye of GNOME (eog). A heap-based buffer overflow exists in the PNG metadata reader due to improper state handling when parsing split metadata chunks. A remote attacker could exploit this flaw by enticing a user into opening a specially crafted PNG file, potentially leading to arbitrary code execution or a Denial of Service (DoS) via application crash.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T16:00:38.904Z","source_hash":"content-fingerprint:fnv1a-2dca44d1","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-107651-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A flaw was found in Eye of GNOME (eog). A heap-based buffer overflow exists in the PNG metadata reader due to improper state handling when parsing split metadata chunks. A remote attacker could exploit this flaw by enticing a user into opening a specially crafted PNG file, potentially leading to arbitrary code execution or a Denial of Service (DoS) via application crash.","source_quote_or_pointer":"Security Advisory CVE-2026-107651","fact_id":"SEA-CVE-2026-107651-F1","document_citation":"Security Advisory CVE-2026-107651"},{"id":"SEA-CVE-2026-107651-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A flaw was found in Eye of GNOME (eog). A heap-based buffer overflow exists in the PNG metadata reader due to improper state handling when parsing split metadata chunks.","source_quote_or_pointer":"Advisory description (CVE-2026-107651)","fact_id":"SEA-CVE-2026-107651-F2","document_citation":"Advisory description (CVE-2026-107651)"}],"source_stated_contributors":["A flaw was found in Eye of GNOME (eog). A heap-based buffer overflow exists in the PNG metadata reader due to improper state handling when parsing split metadata chunks."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-107651","reporting_entity":"CVE-2026-107651","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-107651-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-107651-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-107651"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-105672","title":"TP-Link Tapo C325WB V2 contains an unauthenticated authorization bypass vulnerability in the HTTPS JSON API dispatcher on TCP port 443. An attacker on the adjacent network can append an onboarding-scoped object to a JSON request to bypass session verification and invoke privileged actions without authentication. Successful exploitation may allow an unauthenticated adjacent-network attacker to access live video and audio, modify device settings, and obtain sensitive device information or secrets.","display_title":"Software component issue could allow unauthorized access","display_summary":"C325WB V2 contains an unauthenticated authorization bypass vulnerability in the","display_reference":"CVE-2026-105672","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105672","source_title":"TP-Link Tapo C325WB V2 contains an unauthenticated authorization bypass vulnerability in the HTTPS JSON API dispatcher on TCP port 443. An attacker on the adjacent network can append an onboarding-scoped object to a JSON request to bypass session verification and invoke privileged actions without authentication. Successful exploitation may allow an unauthenticated adjacent-network attacker to access live video and audio, modify device settings, and obtain sensitive device information or secrets.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T16:00:38.904Z","source_hash":"content-fingerprint:fnv1a-66e69122","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-105672-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"TP-Link Tapo C325WB V2 contains an unauthenticated authorization bypass vulnerability in the HTTPS JSON API dispatcher on TCP port 443. An attacker on the adjacent network can append an onboarding-scoped object to a JSON request to bypass session verification and invoke privileged actions without authentication. Successful exploitation may allow an unauthenticated adjacent-network attacker to access live video and audio, modify device settings, and obtain sensitive device information or secrets.","source_quote_or_pointer":"Security Advisory CVE-2026-105672","fact_id":"SEA-CVE-2026-105672-F1","document_citation":"Security Advisory CVE-2026-105672"},{"id":"SEA-CVE-2026-105672-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"C325WB V2 contains an unauthenticated authorization bypass vulnerability in the","source_quote_or_pointer":"Advisory description (CVE-2026-105672)","fact_id":"SEA-CVE-2026-105672-F2","document_citation":"Advisory description (CVE-2026-105672)"}],"source_stated_contributors":["C325WB V2 contains an unauthenticated authorization bypass vulnerability in the"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.write_action"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-105672","reporting_entity":"CVE-2026-105672","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-105672-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-105672-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-105672"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-107830","title":"Jivejdon from commit e0306088 through commit ee67a65e lacks rate limiting on the unauthenticated /account/smsVRAction endpoint handled by SmsQQAction, allowing unlimited SMS sending. Attackers can load newAccount.jsp to set session attributes, then repeatedly call the endpoint to harass arbitrary phone numbers and exhaust the operator's Tencent Cloud SMS balance.","display_title":"Security issue reported in Software component","display_summary":"Jivejdon from commit e0306088 through commit ee67a65e lacks rate limiting on the unauthenticated /account/smsVRAction endpoint handled by SmsQQAction, allowing unlimited SMS sending.","display_reference":"CVE-2026-107830","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107830","source_title":"Jivejdon from commit e0306088 through commit ee67a65e lacks rate limiting on the unauthenticated /account/smsVRAction endpoint handled by SmsQQAction, allowing unlimited SMS sending. Attackers can load newAccount.jsp to set session attributes, then repeatedly call the endpoint to harass arbitrary phone numbers and exhaust the operator's Tencent Cloud SMS balance.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T16:00:38.904Z","source_hash":"content-fingerprint:fnv1a-32d20b9e","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Cloud & container infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-107830-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Jivejdon from commit e0306088 through commit ee67a65e lacks rate limiting on the unauthenticated /account/smsVRAction endpoint handled by SmsQQAction, allowing unlimited SMS sending. Attackers can load newAccount.jsp to set session attributes, then repeatedly call the endpoint to harass arbitrary phone numbers and exhaust the operator's Tencent Cloud SMS balance.","source_quote_or_pointer":"Security Advisory CVE-2026-107830","fact_id":"SEA-CVE-2026-107830-F1","document_citation":"Security Advisory CVE-2026-107830"},{"id":"SEA-CVE-2026-107830-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Jivejdon from commit e0306088 through commit ee67a65e lacks rate limiting on the unauthenticated /account/smsVRAction endpoint handled by SmsQQAction, allowing unlimited SMS sending.","source_quote_or_pointer":"Advisory description (CVE-2026-107830)","fact_id":"SEA-CVE-2026-107830-F2","document_citation":"Advisory description (CVE-2026-107830)"}],"source_stated_contributors":["Jivejdon from commit e0306088 through commit ee67a65e lacks rate limiting on the unauthenticated /account/smsVRAction endpoint handled by SmsQQAction, allowing unlimited SMS sending."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-107830","reporting_entity":"CVE-2026-107830","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-107830-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-107830-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-107830"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-107829","title":"Jivejdon through 5.0 contains a weak password storage vulnerability that stores account passwords as unsalted MD5 digests via ToolsUtil.hash() in AccountDaoSql. Attackers who obtain the user table through database access or SQL injection can crack passwords with precomputed tables or GPU attacks.","display_title":"Software component issue could expose or alter stored data","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-107829","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107829","source_title":"Jivejdon through 5.0 contains a weak password storage vulnerability that stores account passwords as unsalted MD5 digests via ToolsUtil.hash() in AccountDaoSql. Attackers who obtain the user table through database access or SQL injection can crack passwords with precomputed tables or GPU attacks.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T02:00:40.517Z","source_hash":"content-fingerprint:fnv1a-cb834d44","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-107829-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Jivejdon through 5.0 contains a weak password storage vulnerability that stores account passwords as unsalted MD5 digests via ToolsUtil.hash() in AccountDaoSql. Attackers who obtain the user table through database access or SQL injection can crack passwords with precomputed tables or GPU attacks.","source_quote_or_pointer":"Security Advisory CVE-2026-107829","fact_id":"SEA-CVE-2026-107829-F1","document_citation":"Security Advisory CVE-2026-107829"},{"id":"SEA-CVE-2026-107829-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Jivejdon through 5.0 contains a weak password storage vulnerability that stores account passwords as unsalted MD5 digests via ToolsUtil.hash() in AccountDaoSql. Attackers who obtain the user table through database access or SQL injection can crack passwords with precomputed tables or GPU attacks.","source_quote_or_pointer":"Advisory description (CVE-2026-107829)","fact_id":"SEA-CVE-2026-107829-F2","document_citation":"Advisory description (CVE-2026-107829)"}],"source_stated_contributors":["Jivejdon through 5.0 contains a weak password storage vulnerability that stores account passwords as unsalted MD5 digests via ToolsUtil.hash() in AccountDaoSql. Attackers who obtain the user table through database access or SQL injection can crack passwords with precomputed tables or GPU attacks."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-107829","reporting_entity":"CVE-2026-107829","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-107829-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-107829-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-107829"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-107726","title":"Hazelcast is a unified real-time data platform combining stream processing with a fast data store. Prior to 5.4.5, 5.5.10, and 5.6.1, improper validation of data supplied by a malicious client able to connect to a cluster allows arbitrary reads from a cluster member's Java heap, off-heap data, and JVM process address space. The same flaw can crash cluster members and, in some Hazelcast Enterprise Edition configurations, corrupt memory with possible arbitrary code execution. Both slim and full distributions are affected. This issue is fixed in versions 5.4.5, 5.5.10, 5.6.1, and 5.7.0.","display_title":"Software component issue could allow unintended commands to run","display_summary":"Hazelcast is a unified real-time data platform combining stream processing with a fast data store. Prior to 5.4.5, 5.5.10, and 5.6.1, improper validation of data supplied by a malicious client able to connect to a…","display_reference":"CVE-2026-107726","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107726","source_title":"Hazelcast is a unified real-time data platform combining stream processing with a fast data store. Prior to 5.4.5, 5.5.10, and 5.6.1, improper validation of data supplied by a malicious client able to connect to a cluster allows arbitrary reads from a cluster member's Java heap, off-heap data, and JVM process address space. The same flaw can crash cluster members and, in some Hazelcast Enterprise Edition configurations, corrupt memory with possible arbitrary code execution. Both slim and full distributions are affected. This issue is fixed in versions 5.4.5, 5.5.10, 5.6.1, and 5.7.0.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T02:00:40.517Z","source_hash":"content-fingerprint:fnv1a-83c86560","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-107726-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Hazelcast is a unified real-time data platform combining stream processing with a fast data store. Prior to 5.4.5, 5.5.10, and 5.6.1, improper validation of data supplied by a malicious client able to connect to a cluster allows arbitrary reads from a cluster member's Java heap, off-heap data, and JVM process address space. The same flaw can crash cluster members and, in some Hazelcast Enterprise Edition configurations, corrupt memory with possible arbitrary code execution. Both slim and full distributions are affected. This issue is fixed in versions 5.4.5, 5.5.10, 5.6.1, and 5.7.0.","source_quote_or_pointer":"Security Advisory CVE-2026-107726","fact_id":"SEA-CVE-2026-107726-F1","document_citation":"Security Advisory CVE-2026-107726"},{"id":"SEA-CVE-2026-107726-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Hazelcast is a unified real-time data platform combining stream processing with a fast data store. Prior to 5.4.5, 5.5.10, and 5.6.1, improper validation of data supplied by a malicious client able to connect to a cluster allows arbitrary reads from a cluster member's Java heap, off-heap data, and JVM process address…","source_quote_or_pointer":"Advisory description (CVE-2026-107726)","fact_id":"SEA-CVE-2026-107726-F2","document_citation":"Advisory description (CVE-2026-107726)"}],"source_stated_contributors":["Hazelcast is a unified real-time data platform combining stream processing with a fast data store. Prior to 5.4.5, 5.5.10, and 5.6.1, improper validation of data supplied by a malicious client able to connect to a cluster allows arbitrary reads from a cluster member's Java heap, off-heap data, and JVM process address…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","arch.async_job","arch.event_driven"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-107726","reporting_entity":"CVE-2026-107726","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-107726-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-107726-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-107726"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-107714","title":"The Mechanize library is used for automating interaction with websites. Prior to 2.14.1, Mechanize::HTTP::Agentresponse_redirect treats redirects as same-origin when the host matches without consistently comparing scheme and port. A same-host HTTPS-to-HTTP redirect can send Authorization and Cookie headers over cleartext, while a same-host redirect to another port can send a caller-supplied Cookie header to a different service. Cookies in Mechanizecookie_jar remain scoped separately; the issue affects caller-supplied headers and can disclose credentials without affecting integrity or availability. This issue is fixed in version 2.14.1.","display_title":"Software component issue could expose accounts or credentials","display_summary":"The Mechanize library is used for automating interaction with websites. Prior to 2.14.1, Mechanize::HTTP::Agentresponseredirect treats redirects as same-origin when the host matches without consistently comparing scheme…","display_reference":"CVE-2026-107714","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107714","source_title":"The Mechanize library is used for automating interaction with websites. Prior to 2.14.1, Mechanize::HTTP::Agentresponse_redirect treats redirects as same-origin when the host matches without consistently comparing scheme and port. A same-host HTTPS-to-HTTP redirect can send Authorization and Cookie headers over cleartext, while a same-host redirect to another port can send a caller-supplied Cookie header to a different service. Cookies in Mechanizecookie_jar remain scoped separately; the issue affects caller-supplied headers and can disclose credentials without affecting integrity or availability. This issue is fixed in version 2.14.1.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T02:00:40.517Z","source_hash":"content-fingerprint:fnv1a-f62d6721","affected_system":{"organization":"The Mechanize library is used for automating interaction with websites. Prior to 2.14.1, Mechanize project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-107714-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Mechanize library is used for automating interaction with websites. Prior to 2.14.1, Mechanize::HTTP::Agentresponse_redirect treats redirects as same-origin when the host matches without consistently comparing scheme and port. A same-host HTTPS-to-HTTP redirect can send Authorization and Cookie headers over cleartext, while a same-host redirect to another port can send a caller-supplied Cookie header to a different service. Cookies in Mechanizecookie_jar remain scoped separately; the issue affects caller-supplied headers and can disclose credentials without affecting integrity or availability. This issue is fixed in version 2.14.1.","source_quote_or_pointer":"Security Advisory CVE-2026-107714","fact_id":"SEA-CVE-2026-107714-F1","document_citation":"Security Advisory CVE-2026-107714"},{"id":"SEA-CVE-2026-107714-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Mechanize library is used for automating interaction with websites. Prior to 2.14.1, Mechanize::HTTP::Agentresponseredirect treats redirects as same-origin when the host matches without consistently comparing scheme and port.","source_quote_or_pointer":"Advisory description (CVE-2026-107714)","fact_id":"SEA-CVE-2026-107714-F2","document_citation":"Advisory description (CVE-2026-107714)"}],"source_stated_contributors":["The Mechanize library is used for automating interaction with websites. Prior to 2.14.1, Mechanize::HTTP::Agentresponseredirect treats redirects as same-origin when the host matches without consistently comparing scheme and port."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-107714","reporting_entity":"CVE-2026-107714","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-107714-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-107714-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-107714"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2025-71428","title":"Jivejdon through 5.0 contains a sql injection vulnerability in AccountDaoSql.getAccountByNameLike() that allows authenticated administrators to inject SQL via the username parameter. Attackers with the Admin role can submit crafted input to /admin/user/userListAction to read database contents, including other accounts' password hashes.","display_title":"Software component issue could expose or alter stored data","display_summary":"Jivejdon through 5.0 contains a sql injection vulnerability in AccountDaoSql.getAccountByNameLike() that allows authenticated administrators to inject SQL via the username parameter.","display_reference":"CVE-2025-71428","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2025-71428","source_title":"Jivejdon through 5.0 contains a sql injection vulnerability in AccountDaoSql.getAccountByNameLike() that allows authenticated administrators to inject SQL via the username parameter. Attackers with the Admin role can submit crafted input to /admin/user/userListAction to read database contents, including other accounts' password hashes.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T02:00:40.517Z","source_hash":"content-fingerprint:fnv1a-6d163cce","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2025-71428-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Jivejdon through 5.0 contains a sql injection vulnerability in AccountDaoSql.getAccountByNameLike() that allows authenticated administrators to inject SQL via the username parameter. Attackers with the Admin role can submit crafted input to /admin/user/userListAction to read database contents, including other accounts' password hashes.","source_quote_or_pointer":"Security Advisory CVE-2025-71428","fact_id":"SEA-CVE-2025-71428-F1","document_citation":"Security Advisory CVE-2025-71428"},{"id":"SEA-CVE-2025-71428-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Jivejdon through 5.0 contains a sql injection vulnerability in AccountDaoSql.getAccountByNameLike() that allows authenticated administrators to inject SQL via the username parameter.","source_quote_or_pointer":"Advisory description (CVE-2025-71428)","fact_id":"SEA-CVE-2025-71428-F2","document_citation":"Advisory description (CVE-2025-71428)"}],"source_stated_contributors":["Jivejdon through 5.0 contains a sql injection vulnerability in AccountDaoSql.getAccountByNameLike() that allows authenticated administrators to inject SQL via the username parameter."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.write_action","data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2025-71428","reporting_entity":"CVE-2025-71428","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2025-71428-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2025-71428-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2025-71428"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-107449","title":"linuxserver Heimdall through 2.8.3 applies its SafeUrlFetcher SSRF protection mechanism only to ItemController; the enhanced-application test and live-stats requests occur via SupportedApps::execute(), a GuzzleHttp client that lacks IP address restrictions. In some realistic installations, the POST /test_config (and GET /get_stats) endpoints are accessible through CSRF, and thus an unauthenticated attacker can force the server to send requests to arbitrary internal hosts and ports (including 169.254.169.254) and read a status/port oracle in addition to partial response data.","display_title":"Software component issue could reach internal services","display_summary":"linuxserver Heimdall through 2.8.3 applies its SafeUrlFetcher SSRF protection mechanism only to ItemController; the enhanced-application test and live-stats requests occur via SupportedApps::execute(), a GuzzleHttp…","display_reference":"CVE-2026-107449","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107449","source_title":"linuxserver Heimdall through 2.8.3 applies its SafeUrlFetcher SSRF protection mechanism only to ItemController; the enhanced-application test and live-stats requests occur via SupportedApps::execute(), a GuzzleHttp client that lacks IP address restrictions. In some realistic installations, the POST /test_config (and GET /get_stats) endpoints are accessible through CSRF, and thus an unauthenticated attacker can force the server to send requests to arbitrary internal hosts and ports (including 169.254.169.254) and read a status/port oracle in addition to partial response data.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T02:00:40.517Z","source_hash":"content-fingerprint:fnv1a-d9632466","affected_system":{"organization":"linuxserver Heimdall through 2.8.3 applies its SafeUrlFetcher SSRF protection mechanism only to ItemController; the enhanced-application test and live-stats requests occur via SupportedApps project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-107449-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"linuxserver Heimdall through 2.8.3 applies its SafeUrlFetcher SSRF protection mechanism only to ItemController; the enhanced-application test and live-stats requests occur via SupportedApps::execute(), a GuzzleHttp client that lacks IP address restrictions. In some realistic installations, the POST /test_config (and GET /get_stats) endpoints are accessible through CSRF, and thus an unauthenticated attacker can force the server to send requests to arbitrary internal hosts and ports (including 169.254.169.254) and read a status/port oracle in addition to partial response data.","source_quote_or_pointer":"Security Advisory CVE-2026-107449","fact_id":"SEA-CVE-2026-107449-F1","document_citation":"Security Advisory CVE-2026-107449"},{"id":"SEA-CVE-2026-107449-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"linuxserver Heimdall through 2.8.3 applies its SafeUrlFetcher SSRF protection mechanism only to ItemController; the enhanced-application test and live-stats requests occur via SupportedApps::execute(), a GuzzleHttp client that lacks IP address restrictions.","source_quote_or_pointer":"Advisory description (CVE-2026-107449)","fact_id":"SEA-CVE-2026-107449-F2","document_citation":"Advisory description (CVE-2026-107449)"}],"source_stated_contributors":["linuxserver Heimdall through 2.8.3 applies its SafeUrlFetcher SSRF protection mechanism only to ItemController; the enhanced-application test and live-stats requests occur via SupportedApps::execute(), a GuzzleHttp client that lacks IP address restrictions."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Internal network access","Cloud metadata or credential exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-107449","reporting_entity":"CVE-2026-107449","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-107449-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-107449-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"The service fetched a URL chosen by the caller and could be steered at internal systems. Restrict outbound destinations and block internal address ranges.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-107449"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-107640","title":"Integrics Enswitch 3.13 through 4.4 contains an authentication bypass vulnerability in /api/json/user/password/update/ that allows unauthenticated attackers to change account passwords by omitting the reset parameter. Attackers can target accounts with no pending reset, whose empty reset_key matches the defaulted empty value, to take over administrator accounts after enumerating valid usernames.","display_title":"Software component issue could allow unauthorized access","display_summary":"Integrics Enswitch 3.13 through 4.4 contains an authentication bypass vulnerability in /api/json/user/password/update/ that allows unauthenticated attackers to change account passwords by omitting the reset parameter.","display_reference":"CVE-2026-107640","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107640","source_title":"Integrics Enswitch 3.13 through 4.4 contains an authentication bypass vulnerability in /api/json/user/password/update/ that allows unauthenticated attackers to change account passwords by omitting the reset parameter. Attackers can target accounts with no pending reset, whose empty reset_key matches the defaulted empty value, to take over administrator accounts after enumerating valid usernames.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T02:00:40.517Z","source_hash":"content-fingerprint:fnv1a-e4b4aa77","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-107640-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Integrics Enswitch 3.13 through 4.4 contains an authentication bypass vulnerability in /api/json/user/password/update/ that allows unauthenticated attackers to change account passwords by omitting the reset parameter. Attackers can target accounts with no pending reset, whose empty reset_key matches the defaulted empty value, to take over administrator accounts after enumerating valid usernames.","source_quote_or_pointer":"Security Advisory CVE-2026-107640","fact_id":"SEA-CVE-2026-107640-F1","document_citation":"Security Advisory CVE-2026-107640"},{"id":"SEA-CVE-2026-107640-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Integrics Enswitch 3.13 through 4.4 contains an authentication bypass vulnerability in /api/json/user/password/update/ that allows unauthenticated attackers to change account passwords by omitting the reset parameter.","source_quote_or_pointer":"Advisory description (CVE-2026-107640)","fact_id":"SEA-CVE-2026-107640-F2","document_citation":"Advisory description (CVE-2026-107640)"}],"source_stated_contributors":["Integrics Enswitch 3.13 through 4.4 contains an authentication bypass vulnerability in /api/json/user/password/update/ that allows unauthenticated attackers to change account passwords by omitting the reset parameter."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.write_action","data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-107640","reporting_entity":"CVE-2026-107640","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-107640-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-107640-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-107640"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-9209","title":"mJobTime through build 15.7.3.32 contains an unauthenticated SQL execution vulnerability in the Login.aspx admin panel handlers, where the runQueryButton postback and exportSqlQuery_Server PageMethod execute caller-supplied SQL against the backing Sybase SQL Anywhere database using DBA/sysadmin privileges with no server-side authentication enforced beyond a client-side sessionStorage flag. Attackers can submit arbitrary SQL through these exposed endpoints to invoke xp_cmdshell and xp_read_file, achieving pre-authentication remote code execution as LocalSystem via a single HTTP request.","display_title":"Software component issue could allow unintended commands to run","display_summary":"mJobTime through build 15.7.3.32 contains an unauthenticated SQL execution vulnerability in the Login.aspx admin panel handlers, where the runQueryButton postback and exportSqlQueryServer PageMethod execute…","display_reference":"CVE-2026-9209","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-9209","source_title":"mJobTime through build 15.7.3.32 contains an unauthenticated SQL execution vulnerability in the Login.aspx admin panel handlers, where the runQueryButton postback and exportSqlQuery_Server PageMethod execute caller-supplied SQL against the backing Sybase SQL Anywhere database using DBA/sysadmin privileges with no server-side authentication enforced beyond a client-side sessionStorage flag. Attackers can submit arbitrary SQL through these exposed endpoints to invoke xp_cmdshell and xp_read_file, achieving pre-authentication remote code execution as LocalSystem via a single HTTP request.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T02:00:40.517Z","source_hash":"content-fingerprint:fnv1a-62c0fd0d","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-9209-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"mJobTime through build 15.7.3.32 contains an unauthenticated SQL execution vulnerability in the Login.aspx admin panel handlers, where the runQueryButton postback and exportSqlQuery_Server PageMethod execute caller-supplied SQL against the backing Sybase SQL Anywhere database using DBA/sysadmin privileges with no server-side authentication enforced beyond a client-side sessionStorage flag. Attackers can submit arbitrary SQL through these exposed endpoints to invoke xp_cmdshell and xp_read_file, achieving pre-authentication remote code execution as LocalSystem via a single HTTP request.","source_quote_or_pointer":"Security Advisory CVE-2026-9209","fact_id":"SEA-CVE-2026-9209-F1","document_citation":"Security Advisory CVE-2026-9209"},{"id":"SEA-CVE-2026-9209-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"mJobTime through build 15.7.3.32 contains an unauthenticated SQL execution vulnerability in the Login.aspx admin panel handlers, where the runQueryButton postback and exportSqlQueryServer PageMethod execute caller-supplied SQL against the backing Sybase SQL Anywhere database using DBA/sysadmin privileges with no…","source_quote_or_pointer":"Advisory description (CVE-2026-9209)","fact_id":"SEA-CVE-2026-9209-F2","document_citation":"Advisory description (CVE-2026-9209)"}],"source_stated_contributors":["mJobTime through build 15.7.3.32 contains an unauthenticated SQL execution vulnerability in the Login.aspx admin panel handlers, where the runQueryButton postback and exportSqlQueryServer PageMethod execute caller-supplied SQL against the backing Sybase SQL Anywhere database using DBA/sysadmin privileges with no…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.write_action"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-9209","reporting_entity":"CVE-2026-9209","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-9209-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-9209-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-9209"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-107699","title":"ppt2png through 0.0.6 contains an OS command injection vulnerability that allows attackers to execute operating system commands by supplying unsanitized input or output path arguments. Attackers can append shell metacharacters such as ';' to file names passed to child_process.exec() in ppt2png.js, running commands with Node.js process privileges.","display_title":"Software component issue could allow unintended commands to run","display_summary":"ppt2png through 0.0.6 contains an OS command injection vulnerability that allows attackers to execute operating system commands by supplying unsanitized input or output path arguments.","display_reference":"CVE-2026-107699","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107699","source_title":"ppt2png through 0.0.6 contains an OS command injection vulnerability that allows attackers to execute operating system commands by supplying unsanitized input or output path arguments. Attackers can append shell metacharacters such as ';' to file names passed to child_process.exec() in ppt2png.js, running commands with Node.js process privileges.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T02:00:40.517Z","source_hash":"content-fingerprint:fnv1a-13749129","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-107699-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"ppt2png through 0.0.6 contains an OS command injection vulnerability that allows attackers to execute operating system commands by supplying unsanitized input or output path arguments. Attackers can append shell metacharacters such as ';' to file names passed to child_process.exec() in ppt2png.js, running commands with Node.js process privileges.","source_quote_or_pointer":"Security Advisory CVE-2026-107699","fact_id":"SEA-CVE-2026-107699-F1","document_citation":"Security Advisory CVE-2026-107699"},{"id":"SEA-CVE-2026-107699-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"ppt2png through 0.0.6 contains an OS command injection vulnerability that allows attackers to execute operating system commands by supplying unsanitized input or output path arguments.","source_quote_or_pointer":"Advisory description (CVE-2026-107699)","fact_id":"SEA-CVE-2026-107699-F2","document_citation":"Advisory description (CVE-2026-107699)"}],"source_stated_contributors":["ppt2png through 0.0.6 contains an OS command injection vulnerability that allows attackers to execute operating system commands by supplying unsanitized input or output path arguments."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-107699","reporting_entity":"CVE-2026-107699","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-107699-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-107699-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-107699"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-107700","title":"dot-access 0.0.3 through 1.0.0 contains a code injection vulnerability that allows remote attackers to execute JavaScript by supplying crafted paths to get(). The path is concatenated into a new Function body in index.js, so attackers can reach constructor.constructor to load child_process and run operating system commands in the Node.js process.","display_title":"Security issue reported in Software component","display_summary":"dot-access 0.0.3 through 1.0.0 contains a code injection vulnerability that allows remote attackers to execute JavaScript by supplying crafted paths to get().","display_reference":"CVE-2026-107700","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107700","source_title":"dot-access 0.0.3 through 1.0.0 contains a code injection vulnerability that allows remote attackers to execute JavaScript by supplying crafted paths to get(). The path is concatenated into a new Function body in index.js, so attackers can reach constructor.constructor to load child_process and run operating system commands in the Node.js process.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T02:00:40.517Z","source_hash":"content-fingerprint:fnv1a-5b33f4d8","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-107700-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"dot-access 0.0.3 through 1.0.0 contains a code injection vulnerability that allows remote attackers to execute JavaScript by supplying crafted paths to get(). The path is concatenated into a new Function body in index.js, so attackers can reach constructor.constructor to load child_process and run operating system commands in the Node.js process.","source_quote_or_pointer":"Security Advisory CVE-2026-107700","fact_id":"SEA-CVE-2026-107700-F1","document_citation":"Security Advisory CVE-2026-107700"},{"id":"SEA-CVE-2026-107700-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"dot-access 0.0.3 through 1.0.0 contains a code injection vulnerability that allows remote attackers to execute JavaScript by supplying crafted paths to get(). The path is concatenated into a new Function body in index.js, so attackers can reach constructor.constructor to load childprocess and run operating system…","source_quote_or_pointer":"Advisory description (CVE-2026-107700)","fact_id":"SEA-CVE-2026-107700-F2","document_citation":"Advisory description (CVE-2026-107700)"}],"source_stated_contributors":["dot-access 0.0.3 through 1.0.0 contains a code injection vulnerability that allows remote attackers to execute JavaScript by supplying crafted paths to get(). The path is concatenated into a new Function body in index.js, so attackers can reach constructor.constructor to load childprocess and run operating system…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-107700","reporting_entity":"CVE-2026-107700","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-107700-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-107700-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-107700"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-107703","title":"@enmaso/node-convert through 1.0.0 contains an OS command injection vulnerability in convert.js that allows attackers to execute shell commands via unsanitized filepath and convertTo arguments. Attackers can inject shell metacharacters or a single quote into the ImageMagick command run by child_process.exec() to execute operating system commands with Node.js process privileges.","display_title":"Software component issue could allow unintended commands to run","display_summary":"@enmaso/node-convert through 1.0.0 contains an OS command injection vulnerability in convert.js that allows attackers to execute shell commands via unsanitized filepath and convertTo arguments.","display_reference":"CVE-2026-107703","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107703","source_title":"@enmaso/node-convert through 1.0.0 contains an OS command injection vulnerability in convert.js that allows attackers to execute shell commands via unsanitized filepath and convertTo arguments. Attackers can inject shell metacharacters or a single quote into the ImageMagick command run by child_process.exec() to execute operating system commands with Node.js process privileges.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T02:00:40.517Z","source_hash":"content-fingerprint:fnv1a-3bc269ef","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-107703-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"@enmaso/node-convert through 1.0.0 contains an OS command injection vulnerability in convert.js that allows attackers to execute shell commands via unsanitized filepath and convertTo arguments. Attackers can inject shell metacharacters or a single quote into the ImageMagick command run by child_process.exec() to execute operating system commands with Node.js process privileges.","source_quote_or_pointer":"Security Advisory CVE-2026-107703","fact_id":"SEA-CVE-2026-107703-F1","document_citation":"Security Advisory CVE-2026-107703"},{"id":"SEA-CVE-2026-107703-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"@enmaso/node-convert through 1.0.0 contains an OS command injection vulnerability in convert.js that allows attackers to execute shell commands via unsanitized filepath and convertTo arguments.","source_quote_or_pointer":"Advisory description (CVE-2026-107703)","fact_id":"SEA-CVE-2026-107703-F2","document_citation":"Advisory description (CVE-2026-107703)"}],"source_stated_contributors":["@enmaso/node-convert through 1.0.0 contains an OS command injection vulnerability in convert.js that allows attackers to execute shell commands via unsanitized filepath and convertTo arguments."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-107703","reporting_entity":"CVE-2026-107703","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-107703-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-107703-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-107703"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-107318","title":"@fastify/reply-from is a Fastify plugin that forwards requests to an upstream HTTP or HTTPS server. In versions prior to 12.7.0, all of the built-in HTTPS transports override the secure default and set rejectUnauthorized to false, so the proxy does not verify the TLS certificate of the upstream even when the application points it at an https upstream in the default configuration. An on-path network attacker can therefore impersonate the configured HTTPS upstream, read the credentials and request bodies the proxy forwards, and return forged responses that the application trusts. The issue is fixed in @fastify/reply-from 12.7.0, and users should upgrade to 12.7.0 or later. As a workaround, pass an explicit rejectUnauthorized true on the transport, supply an already configured undici instance, or use the undici global agent.","display_title":"Software component issue could expose accounts or credentials","display_summary":"@fastify/reply-from is a Fastify plugin that forwards requests to an upstream HTTP or HTTPS server. In versions prior to 12.7.0, all of the built-in HTTPS transports override the secure default and set rejectUnauthorized…","display_reference":"CVE-2026-107318","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107318","source_title":"@fastify/reply-from is a Fastify plugin that forwards requests to an upstream HTTP or HTTPS server. In versions prior to 12.7.0, all of the built-in HTTPS transports override the secure default and set rejectUnauthorized to false, so the proxy does not verify the TLS certificate of the upstream even when the application points it at an https upstream in the default configuration. An on-path network attacker can therefore impersonate the configured HTTPS upstream, read the credentials and request bodies the proxy forwards, and return forged responses that the application trusts. The issue is fixed in @fastify/reply-from 12.7.0, and users should upgrade to 12.7.0 or later. As a workaround, pass an explicit rejectUnauthorized true on the transport, supply an already configured undici instance, or use the undici global agent.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T02:00:40.517Z","source_hash":"content-fingerprint:fnv1a-72812ceb","affected_system":{"organization":"Software component project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-107318-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"@fastify/reply-from is a Fastify plugin that forwards requests to an upstream HTTP or HTTPS server. In versions prior to 12.7.0, all of the built-in HTTPS transports override the secure default and set rejectUnauthorized to false, so the proxy does not verify the TLS certificate of the upstream even when the application points it at an https upstream in the default configuration. An on-path network attacker can therefore impersonate the configured HTTPS upstream, read the credentials and request bodies the proxy forwards, and return forged responses that the application trusts. The issue is fixed in @fastify/reply-from 12.7.0, and users should upgrade to 12.7.0 or later. As a workaround, pass an explicit rejectUnauthorized true on the transport, supply an already configured undici instance, or use the undici global agent.","source_quote_or_pointer":"Security Advisory CVE-2026-107318","fact_id":"SEA-CVE-2026-107318-F1","document_citation":"Security Advisory CVE-2026-107318"},{"id":"SEA-CVE-2026-107318-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"@fastify/reply-from is a Fastify plugin that forwards requests to an upstream HTTP or HTTPS server. In versions prior to 12.7.0, all of the built-in HTTPS transports override the secure default and set rejectUnauthorized to false, so the proxy does not verify the TLS certificate of the upstream even when the…","source_quote_or_pointer":"Advisory description (CVE-2026-107318)","fact_id":"SEA-CVE-2026-107318-F2","document_citation":"Advisory description (CVE-2026-107318)"}],"source_stated_contributors":["@fastify/reply-from is a Fastify plugin that forwards requests to an upstream HTTP or HTTPS server. In versions prior to 12.7.0, all of the built-in HTTPS transports override the secure default and set rejectUnauthorized to false, so the proxy does not verify the TLS certificate of the upstream even when the…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","data.credentials_secrets","arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-012","SEA-FM-010"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-107318","reporting_entity":"CVE-2026-107318","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-107318-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-107318-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-107318"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-93699","title":"Argument injection in WP Toolkit for cPanel allows local users to execute arbitrary code as other accounts on the same server.","display_title":"Software component issue could allow unintended commands to run","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-93699","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93699","source_title":"Argument injection in WP Toolkit for cPanel allows local users to execute arbitrary code as other accounts on the same server.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T02:00:40.517Z","source_hash":"content-fingerprint:fnv1a-c1fe539","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-93699-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Argument injection in WP Toolkit for cPanel allows local users to execute arbitrary code as other accounts on the same server.","source_quote_or_pointer":"Security Advisory CVE-2026-93699","fact_id":"SEA-CVE-2026-93699-F1","document_citation":"Security Advisory CVE-2026-93699"},{"id":"SEA-CVE-2026-93699-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Argument injection in WP Toolkit for cPanel allows local users to execute arbitrary code as other accounts on the same server.","source_quote_or_pointer":"Advisory description (CVE-2026-93699)","fact_id":"SEA-CVE-2026-93699-F2","document_citation":"Advisory description (CVE-2026-93699)"}],"source_stated_contributors":["Argument injection in WP Toolkit for cPanel allows local users to execute arbitrary code as other accounts on the same server."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-93699","reporting_entity":"CVE-2026-93699","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-93699-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-93699-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-93699"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-95208","title":"An issue in the ConfirmNameConstraints() function (wolfcrypt/src/asn.c) of wolfSSL v5.9.1 and v5.9.2 allows attackers to cause a Denial of Service (DoS) via providing crafted Certificate Authority certificates, leading to valid certificates without SAN to be incorrectly rejected by wolfSSL-based TLS clients.","display_title":"Software component issue could make the service unavailable","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-95208","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95208","source_title":"An issue in the ConfirmNameConstraints() function (wolfcrypt/src/asn.c) of wolfSSL v5.9.1 and v5.9.2 allows attackers to cause a Denial of Service (DoS) via providing crafted Certificate Authority certificates, leading to valid certificates without SAN to be incorrectly rejected by wolfSSL-based TLS clients.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T02:00:40.517Z","source_hash":"content-fingerprint:fnv1a-c4e06137","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-95208-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"An issue in the ConfirmNameConstraints() function (wolfcrypt/src/asn.c) of wolfSSL v5.9.1 and v5.9.2 allows attackers to cause a Denial of Service (DoS) via providing crafted Certificate Authority certificates, leading to valid certificates without SAN to be incorrectly rejected by wolfSSL-based TLS clients.","source_quote_or_pointer":"Security Advisory CVE-2026-95208","fact_id":"SEA-CVE-2026-95208-F1","document_citation":"Security Advisory CVE-2026-95208"},{"id":"SEA-CVE-2026-95208-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"An issue in the ConfirmNameConstraints() function (wolfcrypt/src/asn.c) of wolfSSL v5.9.1 and v5.9.2 allows attackers to cause a Denial of Service (DoS) via providing crafted Certificate Authority certificates, leading to valid certificates without SAN to be incorrectly rejected by wolfSSL-based TLS clients.","source_quote_or_pointer":"Advisory description (CVE-2026-95208)","fact_id":"SEA-CVE-2026-95208-F2","document_citation":"Advisory description (CVE-2026-95208)"}],"source_stated_contributors":["An issue in the ConfirmNameConstraints() function (wolfcrypt/src/asn.c) of wolfSSL v5.9.1 and v5.9.2 allows attackers to cause a Denial of Service (DoS) via providing crafted Certificate Authority certificates, leading to valid certificates without SAN to be incorrectly rejected by wolfSSL-based TLS clients."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-95208","reporting_entity":"CVE-2026-95208","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-95208-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-95208-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-95208"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-87726","title":"Insufficient API bounds checking in phalFelica in NXP NXPNfcRdLib RC663 through 07.14.00_Pub may allow an attacker with privileges or an untrusted third party to access unintended memory regions, potentially leading to limited loss of confidentiality, integrity, and availability. All software versions from 07.18.00 onwards have fixed this problem.","display_title":"Security issue reported in Software component","display_summary":"Insufficient API bounds checking in phalFelica in NXP NXPNfcRdLib RC663 through 07.14.00Pub may allow an attacker with privileges or an untrusted third party to access unintended memory regions, potentially leading to…","display_reference":"CVE-2026-87726","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87726","source_title":"Insufficient API bounds checking in phalFelica in NXP NXPNfcRdLib RC663 through 07.14.00_Pub may allow an attacker with privileges or an untrusted third party to access unintended memory regions, potentially leading to limited loss of confidentiality, integrity, and availability. All software versions from 07.18.00 onwards have fixed this problem.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T02:00:40.517Z","source_hash":"content-fingerprint:fnv1a-76479481","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-87726-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Insufficient API bounds checking in phalFelica in NXP NXPNfcRdLib RC663 through 07.14.00_Pub may allow an attacker with privileges or an untrusted third party to access unintended memory regions, potentially leading to limited loss of confidentiality, integrity, and availability. All software versions from 07.18.00 onwards have fixed this problem.","source_quote_or_pointer":"Security Advisory CVE-2026-87726","fact_id":"SEA-CVE-2026-87726-F1","document_citation":"Security Advisory CVE-2026-87726"},{"id":"SEA-CVE-2026-87726-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Insufficient API bounds checking in phalFelica in NXP NXPNfcRdLib RC663 through 07.14.00Pub may allow an attacker with privileges or an untrusted third party to access unintended memory regions, potentially leading to limited loss of confidentiality, integrity, and availability.","source_quote_or_pointer":"Advisory description (CVE-2026-87726)","fact_id":"SEA-CVE-2026-87726-F2","document_citation":"Advisory description (CVE-2026-87726)"}],"source_stated_contributors":["Insufficient API bounds checking in phalFelica in NXP NXPNfcRdLib RC663 through 07.14.00Pub may allow an attacker with privileges or an untrusted third party to access unintended memory regions, potentially leading to limited loss of confidentiality, integrity, and availability."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-87726","reporting_entity":"CVE-2026-87726","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-87726-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-87726-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-87726"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2017-20283","title":"NXP MQX Classic before 5.0 contains an out-of-bounds write vulnerability in the RTCS UDP recvfrom() implementation. Improper enforcement of the application-supplied receive buffer length may allow a crafted UDP packet to overflow the destination buffer, resulting in memory corruption, or denial of service.","display_title":"Software component issue could make the service unavailable","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2017-20283","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2017-20283","source_title":"NXP MQX Classic before 5.0 contains an out-of-bounds write vulnerability in the RTCS UDP recvfrom() implementation. Improper enforcement of the application-supplied receive buffer length may allow a crafted UDP packet to overflow the destination buffer, resulting in memory corruption, or denial of service.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T02:00:40.517Z","source_hash":"content-fingerprint:fnv1a-ea5a6644","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2017-20283-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"NXP MQX Classic before 5.0 contains an out-of-bounds write vulnerability in the RTCS UDP recvfrom() implementation. Improper enforcement of the application-supplied receive buffer length may allow a crafted UDP packet to overflow the destination buffer, resulting in memory corruption, or denial of service.","source_quote_or_pointer":"Security Advisory CVE-2017-20283","fact_id":"SEA-CVE-2017-20283-F1","document_citation":"Security Advisory CVE-2017-20283"},{"id":"SEA-CVE-2017-20283-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"NXP MQX Classic before 5.0 contains an out-of-bounds write vulnerability in the RTCS UDP recvfrom() implementation. Improper enforcement of the application-supplied receive buffer length may allow a crafted UDP packet to overflow the destination buffer, resulting in memory corruption, or denial of service.","source_quote_or_pointer":"Advisory description (CVE-2017-20283)","fact_id":"SEA-CVE-2017-20283-F2","document_citation":"Advisory description (CVE-2017-20283)"}],"source_stated_contributors":["NXP MQX Classic before 5.0 contains an out-of-bounds write vulnerability in the RTCS UDP recvfrom() implementation. Improper enforcement of the application-supplied receive buffer length may allow a crafted UDP packet to overflow the destination buffer, resulting in memory corruption, or denial of service."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2017-20283","reporting_entity":"CVE-2017-20283","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2017-20283-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2017-20283-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2017-20283"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-105830","title":"league/commonmark from 2.0.0 before 2.10.2 contains a quadratic-time denial of service vulnerability in the GitHub Flavored Markdown Table extension's TableStartParser::tryStart() block-start scan. Unauthenticated attackers can submit a large paragraph of pipe-free lines not starting with letters, forcing repeated full-buffer strpos scans that exhaust PHP worker CPU.","display_title":"Software component issue could make the service unavailable","display_summary":"league/commonmark from 2.0.0 before 2.10.2 contains a quadratic-time denial of service vulnerability in the GitHub Flavored Markdown Table extension's TableStartParser::tryStart() block-start scan.","display_reference":"CVE-2026-105830","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105830","source_title":"league/commonmark from 2.0.0 before 2.10.2 contains a quadratic-time denial of service vulnerability in the GitHub Flavored Markdown Table extension's TableStartParser::tryStart() block-start scan. Unauthenticated attackers can submit a large paragraph of pipe-free lines not starting with letters, forcing repeated full-buffer strpos scans that exhaust PHP worker CPU.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T02:00:40.517Z","source_hash":"content-fingerprint:fnv1a-783f0c8c","affected_system":{"organization":"league/commonmark from 2.0.0 before 2.10.2 contains a quadratic-time denial of service vulnerability in the GitHub Flavored Markdown Table extension's TableStartParser project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-105830-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"league/commonmark from 2.0.0 before 2.10.2 contains a quadratic-time denial of service vulnerability in the GitHub Flavored Markdown Table extension's TableStartParser::tryStart() block-start scan. Unauthenticated attackers can submit a large paragraph of pipe-free lines not starting with letters, forcing repeated full-buffer strpos scans that exhaust PHP worker CPU.","source_quote_or_pointer":"Security Advisory CVE-2026-105830","fact_id":"SEA-CVE-2026-105830-F1","document_citation":"Security Advisory CVE-2026-105830"},{"id":"SEA-CVE-2026-105830-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"league/commonmark from 2.0.0 before 2.10.2 contains a quadratic-time denial of service vulnerability in the GitHub Flavored Markdown Table extension's TableStartParser::tryStart() block-start scan.","source_quote_or_pointer":"Advisory description (CVE-2026-105830)","fact_id":"SEA-CVE-2026-105830-F2","document_citation":"Advisory description (CVE-2026-105830)"}],"source_stated_contributors":["league/commonmark from 2.0.0 before 2.10.2 contains a quadratic-time denial of service vulnerability in the GitHub Flavored Markdown Table extension's TableStartParser::tryStart() block-start scan."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["arch.async_job"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-105830","reporting_entity":"CVE-2026-105830","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-105830-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-105830-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-105830"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-104077","title":"Obsidian Desktop before 1.14.0 contains a remote code execution vulnerability that allows attackers to craft malicious Markdown notes exploiting insufficient sanitization of the data-background-iframe attribute, which bypasses DOMPurify and is processed by the bundled Reveal.js 4.3.1 within the Slides core plugin, allowing a javascript: URL to execute in the resulting background iframe. Because Node integration is enabled and context isolation is disabled in Obsidian's vault renderer, the injected script can call parent.require() to access Node APIs such as fs and child_process, enabling arbitrary operating system command execution when the victim opens the note and manually starts the presentation.","display_title":"Software component issue could allow unintended commands to run","display_summary":"Obsidian Desktop before 1.14.0 contains a remote code execution vulnerability that allows attackers to craft malicious Markdown notes exploiting insufficient sanitization of the data-background-iframe attribute, which…","display_reference":"CVE-2026-104077","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104077","source_title":"Obsidian Desktop before 1.14.0 contains a remote code execution vulnerability that allows attackers to craft malicious Markdown notes exploiting insufficient sanitization of the data-background-iframe attribute, which bypasses DOMPurify and is processed by the bundled Reveal.js 4.3.1 within the Slides core plugin, allowing a javascript: URL to execute in the resulting background iframe. Because Node integration is enabled and context isolation is disabled in Obsidian's vault renderer, the injected script can call parent.require() to access Node APIs such as fs and child_process, enabling arbitrary operating system command execution when the victim opens the note and manually starts the presentation.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T02:00:40.517Z","source_hash":"content-fingerprint:fnv1a-ba7fc0c2","affected_system":{"organization":"Obsidian Desktop before 1.14.0 contains a remote code execution vulnerability that allows attackers to craft malicious Markdown notes exploiting insufficient sanitization of the data-background-iframe attribute, which bypasses DOMPurify and is processed by the bundled Reveal.js 4.3.1 within the Slides core plugin, allowing a javascript project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-104077-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Obsidian Desktop before 1.14.0 contains a remote code execution vulnerability that allows attackers to craft malicious Markdown notes exploiting insufficient sanitization of the data-background-iframe attribute, which bypasses DOMPurify and is processed by the bundled Reveal.js 4.3.1 within the Slides core plugin, allowing a javascript: URL to execute in the resulting background iframe. Because Node integration is enabled and context isolation is disabled in Obsidian's vault renderer, the injected script can call parent.require() to access Node APIs such as fs and child_process, enabling arbitrary operating system command execution when the victim opens the note and manually starts the presentation.","source_quote_or_pointer":"Security Advisory CVE-2026-104077","fact_id":"SEA-CVE-2026-104077-F1","document_citation":"Security Advisory CVE-2026-104077"},{"id":"SEA-CVE-2026-104077-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Obsidian Desktop before 1.14.0 contains a remote code execution vulnerability that allows attackers to craft malicious Markdown notes exploiting insufficient sanitization of the data-background-iframe attribute, which bypasses DOMPurify and is processed by the bundled Reveal.js 4.3.1 within the Slides core plugin,…","source_quote_or_pointer":"Advisory description (CVE-2026-104077)","fact_id":"SEA-CVE-2026-104077-F2","document_citation":"Advisory description (CVE-2026-104077)"}],"source_stated_contributors":["Obsidian Desktop before 1.14.0 contains a remote code execution vulnerability that allows attackers to craft malicious Markdown notes exploiting insufficient sanitization of the data-background-iframe attribute, which bypasses DOMPurify and is processed by the bundled Reveal.js 4.3.1 within the Slides core plugin,…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-104077","reporting_entity":"CVE-2026-104077","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-104077-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-104077-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-104077"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-95184","title":"Improper certificate validation in gnutls v3.8.13 causes the application to reject legitimate certificates for valid users, leading to a Denial of Service (DoS).","display_title":"Software component issue could make the service unavailable","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-95184","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95184","source_title":"Improper certificate validation in gnutls v3.8.13 causes the application to reject legitimate certificates for valid users, leading to a Denial of Service (DoS).","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T02:00:40.517Z","source_hash":"content-fingerprint:fnv1a-79ead564","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-95184-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Improper certificate validation in gnutls v3.8.13 causes the application to reject legitimate certificates for valid users, leading to a Denial of Service (DoS).","source_quote_or_pointer":"Security Advisory CVE-2026-95184","fact_id":"SEA-CVE-2026-95184-F1","document_citation":"Security Advisory CVE-2026-95184"},{"id":"SEA-CVE-2026-95184-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Improper certificate validation in gnutls v3.8.13 causes the application to reject legitimate certificates for valid users, leading to a Denial of Service (DoS).","source_quote_or_pointer":"Advisory description (CVE-2026-95184)","fact_id":"SEA-CVE-2026-95184-F2","document_citation":"Advisory description (CVE-2026-95184)"}],"source_stated_contributors":["Improper certificate validation in gnutls v3.8.13 causes the application to reject legitimate certificates for valid users, leading to a Denial of Service (DoS)."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-95184","reporting_entity":"CVE-2026-95184","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-95184-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-95184-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-95184"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-95209","title":"An issue in gnutls v3.8.13 causes legitimate CA certificates to be rejected, leading to a Denial of Service (DoS).","display_title":"Software component issue could make the service unavailable","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-95209","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95209","source_title":"An issue in gnutls v3.8.13 causes legitimate CA certificates to be rejected, leading to a Denial of Service (DoS).","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T02:00:40.517Z","source_hash":"content-fingerprint:fnv1a-2137f214","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-95209-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"An issue in gnutls v3.8.13 causes legitimate CA certificates to be rejected, leading to a Denial of Service (DoS).","source_quote_or_pointer":"Security Advisory CVE-2026-95209","fact_id":"SEA-CVE-2026-95209-F1","document_citation":"Security Advisory CVE-2026-95209"},{"id":"SEA-CVE-2026-95209-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"An issue in gnutls v3.8.13 causes legitimate CA certificates to be rejected, leading to a Denial of Service (DoS).","source_quote_or_pointer":"Advisory description (CVE-2026-95209)","fact_id":"SEA-CVE-2026-95209-F2","document_citation":"Advisory description (CVE-2026-95209)"}],"source_stated_contributors":["An issue in gnutls v3.8.13 causes legitimate CA certificates to be rejected, leading to a Denial of Service (DoS)."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-95209","reporting_entity":"CVE-2026-95209","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-95209-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-95209-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-95209"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-107778","title":"MIT Kerberos 5 (krb5) through 1.22.2 contains a NULL pointer dereference in make_cred_list() in rd_cred.c that allows authenticated Kerberos clients to crash services by sending mismatched KRB-CRED arrays. Attackers can send forwarded credentials with more tickets than ticket_info entries through gss_accept_sec_context() to crash GSS-API acceptor services, causing denial of service.","display_title":"Software component issue could make the service unavailable","display_summary":"MIT Kerberos 5 (krb5) through 1.22.2 contains a NULL pointer dereference in makecredlist() in rdcred.c that allows authenticated Kerberos clients to crash services by sending mismatched KRB-CRED arrays.","display_reference":"CVE-2026-107778","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107778","source_title":"MIT Kerberos 5 (krb5) through 1.22.2 contains a NULL pointer dereference in make_cred_list() in rd_cred.c that allows authenticated Kerberos clients to crash services by sending mismatched KRB-CRED arrays. Attackers can send forwarded credentials with more tickets than ticket_info entries through gss_accept_sec_context() to crash GSS-API acceptor services, causing denial of service.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T02:00:40.517Z","source_hash":"content-fingerprint:fnv1a-4babc211","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-107778-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"MIT Kerberos 5 (krb5) through 1.22.2 contains a NULL pointer dereference in make_cred_list() in rd_cred.c that allows authenticated Kerberos clients to crash services by sending mismatched KRB-CRED arrays. Attackers can send forwarded credentials with more tickets than ticket_info entries through gss_accept_sec_context() to crash GSS-API acceptor services, causing denial of service.","source_quote_or_pointer":"Security Advisory CVE-2026-107778","fact_id":"SEA-CVE-2026-107778-F1","document_citation":"Security Advisory CVE-2026-107778"},{"id":"SEA-CVE-2026-107778-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"MIT Kerberos 5 (krb5) through 1.22.2 contains a NULL pointer dereference in makecredlist() in rdcred.c that allows authenticated Kerberos clients to crash services by sending mismatched KRB-CRED arrays.","source_quote_or_pointer":"Advisory description (CVE-2026-107778)","fact_id":"SEA-CVE-2026-107778-F2","document_citation":"Advisory description (CVE-2026-107778)"}],"source_stated_contributors":["MIT Kerberos 5 (krb5) through 1.22.2 contains a NULL pointer dereference in makecredlist() in rdcred.c that allows authenticated Kerberos clients to crash services by sending mismatched KRB-CRED arrays."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.credentials_secrets"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-107778","reporting_entity":"CVE-2026-107778","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-107778-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-107778-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-107778"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-107780","title":"Dromara Skyeye through commit 003549ae5615bd114ba5bb8ddf6a8e8ead97c321 contains an OS command injection vulnerability in the unauthenticated /post/TtsController/textToSpeech endpoint via the format parameter. Attackers can inject a single quote into format to break out of the PowerShell string and execute commands as the Skyeye service account on Windows.","display_title":"Software component issue could allow unintended commands to run","display_summary":"Dromara Skyeye through commit 003549ae5615bd114ba5bb8ddf6a8e8ead97c321 contains an OS command injection vulnerability in the unauthenticated /post/TtsController/textToSpeech endpoint via the format parameter.","display_reference":"CVE-2026-107780","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107780","source_title":"Dromara Skyeye through commit 003549ae5615bd114ba5bb8ddf6a8e8ead97c321 contains an OS command injection vulnerability in the unauthenticated /post/TtsController/textToSpeech endpoint via the format parameter. Attackers can inject a single quote into format to break out of the PowerShell string and execute commands as the Skyeye service account on Windows.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T02:00:40.517Z","source_hash":"content-fingerprint:fnv1a-95191f30","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-107780-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Dromara Skyeye through commit 003549ae5615bd114ba5bb8ddf6a8e8ead97c321 contains an OS command injection vulnerability in the unauthenticated /post/TtsController/textToSpeech endpoint via the format parameter. Attackers can inject a single quote into format to break out of the PowerShell string and execute commands as the Skyeye service account on Windows.","source_quote_or_pointer":"Security Advisory CVE-2026-107780","fact_id":"SEA-CVE-2026-107780-F1","document_citation":"Security Advisory CVE-2026-107780"},{"id":"SEA-CVE-2026-107780-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Dromara Skyeye through commit 003549ae5615bd114ba5bb8ddf6a8e8ead97c321 contains an OS command injection vulnerability in the unauthenticated /post/TtsController/textToSpeech endpoint via the format parameter.","source_quote_or_pointer":"Advisory description (CVE-2026-107780)","fact_id":"SEA-CVE-2026-107780-F2","document_citation":"Advisory description (CVE-2026-107780)"}],"source_stated_contributors":["Dromara Skyeye through commit 003549ae5615bd114ba5bb8ddf6a8e8ead97c321 contains an OS command injection vulnerability in the unauthenticated /post/TtsController/textToSpeech endpoint via the format parameter."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.credentials_secrets"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-107780","reporting_entity":"CVE-2026-107780","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-107780-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-107780-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-107780"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-107706","title":"Dolibarr ERP CRM before 24.0.2 contains an incorrect authorization vulnerability in htdocs/core/ajax/updateextrafield.php that checks only read permission before writing extrafield values. Authenticated users with read-only access can POST objectType, objectId, field and value parameters to persistently modify extrafields on viewable third parties, products, members, projects or contacts.","display_title":"Security issue reported in Software component","display_summary":"Dolibarr ERP CRM before 24.0.2 contains an incorrect authorization vulnerability in htdocs/core/ajax/updateextrafield.php that checks only read permission before writing extrafield values.","display_reference":"CVE-2026-107706","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107706","source_title":"Dolibarr ERP CRM before 24.0.2 contains an incorrect authorization vulnerability in htdocs/core/ajax/updateextrafield.php that checks only read permission before writing extrafield values. Authenticated users with read-only access can POST objectType, objectId, field and value parameters to persistently modify extrafields on viewable third parties, products, members, projects or contacts.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T02:00:40.517Z","source_hash":"content-fingerprint:fnv1a-e889d9dc","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-107706-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Dolibarr ERP CRM before 24.0.2 contains an incorrect authorization vulnerability in htdocs/core/ajax/updateextrafield.php that checks only read permission before writing extrafield values. Authenticated users with read-only access can POST objectType, objectId, field and value parameters to persistently modify extrafields on viewable third parties, products, members, projects or contacts.","source_quote_or_pointer":"Security Advisory CVE-2026-107706","fact_id":"SEA-CVE-2026-107706-F1","document_citation":"Security Advisory CVE-2026-107706"},{"id":"SEA-CVE-2026-107706-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Dolibarr ERP CRM before 24.0.2 contains an incorrect authorization vulnerability in htdocs/core/ajax/updateextrafield.php that checks only read permission before writing extrafield values.","source_quote_or_pointer":"Advisory description (CVE-2026-107706)","fact_id":"SEA-CVE-2026-107706-F2","document_citation":"Advisory description (CVE-2026-107706)"}],"source_stated_contributors":["Dolibarr ERP CRM before 24.0.2 contains an incorrect authorization vulnerability in htdocs/core/ajax/updateextrafield.php that checks only read permission before writing extrafield values."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.write_action","data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-107706","reporting_entity":"CVE-2026-107706","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-107706-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-107706-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-107706"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-106126","title":"A command injection vulnerability in the Active Directory Events Listener of Tenable Identity Exposure (SaaS) allows an authenticated, low-privileged attacker to execute arbitrary commands as SYSTEM on the PDCe.","display_title":"Software component issue could allow unintended commands to run","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-106126","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-106126","source_title":"A command injection vulnerability in the Active Directory Events Listener of Tenable Identity Exposure (SaaS) allows an authenticated, low-privileged attacker to execute arbitrary commands as SYSTEM on the PDCe.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T02:00:40.517Z","source_hash":"content-fingerprint:fnv1a-87a649db","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-106126-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A command injection vulnerability in the Active Directory Events Listener of Tenable Identity Exposure (SaaS) allows an authenticated, low-privileged attacker to execute arbitrary commands as SYSTEM on the PDCe.","source_quote_or_pointer":"Security Advisory CVE-2026-106126","fact_id":"SEA-CVE-2026-106126-F1","document_citation":"Security Advisory CVE-2026-106126"},{"id":"SEA-CVE-2026-106126-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A command injection vulnerability in the Active Directory Events Listener of Tenable Identity Exposure (SaaS) allows an authenticated, low-privileged attacker to execute arbitrary commands as SYSTEM on the PDCe.","source_quote_or_pointer":"Advisory description (CVE-2026-106126)","fact_id":"SEA-CVE-2026-106126-F2","document_citation":"Advisory description (CVE-2026-106126)"}],"source_stated_contributors":["A command injection vulnerability in the Active Directory Events Listener of Tenable Identity Exposure (SaaS) allows an authenticated, low-privileged attacker to execute arbitrary commands as SYSTEM on the PDCe."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","arch.multi_tenant","arch.event_driven"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-106126","reporting_entity":"CVE-2026-106126","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-106126-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-106126-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-106126"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-93860","title":"In OpenStack Mistral through 23.0.0, the /v2/maintenance API controller clears the request context and calls the maintenance service directly without any policy enforcement. Any holder of a valid Mistral token, regardless of assigned role, can read and change the service's cluster-wide maintenance state. Setting the state to PAUSED stops processing of new workflow and execution objects across all tenant projects until an operator restores it.","display_title":"Security issue reported in Software component","display_summary":"In OpenStack Mistral through 23.0.0, the /v2/maintenance API controller clears the request context and calls the maintenance service directly without any policy enforcement.","display_reference":"CVE-2026-93860","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93860","source_title":"In OpenStack Mistral through 23.0.0, the /v2/maintenance API controller clears the request context and calls the maintenance service directly without any policy enforcement. Any holder of a valid Mistral token, regardless of assigned role, can read and change the service's cluster-wide maintenance state. Setting the state to PAUSED stops processing of new workflow and execution objects across all tenant projects until an operator restores it.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T00:00:21.829Z","source_hash":"content-fingerprint:fnv1a-988c5d93","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-93860-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"In OpenStack Mistral through 23.0.0, the /v2/maintenance API controller clears the request context and calls the maintenance service directly without any policy enforcement. Any holder of a valid Mistral token, regardless of assigned role, can read and change the service's cluster-wide maintenance state. Setting the state to PAUSED stops processing of new workflow and execution objects across all tenant projects until an operator restores it.","source_quote_or_pointer":"Security Advisory CVE-2026-93860","fact_id":"SEA-CVE-2026-93860-F1","document_citation":"Security Advisory CVE-2026-93860"},{"id":"SEA-CVE-2026-93860-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"In OpenStack Mistral through 23.0.0, the /v2/maintenance API controller clears the request context and calls the maintenance service directly without any policy enforcement. Any holder of a valid Mistral token, regardless of assigned role, can read and change the service's cluster-wide maintenance state.","source_quote_or_pointer":"Advisory description (CVE-2026-93860)","fact_id":"SEA-CVE-2026-93860-F2","document_citation":"Advisory description (CVE-2026-93860)"}],"source_stated_contributors":["In OpenStack Mistral through 23.0.0, the /v2/maintenance API controller clears the request context and calls the maintenance service directly without any policy enforcement. Any holder of a valid Mistral token, regardless of assigned role, can read and change the service's cluster-wide maintenance state."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-93860","reporting_entity":"CVE-2026-93860","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-93860-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-93860-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-93860"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-44031","title":"Uncontrolled recursion in DcmSequenceOfItems::read() and DcmItem::read() in the dcmdata library of OFFIS DCMTK 3.7.0 allows a remote, unauthenticated attacker to cause a denial of service (stack exhaustion and process crash) via a DICOM dataset containing deeply nested sequences (SQ elements). The dataset can be sent in a C-STORE request to storescp, dcmrecv, dcmqrscp, or any other DICOM service built on DCMTK, because the received dataset is parsed before any authentication takes place. Local tools such as dcmdump also crash when opening such a file. The issue is fixed in commit 885ff0f10372bd589b5f44cea974f28a3964cb0f, which adds a configurable sequence nesting depth limit (default 64).","display_title":"Uncontrolled recursion in DcmSequenceOfItems issue could make the service unavailable","display_summary":"Uncontrolled recursion in DcmSequenceOfItems::read() and DcmItem::read() in the dcmdata library of OFFIS DCMTK 3.7.0 allows a remote, unauthenticated attacker to cause a denial of service (stack exhaustion and process…","display_reference":"CVE-2026-44031","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-44031","source_title":"Uncontrolled recursion in DcmSequenceOfItems::read() and DcmItem::read() in the dcmdata library of OFFIS DCMTK 3.7.0 allows a remote, unauthenticated attacker to cause a denial of service (stack exhaustion and process crash) via a DICOM dataset containing deeply nested sequences (SQ elements). The dataset can be sent in a C-STORE request to storescp, dcmrecv, dcmqrscp, or any other DICOM service built on DCMTK, because the received dataset is parsed before any authentication takes place. Local tools such as dcmdump also crash when opening such a file. The issue is fixed in commit 885ff0f10372bd589b5f44cea974f28a3964cb0f, which adds a configurable sequence nesting depth limit (default 64).","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T00:00:21.829Z","source_hash":"content-fingerprint:fnv1a-6a4eaf97","affected_system":{"organization":"Uncontrolled recursion in DcmSequenceOfItems project","product":"Uncontrolled recursion in DcmSequenceOfItems","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-44031-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Uncontrolled recursion in DcmSequenceOfItems::read() and DcmItem::read() in the dcmdata library of OFFIS DCMTK 3.7.0 allows a remote, unauthenticated attacker to cause a denial of service (stack exhaustion and process crash) via a DICOM dataset containing deeply nested sequences (SQ elements). The dataset can be sent in a C-STORE request to storescp, dcmrecv, dcmqrscp, or any other DICOM service built on DCMTK, because the received dataset is parsed before any authentication takes place. Local tools such as dcmdump also crash when opening such a file. The issue is fixed in commit 885ff0f10372bd589b5f44cea974f28a3964cb0f, which adds a configurable sequence nesting depth limit (default 64).","source_quote_or_pointer":"Security Advisory CVE-2026-44031","fact_id":"SEA-CVE-2026-44031-F1","document_citation":"Security Advisory CVE-2026-44031"},{"id":"SEA-CVE-2026-44031-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Uncontrolled recursion in DcmSequenceOfItems::read() and DcmItem::read() in the dcmdata library of OFFIS DCMTK 3.7.0 allows a remote, unauthenticated attacker to cause a denial of service (stack exhaustion and process crash) via a DICOM dataset containing deeply nested sequences (SQ elements).","source_quote_or_pointer":"Advisory description (CVE-2026-44031)","fact_id":"SEA-CVE-2026-44031-F2","document_citation":"Advisory description (CVE-2026-44031)"}],"source_stated_contributors":["Uncontrolled recursion in DcmSequenceOfItems::read() and DcmItem::read() in the dcmdata library of OFFIS DCMTK 3.7.0 allows a remote, unauthenticated attacker to cause a denial of service (stack exhaustion and process crash) via a DICOM dataset containing deeply nested sequences (SQ elements)."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-44031","reporting_entity":"CVE-2026-44031","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-44031-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-44031-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-44031"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-44033","title":"Uncontrolled recursion in XMLNode::ParseXMLElement() and XMLNode::emptyTheNode() in the bundled XML parser (ofstd/libsrc/ofxml.cc) of OFFIS DCMTK 3.7.0 allows an attacker to cause a denial of service (stack exhaustion and process crash) via a crafted XML document with deeply nested elements. The parser is reachable through dcmencap when encapsulating a CDA document, and through any application that calls OFXMLParser::parseFile() or OFXMLParser::parseString() on untrusted input. The issue is fixed in commit d12e350e687530eb41e2b0c860aff4d8c04e5941.","display_title":"Uncontrolled recursion in XMLNode issue could make the service unavailable","display_summary":"Uncontrolled recursion in XMLNode::ParseXMLElement() and XMLNode::emptyTheNode() in the bundled XML parser (ofstd/libsrc/ofxml.cc) of OFFIS DCMTK 3.7.0 allows an attacker to cause a denial of service (stack exhaustion…","display_reference":"CVE-2026-44033","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-44033","source_title":"Uncontrolled recursion in XMLNode::ParseXMLElement() and XMLNode::emptyTheNode() in the bundled XML parser (ofstd/libsrc/ofxml.cc) of OFFIS DCMTK 3.7.0 allows an attacker to cause a denial of service (stack exhaustion and process crash) via a crafted XML document with deeply nested elements. The parser is reachable through dcmencap when encapsulating a CDA document, and through any application that calls OFXMLParser::parseFile() or OFXMLParser::parseString() on untrusted input. The issue is fixed in commit d12e350e687530eb41e2b0c860aff4d8c04e5941.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T00:00:21.829Z","source_hash":"content-fingerprint:fnv1a-669eb389","affected_system":{"organization":"Uncontrolled recursion in XMLNode project","product":"Uncontrolled recursion in XMLNode","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-44033-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Uncontrolled recursion in XMLNode::ParseXMLElement() and XMLNode::emptyTheNode() in the bundled XML parser (ofstd/libsrc/ofxml.cc) of OFFIS DCMTK 3.7.0 allows an attacker to cause a denial of service (stack exhaustion and process crash) via a crafted XML document with deeply nested elements. The parser is reachable through dcmencap when encapsulating a CDA document, and through any application that calls OFXMLParser::parseFile() or OFXMLParser::parseString() on untrusted input. The issue is fixed in commit d12e350e687530eb41e2b0c860aff4d8c04e5941.","source_quote_or_pointer":"Security Advisory CVE-2026-44033","fact_id":"SEA-CVE-2026-44033-F1","document_citation":"Security Advisory CVE-2026-44033"},{"id":"SEA-CVE-2026-44033-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Uncontrolled recursion in XMLNode::ParseXMLElement() and XMLNode::emptyTheNode() in the bundled XML parser (ofstd/libsrc/ofxml.cc) of OFFIS DCMTK 3.7.0 allows an attacker to cause a denial of service (stack exhaustion and process crash) via a crafted XML document with deeply nested elements.","source_quote_or_pointer":"Advisory description (CVE-2026-44033)","fact_id":"SEA-CVE-2026-44033-F2","document_citation":"Advisory description (CVE-2026-44033)"}],"source_stated_contributors":["Uncontrolled recursion in XMLNode::ParseXMLElement() and XMLNode::emptyTheNode() in the bundled XML parser (ofstd/libsrc/ofxml.cc) of OFFIS DCMTK 3.7.0 allows an attacker to cause a denial of service (stack exhaustion and process crash) via a crafted XML document with deeply nested elements."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-44033","reporting_entity":"CVE-2026-44033","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-44033-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-44033-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-44033"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-44035","title":"Uncontrolled recursion in DcmDicomDir::moveRecordToTree() in dcmdata/libsrc/dcdicdir.cc of OFFIS DCMTK 3.7.0 allows an attacker to cause a denial of service (stack exhaustion and process crash) via a crafted DICOMDIR file with a deeply chained sequence of directory records linked through the Offset of Referenced Lower-Level Directory Entity attribute. Any application that opens the DICOMDIR is affected, including dcmgpdir and media viewers built on DCMTK. The issue is fixed in commit ca761f7f3dcaaddaa95be87cf5d736138d7c3a9f.","display_title":"Uncontrolled recursion in DcmDicomDir issue could make the service unavailable","display_summary":"Uncontrolled recursion in DcmDicomDir::moveRecordToTree() in dcmdata/libsrc/dcdicdir.cc of OFFIS DCMTK 3.7.0 allows an attacker to cause a denial of service (stack exhaustion and process crash) via a crafted DICOMDIR…","display_reference":"CVE-2026-44035","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-44035","source_title":"Uncontrolled recursion in DcmDicomDir::moveRecordToTree() in dcmdata/libsrc/dcdicdir.cc of OFFIS DCMTK 3.7.0 allows an attacker to cause a denial of service (stack exhaustion and process crash) via a crafted DICOMDIR file with a deeply chained sequence of directory records linked through the Offset of Referenced Lower-Level Directory Entity attribute. Any application that opens the DICOMDIR is affected, including dcmgpdir and media viewers built on DCMTK. The issue is fixed in commit ca761f7f3dcaaddaa95be87cf5d736138d7c3a9f.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T00:00:21.829Z","source_hash":"content-fingerprint:fnv1a-349b886f","affected_system":{"organization":"Uncontrolled recursion in DcmDicomDir project","product":"Uncontrolled recursion in DcmDicomDir","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-44035-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Uncontrolled recursion in DcmDicomDir::moveRecordToTree() in dcmdata/libsrc/dcdicdir.cc of OFFIS DCMTK 3.7.0 allows an attacker to cause a denial of service (stack exhaustion and process crash) via a crafted DICOMDIR file with a deeply chained sequence of directory records linked through the Offset of Referenced Lower-Level Directory Entity attribute. Any application that opens the DICOMDIR is affected, including dcmgpdir and media viewers built on DCMTK. The issue is fixed in commit ca761f7f3dcaaddaa95be87cf5d736138d7c3a9f.","source_quote_or_pointer":"Security Advisory CVE-2026-44035","fact_id":"SEA-CVE-2026-44035-F1","document_citation":"Security Advisory CVE-2026-44035"},{"id":"SEA-CVE-2026-44035-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Uncontrolled recursion in DcmDicomDir::moveRecordToTree() in dcmdata/libsrc/dcdicdir.cc of OFFIS DCMTK 3.7.0 allows an attacker to cause a denial of service (stack exhaustion and process crash) via a crafted DICOMDIR file with a deeply chained sequence of directory records linked through the Offset of Referenced…","source_quote_or_pointer":"Advisory description (CVE-2026-44035)","fact_id":"SEA-CVE-2026-44035-F2","document_citation":"Advisory description (CVE-2026-44035)"}],"source_stated_contributors":["Uncontrolled recursion in DcmDicomDir::moveRecordToTree() in dcmdata/libsrc/dcdicdir.cc of OFFIS DCMTK 3.7.0 allows an attacker to cause a denial of service (stack exhaustion and process crash) via a crafted DICOMDIR file with a deeply chained sequence of directory records linked through the Offset of Referenced…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-44035","reporting_entity":"CVE-2026-44035","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-44035-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-44035-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-44035"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-44036","title":"Uncontrolled mutual recursion between DcmXMLParseHelper::parseDataSet() and DcmXMLParseHelper::parseSequence() in the XML-to-DICOM converter (dcmdata/libdcxml/xml2dcm.cc) of OFFIS DCMTK 3.7.0 allows an attacker to cause a denial of service (stack exhaustion and process crash) via a crafted XML file with deeply nested sequence and item elements. The xml2dcm tool and any service that converts untrusted XML to DICOM with this code are affected. The issue is fixed in commit 87f256d73e30656a822bf7d76d1cf1d9bb693954.","display_title":"Uncontrolled mutual recursion between DcmXMLParseHelper issue could make the service unavailable","display_summary":"Uncontrolled mutual recursion between DcmXMLParseHelper::parseDataSet() and DcmXMLParseHelper::parseSequence() in the XML-to-DICOM converter (dcmdata/libdcxml/xml2dcm.cc) of OFFIS DCMTK 3.7.0 allows an attacker to cause…","display_reference":"CVE-2026-44036","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-44036","source_title":"Uncontrolled mutual recursion between DcmXMLParseHelper::parseDataSet() and DcmXMLParseHelper::parseSequence() in the XML-to-DICOM converter (dcmdata/libdcxml/xml2dcm.cc) of OFFIS DCMTK 3.7.0 allows an attacker to cause a denial of service (stack exhaustion and process crash) via a crafted XML file with deeply nested sequence and item elements. The xml2dcm tool and any service that converts untrusted XML to DICOM with this code are affected. The issue is fixed in commit 87f256d73e30656a822bf7d76d1cf1d9bb693954.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T00:00:21.829Z","source_hash":"content-fingerprint:fnv1a-17bf74a0","affected_system":{"organization":"Uncontrolled mutual recursion between DcmXMLParseHelper project","product":"Uncontrolled mutual recursion between DcmXMLParseHelper","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-44036-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Uncontrolled mutual recursion between DcmXMLParseHelper::parseDataSet() and DcmXMLParseHelper::parseSequence() in the XML-to-DICOM converter (dcmdata/libdcxml/xml2dcm.cc) of OFFIS DCMTK 3.7.0 allows an attacker to cause a denial of service (stack exhaustion and process crash) via a crafted XML file with deeply nested sequence and item elements. The xml2dcm tool and any service that converts untrusted XML to DICOM with this code are affected. The issue is fixed in commit 87f256d73e30656a822bf7d76d1cf1d9bb693954.","source_quote_or_pointer":"Security Advisory CVE-2026-44036","fact_id":"SEA-CVE-2026-44036-F1","document_citation":"Security Advisory CVE-2026-44036"},{"id":"SEA-CVE-2026-44036-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Uncontrolled mutual recursion between DcmXMLParseHelper::parseDataSet() and DcmXMLParseHelper::parseSequence() in the XML-to-DICOM converter (dcmdata/libdcxml/xml2dcm.cc) of OFFIS DCMTK 3.7.0 allows an attacker to cause a denial of service (stack exhaustion and process crash) via a crafted XML file with deeply nested…","source_quote_or_pointer":"Advisory description (CVE-2026-44036)","fact_id":"SEA-CVE-2026-44036-F2","document_citation":"Advisory description (CVE-2026-44036)"}],"source_stated_contributors":["Uncontrolled mutual recursion between DcmXMLParseHelper::parseDataSet() and DcmXMLParseHelper::parseSequence() in the XML-to-DICOM converter (dcmdata/libdcxml/xml2dcm.cc) of OFFIS DCMTK 3.7.0 allows an attacker to cause a denial of service (stack exhaustion and process crash) via a crafted XML file with deeply nested…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-44036","reporting_entity":"CVE-2026-44036","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-44036-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-44036-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-44036"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-44037","title":"Uncontrolled mutual recursion between DcmJSONReader::parseDataSet(), DcmJSONReader::parseElement() and DcmJSONReader::parseSequence() in dcmdata/libsrc/dcjsonrd.cc of OFFIS DCMTK 3.7.0 allows an attacker to cause a denial of service (stack exhaustion and process crash) via a crafted DICOM JSON document with deeply nested sequence (SQ) values. The json2dcm tool and any service that converts untrusted DICOM JSON (for example, DICOMweb payloads) with this reader are affected. The issue is fixed in commit cf955e64c35a1e07ba10698f639d5dcdec53b9d7.","display_title":"Uncontrolled mutual recursion between DcmJSONReader issue could make the service unavailable","display_summary":"Uncontrolled mutual recursion between DcmJSONReader::parseDataSet(), DcmJSONReader::parseElement() and DcmJSONReader::parseSequence() in dcmdata/libsrc/dcjsonrd.cc of OFFIS DCMTK 3.7.0 allows an attacker to cause a…","display_reference":"CVE-2026-44037","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-44037","source_title":"Uncontrolled mutual recursion between DcmJSONReader::parseDataSet(), DcmJSONReader::parseElement() and DcmJSONReader::parseSequence() in dcmdata/libsrc/dcjsonrd.cc of OFFIS DCMTK 3.7.0 allows an attacker to cause a denial of service (stack exhaustion and process crash) via a crafted DICOM JSON document with deeply nested sequence (SQ) values. The json2dcm tool and any service that converts untrusted DICOM JSON (for example, DICOMweb payloads) with this reader are affected. The issue is fixed in commit cf955e64c35a1e07ba10698f639d5dcdec53b9d7.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T00:00:21.829Z","source_hash":"content-fingerprint:fnv1a-b214fd6f","affected_system":{"organization":"Uncontrolled mutual recursion between DcmJSONReader project","product":"Uncontrolled mutual recursion between DcmJSONReader","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-44037-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Uncontrolled mutual recursion between DcmJSONReader::parseDataSet(), DcmJSONReader::parseElement() and DcmJSONReader::parseSequence() in dcmdata/libsrc/dcjsonrd.cc of OFFIS DCMTK 3.7.0 allows an attacker to cause a denial of service (stack exhaustion and process crash) via a crafted DICOM JSON document with deeply nested sequence (SQ) values. The json2dcm tool and any service that converts untrusted DICOM JSON (for example, DICOMweb payloads) with this reader are affected. The issue is fixed in commit cf955e64c35a1e07ba10698f639d5dcdec53b9d7.","source_quote_or_pointer":"Security Advisory CVE-2026-44037","fact_id":"SEA-CVE-2026-44037-F1","document_citation":"Security Advisory CVE-2026-44037"},{"id":"SEA-CVE-2026-44037-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Uncontrolled mutual recursion between DcmJSONReader::parseDataSet(), DcmJSONReader::parseElement() and DcmJSONReader::parseSequence() in dcmdata/libsrc/dcjsonrd.cc of OFFIS DCMTK 3.7.0 allows an attacker to cause a denial of service (stack exhaustion and process crash) via a crafted DICOM JSON document with deeply…","source_quote_or_pointer":"Advisory description (CVE-2026-44037)","fact_id":"SEA-CVE-2026-44037-F2","document_citation":"Advisory description (CVE-2026-44037)"}],"source_stated_contributors":["Uncontrolled mutual recursion between DcmJSONReader::parseDataSet(), DcmJSONReader::parseElement() and DcmJSONReader::parseSequence() in dcmdata/libsrc/dcjsonrd.cc of OFFIS DCMTK 3.7.0 allows an attacker to cause a denial of service (stack exhaustion and process crash) via a crafted DICOM JSON document with deeply…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-44037","reporting_entity":"CVE-2026-44037","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-44037-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-44037-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-44037"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-107612","title":"Incorrect permission assignment in GlavSoft TightVNC Server for Windows before 2.8.88 allows a local authenticated user to read or overwrite the inter-process communication handles used between the TightVNC service and its desktop server process. The named shared memory segment in the Global\\ namespace that carries the pipe HANDLE values is created with a NULL DACL, and its name is derived from a time-seeded srand(time(0)) value that is predictable to one-second granularity. A low-privileged local process can open the mapping and tamper with the IPC channel of a service running as SYSTEM, potentially leading to disclosure of session data, privilege escalation, or denial of service.","display_title":"Software component issue could make the service unavailable","display_summary":"Incorrect permission assignment in GlavSoft TightVNC Server for Windows before 2.8.88 allows a local authenticated user to read or overwrite the inter-process communication handles used between the TightVNC service and…","display_reference":"CVE-2026-107612","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107612","source_title":"Incorrect permission assignment in GlavSoft TightVNC Server for Windows before 2.8.88 allows a local authenticated user to read or overwrite the inter-process communication handles used between the TightVNC service and its desktop server process. The named shared memory segment in the Global\\ namespace that carries the pipe HANDLE values is created with a NULL DACL, and its name is derived from a time-seeded srand(time(0)) value that is predictable to one-second granularity. A low-privileged local process can open the mapping and tamper with the IPC channel of a service running as SYSTEM, potentially leading to disclosure of session data, privilege escalation, or denial of service.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T00:00:21.829Z","source_hash":"content-fingerprint:fnv1a-b8a765cc","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-107612-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Incorrect permission assignment in GlavSoft TightVNC Server for Windows before 2.8.88 allows a local authenticated user to read or overwrite the inter-process communication handles used between the TightVNC service and its desktop server process. The named shared memory segment in the Global\\ namespace that carries the pipe HANDLE values is created with a NULL DACL, and its name is derived from a time-seeded srand(time(0)) value that is predictable to one-second granularity. A low-privileged local process can open the mapping and tamper with the IPC channel of a service running as SYSTEM, potentially leading to disclosure of session data, privilege escalation, or denial of service.","source_quote_or_pointer":"Security Advisory CVE-2026-107612","fact_id":"SEA-CVE-2026-107612-F1","document_citation":"Security Advisory CVE-2026-107612"},{"id":"SEA-CVE-2026-107612-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Incorrect permission assignment in GlavSoft TightVNC Server for Windows before 2.8.88 allows a local authenticated user to read or overwrite the inter-process communication handles used between the TightVNC service and its desktop server process.","source_quote_or_pointer":"Advisory description (CVE-2026-107612)","fact_id":"SEA-CVE-2026-107612-F2","document_citation":"Advisory description (CVE-2026-107612)"}],"source_stated_contributors":["Incorrect permission assignment in GlavSoft TightVNC Server for Windows before 2.8.88 allows a local authenticated user to read or overwrite the inter-process communication handles used between the TightVNC service and its desktop server process."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-107612","reporting_entity":"CVE-2026-107612","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-107612-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-107612-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-107612"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-107613","title":"A NULL pointer dereference vulnerability in the Win8ScreenDriver component of GlavSoft TightVNC Server for Windows before 2.8.88 allows an attacker to crash the server, causing a denial of service. When re-initialization of the DXGI Desktop Duplication driver fails in applyNewScreenProperties() (for example after a GPU reset, display hot-plug or session change), m_drvImpl is left NULL and is subsequently dereferenced without a check by executeDetection(), getScreenBuffer(), grabFb(), getScreenPropertiesChanged() and getCursorPosition().","display_title":"Software component issue could make the service unavailable","display_summary":"A NULL pointer dereference vulnerability in the Win8ScreenDriver component of GlavSoft TightVNC Server for Windows before 2.8.88 allows an attacker to crash the server, causing a denial of service.","display_reference":"CVE-2026-107613","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107613","source_title":"A NULL pointer dereference vulnerability in the Win8ScreenDriver component of GlavSoft TightVNC Server for Windows before 2.8.88 allows an attacker to crash the server, causing a denial of service. When re-initialization of the DXGI Desktop Duplication driver fails in applyNewScreenProperties() (for example after a GPU reset, display hot-plug or session change), m_drvImpl is left NULL and is subsequently dereferenced without a check by executeDetection(), getScreenBuffer(), grabFb(), getScreenPropertiesChanged() and getCursorPosition().","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T00:00:21.829Z","source_hash":"content-fingerprint:fnv1a-79f31533","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-107613-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A NULL pointer dereference vulnerability in the Win8ScreenDriver component of GlavSoft TightVNC Server for Windows before 2.8.88 allows an attacker to crash the server, causing a denial of service. When re-initialization of the DXGI Desktop Duplication driver fails in applyNewScreenProperties() (for example after a GPU reset, display hot-plug or session change), m_drvImpl is left NULL and is subsequently dereferenced without a check by executeDetection(), getScreenBuffer(), grabFb(), getScreenPropertiesChanged() and getCursorPosition().","source_quote_or_pointer":"Security Advisory CVE-2026-107613","fact_id":"SEA-CVE-2026-107613-F1","document_citation":"Security Advisory CVE-2026-107613"},{"id":"SEA-CVE-2026-107613-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A NULL pointer dereference vulnerability in the Win8ScreenDriver component of GlavSoft TightVNC Server for Windows before 2.8.88 allows an attacker to crash the server, causing a denial of service.","source_quote_or_pointer":"Advisory description (CVE-2026-107613)","fact_id":"SEA-CVE-2026-107613-F2","document_citation":"Advisory description (CVE-2026-107613)"}],"source_stated_contributors":["A NULL pointer dereference vulnerability in the Win8ScreenDriver component of GlavSoft TightVNC Server for Windows before 2.8.88 allows an attacker to crash the server, causing a denial of service."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-107613","reporting_entity":"CVE-2026-107613","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-107613-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-107613-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-107613"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-107615","title":"An uncontrolled search path element vulnerability in GlavSoft TightVNC Server for Windows before 2.8.88 allows a local authenticated user to execute arbitrary code with SYSTEM privileges. DynamicLibrary::init() (and ThemeLib) load screenhooks32.dll / screenhooks64.dll with LoadLibrary() using a bare file name and no LOAD_LIBRARY_SEARCH_ flags, so the TightVNC service follows the default DLL search order and loads an attacker-planted DLL from a writable directory earlier in that order (for example, an installation directory with permissive ACLs).","display_title":"Software component issue could allow unintended commands to run","display_summary":"An uncontrolled search path element vulnerability in GlavSoft TightVNC Server for Windows before 2.8.88 allows a local authenticated user to execute arbitrary code with SYSTEM privileges.","display_reference":"CVE-2026-107615","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107615","source_title":"An uncontrolled search path element vulnerability in GlavSoft TightVNC Server for Windows before 2.8.88 allows a local authenticated user to execute arbitrary code with SYSTEM privileges. DynamicLibrary::init() (and ThemeLib) load screenhooks32.dll / screenhooks64.dll with LoadLibrary() using a bare file name and no LOAD_LIBRARY_SEARCH_ flags, so the TightVNC service follows the default DLL search order and loads an attacker-planted DLL from a writable directory earlier in that order (for example, an installation directory with permissive ACLs).","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T00:00:21.829Z","source_hash":"content-fingerprint:fnv1a-7431fe05","affected_system":{"organization":"An uncontrolled search path element vulnerability in GlavSoft TightVNC Server for Windows before 2.8.88 allows a local authenticated user to execute arbitrary code with SYSTEM privileges. DynamicLibrary project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-107615-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"An uncontrolled search path element vulnerability in GlavSoft TightVNC Server for Windows before 2.8.88 allows a local authenticated user to execute arbitrary code with SYSTEM privileges. DynamicLibrary::init() (and ThemeLib) load screenhooks32.dll / screenhooks64.dll with LoadLibrary() using a bare file name and no LOAD_LIBRARY_SEARCH_ flags, so the TightVNC service follows the default DLL search order and loads an attacker-planted DLL from a writable directory earlier in that order (for example, an installation directory with permissive ACLs).","source_quote_or_pointer":"Security Advisory CVE-2026-107615","fact_id":"SEA-CVE-2026-107615-F1","document_citation":"Security Advisory CVE-2026-107615"},{"id":"SEA-CVE-2026-107615-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"An uncontrolled search path element vulnerability in GlavSoft TightVNC Server for Windows before 2.8.88 allows a local authenticated user to execute arbitrary code with SYSTEM privileges.","source_quote_or_pointer":"Advisory description (CVE-2026-107615)","fact_id":"SEA-CVE-2026-107615-F2","document_citation":"Advisory description (CVE-2026-107615)"}],"source_stated_contributors":["An uncontrolled search path element vulnerability in GlavSoft TightVNC Server for Windows before 2.8.88 allows a local authenticated user to execute arbitrary code with SYSTEM privileges."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-107615","reporting_entity":"CVE-2026-107615","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-107615-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-107615-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-107615"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-92861","title":"The Android application \"Ticket Ryutsu Center\" contains hard-coded credentials, which may allow an attacker to obtain an API key used by the application.","display_title":"Software component issue could expose accounts or credentials","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-92861","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92861","source_title":"The Android application \"Ticket Ryutsu Center\" contains hard-coded credentials, which may allow an attacker to obtain an API key used by the application.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T00:00:21.829Z","source_hash":"content-fingerprint:fnv1a-c7c8062f","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-92861-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Android application \"Ticket Ryutsu Center\" contains hard-coded credentials, which may allow an attacker to obtain an API key used by the application.","source_quote_or_pointer":"Security Advisory CVE-2026-92861","fact_id":"SEA-CVE-2026-92861-F1","document_citation":"Security Advisory CVE-2026-92861"},{"id":"SEA-CVE-2026-92861-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Android application \"Ticket Ryutsu Center\" contains hard-coded credentials, which may allow an attacker to obtain an API key used by the application.","source_quote_or_pointer":"Advisory description (CVE-2026-92861)","fact_id":"SEA-CVE-2026-92861-F2","document_citation":"Advisory description (CVE-2026-92861)"}],"source_stated_contributors":["The Android application \"Ticket Ryutsu Center\" contains hard-coded credentials, which may allow an attacker to obtain an API key used by the application."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-92861","reporting_entity":"CVE-2026-92861","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-92861-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-92861-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-92861"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-102784","title":"Joomla Extension - balbooa.com - CSRF in language installation feature Gridbox < 2.20.4.0 - PagesController uses a trait that validates the Joomla session token only when the HTTP method is POST. addLanguage does not require POST inside the action and reads url and zip through the generic request input. A GET request can therefore reach the action without the trait checking a token. The action still requires core.tools , but that is the victim’s permission check; it does not prove that the privileged user intended the request.","display_title":"Software component issue could expose accounts or credentials","display_summary":"Joomla Extension - balbooa.com - CSRF in language installation feature Gridbox < 2.20.4.0 - PagesController uses a trait that validates the Joomla session token only when the HTTP method is POST.","display_reference":"CVE-2026-102784","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-102784","source_title":"Joomla Extension - balbooa.com - CSRF in language installation feature Gridbox < 2.20.4.0 - PagesController uses a trait that validates the Joomla session token only when the HTTP method is POST. addLanguage does not require POST inside the action and reads url and zip through the generic request input. A GET request can therefore reach the action without the trait checking a token. The action still requires core.tools , but that is the victim’s permission check; it does not prove that the privileged user intended the request.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T00:00:21.829Z","source_hash":"content-fingerprint:fnv1a-f5509e01","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-102784-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Joomla Extension - balbooa.com - CSRF in language installation feature Gridbox < 2.20.4.0 - PagesController uses a trait that validates the Joomla session token only when the HTTP method is POST. addLanguage does not require POST inside the action and reads url and zip through the generic request input. A GET request can therefore reach the action without the trait checking a token. The action still requires core.tools , but that is the victim’s permission check; it does not prove that the privileged user intended the request.","source_quote_or_pointer":"Security Advisory CVE-2026-102784","fact_id":"SEA-CVE-2026-102784-F1","document_citation":"Security Advisory CVE-2026-102784"},{"id":"SEA-CVE-2026-102784-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Joomla Extension - balbooa.com - CSRF in language installation feature Gridbox < 2.20.4.0 - PagesController uses a trait that validates the Joomla session token only when the HTTP method is POST. addLanguage does not require POST inside the action and reads url and zip through the generic request input.","source_quote_or_pointer":"Advisory description (CVE-2026-102784)","fact_id":"SEA-CVE-2026-102784-F2","document_citation":"Advisory description (CVE-2026-102784)"}],"source_stated_contributors":["Joomla Extension - balbooa.com - CSRF in language installation feature Gridbox < 2.20.4.0 - PagesController uses a trait that validates the Joomla session token only when the HTTP method is POST. addLanguage does not require POST inside the action and reads url and zip through the generic request input."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-102784","reporting_entity":"CVE-2026-102784","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-102784-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-102784-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-102784"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-107459","title":"The SecuShare Pro developed by Openfind has an OS Command Injection vulnerability. Unauthenticated remote attackers can inject arbitrary OS commands and execute them on the server.","display_title":"Software component issue could allow unintended commands to run","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-107459","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107459","source_title":"The SecuShare Pro developed by Openfind has an OS Command Injection vulnerability. Unauthenticated remote attackers can inject arbitrary OS commands and execute them on the server.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-09T00:00:21.829Z","source_hash":"content-fingerprint:fnv1a-a5a4ce55","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-107459-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The SecuShare Pro developed by Openfind has an OS Command Injection vulnerability. Unauthenticated remote attackers can inject arbitrary OS commands and execute them on the server.","source_quote_or_pointer":"Security Advisory CVE-2026-107459","fact_id":"SEA-CVE-2026-107459-F1","document_citation":"Security Advisory CVE-2026-107459"},{"id":"SEA-CVE-2026-107459-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The SecuShare Pro developed by Openfind has an OS Command Injection vulnerability. Unauthenticated remote attackers can inject arbitrary OS commands and execute them on the server.","source_quote_or_pointer":"Advisory description (CVE-2026-107459)","fact_id":"SEA-CVE-2026-107459-F2","document_citation":"Advisory description (CVE-2026-107459)"}],"source_stated_contributors":["The SecuShare Pro developed by Openfind has an OS Command Injection vulnerability. Unauthenticated remote attackers can inject arbitrary OS commands and execute them on the server."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-107459","reporting_entity":"CVE-2026-107459","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-107459-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-107459-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-107459"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-107324","title":"An integer overflow in BSON value-length handling in the MongoDB Go Driver can cause a runtime panic when an application validates or accesses a malformed BSON document. An unauthenticated actor who can supply BSON bytes to an affected application may terminate an unprotected application process, causing a denial of service. The driver's server-monitoring path contains panic recovery and is limited to server-selection failure.","display_title":"Software component issue could make the service unavailable","display_summary":"An integer overflow in BSON value-length handling in the MongoDB Go Driver can cause a runtime panic when an application validates or accesses a malformed BSON document.","display_reference":"CVE-2026-107324","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107324","source_title":"An integer overflow in BSON value-length handling in the MongoDB Go Driver can cause a runtime panic when an application validates or accesses a malformed BSON document. An unauthenticated actor who can supply BSON bytes to an affected application may terminate an unprotected application process, causing a denial of service. The driver's server-monitoring path contains panic recovery and is limited to server-selection failure.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-08T22:00:22.629Z","source_hash":"content-fingerprint:fnv1a-edf5f3fe","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-107324-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"An integer overflow in BSON value-length handling in the MongoDB Go Driver can cause a runtime panic when an application validates or accesses a malformed BSON document. An unauthenticated actor who can supply BSON bytes to an affected application may terminate an unprotected application process, causing a denial of service. The driver's server-monitoring path contains panic recovery and is limited to server-selection failure.","source_quote_or_pointer":"Security Advisory CVE-2026-107324","fact_id":"SEA-CVE-2026-107324-F1","document_citation":"Security Advisory CVE-2026-107324"},{"id":"SEA-CVE-2026-107324-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"An integer overflow in BSON value-length handling in the MongoDB Go Driver can cause a runtime panic when an application validates or accesses a malformed BSON document.","source_quote_or_pointer":"Advisory description (CVE-2026-107324)","fact_id":"SEA-CVE-2026-107324-F2","document_citation":"Advisory description (CVE-2026-107324)"}],"source_stated_contributors":["An integer overflow in BSON value-length handling in the MongoDB Go Driver can cause a runtime panic when an application validates or accesses a malformed BSON document."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-107324","reporting_entity":"CVE-2026-107324","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-107324-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-107324-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-107324"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-107322","title":"An incomplete list of disallowed inputs in Amazon Agent Plugins for AWS databases-on-aws plugin before 1.7.1 might allow a remote unauthenticated actor to execute arbitrary operating system commands on the host running the helper via a crafted database command value introduced in the agent context. To remediate this issue, users should upgrade to databases-on-aws plugin version 1.7.1 or later and verify that the updated plugin is active in each environment where it is used.","display_title":"Security issue reported in Software component","display_summary":"An incomplete list of disallowed inputs in Amazon Agent Plugins for AWS databases-on-aws plugin before 1.7.1 might allow a remote unauthenticated actor to execute arbitrary operating system commands on the host running…","display_reference":"CVE-2026-107322","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107322","source_title":"An incomplete list of disallowed inputs in Amazon Agent Plugins for AWS databases-on-aws plugin before 1.7.1 might allow a remote unauthenticated actor to execute arbitrary operating system commands on the host running the helper via a crafted database command value introduced in the agent context. To remediate this issue, users should upgrade to databases-on-aws plugin version 1.7.1 or later and verify that the updated plugin is active in each environment where it is used.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-08T22:00:22.629Z","source_hash":"content-fingerprint:fnv1a-b62e66fe","affected_system":{"organization":"Software component project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-107322-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"An incomplete list of disallowed inputs in Amazon Agent Plugins for AWS databases-on-aws plugin before 1.7.1 might allow a remote unauthenticated actor to execute arbitrary operating system commands on the host running the helper via a crafted database command value introduced in the agent context. To remediate this issue, users should upgrade to databases-on-aws plugin version 1.7.1 or later and verify that the updated plugin is active in each environment where it is used.","source_quote_or_pointer":"Security Advisory CVE-2026-107322","fact_id":"SEA-CVE-2026-107322-F1","document_citation":"Security Advisory CVE-2026-107322"},{"id":"SEA-CVE-2026-107322-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"An incomplete list of disallowed inputs in Amazon Agent Plugins for AWS databases-on-aws plugin before 1.7.1 might allow a remote unauthenticated actor to execute arbitrary operating system commands on the host running the helper via a crafted database command value introduced in the agent context.","source_quote_or_pointer":"Advisory description (CVE-2026-107322)","fact_id":"SEA-CVE-2026-107322-F2","document_citation":"Advisory description (CVE-2026-107322)"}],"source_stated_contributors":["An incomplete list of disallowed inputs in Amazon Agent Plugins for AWS databases-on-aws plugin before 1.7.1 might allow a remote unauthenticated actor to execute arbitrary operating system commands on the host running the helper via a crafted database command value introduced in the agent context."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.infrastructure_modification","auth.write_action","data.pii","arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-010"],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-107322","reporting_entity":"CVE-2026-107322","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-107322-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-107322-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-107322"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-106433","title":"Improper state management in MongoDB libmongocrypt can cause provider-specific data to be treated as an incompatible type when cleaning up a key document containing duplicate masterKey fields. An authenticated actor who can modify key vault documents, or a server that returns such a key document, can cause invalid memory access and invalid frees in the client process. This can terminate the application or corrupt process memory.","display_title":"Software component issue could cause actions to run with inconsistent state","display_summary":"Improper state management in MongoDB libmongocrypt can cause provider-specific data to be treated as an incompatible type when cleaning up a key document containing duplicate masterKey fields.","display_reference":"CVE-2026-106433","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-106433","source_title":"Improper state management in MongoDB libmongocrypt can cause provider-specific data to be treated as an incompatible type when cleaning up a key document containing duplicate masterKey fields. An authenticated actor who can modify key vault documents, or a server that returns such a key document, can cause invalid memory access and invalid frees in the client process. This can terminate the application or corrupt process memory.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-08T22:00:22.629Z","source_hash":"content-fingerprint:fnv1a-81daef26","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-106433-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Improper state management in MongoDB libmongocrypt can cause provider-specific data to be treated as an incompatible type when cleaning up a key document containing duplicate masterKey fields. An authenticated actor who can modify key vault documents, or a server that returns such a key document, can cause invalid memory access and invalid frees in the client process. This can terminate the application or corrupt process memory.","source_quote_or_pointer":"Security Advisory CVE-2026-106433","fact_id":"SEA-CVE-2026-106433-F1","document_citation":"Security Advisory CVE-2026-106433"},{"id":"SEA-CVE-2026-106433-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Improper state management in MongoDB libmongocrypt can cause provider-specific data to be treated as an incompatible type when cleaning up a key document containing duplicate masterKey fields.","source_quote_or_pointer":"Advisory description (CVE-2026-106433)","fact_id":"SEA-CVE-2026-106433-F2","document_citation":"Advisory description (CVE-2026-106433)"}],"source_stated_contributors":["Improper state management in MongoDB libmongocrypt can cause provider-specific data to be treated as an incompatible type when cleaning up a key document containing duplicate masterKey fields."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.write_action","data.uploaded_files"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-106433","reporting_entity":"CVE-2026-106433","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-106433-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-106433-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-106433"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-106430","title":"The MongoDB C++ Driver discards content after an embedded NUL byte in certain field and collection names accepted by the collection API. This can cause the driver and the calling application to interpret the same name differently. An authenticated actor who can influence a name passed by an affected application can cause the application to read distinct values from an unintended field or rename an unintended collection. These operations use the application's existing database credentials.","display_title":"Software component issue could expose accounts or credentials","display_summary":"The MongoDB C++ Driver discards content after an embedded NUL byte in certain field and collection names accepted by the collection API.","display_reference":"CVE-2026-106430","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-106430","source_title":"The MongoDB C++ Driver discards content after an embedded NUL byte in certain field and collection names accepted by the collection API. This can cause the driver and the calling application to interpret the same name differently. An authenticated actor who can influence a name passed by an affected application can cause the application to read distinct values from an unintended field or rename an unintended collection. These operations use the application's existing database credentials.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-08T22:00:22.629Z","source_hash":"content-fingerprint:fnv1a-aa29528f","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-106430-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The MongoDB C++ Driver discards content after an embedded NUL byte in certain field and collection names accepted by the collection API. This can cause the driver and the calling application to interpret the same name differently. An authenticated actor who can influence a name passed by an affected application can cause the application to read distinct values from an unintended field or rename an unintended collection. These operations use the application's existing database credentials.","source_quote_or_pointer":"Security Advisory CVE-2026-106430","fact_id":"SEA-CVE-2026-106430-F1","document_citation":"Security Advisory CVE-2026-106430"},{"id":"SEA-CVE-2026-106430-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The MongoDB C++ Driver discards content after an embedded NUL byte in certain field and collection names accepted by the collection API. This can cause the driver and the calling application to interpret the same name differently.","source_quote_or_pointer":"Advisory description (CVE-2026-106430)","fact_id":"SEA-CVE-2026-106430-F2","document_citation":"Advisory description (CVE-2026-106430)"}],"source_stated_contributors":["The MongoDB C++ Driver discards content after an embedded NUL byte in certain field and collection names accepted by the collection API. This can cause the driver and the calling application to interpret the same name differently."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-106430","reporting_entity":"CVE-2026-106430","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-106430-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-106430-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-106430"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-105570","title":"Docker Sandboxes compared OAuth token-endpoint hostnames case-sensitively when deciding whether to mask managed credential responses, while request routing treated DNS hostnames case-insensitively. Untrusted code inside a sandbox could use a case-variant hostname to reach the genuine provider endpoint while bypassing response masking. If a user completed the OAuth flow, the provider's access and refresh tokens could be returned unmasked to the sandbox, exposing host-managed credentials.","display_title":"Software component issue could expose accounts or credentials","display_summary":"Docker Sandboxes compared OAuth token-endpoint hostnames case-sensitively when deciding whether to mask managed credential responses, while request routing treated DNS hostnames case-insensitively.","display_reference":"CVE-2026-105570","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105570","source_title":"Docker Sandboxes compared OAuth token-endpoint hostnames case-sensitively when deciding whether to mask managed credential responses, while request routing treated DNS hostnames case-insensitively. Untrusted code inside a sandbox could use a case-variant hostname to reach the genuine provider endpoint while bypassing response masking. If a user completed the OAuth flow, the provider's access and refresh tokens could be returned unmasked to the sandbox, exposing host-managed credentials.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-08T22:00:22.629Z","source_hash":"content-fingerprint:fnv1a-a023003b","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Cloud & container infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-105570-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Docker Sandboxes compared OAuth token-endpoint hostnames case-sensitively when deciding whether to mask managed credential responses, while request routing treated DNS hostnames case-insensitively. Untrusted code inside a sandbox could use a case-variant hostname to reach the genuine provider endpoint while bypassing response masking. If a user completed the OAuth flow, the provider's access and refresh tokens could be returned unmasked to the sandbox, exposing host-managed credentials.","source_quote_or_pointer":"Security Advisory CVE-2026-105570","fact_id":"SEA-CVE-2026-105570-F1","document_citation":"Security Advisory CVE-2026-105570"},{"id":"SEA-CVE-2026-105570-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Docker Sandboxes compared OAuth token-endpoint hostnames case-sensitively when deciding whether to mask managed credential responses, while request routing treated DNS hostnames case-insensitively.","source_quote_or_pointer":"Advisory description (CVE-2026-105570)","fact_id":"SEA-CVE-2026-105570-F2","document_citation":"Advisory description (CVE-2026-105570)"}],"source_stated_contributors":["Docker Sandboxes compared OAuth token-endpoint hostnames case-sensitively when deciding whether to mask managed credential responses, while request routing treated DNS hostnames case-insensitively."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.code_execution","auth.privileged_action","data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-105570","reporting_entity":"CVE-2026-105570","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-105570-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-105570-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-105570"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-105452","title":"Docker Sandboxes could forward a client-supplied credential alongside a credential injected by the host egress proxy. The proxy removed alternate credentials only when their values matched known sentinel values, so untrusted code in an authorized sandbox could supply an unrecognized credential in another supported authentication header. For affected upstream services, this could authenticate the request to an attacker-controlled account and expose data included in the request.","display_title":"Software component issue could expose accounts or credentials","display_summary":"Docker Sandboxes could forward a client-supplied credential alongside a credential injected by the host egress proxy. The proxy removed alternate credentials only when their values matched known sentinel values, so…","display_reference":"CVE-2026-105452","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105452","source_title":"Docker Sandboxes could forward a client-supplied credential alongside a credential injected by the host egress proxy. The proxy removed alternate credentials only when their values matched known sentinel values, so untrusted code in an authorized sandbox could supply an unrecognized credential in another supported authentication header. For affected upstream services, this could authenticate the request to an attacker-controlled account and expose data included in the request.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-08T22:00:22.629Z","source_hash":"content-fingerprint:fnv1a-20da21e6","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Cloud & container infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-105452-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Docker Sandboxes could forward a client-supplied credential alongside a credential injected by the host egress proxy. The proxy removed alternate credentials only when their values matched known sentinel values, so untrusted code in an authorized sandbox could supply an unrecognized credential in another supported authentication header. For affected upstream services, this could authenticate the request to an attacker-controlled account and expose data included in the request.","source_quote_or_pointer":"Security Advisory CVE-2026-105452","fact_id":"SEA-CVE-2026-105452-F1","document_citation":"Security Advisory CVE-2026-105452"},{"id":"SEA-CVE-2026-105452-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Docker Sandboxes could forward a client-supplied credential alongside a credential injected by the host egress proxy. The proxy removed alternate credentials only when their values matched known sentinel values, so untrusted code in an authorized sandbox could supply an unrecognized credential in another supported…","source_quote_or_pointer":"Advisory description (CVE-2026-105452)","fact_id":"SEA-CVE-2026-105452-F2","document_citation":"Advisory description (CVE-2026-105452)"}],"source_stated_contributors":["Docker Sandboxes could forward a client-supplied credential alongside a credential injected by the host egress proxy. The proxy removed alternate credentials only when their values matched known sentinel values, so untrusted code in an authorized sandbox could supply an unrecognized credential in another supported…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.code_execution","auth.destructive_action","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-105452","reporting_entity":"CVE-2026-105452","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-105452-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-105452-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-105452"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-101998","title":"Docker Sandboxes could fail open while masking credentials in protected proxy responses. When a response-body read returned data together with an error, affected handlers could forward unmasked bytes. Code inside an authorized sandbox could use this to recover host-managed OAuth access and refresh tokens or a derived Anthropic API key intended to remain outside the sandbox.","display_title":"Software component issue could expose accounts or credentials","display_summary":"Docker Sandboxes could fail open while masking credentials in protected proxy responses. When a response-body read returned data together with an error, affected handlers could forward unmasked bytes.","display_reference":"CVE-2026-101998","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-101998","source_title":"Docker Sandboxes could fail open while masking credentials in protected proxy responses. When a response-body read returned data together with an error, affected handlers could forward unmasked bytes. Code inside an authorized sandbox could use this to recover host-managed OAuth access and refresh tokens or a derived Anthropic API key intended to remain outside the sandbox.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-08T22:00:22.629Z","source_hash":"content-fingerprint:fnv1a-d799ef45","affected_system":{"organization":"Software component project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-101998-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Docker Sandboxes could fail open while masking credentials in protected proxy responses. When a response-body read returned data together with an error, affected handlers could forward unmasked bytes. Code inside an authorized sandbox could use this to recover host-managed OAuth access and refresh tokens or a derived Anthropic API key intended to remain outside the sandbox.","source_quote_or_pointer":"Security Advisory CVE-2026-101998","fact_id":"SEA-CVE-2026-101998-F1","document_citation":"Security Advisory CVE-2026-101998"},{"id":"SEA-CVE-2026-101998-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Docker Sandboxes could fail open while masking credentials in protected proxy responses. When a response-body read returned data together with an error, affected handlers could forward unmasked bytes.","source_quote_or_pointer":"Advisory description (CVE-2026-101998)","fact_id":"SEA-CVE-2026-101998-F2","document_citation":"Advisory description (CVE-2026-101998)"}],"source_stated_contributors":["Docker Sandboxes could fail open while masking credentials in protected proxy responses. When a response-body read returned data together with an error, affected handlers could forward unmasked bytes."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.code_execution","auth.privileged_action","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-101998","reporting_entity":"CVE-2026-101998","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-101998-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-101998-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-101998"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-94585","title":"An authentication bypass vulnerability exists in the web management interface of Brocade Fabric OS versions before 9.2.2d running on the MXG610 platform. An unauthenticated, network-adjacent attacker can exploit an unauthenticated endpoint within the Single Sign-On (SSO) workflow to gain administrative access to the device management interface.","display_title":"Software component issue could allow unauthorized access","display_summary":"An authentication bypass vulnerability exists in the web management interface of Brocade Fabric OS versions before 9.2.2d running on the MXG610 platform.","display_reference":"CVE-2026-94585","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-94585","source_title":"An authentication bypass vulnerability exists in the web management interface of Brocade Fabric OS versions before 9.2.2d running on the MXG610 platform. An unauthenticated, network-adjacent attacker can exploit an unauthenticated endpoint within the Single Sign-On (SSO) workflow to gain administrative access to the device management interface.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-08T22:00:22.629Z","source_hash":"content-fingerprint:fnv1a-5cf13a80","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-94585-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"An authentication bypass vulnerability exists in the web management interface of Brocade Fabric OS versions before 9.2.2d running on the MXG610 platform. An unauthenticated, network-adjacent attacker can exploit an unauthenticated endpoint within the Single Sign-On (SSO) workflow to gain administrative access to the device management interface.","source_quote_or_pointer":"Security Advisory CVE-2026-94585","fact_id":"SEA-CVE-2026-94585-F1","document_citation":"Security Advisory CVE-2026-94585"},{"id":"SEA-CVE-2026-94585-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"An authentication bypass vulnerability exists in the web management interface of Brocade Fabric OS versions before 9.2.2d running on the MXG610 platform. An unauthenticated, network-adjacent attacker can exploit an unauthenticated endpoint within the Single Sign-On (SSO) workflow to gain administrative access to the…","source_quote_or_pointer":"Advisory description (CVE-2026-94585)","fact_id":"SEA-CVE-2026-94585-F2","document_citation":"Advisory description (CVE-2026-94585)"}],"source_stated_contributors":["An authentication bypass vulnerability exists in the web management interface of Brocade Fabric OS versions before 9.2.2d running on the MXG610 platform. An unauthenticated, network-adjacent attacker can exploit an unauthenticated endpoint within the Single Sign-On (SSO) workflow to gain administrative access to the…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-94585","reporting_entity":"CVE-2026-94585","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-94585-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-94585-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-94585"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-94578","title":"Brocade Fabric OS versions before 10.0.1 contain an authorization logic vulnerability in the AAA (Authentication, Authorization, and Accounting) integration framework allows remote authenticated users to gain root-equivalent chassis access controls. By returning specific, crafted Vendor-Specific Attributes (VSAs) or directory claims from an external identity provider (such as RADIUS, LDAP, TACACS+, or Federated IDP), an account can bypass administrative role restriction checks during session establishment.","display_title":"Software component issue could allow unauthorized access","display_summary":"Brocade Fabric OS versions before 10.0.1 contain an authorization logic vulnerability in the AAA (Authentication, Authorization, and Accounting) integration framework allows remote authenticated users to gain…","display_reference":"CVE-2026-94578","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-94578","source_title":"Brocade Fabric OS versions before 10.0.1 contain an authorization logic vulnerability in the AAA (Authentication, Authorization, and Accounting) integration framework allows remote authenticated users to gain root-equivalent chassis access controls. By returning specific, crafted Vendor-Specific Attributes (VSAs) or directory claims from an external identity provider (such as RADIUS, LDAP, TACACS+, or Federated IDP), an account can bypass administrative role restriction checks during session establishment.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-08T22:00:22.629Z","source_hash":"content-fingerprint:fnv1a-a66b8906","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-94578-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Brocade Fabric OS versions before 10.0.1 contain an authorization logic vulnerability in the AAA (Authentication, Authorization, and Accounting) integration framework allows remote authenticated users to gain root-equivalent chassis access controls. By returning specific, crafted Vendor-Specific Attributes (VSAs) or directory claims from an external identity provider (such as RADIUS, LDAP, TACACS+, or Federated IDP), an account can bypass administrative role restriction checks during session establishment.","source_quote_or_pointer":"Security Advisory CVE-2026-94578","fact_id":"SEA-CVE-2026-94578-F1","document_citation":"Security Advisory CVE-2026-94578"},{"id":"SEA-CVE-2026-94578-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Brocade Fabric OS versions before 10.0.1 contain an authorization logic vulnerability in the AAA (Authentication, Authorization, and Accounting) integration framework allows remote authenticated users to gain root-equivalent chassis access controls.","source_quote_or_pointer":"Advisory description (CVE-2026-94578)","fact_id":"SEA-CVE-2026-94578-F2","document_citation":"Advisory description (CVE-2026-94578)"}],"source_stated_contributors":["Brocade Fabric OS versions before 10.0.1 contain an authorization logic vulnerability in the AAA (Authentication, Authorization, and Accounting) integration framework allows remote authenticated users to gain root-equivalent chassis access controls."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-94578","reporting_entity":"CVE-2026-94578","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-94578-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-94578-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-94578"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-94575","title":"A logic vulnerability in Brocade Fabric OS versions before 10.0.1 web management framework allows an authenticated, low-privileged user to bypass inner Role-Based Access Control (RBAC) checks under specific environmental conditions. Successful exploitation lowers the system authorization mode for the active session context, allowing access to restricted configuration settings intended exclusively for administrative roles.","display_title":"Software component issue could allow unauthorized access","display_summary":"A logic vulnerability in Brocade Fabric OS versions before 10.0.1 web management framework allows an authenticated, low-privileged user to bypass inner Role-Based Access Control (RBAC) checks under specific environmental…","display_reference":"CVE-2026-94575","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-94575","source_title":"A logic vulnerability in Brocade Fabric OS versions before 10.0.1 web management framework allows an authenticated, low-privileged user to bypass inner Role-Based Access Control (RBAC) checks under specific environmental conditions. Successful exploitation lowers the system authorization mode for the active session context, allowing access to restricted configuration settings intended exclusively for administrative roles.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-08T22:00:22.629Z","source_hash":"content-fingerprint:fnv1a-41e1e687","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-94575-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A logic vulnerability in Brocade Fabric OS versions before 10.0.1 web management framework allows an authenticated, low-privileged user to bypass inner Role-Based Access Control (RBAC) checks under specific environmental conditions. Successful exploitation lowers the system authorization mode for the active session context, allowing access to restricted configuration settings intended exclusively for administrative roles.","source_quote_or_pointer":"Security Advisory CVE-2026-94575","fact_id":"SEA-CVE-2026-94575-F1","document_citation":"Security Advisory CVE-2026-94575"},{"id":"SEA-CVE-2026-94575-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A logic vulnerability in Brocade Fabric OS versions before 10.0.1 web management framework allows an authenticated, low-privileged user to bypass inner Role-Based Access Control (RBAC) checks under specific environmental conditions.","source_quote_or_pointer":"Advisory description (CVE-2026-94575)","fact_id":"SEA-CVE-2026-94575-F2","document_citation":"Advisory description (CVE-2026-94575)"}],"source_stated_contributors":["A logic vulnerability in Brocade Fabric OS versions before 10.0.1 web management framework allows an authenticated, low-privileged user to bypass inner Role-Based Access Control (RBAC) checks under specific environmental conditions."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-94575","reporting_entity":"CVE-2026-94575","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-94575-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-94575-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-94575"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-87684","title":"A stack-based buffer overflow vulnerability exists in the SNMP daemon request handling of Brocade Fabric versions before 10.0.1. When processing an incoming SNMPv3 packet, an internal statistics gathering handler copies user-supplied context name data into a fixed-size buffer without properly validating the length of the string. A remote, unauthenticated attacker (under default configuration) can exploit this vulnerability by sending a specially crafted SNMPv3 packet, leading to memory corruption, daemon crash (Denial of Service), or potential arbitrary code execution.","display_title":"Software component issue could allow unintended commands to run","display_summary":"A stack-based buffer overflow vulnerability exists in the SNMP daemon request handling of Brocade Fabric versions before 10.0.1.","display_reference":"CVE-2026-87684","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87684","source_title":"A stack-based buffer overflow vulnerability exists in the SNMP daemon request handling of Brocade Fabric versions before 10.0.1. When processing an incoming SNMPv3 packet, an internal statistics gathering handler copies user-supplied context name data into a fixed-size buffer without properly validating the length of the string. A remote, unauthenticated attacker (under default configuration) can exploit this vulnerability by sending a specially crafted SNMPv3 packet, leading to memory corruption, daemon crash (Denial of Service), or potential arbitrary code execution.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-08T22:00:22.629Z","source_hash":"content-fingerprint:fnv1a-404e7d44","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-87684-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A stack-based buffer overflow vulnerability exists in the SNMP daemon request handling of Brocade Fabric versions before 10.0.1. When processing an incoming SNMPv3 packet, an internal statistics gathering handler copies user-supplied context name data into a fixed-size buffer without properly validating the length of the string. A remote, unauthenticated attacker (under default configuration) can exploit this vulnerability by sending a specially crafted SNMPv3 packet, leading to memory corruption, daemon crash (Denial of Service), or potential arbitrary code execution.","source_quote_or_pointer":"Security Advisory CVE-2026-87684","fact_id":"SEA-CVE-2026-87684-F1","document_citation":"Security Advisory CVE-2026-87684"},{"id":"SEA-CVE-2026-87684-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A stack-based buffer overflow vulnerability exists in the SNMP daemon request handling of Brocade Fabric versions before 10.0.1. When processing an incoming SNMPv3 packet, an internal statistics gathering handler copies user-supplied context name data into a fixed-size buffer without properly validating the length of…","source_quote_or_pointer":"Advisory description (CVE-2026-87684)","fact_id":"SEA-CVE-2026-87684-F2","document_citation":"Advisory description (CVE-2026-87684)"}],"source_stated_contributors":["A stack-based buffer overflow vulnerability exists in the SNMP daemon request handling of Brocade Fabric versions before 10.0.1. When processing an incoming SNMPv3 packet, an internal statistics gathering handler copies user-supplied context name data into a fixed-size buffer without properly validating the length of…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-87684","reporting_entity":"CVE-2026-87684","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-87684-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-87684-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-87684"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-87671","title":"An out-of-bounds memory read vulnerability exists in the web management daemon of Brocade Fabric OS versions before 10.0.1. Unauthenticated HTTP endpoints process specific URL query parameters without validating array index boundaries or performing numerical range checks. An unauthenticated remote attacker can exploit this issue by sending a single, crafted HTTP request containing extreme numerical values in the query string. This causes an invalid memory dereference, resulting in a crash of the web management process (Denial of Service) and potential temporary management-plane disruption.","display_title":"Software component issue could make the service unavailable","display_summary":"An out-of-bounds memory read vulnerability exists in the web management daemon of Brocade Fabric OS versions before 10.0.1.","display_reference":"CVE-2026-87671","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87671","source_title":"An out-of-bounds memory read vulnerability exists in the web management daemon of Brocade Fabric OS versions before 10.0.1. Unauthenticated HTTP endpoints process specific URL query parameters without validating array index boundaries or performing numerical range checks. An unauthenticated remote attacker can exploit this issue by sending a single, crafted HTTP request containing extreme numerical values in the query string. This causes an invalid memory dereference, resulting in a crash of the web management process (Denial of Service) and potential temporary management-plane disruption.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-08T22:00:22.629Z","source_hash":"content-fingerprint:fnv1a-380e5200","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-87671-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"An out-of-bounds memory read vulnerability exists in the web management daemon of Brocade Fabric OS versions before 10.0.1. Unauthenticated HTTP endpoints process specific URL query parameters without validating array index boundaries or performing numerical range checks. An unauthenticated remote attacker can exploit this issue by sending a single, crafted HTTP request containing extreme numerical values in the query string. This causes an invalid memory dereference, resulting in a crash of the web management process (Denial of Service) and potential temporary management-plane disruption.","source_quote_or_pointer":"Security Advisory CVE-2026-87671","fact_id":"SEA-CVE-2026-87671-F1","document_citation":"Security Advisory CVE-2026-87671"},{"id":"SEA-CVE-2026-87671-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"An out-of-bounds memory read vulnerability exists in the web management daemon of Brocade Fabric OS versions before 10.0.1. Unauthenticated HTTP endpoints process specific URL query parameters without validating array index boundaries or performing numerical range checks.","source_quote_or_pointer":"Advisory description (CVE-2026-87671)","fact_id":"SEA-CVE-2026-87671-F2","document_citation":"Advisory description (CVE-2026-87671)"}],"source_stated_contributors":["An out-of-bounds memory read vulnerability exists in the web management daemon of Brocade Fabric OS versions before 10.0.1. Unauthenticated HTTP endpoints process specific URL query parameters without validating array index boundaries or performing numerical range checks."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-87671","reporting_entity":"CVE-2026-87671","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-87671-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-87671-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-87671"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-87661","title":"Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 directly accepts Apache configuration file data during service setup or re-initialization. An attacker capable of corrupting the configuration structure will prevent the web management service from starting or recovering during service bring-up, leading to a persistent Denial of Service (DoS) of the administrative web interface.","display_title":"Software component issue could make the service unavailable","display_summary":"Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 directly accepts Apache configuration file data during service setup or re-initialization.","display_reference":"CVE-2026-87661","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87661","source_title":"Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 directly accepts Apache configuration file data during service setup or re-initialization. An attacker capable of corrupting the configuration structure will prevent the web management service from starting or recovering during service bring-up, leading to a persistent Denial of Service (DoS) of the administrative web interface.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-08T22:00:22.629Z","source_hash":"content-fingerprint:fnv1a-574475bb","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-87661-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 directly accepts Apache configuration file data during service setup or re-initialization. An attacker capable of corrupting the configuration structure will prevent the web management service from starting or recovering during service bring-up, leading to a persistent Denial of Service (DoS) of the administrative web interface.","source_quote_or_pointer":"Security Advisory CVE-2026-87661","fact_id":"SEA-CVE-2026-87661-F1","document_citation":"Security Advisory CVE-2026-87661"},{"id":"SEA-CVE-2026-87661-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 directly accepts Apache configuration file data during service setup or re-initialization. An attacker capable of corrupting the configuration structure will prevent the web management service from starting or recovering during service bring-up,…","source_quote_or_pointer":"Advisory description (CVE-2026-87661)","fact_id":"SEA-CVE-2026-87661-F2","document_citation":"Advisory description (CVE-2026-87661)"}],"source_stated_contributors":["Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 directly accepts Apache configuration file data during service setup or re-initialization. An attacker capable of corrupting the configuration structure will prevent the web management service from starting or recovering during service bring-up,…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-87661","reporting_entity":"CVE-2026-87661","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-87661-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-87661-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-87661"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-87424","title":"A vulnerability in the SupportLink API authentication component of Brocade ASCG versions prior to 3.5.0 allows an attacker to bypass authentication across deployments due to the use of a hard coded cryptographic key.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-87424","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87424","source_title":"A vulnerability in the SupportLink API authentication component of Brocade ASCG versions prior to 3.5.0 allows an attacker to bypass authentication across deployments due to the use of a hard coded cryptographic key.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-08T22:00:22.629Z","source_hash":"content-fingerprint:fnv1a-82499856","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-87424-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability in the SupportLink API authentication component of Brocade ASCG versions prior to 3.5.0 allows an attacker to bypass authentication across deployments due to the use of a hard coded cryptographic key.","source_quote_or_pointer":"Security Advisory CVE-2026-87424","fact_id":"SEA-CVE-2026-87424-F1","document_citation":"Security Advisory CVE-2026-87424"},{"id":"SEA-CVE-2026-87424-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability in the SupportLink API authentication component of Brocade ASCG versions prior to 3.5.0 allows an attacker to bypass authentication across deployments due to the use of a hard coded cryptographic key.","source_quote_or_pointer":"Advisory description (CVE-2026-87424)","fact_id":"SEA-CVE-2026-87424-F2","document_citation":"Advisory description (CVE-2026-87424)"}],"source_stated_contributors":["A vulnerability in the SupportLink API authentication component of Brocade ASCG versions prior to 3.5.0 allows an attacker to bypass authentication across deployments due to the use of a hard coded cryptographic key."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-87424","reporting_entity":"CVE-2026-87424","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-87424-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-87424-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-87424"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-85489","title":"An authentication flaw exists in the Brocade ASCG administrative management service component. An unauthenticated network user can issue direct API requests to perform privileged actions, including accessing sensitive system configuration mapping data, modifying managed device inventories, and altering operational settings. This vulnerability affects all versions of Brocade ASCG before 3.5.0.","display_title":"Security issue reported in Software component","display_summary":"An authentication flaw exists in the Brocade ASCG administrative management service component. An unauthenticated network user can issue direct API requests to perform privileged actions, including accessing sensitive…","display_reference":"CVE-2026-85489","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85489","source_title":"An authentication flaw exists in the Brocade ASCG administrative management service component. An unauthenticated network user can issue direct API requests to perform privileged actions, including accessing sensitive system configuration mapping data, modifying managed device inventories, and altering operational settings. This vulnerability affects all versions of Brocade ASCG before 3.5.0.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-08T22:00:22.629Z","source_hash":"content-fingerprint:fnv1a-a327e47","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-85489-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"An authentication flaw exists in the Brocade ASCG administrative management service component. An unauthenticated network user can issue direct API requests to perform privileged actions, including accessing sensitive system configuration mapping data, modifying managed device inventories, and altering operational settings. This vulnerability affects all versions of Brocade ASCG before 3.5.0.","source_quote_or_pointer":"Security Advisory CVE-2026-85489","fact_id":"SEA-CVE-2026-85489-F1","document_citation":"Security Advisory CVE-2026-85489"},{"id":"SEA-CVE-2026-85489-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"An authentication flaw exists in the Brocade ASCG administrative management service component. An unauthenticated network user can issue direct API requests to perform privileged actions, including accessing sensitive system configuration mapping data, modifying managed device inventories, and altering operational…","source_quote_or_pointer":"Advisory description (CVE-2026-85489)","fact_id":"SEA-CVE-2026-85489-F2","document_citation":"Advisory description (CVE-2026-85489)"}],"source_stated_contributors":["An authentication flaw exists in the Brocade ASCG administrative management service component. An unauthenticated network user can issue direct API requests to perform privileged actions, including accessing sensitive system configuration mapping data, modifying managed device inventories, and altering operational…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-85489","reporting_entity":"CVE-2026-85489","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-85489-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-85489-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-85489"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-85487","title":"A path traversal vulnerability exists in the HTTP service component of Brocade ASCG versions before 3.5.0. An unauthenticated attacker on the local network could send a manipulated API request to the service endpoint bypassing path restrictions to arbitrary file read, file write, or file deletion operations.","display_title":"Software component issue could expose restricted files","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-85487","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85487","source_title":"A path traversal vulnerability exists in the HTTP service component of Brocade ASCG versions before 3.5.0. An unauthenticated attacker on the local network could send a manipulated API request to the service endpoint bypassing path restrictions to arbitrary file read, file write, or file deletion operations.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-08T22:00:22.629Z","source_hash":"content-fingerprint:fnv1a-93dd740b","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-85487-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A path traversal vulnerability exists in the HTTP service component of Brocade ASCG versions before 3.5.0. An unauthenticated attacker on the local network could send a manipulated API request to the service endpoint bypassing path restrictions to arbitrary file read, file write, or file deletion operations.","source_quote_or_pointer":"Security Advisory CVE-2026-85487","fact_id":"SEA-CVE-2026-85487-F1","document_citation":"Security Advisory CVE-2026-85487"},{"id":"SEA-CVE-2026-85487-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A path traversal vulnerability exists in the HTTP service component of Brocade ASCG versions before 3.5.0. An unauthenticated attacker on the local network could send a manipulated API request to the service endpoint bypassing path restrictions to arbitrary file read, file write, or file deletion operations.","source_quote_or_pointer":"Advisory description (CVE-2026-85487)","fact_id":"SEA-CVE-2026-85487-F2","document_citation":"Advisory description (CVE-2026-85487)"}],"source_stated_contributors":["A path traversal vulnerability exists in the HTTP service component of Brocade ASCG versions before 3.5.0. An unauthenticated attacker on the local network could send a manipulated API request to the service endpoint bypassing path restrictions to arbitrary file read, file write, or file deletion operations."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.write_action"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Restricted file exposure","File overwrite"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-85487","reporting_entity":"CVE-2026-85487","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-85487-SG1","label":"Confine file access to a fixed root","description":"Resolve paths to canonical form and reject anything outside the intended directory before opening files.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-85487-SG1","label":"Confine file access to a fixed root","description":"Resolve paths to canonical form and reject anything outside the intended directory before opening files.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"File paths supplied by a caller escaped the intended directory. Canonicalise paths and confine file access to a fixed root.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-85487"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-85423","title":"A vulnerability has been identified in the data collection service of Brocade ASCG versions before 3.5.0. An API endpoint within the data collector service fails to perform authentication or authorization checks on incoming requests. An attacker with network access to the service can instruct the application to establish SSH connections to arbitrary hosts and execute arbitrary system commands, effectively turning the appliance into an unauthenticated proxy or execution vector.","display_title":"Security issue reported in Software component","display_summary":"A vulnerability has been identified in the data collection service of Brocade ASCG versions before 3.5.0. An API endpoint within the data collector service fails to perform authentication or authorization checks on…","display_reference":"CVE-2026-85423","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85423","source_title":"A vulnerability has been identified in the data collection service of Brocade ASCG versions before 3.5.0. An API endpoint within the data collector service fails to perform authentication or authorization checks on incoming requests. An attacker with network access to the service can instruct the application to establish SSH connections to arbitrary hosts and execute arbitrary system commands, effectively turning the appliance into an unauthenticated proxy or execution vector.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-08T22:00:22.629Z","source_hash":"content-fingerprint:fnv1a-ab9124b1","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-85423-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability has been identified in the data collection service of Brocade ASCG versions before 3.5.0. An API endpoint within the data collector service fails to perform authentication or authorization checks on incoming requests. An attacker with network access to the service can instruct the application to establish SSH connections to arbitrary hosts and execute arbitrary system commands, effectively turning the appliance into an unauthenticated proxy or execution vector.","source_quote_or_pointer":"Security Advisory CVE-2026-85423","fact_id":"SEA-CVE-2026-85423-F1","document_citation":"Security Advisory CVE-2026-85423"},{"id":"SEA-CVE-2026-85423-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability has been identified in the data collection service of Brocade ASCG versions before 3.5.0. An API endpoint within the data collector service fails to perform authentication or authorization checks on incoming requests.","source_quote_or_pointer":"Advisory description (CVE-2026-85423)","fact_id":"SEA-CVE-2026-85423-F2","document_citation":"Advisory description (CVE-2026-85423)"}],"source_stated_contributors":["A vulnerability has been identified in the data collection service of Brocade ASCG versions before 3.5.0. An API endpoint within the data collector service fails to perform authentication or authorization checks on incoming requests."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["arch.content_ingestion_rag"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-85423","reporting_entity":"CVE-2026-85423","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-85423-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-85423-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-85423"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-85421","title":"A critical security vulnerability has been identified in Brocade ASCG versions before 3.5.0. The HTTPS service fails to properly enforce authentication or access control checks on incoming requests. An unauthenticated attacker with network access can issue control commands, alter cluster states, and modify system configurations, leading to a complete compromise of the streaming service control plane.","display_title":"Software component issue could allow unauthorized access","display_summary":"A critical security vulnerability has been identified in Brocade ASCG versions before 3.5.0. The HTTPS service fails to properly enforce authentication or access control checks on incoming requests.","display_reference":"CVE-2026-85421","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85421","source_title":"A critical security vulnerability has been identified in Brocade ASCG versions before 3.5.0. The HTTPS service fails to properly enforce authentication or access control checks on incoming requests. An unauthenticated attacker with network access can issue control commands, alter cluster states, and modify system configurations, leading to a complete compromise of the streaming service control plane.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-08T22:00:22.629Z","source_hash":"content-fingerprint:fnv1a-19931515","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-85421-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A critical security vulnerability has been identified in Brocade ASCG versions before 3.5.0. The HTTPS service fails to properly enforce authentication or access control checks on incoming requests. An unauthenticated attacker with network access can issue control commands, alter cluster states, and modify system configurations, leading to a complete compromise of the streaming service control plane.","source_quote_or_pointer":"Security Advisory CVE-2026-85421","fact_id":"SEA-CVE-2026-85421-F1","document_citation":"Security Advisory CVE-2026-85421"},{"id":"SEA-CVE-2026-85421-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A critical security vulnerability has been identified in Brocade ASCG versions before 3.5.0. The HTTPS service fails to properly enforce authentication or access control checks on incoming requests.","source_quote_or_pointer":"Advisory description (CVE-2026-85421)","fact_id":"SEA-CVE-2026-85421-F2","document_citation":"Advisory description (CVE-2026-85421)"}],"source_stated_contributors":["A critical security vulnerability has been identified in Brocade ASCG versions before 3.5.0. The HTTPS service fails to properly enforce authentication or access control checks on incoming requests."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.write_action","arch.event_driven"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-85421","reporting_entity":"CVE-2026-85421","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-85421-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-85421-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-85421"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-82627","title":"The Uncanny Automator – AI + Automation for WordPress | AI Agent, AI Page Builder, Free AI Usage Included plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 7.6.1.1 via deserialization of untrusted input. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject a PHP Object when a third-party integration plugin (such as PeepSo, MailPoet, WPForms, etc) is installed and a recipe is configured that stores attacker-controlled data as trigger meta. The additional presence of a POP chain within Uncanny Automator allows attackers to delete arbitrary files on the server.","display_title":"Software component issue could make the application process unsafe input","display_summary":"The Uncanny Automator – AI + Automation for WordPress | AI Agent, AI Page Builder, Free AI Usage Included plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 7.6.1.1 via…","display_reference":"CVE-2026-82627","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-82627","source_title":"The Uncanny Automator – AI + Automation for WordPress | AI Agent, AI Page Builder, Free AI Usage Included plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 7.6.1.1 via deserialization of untrusted input. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject a PHP Object when a third-party integration plugin (such as PeepSo, MailPoet, WPForms, etc) is installed and a recipe is configured that stores attacker-controlled data as trigger meta. The additional presence of a POP chain within Uncanny Automator allows attackers to delete arbitrary files on the server.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-08T22:00:22.629Z","source_hash":"content-fingerprint:fnv1a-a6a47b1a","affected_system":{"organization":"Software component project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-82627-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Uncanny Automator – AI + Automation for WordPress | AI Agent, AI Page Builder, Free AI Usage Included plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 7.6.1.1 via deserialization of untrusted input. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject a PHP Object when a third-party integration plugin (such as PeepSo, MailPoet, WPForms, etc) is installed and a recipe is configured that stores attacker-controlled data as trigger meta. The additional presence of a POP chain within Uncanny Automator allows attackers to delete arbitrary files on the server.","source_quote_or_pointer":"Security Advisory CVE-2026-82627","fact_id":"SEA-CVE-2026-82627-F1","document_citation":"Security Advisory CVE-2026-82627"},{"id":"SEA-CVE-2026-82627-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Uncanny Automator – AI + Automation for WordPress | AI Agent, AI Page Builder, Free AI Usage Included plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 7.6.1.1 via deserialization of untrusted input.","source_quote_or_pointer":"Advisory description (CVE-2026-82627)","fact_id":"SEA-CVE-2026-82627-F2","document_citation":"Advisory description (CVE-2026-82627)"}],"source_stated_contributors":["The Uncanny Automator – AI + Automation for WordPress | AI Agent, AI Page Builder, Free AI Usage Included plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 7.6.1.1 via deserialization of untrusted input."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.write_action","arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-002","SEA-FM-010"],"consequences":["Unsafe object construction","Possible code execution"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-82627","reporting_entity":"CVE-2026-82627","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-82627-SG1","label":"Use schema-validated data formats","description":"Parse untrusted input into plain data with an explicit schema; never deserialize into arbitrary types.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-82627-SG1","label":"Use schema-validated data formats","description":"Parse untrusted input into plain data with an explicit schema; never deserialize into arbitrary types.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"The application rebuilt objects from untrusted data. Use data-only formats with schema validation instead of native object deserialization.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-82627"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-5048","title":"In Brocade SANnav before 3.0.0a, an SQL Injection vulnerability in various external API inventories have a vulnerability that allows an authenticated attacker to inject malicious data into some of the REST API -query parameters.","display_title":"Software component issue could expose or alter stored data","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-5048","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-5048","source_title":"In Brocade SANnav before 3.0.0a, an SQL Injection vulnerability in various external API inventories have a vulnerability that allows an authenticated attacker to inject malicious data into some of the REST API -query parameters.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-08T22:00:22.629Z","source_hash":"content-fingerprint:fnv1a-abc568a4","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-5048-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"In Brocade SANnav before 3.0.0a, an SQL Injection vulnerability in various external API inventories have a vulnerability that allows an authenticated attacker to inject malicious data into some of the REST API -query parameters.","source_quote_or_pointer":"Security Advisory CVE-2026-5048","fact_id":"SEA-CVE-2026-5048-F1","document_citation":"Security Advisory CVE-2026-5048"},{"id":"SEA-CVE-2026-5048-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"In Brocade SANnav before 3.0.0a, an SQL Injection vulnerability in various external API inventories have a vulnerability that allows an authenticated attacker to inject malicious data into some of the REST API -query parameters.","source_quote_or_pointer":"Advisory description (CVE-2026-5048)","fact_id":"SEA-CVE-2026-5048-F2","document_citation":"Advisory description (CVE-2026-5048)"}],"source_stated_contributors":["In Brocade SANnav before 3.0.0a, an SQL Injection vulnerability in various external API inventories have a vulnerability that allows an authenticated attacker to inject malicious data into some of the REST API -query parameters."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["arch.external_api"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-5048","reporting_entity":"CVE-2026-5048","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-5048-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-5048-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-5048"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-17196","title":"The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Unrestricted File Type Upload in all versions up to, and including, 6.3.316 via the upload_files function. This is due to missing file type validation in the upload_files function, which reads and applies an attacker-controlled extensions string from _super_elements post meta verbatim as the allowed MIME type map. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload files that may be executable, which makes remote code execution possible. The attack requires a preceding step: poisoning the _super_elements post meta via the super_save_form AJAX handler, which lacks a capability and nonce check but requires the attacker to be authenticated as at minimum a Subscriber-level user; the subsequent file upload via super_upload_files requires no authentication at all.","display_title":"Software component issue could allow unintended commands to run","display_summary":"The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Unrestricted File Type Upload in all versions up to, and including, 6.3.316 via the uploadfiles function.","display_reference":"CVE-2026-17196","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-17196","source_title":"The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Unrestricted File Type Upload in all versions up to, and including, 6.3.316 via the upload_files function. This is due to missing file type validation in the upload_files function, which reads and applies an attacker-controlled extensions string from _super_elements post meta verbatim as the allowed MIME type map. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload files that may be executable, which makes remote code execution possible. The attack requires a preceding step: poisoning the _super_elements post meta via the super_save_form AJAX handler, which lacks a capability and nonce check but requires the attacker to be authenticated as at minimum a Subscriber-level user; the subsequent file upload via super_upload_files requires no authentication at all.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-08T22:00:22.629Z","source_hash":"content-fingerprint:fnv1a-9b53451","affected_system":{"organization":"The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Unrestricted File Type Upload in all versions up to, and including, 6.3.316 via the uploadfiles function. This is due to missing file type validation in the uploadfiles function, which reads and applies an attacker-controlled extensions string from superelements post meta verbatim as the allowed MIME type map. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload files that may be executable, which makes remote code execution possible. The attack requires a preceding step project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-17196-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Unrestricted File Type Upload in all versions up to, and including, 6.3.316 via the upload_files function. This is due to missing file type validation in the upload_files function, which reads and applies an attacker-controlled extensions string from _super_elements post meta verbatim as the allowed MIME type map. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload files that may be executable, which makes remote code execution possible. The attack requires a preceding step: poisoning the _super_elements post meta via the super_save_form AJAX handler, which lacks a capability and nonce check but requires the attacker to be authenticated as at minimum a Subscriber-level user; the subsequent file upload via super_upload_files requires no authentication at all.","source_quote_or_pointer":"Security Advisory CVE-2026-17196","fact_id":"SEA-CVE-2026-17196-F1","document_citation":"Security Advisory CVE-2026-17196"},{"id":"SEA-CVE-2026-17196-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Unrestricted File Type Upload in all versions up to, and including, 6.3.316 via the uploadfiles function.","source_quote_or_pointer":"Advisory description (CVE-2026-17196)","fact_id":"SEA-CVE-2026-17196-F2","document_citation":"Advisory description (CVE-2026-17196)"}],"source_stated_contributors":["The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Unrestricted File Type Upload in all versions up to, and including, 6.3.316 via the uploadfiles function."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","data.uploaded_files"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-17196","reporting_entity":"CVE-2026-17196","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-17196-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-17196-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-17196"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-14507","title":"IBM DataPower Gateway 11.0.0.0 through 11.0.0.2 could allow a remote authenticated attacker to cause a denial of service due to improper memory allocation during key derivation.","display_title":"Software component issue could make the service unavailable","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-14507","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-14507","source_title":"IBM DataPower Gateway 11.0.0.0 through 11.0.0.2 could allow a remote authenticated attacker to cause a denial of service due to improper memory allocation during key derivation.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-08T22:00:22.629Z","source_hash":"content-fingerprint:fnv1a-e085735c","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-14507-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM DataPower Gateway 11.0.0.0 through 11.0.0.2 could allow a remote authenticated attacker to cause a denial of service due to improper memory allocation during key derivation.","source_quote_or_pointer":"Security Advisory CVE-2026-14507","fact_id":"SEA-CVE-2026-14507-F1","document_citation":"Security Advisory CVE-2026-14507"},{"id":"SEA-CVE-2026-14507-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM DataPower Gateway 11.0.0.0 through 11.0.0.2 could allow a remote authenticated attacker to cause a denial of service due to improper memory allocation during key derivation.","source_quote_or_pointer":"Advisory description (CVE-2026-14507)","fact_id":"SEA-CVE-2026-14507-F2","document_citation":"Advisory description (CVE-2026-14507)"}],"source_stated_contributors":["IBM DataPower Gateway 11.0.0.0 through 11.0.0.2 could allow a remote authenticated attacker to cause a denial of service due to improper memory allocation during key derivation."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-14507","reporting_entity":"CVE-2026-14507","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-14507-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-14507-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-14507"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-107638","title":"pH7Builder (pH7 Social Dating CMS) before 18.5.0 contains an improper restriction of authentication attempts vulnerability that allows attackers to bypass two-factor authentication by guessing TOTP codes without limits. Attackers who know an account password can submit unlimited 6-digit verification codes to VerificationCodeFormProcess.php to take over member, affiliate, or administrator accounts.","display_title":"Security issue reported in Software component","display_summary":"pH7Builder (pH7 Social Dating CMS) before 18.5.0 contains an improper restriction of authentication attempts vulnerability that allows attackers to bypass two-factor authentication by guessing TOTP codes without limits.","display_reference":"CVE-2026-107638","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107638","source_title":"pH7Builder (pH7 Social Dating CMS) before 18.5.0 contains an improper restriction of authentication attempts vulnerability that allows attackers to bypass two-factor authentication by guessing TOTP codes without limits. Attackers who know an account password can submit unlimited 6-digit verification codes to VerificationCodeFormProcess.php to take over member, affiliate, or administrator accounts.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-08T22:00:22.629Z","source_hash":"content-fingerprint:fnv1a-482efe36","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-107638-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"pH7Builder (pH7 Social Dating CMS) before 18.5.0 contains an improper restriction of authentication attempts vulnerability that allows attackers to bypass two-factor authentication by guessing TOTP codes without limits. Attackers who know an account password can submit unlimited 6-digit verification codes to VerificationCodeFormProcess.php to take over member, affiliate, or administrator accounts.","source_quote_or_pointer":"Security Advisory CVE-2026-107638","fact_id":"SEA-CVE-2026-107638-F1","document_citation":"Security Advisory CVE-2026-107638"},{"id":"SEA-CVE-2026-107638-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"pH7Builder (pH7 Social Dating CMS) before 18.5.0 contains an improper restriction of authentication attempts vulnerability that allows attackers to bypass two-factor authentication by guessing TOTP codes without limits.","source_quote_or_pointer":"Advisory description (CVE-2026-107638)","fact_id":"SEA-CVE-2026-107638-F2","document_citation":"Advisory description (CVE-2026-107638)"}],"source_stated_contributors":["pH7Builder (pH7 Social Dating CMS) before 18.5.0 contains an improper restriction of authentication attempts vulnerability that allows attackers to bypass two-factor authentication by guessing TOTP codes without limits."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-107638","reporting_entity":"CVE-2026-107638","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-107638-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-107638-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-107638"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-107636","title":"pH7Builder (pH7 Social Dating CMS) before 18.5.1 contains a payment validation vulnerability that allows registered low-privileged members to obtain any membership tier by supplying client-controlled plan and amount fields. Attackers can set item_number, cart_order_id, or the PayPal custom field while paying a token amount, or submit uncompleted PayPal IPN payments, to gain the most expensive membership and its paid features.","display_title":"Security issue reported in Software component","display_summary":"pH7Builder (pH7 Social Dating CMS) before 18.5.1 contains a payment validation vulnerability that allows registered low-privileged members to obtain any membership tier by supplying client-controlled plan and amount…","display_reference":"CVE-2026-107636","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107636","source_title":"pH7Builder (pH7 Social Dating CMS) before 18.5.1 contains a payment validation vulnerability that allows registered low-privileged members to obtain any membership tier by supplying client-controlled plan and amount fields. Attackers can set item_number, cart_order_id, or the PayPal custom field while paying a token amount, or submit uncompleted PayPal IPN payments, to gain the most expensive membership and its paid features.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-08T22:00:22.629Z","source_hash":"content-fingerprint:fnv1a-e04a9ca2","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-107636-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"pH7Builder (pH7 Social Dating CMS) before 18.5.1 contains a payment validation vulnerability that allows registered low-privileged members to obtain any membership tier by supplying client-controlled plan and amount fields. Attackers can set item_number, cart_order_id, or the PayPal custom field while paying a token amount, or submit uncompleted PayPal IPN payments, to gain the most expensive membership and its paid features.","source_quote_or_pointer":"Security Advisory CVE-2026-107636","fact_id":"SEA-CVE-2026-107636-F1","document_citation":"Security Advisory CVE-2026-107636"},{"id":"SEA-CVE-2026-107636-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"pH7Builder (pH7 Social Dating CMS) before 18.5.1 contains a payment validation vulnerability that allows registered low-privileged members to obtain any membership tier by supplying client-controlled plan and amount fields.","source_quote_or_pointer":"Advisory description (CVE-2026-107636)","fact_id":"SEA-CVE-2026-107636-F2","document_citation":"Advisory description (CVE-2026-107636)"}],"source_stated_contributors":["pH7Builder (pH7 Social Dating CMS) before 18.5.1 contains a payment validation vulnerability that allows registered low-privileged members to obtain any membership tier by supplying client-controlled plan and amount fields."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.financial_action","auth.privileged_action"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-107636","reporting_entity":"CVE-2026-107636","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-107636-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-107636-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-107636"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-107623","title":"A flaw was found in the OIDC Dynamic Client Registration (DCR) component of Keycloak. A bug in the response serialization causes the backchannel logout offline token revocation setting to be omitted from responses. When a client performs a standard update, this missing information causes the setting to be silently disabled. As a result, offline tokens may remain valid even after a user session is terminated via backchannel logout.","display_title":"Security issue reported in Software component","display_summary":"A flaw was found in the OIDC Dynamic Client Registration (DCR) component of Keycloak. A bug in the response serialization causes the backchannel logout offline token revocation setting to be omitted from responses.","display_reference":"CVE-2026-107623","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107623","source_title":"A flaw was found in the OIDC Dynamic Client Registration (DCR) component of Keycloak. A bug in the response serialization causes the backchannel logout offline token revocation setting to be omitted from responses. When a client performs a standard update, this missing information causes the setting to be silently disabled. As a result, offline tokens may remain valid even after a user session is terminated via backchannel logout.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-08T22:00:22.629Z","source_hash":"content-fingerprint:fnv1a-5633f970","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-107623-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A flaw was found in the OIDC Dynamic Client Registration (DCR) component of Keycloak. A bug in the response serialization causes the backchannel logout offline token revocation setting to be omitted from responses. When a client performs a standard update, this missing information causes the setting to be silently disabled. As a result, offline tokens may remain valid even after a user session is terminated via backchannel logout.","source_quote_or_pointer":"Security Advisory CVE-2026-107623","fact_id":"SEA-CVE-2026-107623-F1","document_citation":"Security Advisory CVE-2026-107623"},{"id":"SEA-CVE-2026-107623-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A flaw was found in the OIDC Dynamic Client Registration (DCR) component of Keycloak. A bug in the response serialization causes the backchannel logout offline token revocation setting to be omitted from responses.","source_quote_or_pointer":"Advisory description (CVE-2026-107623)","fact_id":"SEA-CVE-2026-107623-F2","document_citation":"Advisory description (CVE-2026-107623)"}],"source_stated_contributors":["A flaw was found in the OIDC Dynamic Client Registration (DCR) component of Keycloak. A bug in the response serialization causes the backchannel logout offline token revocation setting to be omitted from responses."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.write_action","data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-107623","reporting_entity":"CVE-2026-107623","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-107623-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-107623-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-107623"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-71895","title":"An authorization vulnerability in Apache DolphinScheduler allows authenticated non-admin users to retrieve Kubernetes configuration data intended for administrator-managed cluster configuration. The exposed kubeconfig data contains credentials that may allow users to authenticate directly to the Kubernetes API outside DolphinScheduler. The impact depends on the permissions granted to the disclosed credentials. If the kubeconfig provides cluster-admin or broadly privileged service-account access, an attacker may read Kubernetes Secrets, create pods, and establish persistent access to the cluster. This issue affects Apache DolphinScheduler: from 3.2.0 before 3.4.3. Users are recommended to upgrade to version 3.4.3, which fixes the issue.","display_title":"Software component issue could expose accounts or credentials","display_summary":"An authorization vulnerability in Apache DolphinScheduler allows authenticated non-admin users to retrieve Kubernetes configuration data intended for administrator-managed cluster configuration.","display_reference":"CVE-2026-71895","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-71895","source_title":"An authorization vulnerability in Apache DolphinScheduler allows authenticated non-admin users to retrieve Kubernetes configuration data intended for administrator-managed cluster configuration. The exposed kubeconfig data contains credentials that may allow users to authenticate directly to the Kubernetes API outside DolphinScheduler. The impact depends on the permissions granted to the disclosed credentials. If the kubeconfig provides cluster-admin or broadly privileged service-account access, an attacker may read Kubernetes Secrets, create pods, and establish persistent access to the cluster. This issue affects Apache DolphinScheduler: from 3.2.0 before 3.4.3. Users are recommended to upgrade to version 3.4.3, which fixes the issue.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-08T20:00:33.218Z","source_hash":"content-fingerprint:fnv1a-8a197dc7","affected_system":{"organization":"An authorization vulnerability in Apache DolphinScheduler allows authenticated non-admin users to retrieve Kubernetes configuration data intended for administrator-managed cluster configuration. The exposed kubeconfig data contains credentials that may allow users to authenticate directly to the Kubernetes API outside DolphinScheduler. The impact depends on the permissions granted to the disclosed credentials. If the kubeconfig provides cluster-admin or broadly privileged service-account access, an attacker may read Kubernetes Secrets, create pods, and establish persistent access to the cluster. This issue affects Apache DolphinScheduler project","product":"Software component","system_type":"Cloud & container infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-71895-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"An authorization vulnerability in Apache DolphinScheduler allows authenticated non-admin users to retrieve Kubernetes configuration data intended for administrator-managed cluster configuration. The exposed kubeconfig data contains credentials that may allow users to authenticate directly to the Kubernetes API outside DolphinScheduler. The impact depends on the permissions granted to the disclosed credentials. If the kubeconfig provides cluster-admin or broadly privileged service-account access, an attacker may read Kubernetes Secrets, create pods, and establish persistent access to the cluster. This issue affects Apache DolphinScheduler: from 3.2.0 before 3.4.3. Users are recommended to upgrade to version 3.4.3, which fixes the issue.","source_quote_or_pointer":"Security Advisory CVE-2026-71895","fact_id":"SEA-CVE-2026-71895-F1","document_citation":"Security Advisory CVE-2026-71895"},{"id":"SEA-CVE-2026-71895-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"An authorization vulnerability in Apache DolphinScheduler allows authenticated non-admin users to retrieve Kubernetes configuration data intended for administrator-managed cluster configuration.","source_quote_or_pointer":"Advisory description (CVE-2026-71895)","fact_id":"SEA-CVE-2026-71895-F2","document_citation":"Advisory description (CVE-2026-71895)"}],"source_stated_contributors":["An authorization vulnerability in Apache DolphinScheduler allows authenticated non-admin users to retrieve Kubernetes configuration data intended for administrator-managed cluster configuration."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.infrastructure_modification","data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-71895","reporting_entity":"CVE-2026-71895","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-71895-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-71895-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-71895"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-105076","title":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Appsbd Vitepos vitepos-lite allows Blind SQL Injection.This issue affects Vitepos: from n/a through 3.6.1.","display_title":"Software component issue could expose or alter stored data","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-105076","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105076","source_title":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Appsbd Vitepos vitepos-lite allows Blind SQL Injection.This issue affects Vitepos: from n/a through 3.6.1.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-08T20:00:33.218Z","source_hash":"content-fingerprint:fnv1a-ad2a0f70","affected_system":{"organization":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Appsbd Vitepos vitepos-lite allows Blind SQL Injection.This issue affects Vitepos project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-105076-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Appsbd Vitepos vitepos-lite allows Blind SQL Injection.This issue affects Vitepos: from n/a through 3.6.1.","source_quote_or_pointer":"Security Advisory CVE-2026-105076","fact_id":"SEA-CVE-2026-105076-F1","document_citation":"Security Advisory CVE-2026-105076"},{"id":"SEA-CVE-2026-105076-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Appsbd Vitepos vitepos-lite allows Blind SQL Injection.This issue affects Vitepos: from n/a through 3.6.1.","source_quote_or_pointer":"Advisory description (CVE-2026-105076)","fact_id":"SEA-CVE-2026-105076-F2","document_citation":"Advisory description (CVE-2026-105076)"}],"source_stated_contributors":["Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Appsbd Vitepos vitepos-lite allows Blind SQL Injection.This issue affects Vitepos: from n/a through 3.6.1."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-105076","reporting_entity":"CVE-2026-105076","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-105076-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-105076-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-105076"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-50054","title":"An authorization flaw in Zimbra Collaboration Suite’s GrantRightsRequest allows an attacker with access to an authenticated account to grant another local account the loginAs right, creating persistent mailbox access and mail-sending authority that survives password changes and session expiry.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-50054","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-50054","source_title":"An authorization flaw in Zimbra Collaboration Suite’s GrantRightsRequest allows an attacker with access to an authenticated account to grant another local account the loginAs right, creating persistent mailbox access and mail-sending authority that survives password changes and session expiry.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-08T20:00:33.218Z","source_hash":"content-fingerprint:fnv1a-ec374a9f","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-50054-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"An authorization flaw in Zimbra Collaboration Suite’s GrantRightsRequest allows an attacker with access to an authenticated account to grant another local account the loginAs right, creating persistent mailbox access and mail-sending authority that survives password changes and session expiry.","source_quote_or_pointer":"Security Advisory CVE-2026-50054","fact_id":"SEA-CVE-2026-50054-F1","document_citation":"Security Advisory CVE-2026-50054"},{"id":"SEA-CVE-2026-50054-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"An authorization flaw in Zimbra Collaboration Suite’s GrantRightsRequest allows an attacker with access to an authenticated account to grant another local account the loginAs right, creating persistent mailbox access and mail-sending authority that survives password changes and session expiry.","source_quote_or_pointer":"Advisory description (CVE-2026-50054)","fact_id":"SEA-CVE-2026-50054-F2","document_citation":"Advisory description (CVE-2026-50054)"}],"source_stated_contributors":["An authorization flaw in Zimbra Collaboration Suite’s GrantRightsRequest allows an attacker with access to an authenticated account to grant another local account the loginAs right, creating persistent mailbox access and mail-sending authority that survives password changes and session expiry."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-50054","reporting_entity":"CVE-2026-50054","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-50054-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-50054-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-50054"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-105825","title":"ImageMagick before 6.9.13-55 and 7.x before 7.1.2-30 contains a denial of service vulnerability in its handling of XMP profiles, where a crafted profile terminates the process instead of raising an exception. Attackers can supply images with malicious XMP profiles to crash applications that process them using ImageMagick.","display_title":"Software component issue could make the service unavailable","display_summary":"ImageMagick before 6.9.13-55 and 7.x before 7.1.2-30 contains a denial of service vulnerability in its handling of XMP profiles, where a crafted profile terminates the process instead of raising an exception.","display_reference":"CVE-2026-105825","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105825","source_title":"ImageMagick before 6.9.13-55 and 7.x before 7.1.2-30 contains a denial of service vulnerability in its handling of XMP profiles, where a crafted profile terminates the process instead of raising an exception. Attackers can supply images with malicious XMP profiles to crash applications that process them using ImageMagick.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-08T20:00:33.218Z","source_hash":"content-fingerprint:fnv1a-547030cc","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-105825-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"ImageMagick before 6.9.13-55 and 7.x before 7.1.2-30 contains a denial of service vulnerability in its handling of XMP profiles, where a crafted profile terminates the process instead of raising an exception. Attackers can supply images with malicious XMP profiles to crash applications that process them using ImageMagick.","source_quote_or_pointer":"Security Advisory CVE-2026-105825","fact_id":"SEA-CVE-2026-105825-F1","document_citation":"Security Advisory CVE-2026-105825"},{"id":"SEA-CVE-2026-105825-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"ImageMagick before 6.9.13-55 and 7.x before 7.1.2-30 contains a denial of service vulnerability in its handling of XMP profiles, where a crafted profile terminates the process instead of raising an exception.","source_quote_or_pointer":"Advisory description (CVE-2026-105825)","fact_id":"SEA-CVE-2026-105825-F2","document_citation":"Advisory description (CVE-2026-105825)"}],"source_stated_contributors":["ImageMagick before 6.9.13-55 and 7.x before 7.1.2-30 contains a denial of service vulnerability in its handling of XMP profiles, where a crafted profile terminates the process instead of raising an exception."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","data.uploaded_files"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-105825","reporting_entity":"CVE-2026-105825","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-105825-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-105825-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-105825"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2024-8122","title":"The WSO2 Identity Server fails to enforce a default expiry time for SMS One-Time Passwords (OTPs) used in multi-factor authentication (MFA). This allows unused OTPs to remain valid indefinitely, presenting an opportunity for malicious actors to conduct brute force attacks by repeatedly guessing the OTP. The absence of automatic expiration for OTPs grants attackers an unlimited timeframe to attempt guessing the correct code. A successful brute force attack can lead to an MFA bypass, resulting in the unauthorized takeover of a user's account and compromising the security and privacy of both the individual and the system.","display_title":"Security issue reported in Software component","display_summary":"The WSO2 Identity Server fails to enforce a default expiry time for SMS One-Time Passwords (OTPs) used in multi-factor authentication (MFA).","display_reference":"CVE-2024-8122","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2024-8122","source_title":"The WSO2 Identity Server fails to enforce a default expiry time for SMS One-Time Passwords (OTPs) used in multi-factor authentication (MFA). This allows unused OTPs to remain valid indefinitely, presenting an opportunity for malicious actors to conduct brute force attacks by repeatedly guessing the OTP. The absence of automatic expiration for OTPs grants attackers an unlimited timeframe to attempt guessing the correct code. A successful brute force attack can lead to an MFA bypass, resulting in the unauthorized takeover of a user's account and compromising the security and privacy of both the individual and the system.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-08T20:00:33.218Z","source_hash":"content-fingerprint:fnv1a-440fc5b2","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2024-8122-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The WSO2 Identity Server fails to enforce a default expiry time for SMS One-Time Passwords (OTPs) used in multi-factor authentication (MFA). This allows unused OTPs to remain valid indefinitely, presenting an opportunity for malicious actors to conduct brute force attacks by repeatedly guessing the OTP. The absence of automatic expiration for OTPs grants attackers an unlimited timeframe to attempt guessing the correct code. A successful brute force attack can lead to an MFA bypass, resulting in the unauthorized takeover of a user's account and compromising the security and privacy of both the individual and the system.","source_quote_or_pointer":"Security Advisory CVE-2024-8122","fact_id":"SEA-CVE-2024-8122-F1","document_citation":"Security Advisory CVE-2024-8122"},{"id":"SEA-CVE-2024-8122-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The WSO2 Identity Server fails to enforce a default expiry time for SMS One-Time Passwords (OTPs) used in multi-factor authentication (MFA). This allows unused OTPs to remain valid indefinitely, presenting an opportunity for malicious actors to conduct brute force attacks by repeatedly guessing the OTP.","source_quote_or_pointer":"Advisory description (CVE-2024-8122)","fact_id":"SEA-CVE-2024-8122-F2","document_citation":"Advisory description (CVE-2024-8122)"}],"source_stated_contributors":["The WSO2 Identity Server fails to enforce a default expiry time for SMS One-Time Passwords (OTPs) used in multi-factor authentication (MFA). This allows unused OTPs to remain valid indefinitely, presenting an opportunity for malicious actors to conduct brute force attacks by repeatedly guessing the OTP."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2024-8122","reporting_entity":"CVE-2024-8122","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2024-8122-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2024-8122-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2024-8122"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-94583","title":"A race condition vulnerability exists in the request processing logic of the REST management interface on Brocade Fabric OS versions before 10.0.1. When handling concurrent incoming network management FCIP requests, a timing window exists between when a request populates the address variable and when the service constructs and returns the response context. As a result, the first request adopts the modified context, causing the service to return sensitive management details or configuration data belonging to the second context back to the original requester.","display_title":"Software component issue could cause actions to run with inconsistent state","display_summary":"A race condition vulnerability exists in the request processing logic of the REST management interface on Brocade Fabric OS versions before 10.0.1.","display_reference":"CVE-2026-94583","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-94583","source_title":"A race condition vulnerability exists in the request processing logic of the REST management interface on Brocade Fabric OS versions before 10.0.1. When handling concurrent incoming network management FCIP requests, a timing window exists between when a request populates the address variable and when the service constructs and returns the response context. As a result, the first request adopts the modified context, causing the service to return sensitive management details or configuration data belonging to the second context back to the original requester.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-08T20:00:33.218Z","source_hash":"content-fingerprint:fnv1a-42149e2e","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-94583-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A race condition vulnerability exists in the request processing logic of the REST management interface on Brocade Fabric OS versions before 10.0.1. When handling concurrent incoming network management FCIP requests, a timing window exists between when a request populates the address variable and when the service constructs and returns the response context. As a result, the first request adopts the modified context, causing the service to return sensitive management details or configuration data belonging to the second context back to the original requester.","source_quote_or_pointer":"Security Advisory CVE-2026-94583","fact_id":"SEA-CVE-2026-94583-F1","document_citation":"Security Advisory CVE-2026-94583"},{"id":"SEA-CVE-2026-94583-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A race condition vulnerability exists in the request processing logic of the REST management interface on Brocade Fabric OS versions before 10.0.1. When handling concurrent incoming network management FCIP requests, a timing window exists between when a request populates the address variable and when the service…","source_quote_or_pointer":"Advisory description (CVE-2026-94583)","fact_id":"SEA-CVE-2026-94583-F2","document_citation":"Advisory description (CVE-2026-94583)"}],"source_stated_contributors":["A race condition vulnerability exists in the request processing logic of the REST management interface on Brocade Fabric OS versions before 10.0.1. When handling concurrent incoming network management FCIP requests, a timing window exists between when a request populates the address variable and when the service…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-001","SEA-FM-008"],"consequences":["Duplicate or inconsistent actions","State divergence"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-94583","reporting_entity":"CVE-2026-94583","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-94583-SG1","label":"Idempotency and re-validation at execution","description":"Attach idempotency keys to mutations and re-verify state and permissions atomically when the action runs.","target_failure_mode":"SEA-FM-001","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-94583-SG1","label":"Idempotency and re-validation at execution","description":"Attach idempotency keys to mutations and re-verify state and permissions atomically when the action runs.","target_failure_mode":"SEA-FM-001","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Concurrent or repeated requests produced inconsistent state. Make state-changing operations idempotent and re-check authorization and state at execution time.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-94583"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-94582","title":"A memory buffer overflow vulnerability exists in the internal diagnostic and route validation routines used by the Fabric Shortest Path First (FSPF) protocol component of Brocade Fabric OS versions before 10.0.1. While this code path is part of internal diagnostic functionality and is not directly accessible via standard user interfaces or CLI management commands, an input processing flaw allows incoming or internally routed diagnostic state payloads to exceed allocated memory boundaries. An attacker that is able to chain or link other vulnerabilities to exploit this internal diagnostic could cause a heap- or stack-based memory overrun, resulting in a daemon crash (Denial of Service) or potential arbitrary code execution within the context of the routing daemon.","display_title":"Software component issue could allow unintended commands to run","display_summary":"A memory buffer overflow vulnerability exists in the internal diagnostic and route validation routines used by the Fabric Shortest Path First (FSPF) protocol component of Brocade Fabric OS versions before 10.0.1.","display_reference":"CVE-2026-94582","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-94582","source_title":"A memory buffer overflow vulnerability exists in the internal diagnostic and route validation routines used by the Fabric Shortest Path First (FSPF) protocol component of Brocade Fabric OS versions before 10.0.1. While this code path is part of internal diagnostic functionality and is not directly accessible via standard user interfaces or CLI management commands, an input processing flaw allows incoming or internally routed diagnostic state payloads to exceed allocated memory boundaries. An attacker that is able to chain or link other vulnerabilities to exploit this internal diagnostic could cause a heap- or stack-based memory overrun, resulting in a daemon crash (Denial of Service) or potential arbitrary code execution within the context of the routing daemon.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-08T20:00:33.218Z","source_hash":"content-fingerprint:fnv1a-f356a303","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-94582-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A memory buffer overflow vulnerability exists in the internal diagnostic and route validation routines used by the Fabric Shortest Path First (FSPF) protocol component of Brocade Fabric OS versions before 10.0.1. While this code path is part of internal diagnostic functionality and is not directly accessible via standard user interfaces or CLI management commands, an input processing flaw allows incoming or internally routed diagnostic state payloads to exceed allocated memory boundaries. An attacker that is able to chain or link other vulnerabilities to exploit this internal diagnostic could cause a heap- or stack-based memory overrun, resulting in a daemon crash (Denial of Service) or potential arbitrary code execution within the context of the routing daemon.","source_quote_or_pointer":"Security Advisory CVE-2026-94582","fact_id":"SEA-CVE-2026-94582-F1","document_citation":"Security Advisory CVE-2026-94582"},{"id":"SEA-CVE-2026-94582-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A memory buffer overflow vulnerability exists in the internal diagnostic and route validation routines used by the Fabric Shortest Path First (FSPF) protocol component of Brocade Fabric OS versions before 10.0.1.","source_quote_or_pointer":"Advisory description (CVE-2026-94582)","fact_id":"SEA-CVE-2026-94582-F2","document_citation":"Advisory description (CVE-2026-94582)"}],"source_stated_contributors":["A memory buffer overflow vulnerability exists in the internal diagnostic and route validation routines used by the Fabric Shortest Path First (FSPF) protocol component of Brocade Fabric OS versions before 10.0.1."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-94582","reporting_entity":"CVE-2026-94582","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-94582-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-94582-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-94582"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-94579","title":"An OS command injection vulnerability exists in the PAM (Pluggable Authentication Module) session cleanup routines during SSH session termination on Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. An authenticated user authenticating via an external directory or AAA service whose username or profile identifier contains shell metacharacters can trigger arbitrary command execution with root privileges when their remote SSH session closes.","display_title":"Software component issue could allow unintended commands to run","display_summary":"An OS command injection vulnerability exists in the PAM (Pluggable Authentication Module) session cleanup routines during SSH session termination on Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1.","display_reference":"CVE-2026-94579","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-94579","source_title":"An OS command injection vulnerability exists in the PAM (Pluggable Authentication Module) session cleanup routines during SSH session termination on Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. An authenticated user authenticating via an external directory or AAA service whose username or profile identifier contains shell metacharacters can trigger arbitrary command execution with root privileges when their remote SSH session closes.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-08T20:00:33.218Z","source_hash":"content-fingerprint:fnv1a-7e6f0a55","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-94579-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"An OS command injection vulnerability exists in the PAM (Pluggable Authentication Module) session cleanup routines during SSH session termination on Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. An authenticated user authenticating via an external directory or AAA service whose username or profile identifier contains shell metacharacters can trigger arbitrary command execution with root privileges when their remote SSH session closes.","source_quote_or_pointer":"Security Advisory CVE-2026-94579","fact_id":"SEA-CVE-2026-94579-F1","document_citation":"Security Advisory CVE-2026-94579"},{"id":"SEA-CVE-2026-94579-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"An OS command injection vulnerability exists in the PAM (Pluggable Authentication Module) session cleanup routines during SSH session termination on Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1.","source_quote_or_pointer":"Advisory description (CVE-2026-94579)","fact_id":"SEA-CVE-2026-94579-F2","document_citation":"Advisory description (CVE-2026-94579)"}],"source_stated_contributors":["An OS command injection vulnerability exists in the PAM (Pluggable Authentication Module) session cleanup routines during SSH session termination on Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.privileged_action","data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-94579","reporting_entity":"CVE-2026-94579","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-94579-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-94579-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-94579"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-14509","title":"IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to algorithmic complexity in linked-list traversal.","display_title":"Software component issue could make the service unavailable","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-14509","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-14509","source_title":"IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to algorithmic complexity in linked-list traversal.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-08T20:00:33.218Z","source_hash":"content-fingerprint:fnv1a-234f1732","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-14509-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to algorithmic complexity in linked-list traversal.","source_quote_or_pointer":"Security Advisory CVE-2026-14509","fact_id":"SEA-CVE-2026-14509-F1","document_citation":"Security Advisory CVE-2026-14509"},{"id":"SEA-CVE-2026-14509-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to algorithmic complexity in linked-list traversal.","source_quote_or_pointer":"Advisory description (CVE-2026-14509)","fact_id":"SEA-CVE-2026-14509-F2","document_citation":"Advisory description (CVE-2026-14509)"}],"source_stated_contributors":["IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to algorithmic complexity in linked-list traversal."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-14509","reporting_entity":"CVE-2026-14509","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-14509-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-14509-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-14509"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-107604","title":"A flaw was found in the installation provider and client registration endpoints of the Keycloak identity management service. A realm administrator with only the read-only view-clients role can access the active primary secret of any confidential client, which should normally be restricted. This exposed secret can be used to impersonate the client and gain unauthorized access to its associated service account permissions.","display_title":"Software component issue could allow unauthorized access","display_summary":"A flaw was found in the installation provider and client registration endpoints of the Keycloak identity management service.","display_reference":"CVE-2026-107604","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107604","source_title":"A flaw was found in the installation provider and client registration endpoints of the Keycloak identity management service. A realm administrator with only the read-only view-clients role can access the active primary secret of any confidential client, which should normally be restricted. This exposed secret can be used to impersonate the client and gain unauthorized access to its associated service account permissions.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-08T20:00:33.218Z","source_hash":"content-fingerprint:fnv1a-48fcefc7","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-107604-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A flaw was found in the installation provider and client registration endpoints of the Keycloak identity management service. A realm administrator with only the read-only view-clients role can access the active primary secret of any confidential client, which should normally be restricted. This exposed secret can be used to impersonate the client and gain unauthorized access to its associated service account permissions.","source_quote_or_pointer":"Security Advisory CVE-2026-107604","fact_id":"SEA-CVE-2026-107604-F1","document_citation":"Security Advisory CVE-2026-107604"},{"id":"SEA-CVE-2026-107604-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A flaw was found in the installation provider and client registration endpoints of the Keycloak identity management service. A realm administrator with only the read-only view-clients role can access the active primary secret of any confidential client, which should normally be restricted.","source_quote_or_pointer":"Advisory description (CVE-2026-107604)","fact_id":"SEA-CVE-2026-107604-F2","document_citation":"Advisory description (CVE-2026-107604)"}],"source_stated_contributors":["A flaw was found in the installation provider and client registration endpoints of the Keycloak identity management service. A realm administrator with only the read-only view-clients role can access the active primary secret of any confidential client, which should normally be restricted."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-107604","reporting_entity":"CVE-2026-107604","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-107604-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-107604-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-107604"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-107288","title":"Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.77.0 until 1.107.6 and 2.44.0, the local web_fetch_tool and the WebFetch local fallback compare blocked_domains entries with a URL hostname before both values are normalized to the form used by getaddrinfo. An attacker-influenced model can use an equivalent IDNA spelling, non-ASCII label separator, case variation, or trailing root label that resolves to a blocked host but does not match the configured string, causing the application to fetch that host with its own privileges. allowed_domains fails closed for unmatched spellings, and private-IP and cloud-metadata protections remain effective. This issue is fixed in versions 1.107.6 and 2.44.0.","display_title":"Security issue reported in Software component","display_summary":"Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.77.0 until 1.107.6 and 2.44.0, the local webfetchtool and the WebFetch local fallback compare blockeddomains…","display_reference":"CVE-2026-107288","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107288","source_title":"Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.77.0 until 1.107.6 and 2.44.0, the local web_fetch_tool and the WebFetch local fallback compare blocked_domains entries with a URL hostname before both values are normalized to the form used by getaddrinfo. An attacker-influenced model can use an equivalent IDNA spelling, non-ASCII label separator, case variation, or trailing root label that resolves to a blocked host but does not match the configured string, causing the application to fetch that host with its own privileges. allowed_domains fails closed for unmatched spellings, and private-IP and cloud-metadata protections remain effective. This issue is fixed in versions 1.107.6 and 2.44.0.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-08T20:00:33.218Z","source_hash":"content-fingerprint:fnv1a-fa874b9","affected_system":{"organization":"Software component project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-107288-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.77.0 until 1.107.6 and 2.44.0, the local web_fetch_tool and the WebFetch local fallback compare blocked_domains entries with a URL hostname before both values are normalized to the form used by getaddrinfo. An attacker-influenced model can use an equivalent IDNA spelling, non-ASCII label separator, case variation, or trailing root label that resolves to a blocked host but does not match the configured string, causing the application to fetch that host with its own privileges. allowed_domains fails closed for unmatched spellings, and private-IP and cloud-metadata protections remain effective. This issue is fixed in versions 1.107.6 and 2.44.0.","source_quote_or_pointer":"Security Advisory CVE-2026-107288","fact_id":"SEA-CVE-2026-107288-F1","document_citation":"Security Advisory CVE-2026-107288"},{"id":"SEA-CVE-2026-107288-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.77.0 until 1.107.6 and 2.44.0, the local webfetchtool and the WebFetch local fallback compare blockeddomains entries with a URL hostname before both values are normalized to the form used by getaddrinfo.","source_quote_or_pointer":"Advisory description (CVE-2026-107288)","fact_id":"SEA-CVE-2026-107288-F2","document_citation":"Advisory description (CVE-2026-107288)"}],"source_stated_contributors":["Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.77.0 until 1.107.6 and 2.44.0, the local webfetchtool and the WebFetch local fallback compare blockeddomains entries with a URL hostname before both values are normalized to the form used by getaddrinfo."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-010"],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-107288","reporting_entity":"CVE-2026-107288","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-107288-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-107288-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-107288"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-88257","title":"Improper Input Validation vulnerability in BeamMCP.Schema in ScriptKittyOS beam_mcp allows an MCP client to reach a tool's dispatch function with arguments that violate the input schema the server advertised. BeamMCP.Schema.validate/2 checked type, required, additionalProperties, enum and numeric bounds on the top-level arguments object only. Constraints inside nested objects and on array items (items, minItems, maxItems, minLength, maxLength, pattern, nested required, enum and additionalProperties: false) were advertised by tools/list and never checked at tools/call or prompts/get, and keywords outside the enforced subset (oneOf, anyOf, $ref) were advertised and ignored. A host whose dispatch code relies on the schema it declared receives values the schema forbids, such as an out-of-range number or an undeclared key inside a nested object. What the host does with such a value decides the impact. This issue affects beam_mcp: from 0.1.0 before 0.10.1.","display_title":"Security issue reported in Software component","display_summary":"Improper Input Validation vulnerability in BeamMCP.Schema in ScriptKittyOS beammcp allows an MCP client to reach a tool's dispatch function with arguments that violate the input schema the server advertised.","display_reference":"CVE-2026-88257","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-88257","source_title":"Improper Input Validation vulnerability in BeamMCP.Schema in ScriptKittyOS beam_mcp allows an MCP client to reach a tool's dispatch function with arguments that violate the input schema the server advertised. BeamMCP.Schema.validate/2 checked type, required, additionalProperties, enum and numeric bounds on the top-level arguments object only. Constraints inside nested objects and on array items (items, minItems, maxItems, minLength, maxLength, pattern, nested required, enum and additionalProperties: false) were advertised by tools/list and never checked at tools/call or prompts/get, and keywords outside the enforced subset (oneOf, anyOf, $ref) were advertised and ignored. A host whose dispatch code relies on the schema it declared receives values the schema forbids, such as an out-of-range number or an undeclared key inside a nested object. What the host does with such a value decides the impact. This issue affects beam_mcp: from 0.1.0 before 0.10.1.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-08T20:00:33.218Z","source_hash":"content-fingerprint:fnv1a-e72be32d","affected_system":{"organization":"Improper Input Validation vulnerability in BeamMCP.Schema in ScriptKittyOS beammcp allows an MCP client to reach a tool's dispatch function with arguments that violate the input schema the server advertised. BeamMCP.Schema.validate/2 checked type, required, additionalProperties, enum and numeric bounds on the top-level arguments object only. Constraints inside nested objects and on array items (items, minItems, maxItems, minLength, maxLength, pattern, nested required, enum and additionalProperties project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-88257-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Improper Input Validation vulnerability in BeamMCP.Schema in ScriptKittyOS beam_mcp allows an MCP client to reach a tool's dispatch function with arguments that violate the input schema the server advertised. BeamMCP.Schema.validate/2 checked type, required, additionalProperties, enum and numeric bounds on the top-level arguments object only. Constraints inside nested objects and on array items (items, minItems, maxItems, minLength, maxLength, pattern, nested required, enum and additionalProperties: false) were advertised by tools/list and never checked at tools/call or prompts/get, and keywords outside the enforced subset (oneOf, anyOf, $ref) were advertised and ignored. A host whose dispatch code relies on the schema it declared receives values the schema forbids, such as an out-of-range number or an undeclared key inside a nested object. What the host does with such a value decides the impact. This issue affects beam_mcp: from 0.1.0 before 0.10.1.","source_quote_or_pointer":"Security Advisory CVE-2026-88257","fact_id":"SEA-CVE-2026-88257-F1","document_citation":"Security Advisory CVE-2026-88257"},{"id":"SEA-CVE-2026-88257-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Improper Input Validation vulnerability in BeamMCP.Schema in ScriptKittyOS beammcp allows an MCP client to reach a tool's dispatch function with arguments that violate the input schema the server advertised.","source_quote_or_pointer":"Advisory description (CVE-2026-88257)","fact_id":"SEA-CVE-2026-88257-F2","document_citation":"Advisory description (CVE-2026-88257)"}],"source_stated_contributors":["Improper Input Validation vulnerability in BeamMCP.Schema in ScriptKittyOS beammcp allows an MCP client to reach a tool's dispatch function with arguments that violate the input schema the server advertised."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.untrusted_external_text","arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-010"],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-88257","reporting_entity":"CVE-2026-88257","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-88257-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-88257-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-88257"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-4894","title":"A vulnerability has been identified regarding insufficient validation in the Frappe Cloud/ERPNext authentication process, which allows multiple email addresses to be accepted by manipulating the email field in the /api/method/press.api.account.signup endpoint. The vulnerability occurs when an unauthenticated remote attacker adds more than one email address. The service processes the entire value as a valid list of recipients and sends the OTP code to all addresses without proper validation of all added emails (only one of them needs to be valid). Exploiting this vulnerability would allow an attacker to: Obtain the authentication OTP; Impersonate someone else in the registration process; Register accounts using other people's email addresses without access to the mailbox; Indirectly confirm the existence of already registered email addresses.","display_title":"Security issue reported in Software component","display_summary":"A vulnerability has been identified regarding insufficient validation in the Frappe Cloud/ERPNext authentication process, which allows multiple email addresses to be accepted by manipulating the email field in the…","display_reference":"CVE-2026-4894","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-4894","source_title":"A vulnerability has been identified regarding insufficient validation in the Frappe Cloud/ERPNext authentication process, which allows multiple email addresses to be accepted by manipulating the email field in the /api/method/press.api.account.signup endpoint. The vulnerability occurs when an unauthenticated remote attacker adds more than one email address. The service processes the entire value as a valid list of recipients and sends the OTP code to all addresses without proper validation of all added emails (only one of them needs to be valid). Exploiting this vulnerability would allow an attacker to: Obtain the authentication OTP; Impersonate someone else in the registration process; Register accounts using other people's email addresses without access to the mailbox; Indirectly confirm the existence of already registered email addresses.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-08T20:00:33.218Z","source_hash":"content-fingerprint:fnv1a-3bed1150","affected_system":{"organization":"A vulnerability has been identified regarding insufficient validation in the Frappe Cloud/ERPNext authentication process, which allows multiple email addresses to be accepted by manipulating the email field in the /api/method/press.api.account.signup endpoint. The vulnerability occurs when an unauthenticated remote attacker adds more than one email address. The service processes the entire value as a valid list of recipients and sends the OTP code to all addresses without proper validation of all added emails (only one of them needs to be valid). Exploiting this vulnerability would allow an attacker to project","product":"Software component","system_type":"Cloud & container infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-4894-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability has been identified regarding insufficient validation in the Frappe Cloud/ERPNext authentication process, which allows multiple email addresses to be accepted by manipulating the email field in the /api/method/press.api.account.signup endpoint. The vulnerability occurs when an unauthenticated remote attacker adds more than one email address. The service processes the entire value as a valid list of recipients and sends the OTP code to all addresses without proper validation of all added emails (only one of them needs to be valid). Exploiting this vulnerability would allow an attacker to: Obtain the authentication OTP; Impersonate someone else in the registration process; Register accounts using other people's email addresses without access to the mailbox; Indirectly confirm the existence of already registered email addresses.","source_quote_or_pointer":"Security Advisory CVE-2026-4894","fact_id":"SEA-CVE-2026-4894-F1","document_citation":"Security Advisory CVE-2026-4894"},{"id":"SEA-CVE-2026-4894-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A vulnerability has been identified regarding insufficient validation in the Frappe Cloud/ERPNext authentication process, which allows multiple email addresses to be accepted by manipulating the email field in the /api/method/press.api.account.signup endpoint.","source_quote_or_pointer":"Advisory description (CVE-2026-4894)","fact_id":"SEA-CVE-2026-4894-F2","document_citation":"Advisory description (CVE-2026-4894)"}],"source_stated_contributors":["A vulnerability has been identified regarding insufficient validation in the Frappe Cloud/ERPNext authentication process, which allows multiple email addresses to be accepted by manipulating the email field in the /api/method/press.api.account.signup endpoint."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-4894","reporting_entity":"CVE-2026-4894","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-4894-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-4894-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-4894"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-14990","title":"IBM DataPower Gateway 10.6.0.0 through 10.6.0.10 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.","display_title":"Software component issue could run attacker-controlled scripts in a browser","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-14990","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-14990","source_title":"IBM DataPower Gateway 10.6.0.0 through 10.6.0.10 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-08T20:00:33.218Z","source_hash":"content-fingerprint:fnv1a-7e49d25c","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-14990-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM DataPower Gateway 10.6.0.0 through 10.6.0.10 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.","source_quote_or_pointer":"Security Advisory CVE-2026-14990","fact_id":"SEA-CVE-2026-14990-F1","document_citation":"Security Advisory CVE-2026-14990"},{"id":"SEA-CVE-2026-14990-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"IBM DataPower Gateway 10.6.0.0 through 10.6.0.10 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.","source_quote_or_pointer":"Advisory description (CVE-2026-14990)","fact_id":"SEA-CVE-2026-14990-F2","document_citation":"Advisory description (CVE-2026-14990)"}],"source_stated_contributors":["IBM DataPower Gateway 10.6.0.0 through 10.6.0.10 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-14990","reporting_entity":"CVE-2026-14990","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-14990-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-14990-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-14990"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-12859","title":"Missing Authorization vulnerability in Caz Informatics Services Trade Inc. Advancity ALMS Cloud allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Advancity ALMS Cloud: through 2026-10-08. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.","display_title":"Security issue reported in Software component","display_summary":"Missing Authorization vulnerability in Caz Informatics Services Trade Inc. Advancity ALMS Cloud allows Accessing Functionality Not Properly Constrained by ACLs.","display_reference":"CVE-2026-12859","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-12859","source_title":"Missing Authorization vulnerability in Caz Informatics Services Trade Inc. Advancity ALMS Cloud allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Advancity ALMS Cloud: through 2026-10-08. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-08T20:00:33.218Z","source_hash":"content-fingerprint:fnv1a-ec7be260","affected_system":{"organization":"Missing Authorization vulnerability in Caz Informatics Services Trade Inc. Advancity ALMS Cloud allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Advancity ALMS Cloud project","product":"Software component","system_type":"Cloud & container infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-12859-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Missing Authorization vulnerability in Caz Informatics Services Trade Inc. Advancity ALMS Cloud allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Advancity ALMS Cloud: through 2026-10-08. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.","source_quote_or_pointer":"Security Advisory CVE-2026-12859","fact_id":"SEA-CVE-2026-12859-F1","document_citation":"Security Advisory CVE-2026-12859"},{"id":"SEA-CVE-2026-12859-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Missing Authorization vulnerability in Caz Informatics Services Trade Inc. Advancity ALMS Cloud allows Accessing Functionality Not Properly Constrained by ACLs.","source_quote_or_pointer":"Advisory description (CVE-2026-12859)","fact_id":"SEA-CVE-2026-12859-F2","document_citation":"Advisory description (CVE-2026-12859)"}],"source_stated_contributors":["Missing Authorization vulnerability in Caz Informatics Services Trade Inc. Advancity ALMS Cloud allows Accessing Functionality Not Properly Constrained by ACLs."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-12859","reporting_entity":"CVE-2026-12859","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-12859-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-12859-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-12859"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-94258","title":"The SMS Alert WordPress plugin before 4.0.1 does not check that the acting administrator is allowed to manage the selected users before returning their stored billing phone numbers, allowing an administrator of one site on a multisite network to disclose the phone numbers of users who belong to other sites on that network. This affects multisite only, and requires the SMS Alert WordPress plugin before 4.0.1's gateway credentials to be stored on the acting administrator's own site.","display_title":"Software component issue could expose accounts or credentials","display_summary":"The SMS Alert WordPress plugin before 4.0.1 does not check that the acting administrator is allowed to manage the selected users before returning their stored billing phone numbers, allowing an administrator of one site…","display_reference":"CVE-2026-94258","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-94258","source_title":"The SMS Alert WordPress plugin before 4.0.1 does not check that the acting administrator is allowed to manage the selected users before returning their stored billing phone numbers, allowing an administrator of one site on a multisite network to disclose the phone numbers of users who belong to other sites on that network. This affects multisite only, and requires the SMS Alert WordPress plugin before 4.0.1's gateway credentials to be stored on the acting administrator's own site.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-08T16:00:38.294Z","source_hash":"content-fingerprint:fnv1a-624cba81","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-94258-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The SMS Alert WordPress plugin before 4.0.1 does not check that the acting administrator is allowed to manage the selected users before returning their stored billing phone numbers, allowing an administrator of one site on a multisite network to disclose the phone numbers of users who belong to other sites on that network. This affects multisite only, and requires the SMS Alert WordPress plugin before 4.0.1's gateway credentials to be stored on the acting administrator's own site.","source_quote_or_pointer":"Security Advisory CVE-2026-94258","fact_id":"SEA-CVE-2026-94258-F1","document_citation":"Security Advisory CVE-2026-94258"},{"id":"SEA-CVE-2026-94258-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The SMS Alert WordPress plugin before 4.0.1 does not check that the acting administrator is allowed to manage the selected users before returning their stored billing phone numbers, allowing an administrator of one site on a multisite network to disclose the phone numbers of users who belong to other sites on that…","source_quote_or_pointer":"Advisory description (CVE-2026-94258)","fact_id":"SEA-CVE-2026-94258-F2","document_citation":"Advisory description (CVE-2026-94258)"}],"source_stated_contributors":["The SMS Alert WordPress plugin before 4.0.1 does not check that the acting administrator is allowed to manage the selected users before returning their stored billing phone numbers, allowing an administrator of one site on a multisite network to disclose the phone numbers of users who belong to other sites on that…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.financial_action","auth.privileged_action","data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-94258","reporting_entity":"CVE-2026-94258","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-94258-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-94258-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-94258"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-94244","title":"The Wallet System for WooCommerce WordPress plugin before 2.8.0 does not perform any capability check, and relies on a token any authenticated user can obtain from a front-end page, before generating a report containing every customer's wallet transaction history, allowing any authenticated user, such as a subscriber, to disclose all users' names, email addresses, roles, transaction amounts, payment methods and dates.","display_title":"Security issue reported in Software component","display_summary":"The Wallet System for WooCommerce WordPress plugin before 2.8.0 does not perform any capability check, and relies on a token any authenticated user can obtain from a front-end page, before generating a report containing…","display_reference":"CVE-2026-94244","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-94244","source_title":"The Wallet System for WooCommerce WordPress plugin before 2.8.0 does not perform any capability check, and relies on a token any authenticated user can obtain from a front-end page, before generating a report containing every customer's wallet transaction history, allowing any authenticated user, such as a subscriber, to disclose all users' names, email addresses, roles, transaction amounts, payment methods and dates.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-08T16:00:38.294Z","source_hash":"content-fingerprint:fnv1a-e1756d10","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-94244-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Wallet System for WooCommerce WordPress plugin before 2.8.0 does not perform any capability check, and relies on a token any authenticated user can obtain from a front-end page, before generating a report containing every customer's wallet transaction history, allowing any authenticated user, such as a subscriber, to disclose all users' names, email addresses, roles, transaction amounts, payment methods and dates.","source_quote_or_pointer":"Security Advisory CVE-2026-94244","fact_id":"SEA-CVE-2026-94244-F1","document_citation":"Security Advisory CVE-2026-94244"},{"id":"SEA-CVE-2026-94244-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Wallet System for WooCommerce WordPress plugin before 2.8.0 does not perform any capability check, and relies on a token any authenticated user can obtain from a front-end page, before generating a report containing every customer's wallet transaction history, allowing any authenticated user, such as a subscriber,…","source_quote_or_pointer":"Advisory description (CVE-2026-94244)","fact_id":"SEA-CVE-2026-94244-F2","document_citation":"Advisory description (CVE-2026-94244)"}],"source_stated_contributors":["The Wallet System for WooCommerce WordPress plugin before 2.8.0 does not perform any capability check, and relies on a token any authenticated user can obtain from a front-end page, before generating a report containing every customer's wallet transaction history, allowing any authenticated user, such as a subscriber,…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.financial_action","data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-94244","reporting_entity":"CVE-2026-94244","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-94244-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-94244-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-94244"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-86828","title":"The BackWPup WordPress plugin before 5.7.7 does not properly restrict the destination path of files extracted during a backup restore when its fallback archive library is used, allowing high-privileged users to write files outside the intended restore directory, potentially leading to remote code execution.","display_title":"Software component issue could allow unintended commands to run","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-86828","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-86828","source_title":"The BackWPup WordPress plugin before 5.7.7 does not properly restrict the destination path of files extracted during a backup restore when its fallback archive library is used, allowing high-privileged users to write files outside the intended restore directory, potentially leading to remote code execution.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-08T16:00:38.294Z","source_hash":"content-fingerprint:fnv1a-9ea67b89","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-86828-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The BackWPup WordPress plugin before 5.7.7 does not properly restrict the destination path of files extracted during a backup restore when its fallback archive library is used, allowing high-privileged users to write files outside the intended restore directory, potentially leading to remote code execution.","source_quote_or_pointer":"Security Advisory CVE-2026-86828","fact_id":"SEA-CVE-2026-86828-F1","document_citation":"Security Advisory CVE-2026-86828"},{"id":"SEA-CVE-2026-86828-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The BackWPup WordPress plugin before 5.7.7 does not properly restrict the destination path of files extracted during a backup restore when its fallback archive library is used, allowing high-privileged users to write files outside the intended restore directory, potentially leading to remote code execution.","source_quote_or_pointer":"Advisory description (CVE-2026-86828)","fact_id":"SEA-CVE-2026-86828-F2","document_citation":"Advisory description (CVE-2026-86828)"}],"source_stated_contributors":["The BackWPup WordPress plugin before 5.7.7 does not properly restrict the destination path of files extracted during a backup restore when its fallback archive library is used, allowing high-privileged users to write files outside the intended restore directory, potentially leading to remote code execution."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.write_action","data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-86828","reporting_entity":"CVE-2026-86828","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-86828-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-86828-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-86828"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-86826","title":"The BackWPup WordPress plugin before 5.7.7 does not properly restrict web access to the working directory it uses during backup restores, allowing unauthenticated attackers, on webservers that do not honour .htaccess rules such as NGINX, to download the full backup archive (database dump and site files, including credentials and secret keys) left behind by an interrupted restore.","display_title":"Software component issue could expose accounts or credentials","display_summary":"The BackWPup WordPress plugin before 5.7.7 does not properly restrict web access to the working directory it uses during backup restores, allowing unauthenticated attackers, on webservers that do not honour .htaccess…","display_reference":"CVE-2026-86826","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-86826","source_title":"The BackWPup WordPress plugin before 5.7.7 does not properly restrict web access to the working directory it uses during backup restores, allowing unauthenticated attackers, on webservers that do not honour .htaccess rules such as NGINX, to download the full backup archive (database dump and site files, including credentials and secret keys) left behind by an interrupted restore.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-08T16:00:38.294Z","source_hash":"content-fingerprint:fnv1a-635761eb","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-86826-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The BackWPup WordPress plugin before 5.7.7 does not properly restrict web access to the working directory it uses during backup restores, allowing unauthenticated attackers, on webservers that do not honour .htaccess rules such as NGINX, to download the full backup archive (database dump and site files, including credentials and secret keys) left behind by an interrupted restore.","source_quote_or_pointer":"Security Advisory CVE-2026-86826","fact_id":"SEA-CVE-2026-86826-F1","document_citation":"Security Advisory CVE-2026-86826"},{"id":"SEA-CVE-2026-86826-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The BackWPup WordPress plugin before 5.7.7 does not properly restrict web access to the working directory it uses during backup restores, allowing unauthenticated attackers, on webservers that do not honour .htaccess rules such as NGINX, to download the full backup archive (database dump and site files, including…","source_quote_or_pointer":"Advisory description (CVE-2026-86826)","fact_id":"SEA-CVE-2026-86826-F2","document_citation":"Advisory description (CVE-2026-86826)"}],"source_stated_contributors":["The BackWPup WordPress plugin before 5.7.7 does not properly restrict web access to the working directory it uses during backup restores, allowing unauthenticated attackers, on webservers that do not honour .htaccess rules such as NGINX, to download the full backup archive (database dump and site files, including…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-86826","reporting_entity":"CVE-2026-86826","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-86826-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-86826-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-86826"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-105196","title":"The Appointment Booking Plugin WordPress plugin before 5.6.9 does not enforce per-record authorization on several of its AI Abilities API actions, allowing an authenticated user holding the LatePoint Agent role, normally restricted to their own records, to read and modify other agents' profile data and read other agents' bookings and associated customer details when the Abilities API feature is enabled.","display_title":"Security issue reported in Software component","display_summary":"The Appointment Booking Plugin WordPress plugin before 5.6.9 does not enforce per-record authorization on several of its AI Abilities API actions, allowing an authenticated user holding the LatePoint Agent role, normally…","display_reference":"CVE-2026-105196","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105196","source_title":"The Appointment Booking Plugin WordPress plugin before 5.6.9 does not enforce per-record authorization on several of its AI Abilities API actions, allowing an authenticated user holding the LatePoint Agent role, normally restricted to their own records, to read and modify other agents' profile data and read other agents' bookings and associated customer details when the Abilities API feature is enabled.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-08T16:00:38.294Z","source_hash":"content-fingerprint:fnv1a-6e21590f","affected_system":{"organization":"Software component project","product":"Software component","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":true,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-105196-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Appointment Booking Plugin WordPress plugin before 5.6.9 does not enforce per-record authorization on several of its AI Abilities API actions, allowing an authenticated user holding the LatePoint Agent role, normally restricted to their own records, to read and modify other agents' profile data and read other agents' bookings and associated customer details when the Abilities API feature is enabled.","source_quote_or_pointer":"Security Advisory CVE-2026-105196","fact_id":"SEA-CVE-2026-105196-F1","document_citation":"Security Advisory CVE-2026-105196"},{"id":"SEA-CVE-2026-105196-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Appointment Booking Plugin WordPress plugin before 5.6.9 does not enforce per-record authorization on several of its AI Abilities API actions, allowing an authenticated user holding the LatePoint Agent role, normally restricted to their own records, to read and modify other agents' profile data and read other…","source_quote_or_pointer":"Advisory description (CVE-2026-105196)","fact_id":"SEA-CVE-2026-105196-F2","document_citation":"Advisory description (CVE-2026-105196)"}],"source_stated_contributors":["The Appointment Booking Plugin WordPress plugin before 5.6.9 does not enforce per-record authorization on several of its AI Abilities API actions, allowing an authenticated user holding the LatePoint Agent role, normally restricted to their own records, to read and modify other agents' profile data and read other…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.pii","arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-010"],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-105196","reporting_entity":"CVE-2026-105196","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-105196-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-105196-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"SEA-FM-010","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-105196"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-105195","title":"The Booking Calendar WordPress plugin before 11.8.3 does not adequately restrict which options a lower-privileged user can load through one of its settings handlers, allowing users with the Editor role and above to disclose the values of arbitrary WordPress options, including core site configuration.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-105195","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105195","source_title":"The Booking Calendar WordPress plugin before 11.8.3 does not adequately restrict which options a lower-privileged user can load through one of its settings handlers, allowing users with the Editor role and above to disclose the values of arbitrary WordPress options, including core site configuration.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-08T16:00:38.294Z","source_hash":"content-fingerprint:fnv1a-4a5cdd62","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-105195-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Booking Calendar WordPress plugin before 11.8.3 does not adequately restrict which options a lower-privileged user can load through one of its settings handlers, allowing users with the Editor role and above to disclose the values of arbitrary WordPress options, including core site configuration.","source_quote_or_pointer":"Security Advisory CVE-2026-105195","fact_id":"SEA-CVE-2026-105195-F1","document_citation":"Security Advisory CVE-2026-105195"},{"id":"SEA-CVE-2026-105195-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Booking Calendar WordPress plugin before 11.8.3 does not adequately restrict which options a lower-privileged user can load through one of its settings handlers, allowing users with the Editor role and above to disclose the values of arbitrary WordPress options, including core site configuration.","source_quote_or_pointer":"Advisory description (CVE-2026-105195)","fact_id":"SEA-CVE-2026-105195-F2","document_citation":"Advisory description (CVE-2026-105195)"}],"source_stated_contributors":["The Booking Calendar WordPress plugin before 11.8.3 does not adequately restrict which options a lower-privileged user can load through one of its settings handlers, allowing users with the Editor role and above to disclose the values of arbitrary WordPress options, including core site configuration."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-105195","reporting_entity":"CVE-2026-105195","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-105195-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-105195-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-105195"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-105190","title":"The Easy Digital Downloads WordPress plugin before 3.7.1 does not consult the site's user registration setting before creating a WordPress account, allowing unauthenticated users to create an account and receive a logged-in session even when registration is disabled. The created account receives the site's default role.","display_title":"Security issue reported in Software component","display_summary":"The Easy Digital Downloads WordPress plugin before 3.7.1 does not consult the site's user registration setting before creating a WordPress account, allowing unauthenticated users to create an account and receive a…","display_reference":"CVE-2026-105190","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105190","source_title":"The Easy Digital Downloads WordPress plugin before 3.7.1 does not consult the site's user registration setting before creating a WordPress account, allowing unauthenticated users to create an account and receive a logged-in session even when registration is disabled. The created account receives the site's default role.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-08T16:00:38.294Z","source_hash":"content-fingerprint:fnv1a-4635f4ed","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-105190-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Easy Digital Downloads WordPress plugin before 3.7.1 does not consult the site's user registration setting before creating a WordPress account, allowing unauthenticated users to create an account and receive a logged-in session even when registration is disabled. The created account receives the site's default role.","source_quote_or_pointer":"Security Advisory CVE-2026-105190","fact_id":"SEA-CVE-2026-105190-F1","document_citation":"Security Advisory CVE-2026-105190"},{"id":"SEA-CVE-2026-105190-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Easy Digital Downloads WordPress plugin before 3.7.1 does not consult the site's user registration setting before creating a WordPress account, allowing unauthenticated users to create an account and receive a logged-in session even when registration is disabled.","source_quote_or_pointer":"Advisory description (CVE-2026-105190)","fact_id":"SEA-CVE-2026-105190-F2","document_citation":"Advisory description (CVE-2026-105190)"}],"source_stated_contributors":["The Easy Digital Downloads WordPress plugin before 3.7.1 does not consult the site's user registration setting before creating a WordPress account, allowing unauthenticated users to create an account and receive a logged-in session even when registration is disabled."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-105190","reporting_entity":"CVE-2026-105190","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-105190-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-105190-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-105190"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-104660","title":"Missing authorization on COM objects in Progressive Robot hMailServer 6.0.0 through 6.3.5 (Windows only) lets a local interactive user with no hMailServer credential read and write arbitrary files as the service account and queue mail as any sender. The service registers its COM classes with no DCOM access or launch permission and calls CoInitializeSecurity with no security descriptor, so any user logged on at the console or over Remote Desktop can activate the classes in the running service; a hMailServer.Message, its Attachments and Attachment, and a hMailServer.FetchAccount created this way carry a credential that never authenticated. Attachments.Add(path) and Attachment.SaveAs(path) performed no authorization check, and Message.Save/Copy and FetchAccount.AccountID/Save performed none either up to 6.3.3 and from 6.3.4 treated a holder with no credential as the server's own event-script host. Because the service does not impersonate the COM caller, Attachments.Add reads any file the service account can read and returns it, Attachment.SaveAs writes attacker-chosen bytes to any path it can write (on a LocalSystem installation, code execution as SYSTEM), Message.Save queues outbound mail from any address past the SMTP checks, and FetchAccount attaches a mail-fetch job to any mailbox. The objects an Application handed out behave the same once a later Authenticate on that Application fails.","display_title":"Software component issue could allow unintended commands to run","display_summary":"Missing authorization on COM objects in Progressive Robot hMailServer 6.0.0 through 6.3.5 (Windows only) lets a local interactive user with no hMailServer credential read and write arbitrary files as the service account…","display_reference":"CVE-2026-104660","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104660","source_title":"Missing authorization on COM objects in Progressive Robot hMailServer 6.0.0 through 6.3.5 (Windows only) lets a local interactive user with no hMailServer credential read and write arbitrary files as the service account and queue mail as any sender. The service registers its COM classes with no DCOM access or launch permission and calls CoInitializeSecurity with no security descriptor, so any user logged on at the console or over Remote Desktop can activate the classes in the running service; a hMailServer.Message, its Attachments and Attachment, and a hMailServer.FetchAccount created this way carry a credential that never authenticated. Attachments.Add(path) and Attachment.SaveAs(path) performed no authorization check, and Message.Save/Copy and FetchAccount.AccountID/Save performed none either up to 6.3.3 and from 6.3.4 treated a holder with no credential as the server's own event-script host. Because the service does not impersonate the COM caller, Attachments.Add reads any file the service account can read and returns it, Attachment.SaveAs writes attacker-chosen bytes to any path it can write (on a LocalSystem installation, code execution as SYSTEM), Message.Save queues outbound mail from any address past the SMTP checks, and FetchAccount attaches a mail-fetch job to any mailbox. The objects an Application handed out behave the same once a later Authenticate on that Application fails.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-08T16:00:38.294Z","source_hash":"content-fingerprint:fnv1a-4e6e8e7e","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-104660-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Missing authorization on COM objects in Progressive Robot hMailServer 6.0.0 through 6.3.5 (Windows only) lets a local interactive user with no hMailServer credential read and write arbitrary files as the service account and queue mail as any sender. The service registers its COM classes with no DCOM access or launch permission and calls CoInitializeSecurity with no security descriptor, so any user logged on at the console or over Remote Desktop can activate the classes in the running service; a hMailServer.Message, its Attachments and Attachment, and a hMailServer.FetchAccount created this way carry a credential that never authenticated. Attachments.Add(path) and Attachment.SaveAs(path) performed no authorization check, and Message.Save/Copy and FetchAccount.AccountID/Save performed none either up to 6.3.3 and from 6.3.4 treated a holder with no credential as the server's own event-script host. Because the service does not impersonate the COM caller, Attachments.Add reads any file the service account can read and returns it, Attachment.SaveAs writes attacker-chosen bytes to any path it can write (on a LocalSystem installation, code execution as SYSTEM), Message.Save queues outbound mail from any address past the SMTP checks, and FetchAccount attaches a mail-fetch job to any mailbox. The objects an Application handed out behave the same once a later Authenticate on that Application fails.","source_quote_or_pointer":"Security Advisory CVE-2026-104660","fact_id":"SEA-CVE-2026-104660-F1","document_citation":"Security Advisory CVE-2026-104660"},{"id":"SEA-CVE-2026-104660-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Missing authorization on COM objects in Progressive Robot hMailServer 6.0.0 through 6.3.5 (Windows only) lets a local interactive user with no hMailServer credential read and write arbitrary files as the service account and queue mail as any sender.","source_quote_or_pointer":"Advisory description (CVE-2026-104660)","fact_id":"SEA-CVE-2026-104660-F2","document_citation":"Advisory description (CVE-2026-104660)"}],"source_stated_contributors":["Missing authorization on COM objects in Progressive Robot hMailServer 6.0.0 through 6.3.5 (Windows only) lets a local interactive user with no hMailServer credential read and write arbitrary files as the service account and queue mail as any sender."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.write_action","data.pii","data.credentials_secrets","data.uploaded_files","arch.async_job","arch.event_driven"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-104660","reporting_entity":"CVE-2026-104660","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-104660-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-104660-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-104660"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-104658","title":"The Linux live-update apply helper (hmailserver-update) of Progressive Robot hMailServer 6.3.4 and 6.3.5 runs as root on a request file written by the unprivileged hmailserver service account, and took from that request the program used to verify an AppImage update's signature and the systemd unit to stop before reading the service account's files. An attacker who already runs code as the hmailserver service account, for example through another flaw in the mail server, can therefore have arbitrary code executed as root, on any Linux installation where the live update's path unit is active - the default for the project's .deb and .rpm packages - and on AppImage installations run under that unit.","display_title":"Software component issue could allow unintended commands to run","display_summary":"The Linux live-update apply helper (hmailserver-update) of Progressive Robot hMailServer 6.3.4 and 6.3.5 runs as root on a request file written by the unprivileged hmailserver service account, and took from that request…","display_reference":"CVE-2026-104658","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104658","source_title":"The Linux live-update apply helper (hmailserver-update) of Progressive Robot hMailServer 6.3.4 and 6.3.5 runs as root on a request file written by the unprivileged hmailserver service account, and took from that request the program used to verify an AppImage update's signature and the systemd unit to stop before reading the service account's files. An attacker who already runs code as the hmailserver service account, for example through another flaw in the mail server, can therefore have arbitrary code executed as root, on any Linux installation where the live update's path unit is active - the default for the project's .deb and .rpm packages - and on AppImage installations run under that unit.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-08T16:00:38.294Z","source_hash":"content-fingerprint:fnv1a-617b6115","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-104658-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Linux live-update apply helper (hmailserver-update) of Progressive Robot hMailServer 6.3.4 and 6.3.5 runs as root on a request file written by the unprivileged hmailserver service account, and took from that request the program used to verify an AppImage update's signature and the systemd unit to stop before reading the service account's files. An attacker who already runs code as the hmailserver service account, for example through another flaw in the mail server, can therefore have arbitrary code executed as root, on any Linux installation where the live update's path unit is active - the default for the project's .deb and .rpm packages - and on AppImage installations run under that unit.","source_quote_or_pointer":"Security Advisory CVE-2026-104658","fact_id":"SEA-CVE-2026-104658-F1","document_citation":"Security Advisory CVE-2026-104658"},{"id":"SEA-CVE-2026-104658-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Linux live-update apply helper (hmailserver-update) of Progressive Robot hMailServer 6.3.4 and 6.3.5 runs as root on a request file written by the unprivileged hmailserver service account, and took from that request the program used to verify an AppImage update's signature and the systemd unit to stop before…","source_quote_or_pointer":"Advisory description (CVE-2026-104658)","fact_id":"SEA-CVE-2026-104658-F2","document_citation":"Advisory description (CVE-2026-104658)"}],"source_stated_contributors":["The Linux live-update apply helper (hmailserver-update) of Progressive Robot hMailServer 6.3.4 and 6.3.5 runs as root on a request file written by the unprivileged hmailserver service account, and took from that request the program used to verify an AppImage update's signature and the systemd unit to stop before…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.write_action","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-104658","reporting_entity":"CVE-2026-104658","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-104658-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-104658-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-104658"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-104646","title":"The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.14 does not sanitise several gallery configuration values that can be overridden through its gallery shortcode before printing them into an inline script block, allowing users with contributor-level access and above to inject arbitrary JavaScript that executes in the session of anyone viewing the post, including an administrator previewing a pending submission. No gallery ownership is required: any gallery that already exists on the site can be referenced.","display_title":"Security issue reported in Software component","display_summary":"The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.14 does not sanitise several gallery configuration values that can be overridden through its gallery shortcode before printing them into an inline…","display_reference":"CVE-2026-104646","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104646","source_title":"The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.14 does not sanitise several gallery configuration values that can be overridden through its gallery shortcode before printing them into an inline script block, allowing users with contributor-level access and above to inject arbitrary JavaScript that executes in the session of anyone viewing the post, including an administrator previewing a pending submission. No gallery ownership is required: any gallery that already exists on the site can be referenced.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-08T16:00:38.294Z","source_hash":"content-fingerprint:fnv1a-cc1b6454","affected_system":{"organization":"The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.14 does not sanitise several gallery configuration values that can be overridden through its gallery shortcode before printing them into an inline script block, allowing users with contributor-level access and above to inject arbitrary JavaScript that executes in the session of anyone viewing the post, including an administrator previewing a pending submission. No gallery ownership is required project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-104646-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.14 does not sanitise several gallery configuration values that can be overridden through its gallery shortcode before printing them into an inline script block, allowing users with contributor-level access and above to inject arbitrary JavaScript that executes in the session of anyone viewing the post, including an administrator previewing a pending submission. No gallery ownership is required: any gallery that already exists on the site can be referenced.","source_quote_or_pointer":"Security Advisory CVE-2026-104646","fact_id":"SEA-CVE-2026-104646-F1","document_citation":"Security Advisory CVE-2026-104646"},{"id":"SEA-CVE-2026-104646-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.14 does not sanitise several gallery configuration values that can be overridden through its gallery shortcode before printing them into an inline script block, allowing users with contributor-level access and above to inject arbitrary JavaScript…","source_quote_or_pointer":"Advisory description (CVE-2026-104646)","fact_id":"SEA-CVE-2026-104646-F2","document_citation":"Advisory description (CVE-2026-104646)"}],"source_stated_contributors":["The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.14 does not sanitise several gallery configuration values that can be overridden through its gallery shortcode before printing them into an inline script block, allowing users with contributor-level access and above to inject arbitrary JavaScript…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-104646","reporting_entity":"CVE-2026-104646","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-104646-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-104646-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-104646"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-104645","title":"The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.14 does not properly verify authorization on several of its gallery and image management actions, checking ownership against a different object than the one being acted on, or omitting the check entirely, allowing any authenticated user with contributor-level access or above to clone, modify and reorder galleries and images belonging to other users and to write Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.14 metadata onto arbitrary posts they do not own.","display_title":"Security issue reported in Software component","display_summary":"The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.14 does not properly verify authorization on several of its gallery and image management actions, checking ownership against a different object than…","display_reference":"CVE-2026-104645","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104645","source_title":"The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.14 does not properly verify authorization on several of its gallery and image management actions, checking ownership against a different object than the one being acted on, or omitting the check entirely, allowing any authenticated user with contributor-level access or above to clone, modify and reorder galleries and images belonging to other users and to write Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.14 metadata onto arbitrary posts they do not own.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-08T16:00:38.294Z","source_hash":"content-fingerprint:fnv1a-1af0d59b","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-104645-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.14 does not properly verify authorization on several of its gallery and image management actions, checking ownership against a different object than the one being acted on, or omitting the check entirely, allowing any authenticated user with contributor-level access or above to clone, modify and reorder galleries and images belonging to other users and to write Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.14 metadata onto arbitrary posts they do not own.","source_quote_or_pointer":"Security Advisory CVE-2026-104645","fact_id":"SEA-CVE-2026-104645-F1","document_citation":"Security Advisory CVE-2026-104645"},{"id":"SEA-CVE-2026-104645-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.14 does not properly verify authorization on several of its gallery and image management actions, checking ownership against a different object than the one being acted on, or omitting the check entirely, allowing any authenticated user with…","source_quote_or_pointer":"Advisory description (CVE-2026-104645)","fact_id":"SEA-CVE-2026-104645-F2","document_citation":"Advisory description (CVE-2026-104645)"}],"source_stated_contributors":["The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.14 does not properly verify authorization on several of its gallery and image management actions, checking ownership against a different object than the one being acted on, or omitting the check entirely, allowing any authenticated user with…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.pii","data.uploaded_files"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-104645","reporting_entity":"CVE-2026-104645","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-104645-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-104645-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-104645"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-103692","title":"The Frontend Dashboard WordPress plugin before 3.0.5 does not perform any authorisation or nonce check on actions available to unauthenticated users that call an attacker-chosen PHP function or class method with the request data, allowing unauthenticated users to take over any account, including administrators.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-103692","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103692","source_title":"The Frontend Dashboard WordPress plugin before 3.0.5 does not perform any authorisation or nonce check on actions available to unauthenticated users that call an attacker-chosen PHP function or class method with the request data, allowing unauthenticated users to take over any account, including administrators.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-08T16:00:38.294Z","source_hash":"content-fingerprint:fnv1a-a48656ae","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-103692-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Frontend Dashboard WordPress plugin before 3.0.5 does not perform any authorisation or nonce check on actions available to unauthenticated users that call an attacker-chosen PHP function or class method with the request data, allowing unauthenticated users to take over any account, including administrators.","source_quote_or_pointer":"Security Advisory CVE-2026-103692","fact_id":"SEA-CVE-2026-103692-F1","document_citation":"Security Advisory CVE-2026-103692"},{"id":"SEA-CVE-2026-103692-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Frontend Dashboard WordPress plugin before 3.0.5 does not perform any authorisation or nonce check on actions available to unauthenticated users that call an attacker-chosen PHP function or class method with the request data, allowing unauthenticated users to take over any account, including administrators.","source_quote_or_pointer":"Advisory description (CVE-2026-103692)","fact_id":"SEA-CVE-2026-103692-F2","document_citation":"Advisory description (CVE-2026-103692)"}],"source_stated_contributors":["The Frontend Dashboard WordPress plugin before 3.0.5 does not perform any authorisation or nonce check on actions available to unauthenticated users that call an attacker-chosen PHP function or class method with the request data, allowing unauthenticated users to take over any account, including administrators."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-103692","reporting_entity":"CVE-2026-103692","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-103692-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-103692-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-103692"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-103649","title":"Missing network timeouts in the Linux builds of Progressive Robot hMailServer 6.3.0 through 6.3.5 allow a remote attacker to hold server threads indefinitely and so stop outbound mail delivery (denial of service). The server set its socket timeouts in the form Windows takes, which Linux refuses, and its HTTPS clients read without a deadline, so a peer that accepts a connection and then sends nothing held the waiting thread for as long as the connection stayed open. The MTA-STS policy fetch, enabled by default, is made during outbound delivery to mta-sts.<recipient domain>, so anyone who can make the server deliver mail to a domain they control - for example as the envelope sender of a message that bounces - can hold delivery threads until outbound delivery stops. The same flaw affects the DANE TLSA query, the OAuth2 token request, the ACME client, and the ManageSieve and metrics listeners, which a silent client stops from serving anyone else. Windows builds are not affected.","display_title":"Software component issue could make the service unavailable","display_summary":"Missing network timeouts in the Linux builds of Progressive Robot hMailServer 6.3.0 through 6.3.5 allow a remote attacker to hold server threads indefinitely and so stop outbound mail delivery (denial of service).","display_reference":"CVE-2026-103649","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103649","source_title":"Missing network timeouts in the Linux builds of Progressive Robot hMailServer 6.3.0 through 6.3.5 allow a remote attacker to hold server threads indefinitely and so stop outbound mail delivery (denial of service). The server set its socket timeouts in the form Windows takes, which Linux refuses, and its HTTPS clients read without a deadline, so a peer that accepts a connection and then sends nothing held the waiting thread for as long as the connection stayed open. The MTA-STS policy fetch, enabled by default, is made during outbound delivery to mta-sts.<recipient domain>, so anyone who can make the server deliver mail to a domain they control - for example as the envelope sender of a message that bounces - can hold delivery threads until outbound delivery stops. The same flaw affects the DANE TLSA query, the OAuth2 token request, the ACME client, and the ManageSieve and metrics listeners, which a silent client stops from serving anyone else. Windows builds are not affected.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-08T16:00:38.294Z","source_hash":"content-fingerprint:fnv1a-ac861ec8","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-103649-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Missing network timeouts in the Linux builds of Progressive Robot hMailServer 6.3.0 through 6.3.5 allow a remote attacker to hold server threads indefinitely and so stop outbound mail delivery (denial of service). The server set its socket timeouts in the form Windows takes, which Linux refuses, and its HTTPS clients read without a deadline, so a peer that accepts a connection and then sends nothing held the waiting thread for as long as the connection stayed open. The MTA-STS policy fetch, enabled by default, is made during outbound delivery to mta-sts.<recipient domain>, so anyone who can make the server deliver mail to a domain they control - for example as the envelope sender of a message that bounces - can hold delivery threads until outbound delivery stops. The same flaw affects the DANE TLSA query, the OAuth2 token request, the ACME client, and the ManageSieve and metrics listeners, which a silent client stops from serving anyone else. Windows builds are not affected.","source_quote_or_pointer":"Security Advisory CVE-2026-103649","fact_id":"SEA-CVE-2026-103649-F1","document_citation":"Security Advisory CVE-2026-103649"},{"id":"SEA-CVE-2026-103649-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Missing network timeouts in the Linux builds of Progressive Robot hMailServer 6.3.0 through 6.3.5 allow a remote attacker to hold server threads indefinitely and so stop outbound mail delivery (denial of service).","source_quote_or_pointer":"Advisory description (CVE-2026-103649)","fact_id":"SEA-CVE-2026-103649-F2","document_citation":"Advisory description (CVE-2026-103649)"}],"source_stated_contributors":["Missing network timeouts in the Linux builds of Progressive Robot hMailServer 6.3.0 through 6.3.5 allow a remote attacker to hold server threads indefinitely and so stop outbound mail delivery (denial of service)."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-103649","reporting_entity":"CVE-2026-103649","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-103649-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-103649-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-103649"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-103647","title":"Cross-site scripting in the webmail of Progressive Robot hMailServer 6.3.2 through 6.3.5 allows a remote attacker who can send a user an encrypted message to run script in the webmail's origin with that user's session. When the webmail decrypted an S/MIME message (from 6.3.2) or an OpenPGP message (from 6.3.4) in the browser, it offered each decrypted attachment as a blob URL of the media type the message declared for it. A click saved the file, but if the user opened the attachment in a new tab, a part declared as text/html was rendered as a document of the webmail's origin and its script could read the mailbox, send mail and change the account through the REST API. The webmail is served only when the REST API is enabled, which it is not by default.","display_title":"Software component issue could run attacker-controlled scripts in a browser","display_summary":"Cross-site scripting in the webmail of Progressive Robot hMailServer 6.3.2 through 6.3.5 allows a remote attacker who can send a user an encrypted message to run script in the webmail's origin with that user's session.","display_reference":"CVE-2026-103647","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103647","source_title":"Cross-site scripting in the webmail of Progressive Robot hMailServer 6.3.2 through 6.3.5 allows a remote attacker who can send a user an encrypted message to run script in the webmail's origin with that user's session. When the webmail decrypted an S/MIME message (from 6.3.2) or an OpenPGP message (from 6.3.4) in the browser, it offered each decrypted attachment as a blob URL of the media type the message declared for it. A click saved the file, but if the user opened the attachment in a new tab, a part declared as text/html was rendered as a document of the webmail's origin and its script could read the mailbox, send mail and change the account through the REST API. The webmail is served only when the REST API is enabled, which it is not by default.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-08T16:00:38.294Z","source_hash":"content-fingerprint:fnv1a-e7ebbcc8","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-103647-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Cross-site scripting in the webmail of Progressive Robot hMailServer 6.3.2 through 6.3.5 allows a remote attacker who can send a user an encrypted message to run script in the webmail's origin with that user's session. When the webmail decrypted an S/MIME message (from 6.3.2) or an OpenPGP message (from 6.3.4) in the browser, it offered each decrypted attachment as a blob URL of the media type the message declared for it. A click saved the file, but if the user opened the attachment in a new tab, a part declared as text/html was rendered as a document of the webmail's origin and its script could read the mailbox, send mail and change the account through the REST API. The webmail is served only when the REST API is enabled, which it is not by default.","source_quote_or_pointer":"Security Advisory CVE-2026-103647","fact_id":"SEA-CVE-2026-103647-F1","document_citation":"Security Advisory CVE-2026-103647"},{"id":"SEA-CVE-2026-103647-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Cross-site scripting in the webmail of Progressive Robot hMailServer 6.3.2 through 6.3.5 allows a remote attacker who can send a user an encrypted message to run script in the webmail's origin with that user's session.","source_quote_or_pointer":"Advisory description (CVE-2026-103647)","fact_id":"SEA-CVE-2026-103647-F2","document_citation":"Advisory description (CVE-2026-103647)"}],"source_stated_contributors":["Cross-site scripting in the webmail of Progressive Robot hMailServer 6.3.2 through 6.3.5 allows a remote attacker who can send a user an encrypted message to run script in the webmail's origin with that user's session."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-103647","reporting_entity":"CVE-2026-103647","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-103647-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-103647-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-103647"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-103646","title":"The Ultimate Multisite WordPress plugin before 2.17.0 does not require authentication before a logged-out checkout is linked to, and logged in as, an existing WordPress account matching the submitted email address, and its duplicate-account check normalizes that address differently from the lookup used to create the customer, so an unauthenticated attacker can log in as any existing user, including a Network Super Admin, whose email address they know. This bypass is not addressed by the 2.15.1 fix for CVE-2026-75957 and remains exploitable in all versions up to and including 2.16.1, the releases that fix was expected to cover. Exploitation requires a checkout form configured without a password field (auto-generated password) and a target account that has no existing customer record in the Ultimate Multisite WordPress plugin before 2.17.0.","display_title":"Software component issue could cause actions to run with inconsistent state","display_summary":"The Ultimate Multisite WordPress plugin before 2.17.0 does not require authentication before a logged-out checkout is linked to, and logged in as, an existing WordPress account matching the submitted email address, and…","display_reference":"CVE-2026-103646","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103646","source_title":"The Ultimate Multisite WordPress plugin before 2.17.0 does not require authentication before a logged-out checkout is linked to, and logged in as, an existing WordPress account matching the submitted email address, and its duplicate-account check normalizes that address differently from the lookup used to create the customer, so an unauthenticated attacker can log in as any existing user, including a Network Super Admin, whose email address they know. This bypass is not addressed by the 2.15.1 fix for CVE-2026-75957 and remains exploitable in all versions up to and including 2.16.1, the releases that fix was expected to cover. Exploitation requires a checkout form configured without a password field (auto-generated password) and a target account that has no existing customer record in the Ultimate Multisite WordPress plugin before 2.17.0.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-08T16:00:38.294Z","source_hash":"content-fingerprint:fnv1a-81f87d13","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-103646-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Ultimate Multisite WordPress plugin before 2.17.0 does not require authentication before a logged-out checkout is linked to, and logged in as, an existing WordPress account matching the submitted email address, and its duplicate-account check normalizes that address differently from the lookup used to create the customer, so an unauthenticated attacker can log in as any existing user, including a Network Super Admin, whose email address they know. This bypass is not addressed by the 2.15.1 fix for CVE-2026-75957 and remains exploitable in all versions up to and including 2.16.1, the releases that fix was expected to cover. Exploitation requires a checkout form configured without a password field (auto-generated password) and a target account that has no existing customer record in the Ultimate Multisite WordPress plugin before 2.17.0.","source_quote_or_pointer":"Security Advisory CVE-2026-103646","fact_id":"SEA-CVE-2026-103646-F1","document_citation":"Security Advisory CVE-2026-103646"},{"id":"SEA-CVE-2026-103646-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Ultimate Multisite WordPress plugin before 2.17.0 does not require authentication before a logged-out checkout is linked to, and logged in as, an existing WordPress account matching the submitted email address, and its duplicate-account check normalizes that address differently from the lookup used to create the…","source_quote_or_pointer":"Advisory description (CVE-2026-103646)","fact_id":"SEA-CVE-2026-103646-F2","document_citation":"Advisory description (CVE-2026-103646)"}],"source_stated_contributors":["The Ultimate Multisite WordPress plugin before 2.17.0 does not require authentication before a logged-out checkout is linked to, and logged in as, an existing WordPress account matching the submitted email address, and its duplicate-account check normalizes that address differently from the lookup used to create the…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.financial_action","auth.privileged_action","data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-103646","reporting_entity":"CVE-2026-103646","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-103646-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-103646-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-103646"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-103517","title":"The Airwallex Online Payments Gateway WordPress plugin before 1.36.0 does not verify that an incoming payment notification genuinely comes from the payment provider when no webhook secret has been configured, allowing unauthenticated attackers to forge one and mark orders as paid without paying.","display_title":"Software component issue could expose accounts or credentials","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-103517","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103517","source_title":"The Airwallex Online Payments Gateway WordPress plugin before 1.36.0 does not verify that an incoming payment notification genuinely comes from the payment provider when no webhook secret has been configured, allowing unauthenticated attackers to forge one and mark orders as paid without paying.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-08T16:00:38.294Z","source_hash":"content-fingerprint:fnv1a-8e17d094","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-103517-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"The Airwallex Online Payments Gateway WordPress plugin before 1.36.0 does not verify that an incoming payment notification genuinely comes from the payment provider when no webhook secret has been configured, allowing unauthenticated attackers to forge one and mark orders as paid without paying.","source_quote_or_pointer":"Security Advisory CVE-2026-103517","fact_id":"SEA-CVE-2026-103517-F1","document_citation":"Security Advisory CVE-2026-103517"},{"id":"SEA-CVE-2026-103517-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The Airwallex Online Payments Gateway WordPress plugin before 1.36.0 does not verify that an incoming payment notification genuinely comes from the payment provider when no webhook secret has been configured, allowing unauthenticated attackers to forge one and mark orders as paid without paying.","source_quote_or_pointer":"Advisory description (CVE-2026-103517)","fact_id":"SEA-CVE-2026-103517-F2","document_citation":"Advisory description (CVE-2026-103517)"}],"source_stated_contributors":["The Airwallex Online Payments Gateway WordPress plugin before 1.36.0 does not verify that an incoming payment notification genuinely comes from the payment provider when no webhook secret has been configured, allowing unauthenticated attackers to forge one and mark orders as paid without paying."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.financial_action","data.credentials_secrets","arch.external_api","arch.event_driven"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-103517","reporting_entity":"CVE-2026-103517","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-103517-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-103517-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-103517"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-103011","title":"Heap-based buffer overflow in the legacy Blowfish encryption routine (BlowFishEncryptor::Encode, called by EncryptToString) in Progressive Robot hMailServer 6.0.0 through 6.3.5 allows an authenticated mailbox user to cause a denial of service (service crash), and possibly other unspecified impact. In 6.3.4 and 6.3.5, where the self-service REST API is enabled (it is off by default), the user does this remotely by adding a fetch account whose password is 129 to 247 characters long and not a multiple of 8, and then requesting their personal data export (GET /api/v1/me/export.zip), which encrypts that password with the legacy scheme. The same flaw is reachable on Windows by any local interactive user with no hMailServer credentials, through the COM method Utilities.BlowfishEncrypt, which checked no authentication. It is also reachable by every stored-secret write when ProtectStoredSecretsWithDPAPI is set to 0. For such a length, the routine's padding loop writes up to 7 zero bytes 2 to 232 bytes past the end of its 255-byte heap buffer. The ciphertext it returns is still correct.","display_title":"Software component issue could make the service unavailable","display_summary":"Heap-based buffer overflow in the legacy Blowfish encryption routine (BlowFishEncryptor::Encode, called by EncryptToString) in Progressive Robot hMailServer 6.0.0 through 6.3.5 allows an authenticated mailbox user to…","display_reference":"CVE-2026-103011","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103011","source_title":"Heap-based buffer overflow in the legacy Blowfish encryption routine (BlowFishEncryptor::Encode, called by EncryptToString) in Progressive Robot hMailServer 6.0.0 through 6.3.5 allows an authenticated mailbox user to cause a denial of service (service crash), and possibly other unspecified impact. In 6.3.4 and 6.3.5, where the self-service REST API is enabled (it is off by default), the user does this remotely by adding a fetch account whose password is 129 to 247 characters long and not a multiple of 8, and then requesting their personal data export (GET /api/v1/me/export.zip), which encrypts that password with the legacy scheme. The same flaw is reachable on Windows by any local interactive user with no hMailServer credentials, through the COM method Utilities.BlowfishEncrypt, which checked no authentication. It is also reachable by every stored-secret write when ProtectStoredSecretsWithDPAPI is set to 0. For such a length, the routine's padding loop writes up to 7 zero bytes 2 to 232 bytes past the end of its 255-byte heap buffer. The ciphertext it returns is still correct.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-08T16:00:38.294Z","source_hash":"content-fingerprint:fnv1a-1e259045","affected_system":{"organization":"Heap-based buffer overflow in the legacy Blowfish encryption routine (BlowFishEncryptor project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-103011-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Heap-based buffer overflow in the legacy Blowfish encryption routine (BlowFishEncryptor::Encode, called by EncryptToString) in Progressive Robot hMailServer 6.0.0 through 6.3.5 allows an authenticated mailbox user to cause a denial of service (service crash), and possibly other unspecified impact. In 6.3.4 and 6.3.5, where the self-service REST API is enabled (it is off by default), the user does this remotely by adding a fetch account whose password is 129 to 247 characters long and not a multiple of 8, and then requesting their personal data export (GET /api/v1/me/export.zip), which encrypts that password with the legacy scheme. The same flaw is reachable on Windows by any local interactive user with no hMailServer credentials, through the COM method Utilities.BlowfishEncrypt, which checked no authentication. It is also reachable by every stored-secret write when ProtectStoredSecretsWithDPAPI is set to 0. For such a length, the routine's padding loop writes up to 7 zero bytes 2 to 232 bytes past the end of its 255-byte heap buffer. The ciphertext it returns is still correct.","source_quote_or_pointer":"Security Advisory CVE-2026-103011","fact_id":"SEA-CVE-2026-103011-F1","document_citation":"Security Advisory CVE-2026-103011"},{"id":"SEA-CVE-2026-103011-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Heap-based buffer overflow in the legacy Blowfish encryption routine (BlowFishEncryptor::Encode, called by EncryptToString) in Progressive Robot hMailServer 6.0.0 through 6.3.5 allows an authenticated mailbox user to cause a denial of service (service crash), and possibly other unspecified impact.","source_quote_or_pointer":"Advisory description (CVE-2026-103011)","fact_id":"SEA-CVE-2026-103011-F2","document_citation":"Advisory description (CVE-2026-103011)"}],"source_stated_contributors":["Heap-based buffer overflow in the legacy Blowfish encryption routine (BlowFishEncryptor::Encode, called by EncryptToString) in Progressive Robot hMailServer 6.0.0 through 6.3.5 allows an authenticated mailbox user to cause a denial of service (service crash), and possibly other unspecified impact."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-103011","reporting_entity":"CVE-2026-103011","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-103011-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-103011-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-103011"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-103010","title":"Heap-based buffer overflow in the legacy Blowfish decryption routine (BlowFishEncryptor::DecryptFromString) in Progressive Robot hMailServer 6.0.0 through 6.3.3 on Windows allows a local interactive user with no hMailServer credentials to write bytes of their choosing past the end of a 255-byte heap buffer in the hMailServer service process, which runs as LocalSystem by default. The user does this by passing a long hexadecimal string to the COM method Utilities.BlowfishDecrypt, which checked no authentication. The routine converted hexadecimal input of any length into a fixed 255-byte buffer before decrypting it in place. The result is a denial of service (service crash), and possibly code execution with the privileges of the service account.","display_title":"Software component issue could allow unintended commands to run","display_summary":"Heap-based buffer overflow in the legacy Blowfish decryption routine (BlowFishEncryptor::DecryptFromString) in Progressive Robot hMailServer 6.0.0 through 6.3.3 on Windows allows a local interactive user with no…","display_reference":"CVE-2026-103010","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103010","source_title":"Heap-based buffer overflow in the legacy Blowfish decryption routine (BlowFishEncryptor::DecryptFromString) in Progressive Robot hMailServer 6.0.0 through 6.3.3 on Windows allows a local interactive user with no hMailServer credentials to write bytes of their choosing past the end of a 255-byte heap buffer in the hMailServer service process, which runs as LocalSystem by default. The user does this by passing a long hexadecimal string to the COM method Utilities.BlowfishDecrypt, which checked no authentication. The routine converted hexadecimal input of any length into a fixed 255-byte buffer before decrypting it in place. The result is a denial of service (service crash), and possibly code execution with the privileges of the service account.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-08T16:00:38.294Z","source_hash":"content-fingerprint:fnv1a-9f25bcf6","affected_system":{"organization":"Heap-based buffer overflow in the legacy Blowfish decryption routine (BlowFishEncryptor project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-103010-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Heap-based buffer overflow in the legacy Blowfish decryption routine (BlowFishEncryptor::DecryptFromString) in Progressive Robot hMailServer 6.0.0 through 6.3.3 on Windows allows a local interactive user with no hMailServer credentials to write bytes of their choosing past the end of a 255-byte heap buffer in the hMailServer service process, which runs as LocalSystem by default. The user does this by passing a long hexadecimal string to the COM method Utilities.BlowfishDecrypt, which checked no authentication. The routine converted hexadecimal input of any length into a fixed 255-byte buffer before decrypting it in place. The result is a denial of service (service crash), and possibly code execution with the privileges of the service account.","source_quote_or_pointer":"Security Advisory CVE-2026-103010","fact_id":"SEA-CVE-2026-103010-F1","document_citation":"Security Advisory CVE-2026-103010"},{"id":"SEA-CVE-2026-103010-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Heap-based buffer overflow in the legacy Blowfish decryption routine (BlowFishEncryptor::DecryptFromString) in Progressive Robot hMailServer 6.0.0 through 6.3.3 on Windows allows a local interactive user with no hMailServer credentials to write bytes of their choosing past the end of a 255-byte heap buffer in the…","source_quote_or_pointer":"Advisory description (CVE-2026-103010)","fact_id":"SEA-CVE-2026-103010-F2","document_citation":"Advisory description (CVE-2026-103010)"}],"source_stated_contributors":["Heap-based buffer overflow in the legacy Blowfish decryption routine (BlowFishEncryptor::DecryptFromString) in Progressive Robot hMailServer 6.0.0 through 6.3.3 on Windows allows a local interactive user with no hMailServer credentials to write bytes of their choosing past the end of a 255-byte heap buffer in the…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-103010","reporting_entity":"CVE-2026-103010","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-103010-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-103010-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-103010"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-107503","title":"Unvalidated environments URL allows OAuth authorization code + PKCE verifier theft and account takeover via injected OIDC authority in Ditto Explorer in Eclipse Ditto Ditto Explorer [3.6.0,3.9.7] allows a craft link set an attacker-controlled OIDC authority with autoSso enabled. The UI then automatically starts a login at the genuine identity provider but exchanges the returned authorization code together with its PKCE code_verifier at an attacker-controlled token endpoint. This lets the attacker redeem the code for the victim's access and refresh tokens. Alternatively, an attacker-controlled api_uri causes the UI to send the victim's bearer token or Basic credentials to the attacker. Because the configuration is persisted, later visits to the UI without the crafted link repeat the token theft.","display_title":"Software component issue could expose accounts or credentials","display_summary":"Unvalidated environments URL allows OAuth authorization code + PKCE verifier theft and account takeover via injected OIDC authority in Ditto Explorer in Eclipse Ditto Ditto Explorer [3.6.0,3.9.7] allows a craft link set…","display_reference":"CVE-2026-107503","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107503","source_title":"Unvalidated environments URL allows OAuth authorization code + PKCE verifier theft and account takeover via injected OIDC authority in Ditto Explorer in Eclipse Ditto Ditto Explorer [3.6.0,3.9.7] allows a craft link set an attacker-controlled OIDC authority with autoSso enabled. The UI then automatically starts a login at the genuine identity provider but exchanges the returned authorization code together with its PKCE code_verifier at an attacker-controlled token endpoint. This lets the attacker redeem the code for the victim's access and refresh tokens. Alternatively, an attacker-controlled api_uri causes the UI to send the victim's bearer token or Basic credentials to the attacker. Because the configuration is persisted, later visits to the UI without the crafted link repeat the token theft.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-08T16:00:38.294Z","source_hash":"content-fingerprint:fnv1a-9a4a9b7","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-107503-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Unvalidated environments URL allows OAuth authorization code + PKCE verifier theft and account takeover via injected OIDC authority in Ditto Explorer in Eclipse Ditto Ditto Explorer [3.6.0,3.9.7] allows a craft link set an attacker-controlled OIDC authority with autoSso enabled. The UI then automatically starts a login at the genuine identity provider but exchanges the returned authorization code together with its PKCE code_verifier at an attacker-controlled token endpoint. This lets the attacker redeem the code for the victim's access and refresh tokens. Alternatively, an attacker-controlled api_uri causes the UI to send the victim's bearer token or Basic credentials to the attacker. Because the configuration is persisted, later visits to the UI without the crafted link repeat the token theft.","source_quote_or_pointer":"Security Advisory CVE-2026-107503","fact_id":"SEA-CVE-2026-107503-F1","document_citation":"Security Advisory CVE-2026-107503"},{"id":"SEA-CVE-2026-107503-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Unvalidated environments URL allows OAuth authorization code + PKCE verifier theft and account takeover via injected OIDC authority in Ditto Explorer in Eclipse Ditto Ditto Explorer [3.6.0,3.9.7] allows a craft link set an attacker-controlled OIDC authority with autoSso enabled.","source_quote_or_pointer":"Advisory description (CVE-2026-107503)","fact_id":"SEA-CVE-2026-107503-F2","document_citation":"Advisory description (CVE-2026-107503)"}],"source_stated_contributors":["Unvalidated environments URL allows OAuth authorization code + PKCE verifier theft and account takeover via injected OIDC authority in Ditto Explorer in Eclipse Ditto Ditto Explorer [3.6.0,3.9.7] allows a craft link set an attacker-controlled OIDC authority with autoSso enabled."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-107503","reporting_entity":"CVE-2026-107503","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-107503-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-107503-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-107503"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-12260","title":"SQL injection in the NetBoard CRM demo platform; specifically, the vulnerable component is the ‘user-name’ POST parameter in the ‘/module/auth/recovery.php’ endpoint. The parameter is vulnerable to blind attacks based on Boolean, error, time-based and UNION techniques. Exploitation allows attackers to extract confidential information (such as the version and type of backend used), alter data or further compromise the CRM environment.","display_title":"Software component issue could expose or alter stored data","display_summary":"SQL injection in the NetBoard CRM demo platform; specifically, the vulnerable component is the ‘user-name’ POST parameter in the ‘/module/auth/recovery.php’ endpoint.","display_reference":"CVE-2026-12260","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-12260","source_title":"SQL injection in the NetBoard CRM demo platform; specifically, the vulnerable component is the ‘user-name’ POST parameter in the ‘/module/auth/recovery.php’ endpoint. The parameter is vulnerable to blind attacks based on Boolean, error, time-based and UNION techniques. Exploitation allows attackers to extract confidential information (such as the version and type of backend used), alter data or further compromise the CRM environment.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-08T16:00:38.294Z","source_hash":"content-fingerprint:fnv1a-62c4cec","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Data store & messaging component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-12260-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"SQL injection in the NetBoard CRM demo platform; specifically, the vulnerable component is the ‘user-name’ POST parameter in the ‘/module/auth/recovery.php’ endpoint. The parameter is vulnerable to blind attacks based on Boolean, error, time-based and UNION techniques. Exploitation allows attackers to extract confidential information (such as the version and type of backend used), alter data or further compromise the CRM environment.","source_quote_or_pointer":"Security Advisory CVE-2026-12260","fact_id":"SEA-CVE-2026-12260-F1","document_citation":"Security Advisory CVE-2026-12260"},{"id":"SEA-CVE-2026-12260-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"SQL injection in the NetBoard CRM demo platform; specifically, the vulnerable component is the ‘user-name’ POST parameter in the ‘/module/auth/recovery.php’ endpoint. The parameter is vulnerable to blind attacks based on Boolean, error, time-based and UNION techniques.","source_quote_or_pointer":"Advisory description (CVE-2026-12260)","fact_id":"SEA-CVE-2026-12260-F2","document_citation":"Advisory description (CVE-2026-12260)"}],"source_stated_contributors":["SQL injection in the NetBoard CRM demo platform; specifically, the vulnerable component is the ‘user-name’ POST parameter in the ‘/module/auth/recovery.php’ endpoint. The parameter is vulnerable to blind attacks based on Boolean, error, time-based and UNION techniques."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-12260","reporting_entity":"CVE-2026-12260","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-12260-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-12260-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-12260"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-87688","title":"An input validation vulnerability exists in the security certificate management component of the Brocade Fabric OS administrative management API. When processing certificate management operations, user-supplied certificate identifiers are handled without adequate sanitization prior to execution in external system routines. An authenticated attacker with privileges to perform certificate deletion requests can leverage this flaw to execute arbitrary system commands with the privileges of the underlying management daemon. This vulnerability affects Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1.","display_title":"Security issue reported in Software component","display_summary":"An input validation vulnerability exists in the security certificate management component of the Brocade Fabric OS administrative management API.","display_reference":"CVE-2026-87688","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87688","source_title":"An input validation vulnerability exists in the security certificate management component of the Brocade Fabric OS administrative management API. When processing certificate management operations, user-supplied certificate identifiers are handled without adequate sanitization prior to execution in external system routines. An authenticated attacker with privileges to perform certificate deletion requests can leverage this flaw to execute arbitrary system commands with the privileges of the underlying management daemon. This vulnerability affects Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-08T16:00:38.294Z","source_hash":"content-fingerprint:fnv1a-580a9cbc","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-87688-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"An input validation vulnerability exists in the security certificate management component of the Brocade Fabric OS administrative management API. When processing certificate management operations, user-supplied certificate identifiers are handled without adequate sanitization prior to execution in external system routines. An authenticated attacker with privileges to perform certificate deletion requests can leverage this flaw to execute arbitrary system commands with the privileges of the underlying management daemon. This vulnerability affects Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1.","source_quote_or_pointer":"Security Advisory CVE-2026-87688","fact_id":"SEA-CVE-2026-87688-F1","document_citation":"Security Advisory CVE-2026-87688"},{"id":"SEA-CVE-2026-87688-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"An input validation vulnerability exists in the security certificate management component of the Brocade Fabric OS administrative management API. When processing certificate management operations, user-supplied certificate identifiers are handled without adequate sanitization prior to execution in external system…","source_quote_or_pointer":"Advisory description (CVE-2026-87688)","fact_id":"SEA-CVE-2026-87688-F2","document_citation":"Advisory description (CVE-2026-87688)"}],"source_stated_contributors":["An input validation vulnerability exists in the security certificate management component of the Brocade Fabric OS administrative management API. When processing certificate management operations, user-supplied certificate identifiers are handled without adequate sanitization prior to execution in external system…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-87688","reporting_entity":"CVE-2026-87688","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-87688-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-87688-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-87688"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-107445","title":"A flaw was found in Katello where the Flatpak Remote Repositories API does not properly enforce authorization when accessing a flatpak remote repository by identifier. An authenticated user with permission to view flatpak remotes in one organization may be able to access flatpak remote repository information belonging to another organization. The same unscoped lookup is used by the mirror action, which may allow creating a repository in a product the user can edit that is configured with another organization's flatpak remote URL and stored remote credentials.","display_title":"Software component issue could expose accounts or credentials","display_summary":"A flaw was found in Katello where the Flatpak Remote Repositories API does not properly enforce authorization when accessing a flatpak remote repository by identifier.","display_reference":"CVE-2026-107445","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107445","source_title":"A flaw was found in Katello where the Flatpak Remote Repositories API does not properly enforce authorization when accessing a flatpak remote repository by identifier. An authenticated user with permission to view flatpak remotes in one organization may be able to access flatpak remote repository information belonging to another organization. The same unscoped lookup is used by the mirror action, which may allow creating a repository in a product the user can edit that is configured with another organization's flatpak remote URL and stored remote credentials.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-08T08:01:03.248Z","source_hash":"content-fingerprint:fnv1a-ef02b7ba","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-107445-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A flaw was found in Katello where the Flatpak Remote Repositories API does not properly enforce authorization when accessing a flatpak remote repository by identifier. An authenticated user with permission to view flatpak remotes in one organization may be able to access flatpak remote repository information belonging to another organization. The same unscoped lookup is used by the mirror action, which may allow creating a repository in a product the user can edit that is configured with another organization's flatpak remote URL and stored remote credentials.","source_quote_or_pointer":"Security Advisory CVE-2026-107445","fact_id":"SEA-CVE-2026-107445-F1","document_citation":"Security Advisory CVE-2026-107445"},{"id":"SEA-CVE-2026-107445-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A flaw was found in Katello where the Flatpak Remote Repositories API does not properly enforce authorization when accessing a flatpak remote repository by identifier.","source_quote_or_pointer":"Advisory description (CVE-2026-107445)","fact_id":"SEA-CVE-2026-107445-F2","document_citation":"Advisory description (CVE-2026-107445)"}],"source_stated_contributors":["A flaw was found in Katello where the Flatpak Remote Repositories API does not properly enforce authorization when accessing a flatpak remote repository by identifier."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-107445","reporting_entity":"CVE-2026-107445","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-107445-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-107445-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-107445"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-87678","title":"An input validation and output encoding vulnerability exists in the web management interface of Brocade Fabric OS versions before 10.0.1. When configuring Federated Authentication (FA), the system fails to sanitize the Identity Provider (IdP) issuer parameter. An authenticated administrator—or an attacker capable of supplying crafted FA configuration files during an import routine—can inject arbitrary web server directives. This can lead to service denial by preventing the web management daemon from starting, or potentially alter web server security controls.","display_title":"Security issue reported in Software component","display_summary":"An input validation and output encoding vulnerability exists in the web management interface of Brocade Fabric OS versions before 10.0.1.","display_reference":"CVE-2026-87678","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87678","source_title":"An input validation and output encoding vulnerability exists in the web management interface of Brocade Fabric OS versions before 10.0.1. When configuring Federated Authentication (FA), the system fails to sanitize the Identity Provider (IdP) issuer parameter. An authenticated administrator—or an attacker capable of supplying crafted FA configuration files during an import routine—can inject arbitrary web server directives. This can lead to service denial by preventing the web management daemon from starting, or potentially alter web server security controls.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-08T08:01:03.248Z","source_hash":"content-fingerprint:fnv1a-5e12b329","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-87678-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"An input validation and output encoding vulnerability exists in the web management interface of Brocade Fabric OS versions before 10.0.1. When configuring Federated Authentication (FA), the system fails to sanitize the Identity Provider (IdP) issuer parameter. An authenticated administrator—or an attacker capable of supplying crafted FA configuration files during an import routine—can inject arbitrary web server directives. This can lead to service denial by preventing the web management daemon from starting, or potentially alter web server security controls.","source_quote_or_pointer":"Security Advisory CVE-2026-87678","fact_id":"SEA-CVE-2026-87678-F1","document_citation":"Security Advisory CVE-2026-87678"},{"id":"SEA-CVE-2026-87678-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"An input validation and output encoding vulnerability exists in the web management interface of Brocade Fabric OS versions before 10.0.1. When configuring Federated Authentication (FA), the system fails to sanitize the Identity Provider (IdP) issuer parameter.","source_quote_or_pointer":"Advisory description (CVE-2026-87678)","fact_id":"SEA-CVE-2026-87678-F2","document_citation":"Advisory description (CVE-2026-87678)"}],"source_stated_contributors":["An input validation and output encoding vulnerability exists in the web management interface of Brocade Fabric OS versions before 10.0.1. When configuring Federated Authentication (FA), the system fails to sanitize the Identity Provider (IdP) issuer parameter."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-87678","reporting_entity":"CVE-2026-87678","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-87678-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-87678-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-87678"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-87676","title":"A stack-based buffer overflow vulnerability exists in the security library component of Brocade Fabric OS versions before 10.0.1. When parsing uploaded X.509 PEM certificates for management display, the system improperly validates the length of the Authority Key Identifier (AKI) extension before copying string tokens into an internal memory buffer. An authenticated user with administrative privileges to import custom certificates can supply a certificate containing an intentionally oversized AKI extension. When the system processes or renders the certificate attributes, this can trigger a stack memory corruption leading to a denial-of-service (DoS) condition by crashing the management daemon.","display_title":"Software component issue could make the service unavailable","display_summary":"A stack-based buffer overflow vulnerability exists in the security library component of Brocade Fabric OS versions before 10.0.1.","display_reference":"CVE-2026-87676","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87676","source_title":"A stack-based buffer overflow vulnerability exists in the security library component of Brocade Fabric OS versions before 10.0.1. When parsing uploaded X.509 PEM certificates for management display, the system improperly validates the length of the Authority Key Identifier (AKI) extension before copying string tokens into an internal memory buffer. An authenticated user with administrative privileges to import custom certificates can supply a certificate containing an intentionally oversized AKI extension. When the system processes or renders the certificate attributes, this can trigger a stack memory corruption leading to a denial-of-service (DoS) condition by crashing the management daemon.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-08T08:01:03.248Z","source_hash":"content-fingerprint:fnv1a-a88751cb","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-87676-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A stack-based buffer overflow vulnerability exists in the security library component of Brocade Fabric OS versions before 10.0.1. When parsing uploaded X.509 PEM certificates for management display, the system improperly validates the length of the Authority Key Identifier (AKI) extension before copying string tokens into an internal memory buffer. An authenticated user with administrative privileges to import custom certificates can supply a certificate containing an intentionally oversized AKI extension. When the system processes or renders the certificate attributes, this can trigger a stack memory corruption leading to a denial-of-service (DoS) condition by crashing the management daemon.","source_quote_or_pointer":"Security Advisory CVE-2026-87676","fact_id":"SEA-CVE-2026-87676-F1","document_citation":"Security Advisory CVE-2026-87676"},{"id":"SEA-CVE-2026-87676-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A stack-based buffer overflow vulnerability exists in the security library component of Brocade Fabric OS versions before 10.0.1. When parsing uploaded X.509 PEM certificates for management display, the system improperly validates the length of the Authority Key Identifier (AKI) extension before copying string tokens…","source_quote_or_pointer":"Advisory description (CVE-2026-87676)","fact_id":"SEA-CVE-2026-87676-F2","document_citation":"Advisory description (CVE-2026-87676)"}],"source_stated_contributors":["A stack-based buffer overflow vulnerability exists in the security library component of Brocade Fabric OS versions before 10.0.1. When parsing uploaded X.509 PEM certificates for management display, the system improperly validates the length of the Authority Key Identifier (AKI) extension before copying string tokens…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-87676","reporting_entity":"CVE-2026-87676","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-87676-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-87676-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-87676"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-87669","title":"A missing authorization check in Brocade Fabric OS versions before 10.0.1 REST API interface of affected platform releases allows an authenticated user, regardless of their assigned role or administrative scope, to retrieve complete Monitoring and Alerting Policy Suite (MAPS) violation data across all logical switches. An attacker with low-privilege API access can leverage this endpoint to dump chassis-wide system health metrics, port performance violations, and configuration data without appropriate privileges.","display_title":"Security issue reported in Software component","display_summary":"A missing authorization check in Brocade Fabric OS versions before 10.0.1 REST API interface of affected platform releases allows an authenticated user, regardless of their assigned role or administrative scope, to…","display_reference":"CVE-2026-87669","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87669","source_title":"A missing authorization check in Brocade Fabric OS versions before 10.0.1 REST API interface of affected platform releases allows an authenticated user, regardless of their assigned role or administrative scope, to retrieve complete Monitoring and Alerting Policy Suite (MAPS) violation data across all logical switches. An attacker with low-privilege API access can leverage this endpoint to dump chassis-wide system health metrics, port performance violations, and configuration data without appropriate privileges.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-08T08:01:03.248Z","source_hash":"content-fingerprint:fnv1a-909feecf","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-87669-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A missing authorization check in Brocade Fabric OS versions before 10.0.1 REST API interface of affected platform releases allows an authenticated user, regardless of their assigned role or administrative scope, to retrieve complete Monitoring and Alerting Policy Suite (MAPS) violation data across all logical switches. An attacker with low-privilege API access can leverage this endpoint to dump chassis-wide system health metrics, port performance violations, and configuration data without appropriate privileges.","source_quote_or_pointer":"Security Advisory CVE-2026-87669","fact_id":"SEA-CVE-2026-87669-F1","document_citation":"Security Advisory CVE-2026-87669"},{"id":"SEA-CVE-2026-87669-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A missing authorization check in Brocade Fabric OS versions before 10.0.1 REST API interface of affected platform releases allows an authenticated user, regardless of their assigned role or administrative scope, to retrieve complete Monitoring and Alerting Policy Suite (MAPS) violation data across all logical…","source_quote_or_pointer":"Advisory description (CVE-2026-87669)","fact_id":"SEA-CVE-2026-87669-F2","document_citation":"Advisory description (CVE-2026-87669)"}],"source_stated_contributors":["A missing authorization check in Brocade Fabric OS versions before 10.0.1 REST API interface of affected platform releases allows an authenticated user, regardless of their assigned role or administrative scope, to retrieve complete Monitoring and Alerting Policy Suite (MAPS) violation data across all logical…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":["SEA-FM-003"],"consequences":["Unauthorized data access","Cross-tenant exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-87669","reporting_entity":"CVE-2026-87669","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-87669-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-87669-SG1","label":"Server-side authorization on every object","description":"Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","target_failure_mode":"SEA-FM-003","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Access decisions trusted something the caller controls. Enforce authorization on the server for every object, using the authenticated identity rather than request-supplied identifiers.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-87669"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-87668","title":"A stack-based buffer overflow vulnerability exists in the diagnostic execution utility of Brocade Fabric OS versions before 10.0.1. When processing command arguments for diagnostic operations, the utility tokenizes user-supplied input into an internal argument array without enforcing boundary checks on the maximum array capacity. An authenticated user with administrative access can exploit this vulnerability by supplying a crafted diagnostic command string containing an excessive number of tokenized arguments. This leads to a memory overwrite resulting in a denial of service (process crash).","display_title":"Software component issue could make the service unavailable","display_summary":"A stack-based buffer overflow vulnerability exists in the diagnostic execution utility of Brocade Fabric OS versions before 10.0.1.","display_reference":"CVE-2026-87668","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87668","source_title":"A stack-based buffer overflow vulnerability exists in the diagnostic execution utility of Brocade Fabric OS versions before 10.0.1. When processing command arguments for diagnostic operations, the utility tokenizes user-supplied input into an internal argument array without enforcing boundary checks on the maximum array capacity. An authenticated user with administrative access can exploit this vulnerability by supplying a crafted diagnostic command string containing an excessive number of tokenized arguments. This leads to a memory overwrite resulting in a denial of service (process crash).","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-08T08:01:03.248Z","source_hash":"content-fingerprint:fnv1a-1ed5daa6","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-87668-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A stack-based buffer overflow vulnerability exists in the diagnostic execution utility of Brocade Fabric OS versions before 10.0.1. When processing command arguments for diagnostic operations, the utility tokenizes user-supplied input into an internal argument array without enforcing boundary checks on the maximum array capacity. An authenticated user with administrative access can exploit this vulnerability by supplying a crafted diagnostic command string containing an excessive number of tokenized arguments. This leads to a memory overwrite resulting in a denial of service (process crash).","source_quote_or_pointer":"Security Advisory CVE-2026-87668","fact_id":"SEA-CVE-2026-87668-F1","document_citation":"Security Advisory CVE-2026-87668"},{"id":"SEA-CVE-2026-87668-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A stack-based buffer overflow vulnerability exists in the diagnostic execution utility of Brocade Fabric OS versions before 10.0.1. When processing command arguments for diagnostic operations, the utility tokenizes user-supplied input into an internal argument array without enforcing boundary checks on the maximum…","source_quote_or_pointer":"Advisory description (CVE-2026-87668)","fact_id":"SEA-CVE-2026-87668-F2","document_citation":"Advisory description (CVE-2026-87668)"}],"source_stated_contributors":["A stack-based buffer overflow vulnerability exists in the diagnostic execution utility of Brocade Fabric OS versions before 10.0.1. When processing command arguments for diagnostic operations, the utility tokenizes user-supplied input into an internal argument array without enforcing boundary checks on the maximum…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-87668","reporting_entity":"CVE-2026-87668","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-87668-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-87668-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-87668"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-87665","title":"A stack-based buffer overflow vulnerability exists in the Internet Key Exchange (IKEv2) protocol handler on Brocade Fabric OS versions before 10.0.1. The vulnerability occurs when processing initial IKE key exchange requests on extension switches or blades running IPsec-enabled Fibre Channel over IP (FCIP) circuits. An unauthenticated remote attacker can exploit this vulnerability by sending a single, specifically crafted UDP packet (Port 500) containing an oversized Nonce payload. Successful exploitation results in a denial of service (data-plane process crash)","display_title":"Software component issue could make the service unavailable","display_summary":"A stack-based buffer overflow vulnerability exists in the Internet Key Exchange (IKEv2) protocol handler on Brocade Fabric OS versions before 10.0.1.","display_reference":"CVE-2026-87665","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87665","source_title":"A stack-based buffer overflow vulnerability exists in the Internet Key Exchange (IKEv2) protocol handler on Brocade Fabric OS versions before 10.0.1. The vulnerability occurs when processing initial IKE key exchange requests on extension switches or blades running IPsec-enabled Fibre Channel over IP (FCIP) circuits. An unauthenticated remote attacker can exploit this vulnerability by sending a single, specifically crafted UDP packet (Port 500) containing an oversized Nonce payload. Successful exploitation results in a denial of service (data-plane process crash)","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-08T08:01:03.248Z","source_hash":"content-fingerprint:fnv1a-1eaf3feb","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-87665-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"A stack-based buffer overflow vulnerability exists in the Internet Key Exchange (IKEv2) protocol handler on Brocade Fabric OS versions before 10.0.1. The vulnerability occurs when processing initial IKE key exchange requests on extension switches or blades running IPsec-enabled Fibre Channel over IP (FCIP) circuits. An unauthenticated remote attacker can exploit this vulnerability by sending a single, specifically crafted UDP packet (Port 500) containing an oversized Nonce payload. Successful exploitation results in a denial of service (data-plane process crash)","source_quote_or_pointer":"Security Advisory CVE-2026-87665","fact_id":"SEA-CVE-2026-87665-F1","document_citation":"Security Advisory CVE-2026-87665"},{"id":"SEA-CVE-2026-87665-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A stack-based buffer overflow vulnerability exists in the Internet Key Exchange (IKEv2) protocol handler on Brocade Fabric OS versions before 10.0.1. The vulnerability occurs when processing initial IKE key exchange requests on extension switches or blades running IPsec-enabled Fibre Channel over IP (FCIP) circuits.","source_quote_or_pointer":"Advisory description (CVE-2026-87665)","fact_id":"SEA-CVE-2026-87665-F2","document_citation":"Advisory description (CVE-2026-87665)"}],"source_stated_contributors":["A stack-based buffer overflow vulnerability exists in the Internet Key Exchange (IKEv2) protocol handler on Brocade Fabric OS versions before 10.0.1. The vulnerability occurs when processing initial IKE key exchange requests on extension switches or blades running IPsec-enabled Fibre Channel over IP (FCIP) circuits."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-87665","reporting_entity":"CVE-2026-87665","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-87665-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-87665-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-87665"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-87683","title":"Multiple stack-based buffer overflow vulnerabilities exist in the REST API management component of Brocade Fabric OS versions prior to 10.0.1. When processing API request payloads (such as device configuration attributes or port mapping requests) the REST API service fails to properly validate incoming array counts and string lengths against internal buffer capacities. An authenticated attacker with REST API access can transmit crafted, oversized request parameters to induce memory corruption on the execution stack. This may result in a denial-of-service condition (daemon crash) or potential arbitrary code execution within the management process context.","display_title":"Software component issue could allow unintended commands to run","display_summary":"Multiple stack-based buffer overflow vulnerabilities exist in the REST API management component of Brocade Fabric OS versions prior to 10.0.1.","display_reference":"CVE-2026-87683","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87683","source_title":"Multiple stack-based buffer overflow vulnerabilities exist in the REST API management component of Brocade Fabric OS versions prior to 10.0.1. When processing API request payloads (such as device configuration attributes or port mapping requests) the REST API service fails to properly validate incoming array counts and string lengths against internal buffer capacities. An authenticated attacker with REST API access can transmit crafted, oversized request parameters to induce memory corruption on the execution stack. This may result in a denial-of-service condition (daemon crash) or potential arbitrary code execution within the management process context.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-08T08:01:03.248Z","source_hash":"content-fingerprint:fnv1a-afa9209b","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-87683-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Multiple stack-based buffer overflow vulnerabilities exist in the REST API management component of Brocade Fabric OS versions prior to 10.0.1. When processing API request payloads (such as device configuration attributes or port mapping requests) the REST API service fails to properly validate incoming array counts and string lengths against internal buffer capacities. An authenticated attacker with REST API access can transmit crafted, oversized request parameters to induce memory corruption on the execution stack. This may result in a denial-of-service condition (daemon crash) or potential arbitrary code execution within the management process context.","source_quote_or_pointer":"Security Advisory CVE-2026-87683","fact_id":"SEA-CVE-2026-87683-F1","document_citation":"Security Advisory CVE-2026-87683"},{"id":"SEA-CVE-2026-87683-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Multiple stack-based buffer overflow vulnerabilities exist in the REST API management component of Brocade Fabric OS versions prior to 10.0.1. When processing API request payloads (such as device configuration attributes or port mapping requests) the REST API service fails to properly validate incoming array counts…","source_quote_or_pointer":"Advisory description (CVE-2026-87683)","fact_id":"SEA-CVE-2026-87683-F2","document_citation":"Advisory description (CVE-2026-87683)"}],"source_stated_contributors":["Multiple stack-based buffer overflow vulnerabilities exist in the REST API management component of Brocade Fabric OS versions prior to 10.0.1. When processing API request payloads (such as device configuration attributes or port mapping requests) the REST API service fails to properly validate incoming array counts…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-87683","reporting_entity":"CVE-2026-87683","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-87683-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-87683-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-87683"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-87682","title":"Multiple OS Command Injection vulnerabilities exist in the management interface and session processing routines of Brocade Fabric OS versions before 10.0.1. Input processing flaws during remote management connection validation and session verification for directory-based user accounts allow untrusted input containing shell metacharacters to reach internal system execution wrappers. An authenticated user or a compromised directory service account can exploit these vulnerabilities to execute arbitrary operating system commands with elevated privileges on the target device.","display_title":"Software component issue could allow unintended commands to run","display_summary":"Multiple OS Command Injection vulnerabilities exist in the management interface and session processing routines of Brocade Fabric OS versions before 10.0.1.","display_reference":"CVE-2026-87682","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87682","source_title":"Multiple OS Command Injection vulnerabilities exist in the management interface and session processing routines of Brocade Fabric OS versions before 10.0.1. Input processing flaws during remote management connection validation and session verification for directory-based user accounts allow untrusted input containing shell metacharacters to reach internal system execution wrappers. An authenticated user or a compromised directory service account can exploit these vulnerabilities to execute arbitrary operating system commands with elevated privileges on the target device.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-08T08:01:03.248Z","source_hash":"content-fingerprint:fnv1a-ea9d6ba","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-87682-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Multiple OS Command Injection vulnerabilities exist in the management interface and session processing routines of Brocade Fabric OS versions before 10.0.1. Input processing flaws during remote management connection validation and session verification for directory-based user accounts allow untrusted input containing shell metacharacters to reach internal system execution wrappers. An authenticated user or a compromised directory service account can exploit these vulnerabilities to execute arbitrary operating system commands with elevated privileges on the target device.","source_quote_or_pointer":"Security Advisory CVE-2026-87682","fact_id":"SEA-CVE-2026-87682-F1","document_citation":"Security Advisory CVE-2026-87682"},{"id":"SEA-CVE-2026-87682-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Multiple OS Command Injection vulnerabilities exist in the management interface and session processing routines of Brocade Fabric OS versions before 10.0.1. Input processing flaws during remote management connection validation and session verification for directory-based user accounts allow untrusted input containing…","source_quote_or_pointer":"Advisory description (CVE-2026-87682)","fact_id":"SEA-CVE-2026-87682-F2","document_citation":"Advisory description (CVE-2026-87682)"}],"source_stated_contributors":["Multiple OS Command Injection vulnerabilities exist in the management interface and session processing routines of Brocade Fabric OS versions before 10.0.1. Input processing flaws during remote management connection validation and session verification for directory-based user accounts allow untrusted input containing…"],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-87682","reporting_entity":"CVE-2026-87682","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-87682-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-87682-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-87682"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CVE-2026-102488","title":"In affected versions, Octopus Server incorrectly evaluates multiple scoped permission assignments, allowing a highly privileged user to obtain deployment permissions beyond those actually granted to them.","display_title":"Security issue reported in Software component","display_summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","display_reference":"CVE-2026-102488","display_source_type":"Security advisory","incident_date":"2026-10-08","disclosure_date":"2026-10-08","source_type":"cve_advisory","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-102488","source_title":"In affected versions, Octopus Server incorrectly evaluates multiple scoped permission assignments, allowing a highly privileged user to obtain deployment permissions beyond those actually granted to them.","source_publisher":"National Vulnerability Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-08T08:01:03.248Z","source_hash":"content-fingerprint:fnv1a-b46bc40e","affected_system":{"organization":"Software component project","product":"Software component","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-CVE-2026-102488-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"In affected versions, Octopus Server incorrectly evaluates multiple scoped permission assignments, allowing a highly privileged user to obtain deployment permissions beyond those actually granted to them.","source_quote_or_pointer":"Security Advisory CVE-2026-102488","fact_id":"SEA-CVE-2026-102488-F1","document_citation":"Security Advisory CVE-2026-102488"},{"id":"SEA-CVE-2026-102488-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"In affected versions, Octopus Server incorrectly evaluates multiple scoped permission assignments, allowing a highly privileged user to obtain deployment permissions beyond those actually granted to them.","source_quote_or_pointer":"Advisory description (CVE-2026-102488)","fact_id":"SEA-CVE-2026-102488-F2","document_citation":"Advisory description (CVE-2026-102488)"}],"source_stated_contributors":["In affected versions, Octopus Server incorrectly evaluates multiple scoped permission assignments, allowing a highly privileged user to obtain deployment permissions beyond those actually granted to them."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"CVE-2026-102488","reporting_entity":"CVE-2026-102488","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-CVE-2026-102488-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CVE-2026-102488-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-102488"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-fj8f-m44g-c479","title":"PraisonAI: Prompt Injection Defense Bypassed for HIGH-Level Threats","display_title":"Security issue reported in PraisonAI","display_summary":"Injection Defense is a purpose-built prompt injection defense layer. It scans LLM inputs through six detection categories: instruction overrides, authority claims, boundary manipulation, obfuscation, financial…","display_reference":"CVE-2026-61439","display_source_type":"Security advisory","incident_date":"2026-10-07","disclosure_date":"2026-10-07","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-fj8f-m44g-c479","source_title":"PraisonAI: Prompt Injection Defense Bypassed for HIGH-Level Threats","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-08T22:00:20.059Z","source_hash":"content-fingerprint:fnv1a-18fb341c","affected_system":{"organization":"PraisonAI project","product":"PraisonAI","system_type":"AI / LLM application component","is_ai_system":true,"is_agentic":false,"primary_language":"Python"},"documented_facts":[{"id":"SEA-GHSA-fj8f-m44g-c479-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"PraisonAI: Prompt Injection Defense Bypassed for HIGH-Level Threats","source_quote_or_pointer":"Security Advisory GHSA-fj8f-m44g-c479","fact_id":"SEA-GHSA-fj8f-m44g-c479-F1","document_citation":"Security Advisory GHSA-fj8f-m44g-c479"},{"id":"SEA-GHSA-fj8f-m44g-c479-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Injection Defense is a purpose-built prompt injection defense layer. It scans LLM inputs through six detection categories: instruction overrides, authority claims, boundary manipulation, obfuscation, financial manipulation, and self-harm instructions.","source_quote_or_pointer":"Advisory description (GHSA-fj8f-m44g-c479)","fact_id":"SEA-GHSA-fj8f-m44g-c479-F2","document_citation":"Advisory description (GHSA-fj8f-m44g-c479)"}],"source_stated_contributors":["Injection Defense is a purpose-built prompt injection defense layer. It scans LLM inputs through six detection categories: instruction overrides, authority claims, boundary manipulation, obfuscation, financial manipulation, and self-harm instructions."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-004","SEA-FM-002"],"consequences":["Data exposure or corruption","Altered program behaviour"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-fj8f-m44g-c479","reporting_entity":"CVE-2026-61439","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-fj8f-m44g-c479-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-fj8f-m44g-c479-SG1","label":"Parameterise and validate untrusted input","description":"Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Untrusted text was interpreted as instructions or query syntax. Separate data from instructions with parameterised interfaces and strict schemas.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-61439"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-788w-68h3-cvxp","title":"Ghost: Remote Code Execution via Bookmark Card Images","display_title":"ghost issue could allow unintended commands to run","display_summary":"An image processing library bundled with Ghost contained a vulnerability in its SVG handling. Any staff user, including Contributors, could create a bookmark card for an attacker-controlled website, resulting in…","display_reference":"CVE-2026-105642","display_source_type":"Security advisory","incident_date":"2026-10-07","disclosure_date":"2026-10-07","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-788w-68h3-cvxp","source_title":"Ghost: Remote Code Execution via Bookmark Card Images","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-08T22:00:20.059Z","source_hash":"content-fingerprint:fnv1a-58c4150d","affected_system":{"organization":"ghost project","product":"ghost","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"JavaScript / TypeScript"},"documented_facts":[{"id":"SEA-GHSA-788w-68h3-cvxp-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Ghost: Remote Code Execution via Bookmark Card Images","source_quote_or_pointer":"Security Advisory GHSA-788w-68h3-cvxp","fact_id":"SEA-GHSA-788w-68h3-cvxp-F1","document_citation":"Security Advisory GHSA-788w-68h3-cvxp"},{"id":"SEA-GHSA-788w-68h3-cvxp-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"An image processing library bundled with Ghost contained a vulnerability in its SVG handling. Any staff user, including Contributors, could create a bookmark card for an attacker-controlled website, resulting in arbitrary commands being run on the Ghost server.","source_quote_or_pointer":"Advisory description (GHSA-788w-68h3-cvxp)","fact_id":"SEA-GHSA-788w-68h3-cvxp-F2","document_citation":"Advisory description (GHSA-788w-68h3-cvxp)"}],"source_stated_contributors":["An image processing library bundled with Ghost contained a vulnerability in its SVG handling. Any staff user, including Contributors, could create a bookmark card for an attacker-controlled website, resulting in arbitrary commands being run on the Ghost server."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","data.uploaded_files"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Unintended command execution","System compromise"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-788w-68h3-cvxp","reporting_entity":"CVE-2026-105642","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-788w-68h3-cvxp-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-788w-68h3-cvxp-SG1","label":"Allow-list inputs and isolate execution","description":"Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Input that reaches a shell, interpreter or process launcher can run unintended commands. Pass arguments as data, allow-list options, and run the component with least privilege.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-105642"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-69qc-f5m6-889c","title":"Ghost: Stored XSS via Embed Card Previews","display_title":"ghost issue could run attacker-controlled scripts in a browser","display_summary":"Embed cards in the Ghost editor could be used to bypass the fix for GHSA-8vhf-xxpj-4qrg. Any staff user, including Contributors, could store scripts in post content that ran when another staff user opened the post in the…","display_reference":"CVE-2026-105643","display_source_type":"Security advisory","incident_date":"2026-10-07","disclosure_date":"2026-10-07","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-69qc-f5m6-889c","source_title":"Ghost: Stored XSS via Embed Card Previews","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-08T22:00:20.059Z","source_hash":"content-fingerprint:fnv1a-2a8b8ec0","affected_system":{"organization":"ghost project","product":"ghost","system_type":"Identity & access component","is_ai_system":false,"is_agentic":false,"primary_language":"JavaScript / TypeScript"},"documented_facts":[{"id":"SEA-GHSA-69qc-f5m6-889c-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Ghost: Stored XSS via Embed Card Previews","source_quote_or_pointer":"Security Advisory GHSA-69qc-f5m6-889c","fact_id":"SEA-GHSA-69qc-f5m6-889c-F1","document_citation":"Security Advisory GHSA-69qc-f5m6-889c"},{"id":"SEA-GHSA-69qc-f5m6-889c-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Embed cards in the Ghost editor could be used to bypass the fix for GHSA-8vhf-xxpj-4qrg. Any staff user, including Contributors, could store scripts in post content that ran when another staff user opened the post in the editor, possibly resulting in compromise of that user's admin session.","source_quote_or_pointer":"Advisory description (GHSA-69qc-f5m6-889c)","fact_id":"SEA-GHSA-69qc-f5m6-889c-F2","document_citation":"Advisory description (GHSA-69qc-f5m6-889c)"}],"source_stated_contributors":["Embed cards in the Ghost editor could be used to bypass the fix for GHSA-8vhf-xxpj-4qrg. Any staff user, including Contributors, could store scripts in post content that ran when another staff user opened the post in the editor, possibly resulting in compromise of that user's admin session."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.write_action","data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-69qc-f5m6-889c","reporting_entity":"CVE-2026-105643","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-69qc-f5m6-889c-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-69qc-f5m6-889c-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-105643"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-hqq2-xqr2-fmx2","title":"Ghost : Stored XSS via SVG Files in Content Imports","display_title":"ghost issue could run attacker-controlled scripts in a browser","display_summary":"SVG images included in content imports were stored without sanitization. An attacker who convinced an Administrator to import a crafted file could host scripts on the site's domain, possibly resulting in compromise of…","display_reference":"CVE-2026-105644","display_source_type":"Security advisory","incident_date":"2026-10-07","disclosure_date":"2026-10-07","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-hqq2-xqr2-fmx2","source_title":"Ghost : Stored XSS via SVG Files in Content Imports","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-08T22:00:20.059Z","source_hash":"content-fingerprint:fnv1a-c9ca82cb","affected_system":{"organization":"ghost project","product":"ghost","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"JavaScript / TypeScript"},"documented_facts":[{"id":"SEA-GHSA-hqq2-xqr2-fmx2-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Ghost : Stored XSS via SVG Files in Content Imports","source_quote_or_pointer":"Security Advisory GHSA-hqq2-xqr2-fmx2","fact_id":"SEA-GHSA-hqq2-xqr2-fmx2-F1","document_citation":"Security Advisory GHSA-hqq2-xqr2-fmx2"},{"id":"SEA-GHSA-hqq2-xqr2-fmx2-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"SVG images included in content imports were stored without sanitization. An attacker who convinced an Administrator to import a crafted file could host scripts on the site's domain, possibly resulting in compromise of staff users' admin sessions.","source_quote_or_pointer":"Advisory description (GHSA-hqq2-xqr2-fmx2)","fact_id":"SEA-GHSA-hqq2-xqr2-fmx2-F2","document_citation":"Advisory description (GHSA-hqq2-xqr2-fmx2)"}],"source_stated_contributors":["SVG images included in content imports were stored without sanitization. An attacker who convinced an Administrator to import a crafted file could host scripts on the site's domain, possibly resulting in compromise of staff users' admin sessions."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii","data.uploaded_files"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-hqq2-xqr2-fmx2","reporting_entity":"CVE-2026-105644","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-hqq2-xqr2-fmx2-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-hqq2-xqr2-fmx2-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-105644"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-9m4w-fmjw-fvjq","title":"Ghost: Regular Expression Denial of Service in External Media Inliner","display_title":"ghost issue could make the service unavailable","display_summary":"A crafted request to the external media inliner could cause excessive CPU usage, making the Ghost server unresponsive. Exploiting this requires Administrator access.","display_reference":"CVE-2026-105645","display_source_type":"Security advisory","incident_date":"2026-10-07","disclosure_date":"2026-10-07","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-9m4w-fmjw-fvjq","source_title":"Ghost: Regular Expression Denial of Service in External Media Inliner","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-08T22:00:20.059Z","source_hash":"content-fingerprint:fnv1a-5ede55a1","affected_system":{"organization":"ghost project","product":"ghost","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"JavaScript / TypeScript"},"documented_facts":[{"id":"SEA-GHSA-9m4w-fmjw-fvjq-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Ghost: Regular Expression Denial of Service in External Media Inliner","source_quote_or_pointer":"Security Advisory GHSA-9m4w-fmjw-fvjq","fact_id":"SEA-GHSA-9m4w-fmjw-fvjq-F1","document_citation":"Security Advisory GHSA-9m4w-fmjw-fvjq"},{"id":"SEA-GHSA-9m4w-fmjw-fvjq-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A crafted request to the external media inliner could cause excessive CPU usage, making the Ghost server unresponsive. Exploiting this requires Administrator access.","source_quote_or_pointer":"Advisory description (GHSA-9m4w-fmjw-fvjq)","fact_id":"SEA-GHSA-9m4w-fmjw-fvjq-F2","document_citation":"Advisory description (GHSA-9m4w-fmjw-fvjq)"}],"source_stated_contributors":["A crafted request to the external media inliner could cause excessive CPU usage, making the Ghost server unresponsive. Exploiting this requires Administrator access."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-9m4w-fmjw-fvjq","reporting_entity":"CVE-2026-105645","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-9m4w-fmjw-fvjq-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-9m4w-fmjw-fvjq-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-105645"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-fwh9-qg68-vxp4","title":"Ghost: Regular Expression Denial of Service in Content Import","display_title":"ghost issue could make the service unavailable","display_summary":"A crafted content import file could cause excessive CPU usage, making the Ghost server unresponsive. Exploiting this requires Administrator access.","display_reference":"CVE-2026-105646","display_source_type":"Security advisory","incident_date":"2026-10-07","disclosure_date":"2026-10-07","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-fwh9-qg68-vxp4","source_title":"Ghost: Regular Expression Denial of Service in Content Import","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-08T22:00:20.059Z","source_hash":"content-fingerprint:fnv1a-76cc45ad","affected_system":{"organization":"ghost project","product":"ghost","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"JavaScript / TypeScript"},"documented_facts":[{"id":"SEA-GHSA-fwh9-qg68-vxp4-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Ghost: Regular Expression Denial of Service in Content Import","source_quote_or_pointer":"Security Advisory GHSA-fwh9-qg68-vxp4","fact_id":"SEA-GHSA-fwh9-qg68-vxp4-F1","document_citation":"Security Advisory GHSA-fwh9-qg68-vxp4"},{"id":"SEA-GHSA-fwh9-qg68-vxp4-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A crafted content import file could cause excessive CPU usage, making the Ghost server unresponsive. Exploiting this requires Administrator access.","source_quote_or_pointer":"Advisory description (GHSA-fwh9-qg68-vxp4)","fact_id":"SEA-GHSA-fwh9-qg68-vxp4-F2","document_citation":"Advisory description (GHSA-fwh9-qg68-vxp4)"}],"source_stated_contributors":["A crafted content import file could cause excessive CPU usage, making the Ghost server unresponsive. Exploiting this requires Administrator access."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action"],"failure_mechanisms":["SEA-FM-006"],"consequences":["Service unavailability","Resource exhaustion"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-fwh9-qg68-vxp4","reporting_entity":"CVE-2026-105646","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-fwh9-qg68-vxp4-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-fwh9-qg68-vxp4-SG1","label":"Bound input size, depth and time","description":"Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","target_failure_mode":"SEA-FM-006","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"A crafted input consumed unbounded CPU, memory or time. Bound input size, depth and execution time, and isolate workers so one request cannot take down the service.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-105646"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-p3fw-7699-7926","title":"Docling: Configured HTTP headers sent to every remote image host named by a document","display_title":"Security issue reported in docling","display_summary":"HTMLBackendOptions.headers is documented for passing authentication headers (API keys, bearer tokens) when fetching remote images.","display_reference":"CVE-2026-105742","display_source_type":"Security advisory","incident_date":"2026-10-07","disclosure_date":"2026-10-07","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-p3fw-7699-7926","source_title":"Docling: Configured HTTP headers sent to every remote image host named by a document","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-08T22:00:20.059Z","source_hash":"content-fingerprint:fnv1a-9e586f54","affected_system":{"organization":"docling project","product":"docling","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Python"},"documented_facts":[{"id":"SEA-GHSA-p3fw-7699-7926-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Docling: Configured HTTP headers sent to every remote image host named by a document","source_quote_or_pointer":"Security Advisory GHSA-p3fw-7699-7926","fact_id":"SEA-GHSA-p3fw-7699-7926-F1","document_citation":"Security Advisory GHSA-p3fw-7699-7926"},{"id":"SEA-GHSA-p3fw-7699-7926-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"HTMLBackendOptions.headers is documented for passing authentication headers (API keys, bearer tokens) when fetching remote images. docling sends these headers on every remote image request, to whichever host the document names.","source_quote_or_pointer":"Advisory description (GHSA-p3fw-7699-7926)","fact_id":"SEA-GHSA-p3fw-7699-7926-F2","document_citation":"Advisory description (GHSA-p3fw-7699-7926)"}],"source_stated_contributors":["HTMLBackendOptions.headers is documented for passing authentication headers (API keys, bearer tokens) when fetching remote images. docling sends these headers on every remote image request, to whichever host the document names."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.uploaded_files"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Credential or token exposure","Account takeover"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-p3fw-7699-7926","reporting_entity":"CVE-2026-105742","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-p3fw-7699-7926-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-p3fw-7699-7926-SG1","label":"Scope, rotate and redact secrets","description":"Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","target_failure_mode":"SEA-FM-012","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"Secrets or tokens were exposed or accepted too broadly. Keep secrets out of logs and responses, scope tokens narrowly and make them short-lived.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-105742"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-pc36-qwjq-x68c","title":"Docling has SSRF guard bypass in remote resource fetching (DNS rebinding / multi-record resolution; no IP validation in HTML render mode)","display_title":"docling issue could reach internal services","display_summary":"When remote fetching is enabled (enableremotefetch=True, together with fetchimages=True or HTML renderpage=True), docling's protection against requests to private and loopback addresses can be bypassed.","display_reference":"CVE-2026-105743","display_source_type":"Security advisory","incident_date":"2026-10-07","disclosure_date":"2026-10-07","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-pc36-qwjq-x68c","source_title":"Docling has SSRF guard bypass in remote resource fetching (DNS rebinding / multi-record resolution; no IP validation in HTML render mode)","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-08T22:00:20.059Z","source_hash":"content-fingerprint:fnv1a-904b2075","affected_system":{"organization":"docling project","product":"docling","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Python"},"documented_facts":[{"id":"SEA-GHSA-pc36-qwjq-x68c-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Docling has SSRF guard bypass in remote resource fetching (DNS rebinding / multi-record resolution; no IP validation in HTML render mode)","source_quote_or_pointer":"Security Advisory GHSA-pc36-qwjq-x68c","fact_id":"SEA-GHSA-pc36-qwjq-x68c-F1","document_citation":"Security Advisory GHSA-pc36-qwjq-x68c"},{"id":"SEA-GHSA-pc36-qwjq-x68c-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"When remote fetching is enabled (enableremotefetch=True, together with fetchimages=True or HTML renderpage=True), docling's protection against requests to private and loopback addresses can be bypassed.","source_quote_or_pointer":"Advisory description (GHSA-pc36-qwjq-x68c)","fact_id":"SEA-GHSA-pc36-qwjq-x68c-F2","document_citation":"Advisory description (GHSA-pc36-qwjq-x68c)"}],"source_stated_contributors":["When remote fetching is enabled (enableremotefetch=True, together with fetchimages=True or HTML renderpage=True), docling's protection against requests to private and loopback addresses can be bypassed."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Internal network access","Cloud metadata or credential exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-pc36-qwjq-x68c","reporting_entity":"CVE-2026-105743","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-pc36-qwjq-x68c-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-pc36-qwjq-x68c-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"The service fetched a URL chosen by the caller and could be steered at internal systems. Restrict outbound destinations and block internal address ranges.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-105743"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-x3q2-h9hx-4r4j","title":"Docling has arbitrary file read/write (and command execution when shell-escape is enabled) when rendering untrusted TikZ with the opt-in Tectonic engine","display_title":"docling issue could expose restricted files","display_summary":"When the LaTeX backend is configured to render TikZ pictures with the Tectonic engine (LatexBackendOptions(tikzengine=\"tectonic\")), the TikZ body and the document preamble from the input file are compiled by Tectonic…","display_reference":"CVE-2026-105744","display_source_type":"Security advisory","incident_date":"2026-10-07","disclosure_date":"2026-10-07","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-x3q2-h9hx-4r4j","source_title":"Docling has arbitrary file read/write (and command execution when shell-escape is enabled) when rendering untrusted TikZ with the opt-in Tectonic engine","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-08T22:00:20.059Z","source_hash":"content-fingerprint:fnv1a-712bb100","affected_system":{"organization":"docling project","product":"docling","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Python"},"documented_facts":[{"id":"SEA-GHSA-x3q2-h9hx-4r4j-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Docling has arbitrary file read/write (and command execution when shell-escape is enabled) when rendering untrusted TikZ with the opt-in Tectonic engine","source_quote_or_pointer":"Security Advisory GHSA-x3q2-h9hx-4r4j","fact_id":"SEA-GHSA-x3q2-h9hx-4r4j-F1","document_citation":"Security Advisory GHSA-x3q2-h9hx-4r4j"},{"id":"SEA-GHSA-x3q2-h9hx-4r4j-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"When the LaTeX backend is configured to render TikZ pictures with the Tectonic engine (LatexBackendOptions(tikzengine=\"tectonic\")), the TikZ body and the document preamble from the input file are compiled by Tectonic without any restriction on TeX's file primitives.","source_quote_or_pointer":"Advisory description (GHSA-x3q2-h9hx-4r4j)","fact_id":"SEA-GHSA-x3q2-h9hx-4r4j-F2","document_citation":"Advisory description (GHSA-x3q2-h9hx-4r4j)"}],"source_stated_contributors":["When the LaTeX backend is configured to render TikZ pictures with the Tectonic engine (LatexBackendOptions(tikzengine=\"tectonic\")), the TikZ body and the document preamble from the input file are compiled by Tectonic without any restriction on TeX's file primitives."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Restricted file exposure","File overwrite"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-x3q2-h9hx-4r4j","reporting_entity":"CVE-2026-105744","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-x3q2-h9hx-4r4j-SG1","label":"Confine file access to a fixed root","description":"Resolve paths to canonical form and reject anything outside the intended directory before opening files.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-x3q2-h9hx-4r4j-SG1","label":"Confine file access to a fixed root","description":"Resolve paths to canonical form and reject anything outside the intended directory before opening files.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"File paths supplied by a caller escaped the intended directory. Canonicalise paths and confine file access to a fixed root.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-105744"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-cgc7-9qp3-86m3","title":"Docling: Unbounded table rowspan/colspan in HTML, JATS, ODS and BoxNote backends causes CPU/memory exhaustion","display_title":"Security issue reported in docling","display_summary":"The HTML, JATS, ODS (OpenDocument spreadsheet) and BoxNote backends accept table rowspan / colspan values without an upper bound.","display_reference":"CVE-2026-105749","display_source_type":"Security advisory","incident_date":"2026-10-07","disclosure_date":"2026-10-07","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-cgc7-9qp3-86m3","source_title":"Docling: Unbounded table rowspan/colspan in HTML, JATS, ODS and BoxNote backends causes CPU/memory exhaustion","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-08T22:00:20.059Z","source_hash":"content-fingerprint:fnv1a-cd67dd88","affected_system":{"organization":"docling project","product":"docling","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Python"},"documented_facts":[{"id":"SEA-GHSA-cgc7-9qp3-86m3-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Docling: Unbounded table rowspan/colspan in HTML, JATS, ODS and BoxNote backends causes CPU/memory exhaustion","source_quote_or_pointer":"Security Advisory GHSA-cgc7-9qp3-86m3","fact_id":"SEA-GHSA-cgc7-9qp3-86m3-F1","document_citation":"Security Advisory GHSA-cgc7-9qp3-86m3"},{"id":"SEA-GHSA-cgc7-9qp3-86m3-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"The HTML, JATS, ODS (OpenDocument spreadsheet) and BoxNote backends accept table rowspan / colspan values without an upper bound. A few bytes of input, such as , make docling run loops proportional to the declared span and allocate a table grid of the declared size. The result is CPU and memory exhaustion.","source_quote_or_pointer":"Advisory description (GHSA-cgc7-9qp3-86m3)","fact_id":"SEA-GHSA-cgc7-9qp3-86m3-F2","document_citation":"Advisory description (GHSA-cgc7-9qp3-86m3)"}],"source_stated_contributors":["The HTML, JATS, ODS (OpenDocument spreadsheet) and BoxNote backends accept table rowspan / colspan values without an upper bound. A few bytes of input, such as , make docling run loops proportional to the declared span and allocate a table grid of the declared size. The result is CPU and memory exhaustion."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-cgc7-9qp3-86m3","reporting_entity":"CVE-2026-105749","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-cgc7-9qp3-86m3-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-cgc7-9qp3-86m3-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-105749"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-mcr4-qmvw-px4g","title":"yawkat LZ4 Java: Native library extraction to a shared temporary directory is vulnerable to file replacement by another local user","display_title":"Security issue reported in at.yawk.lz4:lz4-java","display_summary":"When no system-installed liblz4-java is found, net.jpountz.util.Native.load() extracts the bundled native library to java.io.tmpdir and loads it with System.load.","display_reference":"CVE-2026-106451","display_source_type":"Security advisory","incident_date":"2026-10-07","disclosure_date":"2026-10-07","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-mcr4-qmvw-px4g","source_title":"yawkat LZ4 Java: Native library extraction to a shared temporary directory is vulnerable to file replacement by another local user","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-08T22:00:20.059Z","source_hash":"content-fingerprint:fnv1a-28850013","affected_system":{"organization":"at.yawk.lz4:lz4-java project","product":"at.yawk.lz4:lz4-java","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"Java"},"documented_facts":[{"id":"SEA-GHSA-mcr4-qmvw-px4g-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"yawkat LZ4 Java: Native library extraction to a shared temporary directory is vulnerable to file replacement by another local user","source_quote_or_pointer":"Security Advisory GHSA-mcr4-qmvw-px4g","fact_id":"SEA-GHSA-mcr4-qmvw-px4g-F1","document_citation":"Security Advisory GHSA-mcr4-qmvw-px4g"},{"id":"SEA-GHSA-mcr4-qmvw-px4g-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"When no system-installed liblz4-java is found, net.jpountz.util.Native.load() extracts the bundled native library to java.io.tmpdir and loads it with System.load. The path of the extracted library can be predicted before it is created, and the library file is opened without exclusive creation.","source_quote_or_pointer":"Advisory description (GHSA-mcr4-qmvw-px4g)","fact_id":"SEA-GHSA-mcr4-qmvw-px4g-F2","document_citation":"Advisory description (GHSA-mcr4-qmvw-px4g)"}],"source_stated_contributors":["When no system-installed liblz4-java is found, net.jpountz.util.Native.load() extracts the bundled native library to java.io.tmpdir and loads it with System.load. The path of the extracted library can be predicted before it is created, and the library file is opened without exclusive creation."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":[],"consequences":["Security weakness disclosed"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-mcr4-qmvw-px4g","reporting_entity":"CVE-2026-106451","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-mcr4-qmvw-px4g-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-mcr4-qmvw-px4g-SG1","label":"Track and patch dependencies","description":"Monitor advisories for components you depend on and upgrade to a fixed version.","target_failure_mode":"UNSPECIFIED","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-106451"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-GHSA-322m-ff4g-9vx9","title":"Ghost: Server-Side Request Forgery in Bookmark Fetching","display_title":"ghost issue could reach internal services","display_summary":"A validation issue allowed some functionality, such as Webmentions, to be abused by an unauthenticated user to make limited HTTP requests to hosts in the Ghost server's internal network.","display_reference":"CVE-2026-105647","display_source_type":"Security advisory","incident_date":"2026-10-07","disclosure_date":"2026-10-07","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-322m-ff4g-9vx9","source_title":"Ghost: Server-Side Request Forgery in Bookmark Fetching","source_publisher":"GitHub Security Advisory Database","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-08T22:00:20.059Z","source_hash":"content-fingerprint:fnv1a-8d903410","affected_system":{"organization":"ghost project","product":"ghost","system_type":"Application library or service","is_ai_system":false,"is_agentic":false,"primary_language":"JavaScript / TypeScript"},"documented_facts":[{"id":"SEA-GHSA-322m-ff4g-9vx9-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Ghost: Server-Side Request Forgery in Bookmark Fetching","source_quote_or_pointer":"Security Advisory GHSA-322m-ff4g-9vx9","fact_id":"SEA-GHSA-322m-ff4g-9vx9-F1","document_citation":"Security Advisory GHSA-322m-ff4g-9vx9"},{"id":"SEA-GHSA-322m-ff4g-9vx9-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"A validation issue allowed some functionality, such as Webmentions, to be abused by an unauthenticated user to make limited HTTP requests to hosts in the Ghost server's internal network. A successful attack would not result in any response data being returned.","source_quote_or_pointer":"Advisory description (GHSA-322m-ff4g-9vx9)","fact_id":"SEA-GHSA-322m-ff4g-9vx9-F2","document_citation":"Advisory description (GHSA-322m-ff4g-9vx9)"}],"source_stated_contributors":["A validation issue allowed some functionality, such as Webmentions, to be abused by an unauthenticated user to make limited HTTP requests to hosts in the Ghost server's internal network. A successful attack would not result in any response data being returned."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":["SEA-FM-002"],"consequences":["Internal network access","Cloud metadata or credential exposure"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-advisory-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"Public Vulnerability Advisory & Security Bulletin","filing_id":"GHSA-322m-ff4g-9vx9","reporting_entity":"CVE-2026-105647","regulatory_body":"Public Security Advisory Registry"},"safeguards":[{"safeguard_id":"SEA-GHSA-322m-ff4g-9vx9-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-GHSA-322m-ff4g-9vx9-SG1","label":"Restrict outbound requests","description":"Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","target_failure_mode":"SEA-FM-002","effectiveness_level":"PREVENTATIVE"}],"lessons":[{"title":"Design takeaway (CollectSEA inference)","statement":"The service fetched a URL chosen by the caller and could be steered at internal systems. Restrict outbound destinations and block internal address ranges.","applicability_note":"Machine-generated from the advisory wording; not stated by the source and not human-reviewed."}],"cve_references":["CVE-2026-105647"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CISA-2026-88779","title":"Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability","display_title":"Security issue reported in NetScaler","display_summary":"Citrix NetScaler ADC (formerly Citrix ADC) and Citrix NetScaler Gateway (formerly Citrix Gateway) contain an improper restriction of operations within the bounds of a memory buffer vulnerability that could allow for a…","display_reference":"CVE-2026-88779","display_source_type":"CISA advisory","incident_date":"2026-10-04","disclosure_date":"2026-10-04","source_type":"vendor_postmortem","source_url":"https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697174","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T16:55:27.515Z","source_hash":"content-fingerprint:fnv1a-65d05ac1","affected_system":{"organization":"Citrix","product":"NetScaler","system_type":"Enterprise Software Platform & Infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Enterprise Software"},"documented_facts":[{"id":"SEA-CISA-2026-88779-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Citrix NetScaler ADC (formerly Citrix ADC) and Citrix NetScaler Gateway (formerly Citrix Gateway) contain an improper restriction of operations within the bounds of a memory buffer vulnerability that could allow for a denial of service.","source_quote_or_pointer":"CISA BOD 22-01 Catalog (CVE-2026-88779)","fact_id":"SEA-CISA-2026-88779-F1","document_citation":"CISA BOD 22-01 Catalog (CVE-2026-88779)"},{"id":"SEA-CISA-2026-88779-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Mandatory remediation: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","source_quote_or_pointer":"Remediation Deadline: 2026-10-07","fact_id":"SEA-CISA-2026-88779-F2","document_citation":"Remediation Deadline: 2026-10-07"}],"source_stated_contributors":["Actively exploited in production systems pursuant to CISA Binding Operational Directive BOD 22-01","Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-004"],"consequences":["Actively exploited in the wild"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-cisa-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"CISA Known Exploited Vulnerabilities Directive","filing_id":"CVE-2026-88779","reporting_entity":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","regulatory_body":"U.S. Department of Homeland Security / CISA"},"safeguards":[{"safeguard_id":"SEA-CISA-2026-88779-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CISA-2026-88779-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-88779"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CISA-2026-102489","title":"Zammad GmbH Zammad Session Fixation Vulnerability","display_title":"Security issue reported in Zammad","display_summary":"Zammad GmbH Zammad contains a session fixation vulnerability that can lead to remote code execution as the zammad user. This vulnerability can be chained with CVE-2026-102490.","display_reference":"CVE-2026-102489","display_source_type":"CISA advisory","incident_date":"2026-10-02","disclosure_date":"2026-10-02","source_type":"vendor_postmortem","source_url":"https://zammad.com/en/product/releases/","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T16:55:27.515Z","source_hash":"content-fingerprint:fnv1a-e0d12587","affected_system":{"organization":"Zammad GmbH","product":"Zammad","system_type":"Enterprise Software Platform & Infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Enterprise Software"},"documented_facts":[{"id":"SEA-CISA-2026-102489-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Zammad GmbH Zammad contains a session fixation vulnerability that can lead to remote code execution as the zammad user. This vulnerability can be chained with CVE-2026-102490.","source_quote_or_pointer":"CISA BOD 22-01 Catalog (CVE-2026-102489)","fact_id":"SEA-CISA-2026-102489-F1","document_citation":"CISA BOD 22-01 Catalog (CVE-2026-102489)"},{"id":"SEA-CISA-2026-102489-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Mandatory remediation: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","source_quote_or_pointer":"Remediation Deadline: 2026-10-05","fact_id":"SEA-CISA-2026-102489-F2","document_citation":"Remediation Deadline: 2026-10-05"}],"source_stated_contributors":["Actively exploited in production systems pursuant to CISA Binding Operational Directive BOD 22-01","Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":["SEA-FM-004"],"consequences":["Actively exploited in the wild"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-cisa-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"CISA Known Exploited Vulnerabilities Directive","filing_id":"CVE-2026-102489","reporting_entity":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","regulatory_body":"U.S. Department of Homeland Security / CISA"},"safeguards":[{"safeguard_id":"SEA-CISA-2026-102489-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CISA-2026-102489-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-102489"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CISA-2026-88772","title":"Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability","display_title":"Security issue reported in NetScaler","display_summary":"Citrix NetScaler ADC and NetScaler Gateway contain an improper restriction of operations within the bounds of a memory buffer vulnerability that could allow for remote code execution or denial of service","display_reference":"CVE-2026-88772","display_source_type":"CISA advisory","incident_date":"2026-09-27","disclosure_date":"2026-09-27","source_type":"cve_advisory","source_url":"https://community.citrix.com/techzone-blogs/110_security-updates/netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve-2026-88771-through-cve-2026-88778","source_title":"Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T16:55:27.516Z","source_hash":"content-fingerprint:fnv1a-a9f3cf27","affected_system":{"organization":"Citrix","product":"NetScaler","system_type":"Enterprise Software Platform & Infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Enterprise Software"},"documented_facts":[{"id":"SEA-CISA-2026-88772-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Citrix NetScaler ADC and NetScaler Gateway contain an improper restriction of operations within the bounds of a memory buffer vulnerability that could allow for remote code execution or denial of service","source_quote_or_pointer":"CISA BOD 22-01 Catalog (CVE-2026-88772)","fact_id":"SEA-CISA-2026-88772-F1","document_citation":"CISA BOD 22-01 Catalog (CVE-2026-88772)"},{"id":"SEA-CISA-2026-88772-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Mandatory remediation: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","source_quote_or_pointer":"Remediation Deadline: 2026-09-30","fact_id":"SEA-CISA-2026-88772-F2","document_citation":"Remediation Deadline: 2026-09-30"}],"source_stated_contributors":["Actively exploited in production systems pursuant to CISA Binding Operational Directive BOD 22-01","Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-004"],"consequences":["Actively exploited in the wild"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-cisa-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"CISA Known Exploited Vulnerabilities Directive","filing_id":"CVE-2026-88772","reporting_entity":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","regulatory_body":"U.S. Department of Homeland Security / CISA"},"safeguards":[{"safeguard_id":"SEA-CISA-2026-88772-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CISA-2026-88772-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-88772"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CISA-2026-67279","title":"Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability","display_title":"Security issue reported in RouterOS","display_summary":"Mikrotik RouterOS contains an improper enforcement of behavioral workflow vulnerability that could allow an unauthenticated client to open a session channel and send an exec request.","display_reference":"CVE-2026-67279","display_source_type":"CISA advisory","incident_date":"2026-09-25","disclosure_date":"2026-09-25","source_type":"cve_advisory","source_url":"https://mikrotik.com/supportsec/september-2026-vulnerability/?utm_source=chatgpt.com","source_title":"Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T16:55:27.516Z","source_hash":"content-fingerprint:fnv1a-8c7e5df9","affected_system":{"organization":"MikroTik","product":"RouterOS","system_type":"Enterprise Software Platform & Infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Enterprise Software"},"documented_facts":[{"id":"SEA-CISA-2026-67279-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Mikrotik RouterOS contains an improper enforcement of behavioral workflow vulnerability that could allow an unauthenticated client to open a session channel and send an exec request. This vulnerability can be chained to achieve unauthenticated exploitation of CVE-2026-86060.","source_quote_or_pointer":"CISA BOD 22-01 Catalog (CVE-2026-67279)","fact_id":"SEA-CISA-2026-67279-F1","document_citation":"CISA BOD 22-01 Catalog (CVE-2026-67279)"},{"id":"SEA-CISA-2026-67279-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Mandatory remediation: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","source_quote_or_pointer":"Remediation Deadline: 2026-09-28","fact_id":"SEA-CISA-2026-67279-F2","document_citation":"Remediation Deadline: 2026-09-28"}],"source_stated_contributors":["Actively exploited in production systems pursuant to CISA Binding Operational Directive BOD 22-01","Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-004"],"consequences":["Actively exploited in the wild"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-cisa-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"CISA Known Exploited Vulnerabilities Directive","filing_id":"CVE-2026-67279","reporting_entity":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","regulatory_body":"U.S. Department of Homeland Security / CISA"},"safeguards":[{"safeguard_id":"SEA-CISA-2026-67279-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CISA-2026-67279-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-67279"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CISA-2026-87902","title":"WordPress Core Remote File Inclusion Vulnerability","display_title":"Security issue reported in Core","display_summary":"WordPress Core contains a remote file inclusion vulnerability which could allow an unauthenticated attacker to make page-template resolution include a chosen readable local .php file outside the active theme directories,…","display_reference":"CVE-2026-87902","display_source_type":"CISA advisory","incident_date":"2026-09-25","disclosure_date":"2026-09-25","source_type":"vendor_postmortem","source_url":"https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-7hp8-65ch-5whp","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T16:55:27.516Z","source_hash":"content-fingerprint:fnv1a-aa46f12e","affected_system":{"organization":"WordPress","product":"Core","system_type":"Enterprise Software Platform & Infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Enterprise Software"},"documented_facts":[{"id":"SEA-CISA-2026-87902-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"WordPress Core contains a remote file inclusion vulnerability which could allow an unauthenticated attacker to make page-template resolution include a chosen readable local `.php` file outside the active theme directories, leading to remote code execution.","source_quote_or_pointer":"CISA BOD 22-01 Catalog (CVE-2026-87902)","fact_id":"SEA-CISA-2026-87902-F1","document_citation":"CISA BOD 22-01 Catalog (CVE-2026-87902)"},{"id":"SEA-CISA-2026-87902-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Mandatory remediation: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","source_quote_or_pointer":"Remediation Deadline: 2026-09-28","fact_id":"SEA-CISA-2026-87902-F2","document_citation":"Remediation Deadline: 2026-09-28"}],"source_stated_contributors":["Actively exploited in production systems pursuant to CISA Binding Operational Directive BOD 22-01","Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-004"],"consequences":["Actively exploited in the wild"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-cisa-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"CISA Known Exploited Vulnerabilities Directive","filing_id":"CVE-2026-87902","reporting_entity":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","regulatory_body":"U.S. Department of Homeland Security / CISA"},"safeguards":[{"safeguard_id":"SEA-CISA-2026-87902-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CISA-2026-87902-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-87902"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CISA-2026-5430","title":"WSO2 Multiple Products Path Traversal Vulnerability","display_title":"Multiple Products issue could expose restricted files","display_summary":"WSO2 API Control Plane, API Manager, Traffic Manager & Universal Gateway contain a path traversal vulnerability that could allow for unrestricted file upload and lead to remote code execution.","display_reference":"CVE-2026-5430","display_source_type":"CISA advisory","incident_date":"2026-09-24","disclosure_date":"2026-09-24","source_type":"vendor_postmortem","source_url":"https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2026/WSO2-2026-5328/","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T16:55:27.517Z","source_hash":"content-fingerprint:fnv1a-440857fa","affected_system":{"organization":"WSO2","product":"Multiple Products","system_type":"Enterprise Software Platform & Infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Enterprise Software"},"documented_facts":[{"id":"SEA-CISA-2026-5430-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"WSO2 API Control Plane, API Manager, Traffic Manager & Universal Gateway contain a path traversal vulnerability that could allow for unrestricted file upload and lead to remote code execution. ","source_quote_or_pointer":"CISA BOD 22-01 Catalog (CVE-2026-5430)","fact_id":"SEA-CISA-2026-5430-F1","document_citation":"CISA BOD 22-01 Catalog (CVE-2026-5430)"},{"id":"SEA-CISA-2026-5430-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Mandatory remediation: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","source_quote_or_pointer":"Remediation Deadline: 2026-09-27","fact_id":"SEA-CISA-2026-5430-F2","document_citation":"Remediation Deadline: 2026-09-27"}],"source_stated_contributors":["Actively exploited in production systems pursuant to CISA Binding Operational Directive BOD 22-01","Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.uploaded_files"],"failure_mechanisms":["SEA-FM-004"],"consequences":["Actively exploited in the wild"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-cisa-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"CISA Known Exploited Vulnerabilities Directive","filing_id":"CVE-2026-5430","reporting_entity":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","regulatory_body":"U.S. Department of Homeland Security / CISA"},"safeguards":[{"safeguard_id":"SEA-CISA-2026-5430-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CISA-2026-5430-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-5430"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CISA-2026-94127","title":"F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability","display_title":"Security issue reported in BIG-IP APM","display_summary":"F5 BIG-IP APM contains a heap-based buffer overflow vulnerability when access policy and an OAuth profile are configured on a virtual server.","display_reference":"CVE-2026-94127","display_source_type":"CISA advisory","incident_date":"2026-09-22","disclosure_date":"2026-09-22","source_type":"vendor_postmortem","source_url":"https://my.f5.com/manage/s/article/K000162605","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T16:55:27.517Z","source_hash":"content-fingerprint:fnv1a-c6ecbdbb","affected_system":{"organization":"F5","product":"BIG-IP APM","system_type":"Enterprise Software Platform & Infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Enterprise Software"},"documented_facts":[{"id":"SEA-CISA-2026-94127-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"F5 BIG-IP APM contains a heap-based buffer overflow vulnerability when access policy and an OAuth profile are configured on a virtual server. This vulnerability could allow an unauthenticated attacker to perform remote code execution.","source_quote_or_pointer":"CISA BOD 22-01 Catalog (CVE-2026-94127)","fact_id":"SEA-CISA-2026-94127-F1","document_citation":"CISA BOD 22-01 Catalog (CVE-2026-94127)"},{"id":"SEA-CISA-2026-94127-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Mandatory remediation: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","source_quote_or_pointer":"Remediation Deadline: 2026-09-25","fact_id":"SEA-CISA-2026-94127-F2","document_citation":"Remediation Deadline: 2026-09-25"}],"source_stated_contributors":["Actively exploited in production systems pursuant to CISA Binding Operational Directive BOD 22-01","Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-004"],"consequences":["Actively exploited in the wild"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-cisa-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"CISA Known Exploited Vulnerabilities Directive","filing_id":"CVE-2026-94127","reporting_entity":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","regulatory_body":"U.S. Department of Homeland Security / CISA"},"safeguards":[{"safeguard_id":"SEA-CISA-2026-94127-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CISA-2026-94127-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-94127"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CISA-2026-93616","title":"Check Point Multiple Products Path Traversal Vulnerability","display_title":"Multiple Products issue could expose restricted files","display_summary":"Check Point Security Management Server, Multi-Domain Security Management Server, Log Server, Multi-Domain Log Server, and SmartEvent contain a path traversal vulnerability that allows an unauthenticated attacker to…","display_reference":"CVE-2026-93616","display_source_type":"CISA advisory","incident_date":"2026-09-22","disclosure_date":"2026-09-22","source_type":"vendor_postmortem","source_url":"https://support.checkpoint.com/results/sk/sk1000171/","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T16:55:27.517Z","source_hash":"content-fingerprint:fnv1a-90472841","affected_system":{"organization":"Check Point","product":"Multiple Products","system_type":"Enterprise Software Platform & Infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Enterprise Software"},"documented_facts":[{"id":"SEA-CISA-2026-93616-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Check Point Security Management Server, Multi-Domain Security Management Server, Log Server, Multi-Domain Log Server, and SmartEvent contain a path traversal vulnerability that allows an unauthenticated attacker to upload and execute arbitrary scripts.","source_quote_or_pointer":"CISA BOD 22-01 Catalog (CVE-2026-93616)","fact_id":"SEA-CISA-2026-93616-F1","document_citation":"CISA BOD 22-01 Catalog (CVE-2026-93616)"},{"id":"SEA-CISA-2026-93616-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Mandatory remediation: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","source_quote_or_pointer":"Remediation Deadline: 2026-09-25","fact_id":"SEA-CISA-2026-93616-F2","document_citation":"Remediation Deadline: 2026-09-25"}],"source_stated_contributors":["Actively exploited in production systems pursuant to CISA Binding Operational Directive BOD 22-01","Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.uploaded_files"],"failure_mechanisms":["SEA-FM-004"],"consequences":["Actively exploited in the wild"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-cisa-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"CISA Known Exploited Vulnerabilities Directive","filing_id":"CVE-2026-93616","reporting_entity":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","regulatory_body":"U.S. Department of Homeland Security / CISA"},"safeguards":[{"safeguard_id":"SEA-CISA-2026-93616-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CISA-2026-93616-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-93616"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CISA-2026-87886","title":"Acronis Backup Incorrect Default Permissions Vulnerability","display_title":"Security issue reported in Backup","display_summary":"Acronis Backup plugin for cPanel & WHM and extension for Plesk contains an incorrect default permissions vulnerability that could allow for privilege escalation.","display_reference":"CVE-2026-87886","display_source_type":"CISA advisory","incident_date":"2026-09-16","disclosure_date":"2026-09-16","source_type":"cve_advisory","source_url":"https://security-advisory.acronis.com/advisories/SEC-10986","source_title":"Acronis Backup Incorrect Default Permissions Vulnerability","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T16:55:27.517Z","source_hash":"content-fingerprint:fnv1a-743133ca","affected_system":{"organization":"Acronis","product":"Backup","system_type":"Enterprise Software Platform & Infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Enterprise Software"},"documented_facts":[{"id":"SEA-CISA-2026-87886-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Acronis Backup plugin for cPanel & WHM and extension for Plesk contains an incorrect default permissions vulnerability that could allow for privilege escalation.","source_quote_or_pointer":"CISA BOD 22-01 Catalog (CVE-2026-87886)","fact_id":"SEA-CISA-2026-87886-F1","document_citation":"CISA BOD 22-01 Catalog (CVE-2026-87886)"},{"id":"SEA-CISA-2026-87886-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Mandatory remediation: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","source_quote_or_pointer":"Remediation Deadline: 2026-09-19","fact_id":"SEA-CISA-2026-87886-F2","document_citation":"Remediation Deadline: 2026-09-19"}],"source_stated_contributors":["Actively exploited in production systems pursuant to CISA Binding Operational Directive BOD 22-01","Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-004"],"consequences":["Actively exploited in the wild"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-cisa-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"CISA Known Exploited Vulnerabilities Directive","filing_id":"CVE-2026-87886","reporting_entity":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","regulatory_body":"U.S. Department of Homeland Security / CISA"},"safeguards":[{"safeguard_id":"SEA-CISA-2026-87886-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CISA-2026-87886-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-87886"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CISA-2026-76461","title":"Cisco Secure Email Gateway SQL Injection Vulnerability","display_title":"Secure Email Gateway issue could expose or alter stored data","display_summary":"Cisco AsyncOS software for Cisco Secure Email Gateway (SEG) contains a SQL injection vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying…","display_reference":"CVE-2026-76461","display_source_type":"CISA advisory","incident_date":"2026-09-14","disclosure_date":"2026-09-14","source_type":"cve_advisory","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-inj-2bLVGmhX","source_title":"Cisco Secure Email Gateway SQL Injection Vulnerability","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T16:55:27.518Z","source_hash":"content-fingerprint:fnv1a-b8bee9f0","affected_system":{"organization":"Cisco","product":"Secure Email Gateway","system_type":"Enterprise Software Platform & Infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Enterprise Software"},"documented_facts":[{"id":"SEA-CISA-2026-76461-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Cisco AsyncOS software for Cisco Secure Email Gateway (SEG) contains a SQL injection vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system.","source_quote_or_pointer":"CISA BOD 22-01 Catalog (CVE-2026-76461)","fact_id":"SEA-CISA-2026-76461-F1","document_citation":"CISA BOD 22-01 Catalog (CVE-2026-76461)"},{"id":"SEA-CISA-2026-76461-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Mandatory remediation: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","source_quote_or_pointer":"Remediation Deadline: 2026-09-17","fact_id":"SEA-CISA-2026-76461-F2","document_citation":"Remediation Deadline: 2026-09-17"}],"source_stated_contributors":["Actively exploited in production systems pursuant to CISA Binding Operational Directive BOD 22-01","Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action"],"failure_mechanisms":["SEA-FM-004"],"consequences":["Actively exploited in the wild"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-cisa-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"CISA Known Exploited Vulnerabilities Directive","filing_id":"CVE-2026-76461","reporting_entity":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","regulatory_body":"U.S. Department of Homeland Security / CISA"},"safeguards":[{"safeguard_id":"SEA-CISA-2026-76461-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CISA-2026-76461-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-76461"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CISA-2026-84869","title":"ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability","display_title":"Security issue reported in ScreenConnect","display_summary":"ConnectWise ScreenConnect contains both an improper privilege management and missing authorization vulnerability that may allow an attacker to transfer and execute files through an active remote session without…","display_reference":"CVE-2026-84869","display_source_type":"CISA advisory","incident_date":"2026-09-11","disclosure_date":"2026-09-11","source_type":"vendor_postmortem","source_url":"https://www.connectwise.com/company/trust/security-bulletins/2026-09-08-screenconnect-bulletin","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T16:55:27.518Z","source_hash":"content-fingerprint:fnv1a-907540af","affected_system":{"organization":"ConnectWise","product":"ScreenConnect","system_type":"Enterprise Software Platform & Infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Enterprise Software"},"documented_facts":[{"id":"SEA-CISA-2026-84869-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"ConnectWise ScreenConnect contains both an improper privilege management and missing authorization vulnerability that may allow an attacker to transfer and execute files through an active remote session without authorization or host confirmation.","source_quote_or_pointer":"CISA BOD 22-01 Catalog (CVE-2026-84869)","fact_id":"SEA-CISA-2026-84869-F1","document_citation":"CISA BOD 22-01 Catalog (CVE-2026-84869)"},{"id":"SEA-CISA-2026-84869-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Mandatory remediation: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","source_quote_or_pointer":"Remediation Deadline: 2026-09-14","fact_id":"SEA-CISA-2026-84869-F2","document_citation":"Remediation Deadline: 2026-09-14"}],"source_stated_contributors":["Actively exploited in production systems pursuant to CISA Binding Operational Directive BOD 22-01","Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-004"],"consequences":["Actively exploited in the wild"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-cisa-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"CISA Known Exploited Vulnerabilities Directive","filing_id":"CVE-2026-84869","reporting_entity":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","regulatory_body":"U.S. Department of Homeland Security / CISA"},"safeguards":[{"safeguard_id":"SEA-CISA-2026-84869-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CISA-2026-84869-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-84869"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CISA-2026-85706","title":"GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability","display_title":"Community Edition and Enterprise Edition issue could expose restricted files","display_summary":"GitLab Community Edition and Enterprise Edition contains a path traversal vulnerability that allows an unauthenticated user to read arbitrary files due to an improper path confinement and missing authentication…","display_reference":"CVE-2026-85706","display_source_type":"CISA advisory","incident_date":"2026-09-11","disclosure_date":"2026-09-11","source_type":"vendor_postmortem","source_url":"https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-3-2-released/","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T16:55:27.518Z","source_hash":"content-fingerprint:fnv1a-8b703e0","affected_system":{"organization":"GitLab","product":"Community Edition and Enterprise Edition","system_type":"Enterprise Software Platform & Infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Enterprise Software"},"documented_facts":[{"id":"SEA-CISA-2026-85706-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"GitLab Community Edition and Enterprise Edition contains a path traversal vulnerability that allows an unauthenticated user to read arbitrary files due to an improper path confinement and missing authentication enforcement in the repository commits API.","source_quote_or_pointer":"CISA BOD 22-01 Catalog (CVE-2026-85706)","fact_id":"SEA-CISA-2026-85706-F1","document_citation":"CISA BOD 22-01 Catalog (CVE-2026-85706)"},{"id":"SEA-CISA-2026-85706-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Mandatory remediation: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","source_quote_or_pointer":"Remediation Deadline: 2026-09-14","fact_id":"SEA-CISA-2026-85706-F2","document_citation":"Remediation Deadline: 2026-09-14"}],"source_stated_contributors":["Actively exploited in production systems pursuant to CISA Binding Operational Directive BOD 22-01","Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":["SEA-FM-004"],"consequences":["Actively exploited in the wild"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-cisa-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"CISA Known Exploited Vulnerabilities Directive","filing_id":"CVE-2026-85706","reporting_entity":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","regulatory_body":"U.S. Department of Homeland Security / CISA"},"safeguards":[{"safeguard_id":"SEA-CISA-2026-85706-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CISA-2026-85706-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-85706"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CISA-2026-67277","title":"MikroTik RouterOS Missing Authentication for Critical Function Vulnerability","display_title":"Security issue reported in RouterOS","display_summary":"MikroTik RouterOS contains a missing authentication for critical function vulnerability which allows kernel memory disclosure and denial of service in the btest service.","display_reference":"CVE-2026-67277","display_source_type":"CISA advisory","incident_date":"2026-09-10","disclosure_date":"2026-09-10","source_type":"cve_advisory","source_url":"https://mikrotik.com/supportsec/september-2026-vulnerability/","source_title":"MikroTik RouterOS Missing Authentication for Critical Function Vulnerability","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T16:55:27.518Z","source_hash":"content-fingerprint:fnv1a-82a6aa5e","affected_system":{"organization":"MikroTik","product":"RouterOS","system_type":"Enterprise Software Platform & Infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Enterprise Software"},"documented_facts":[{"id":"SEA-CISA-2026-67277-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"MikroTik RouterOS contains a missing authentication for critical function vulnerability which allows kernel memory disclosure and denial of service in the btest service.","source_quote_or_pointer":"CISA BOD 22-01 Catalog (CVE-2026-67277)","fact_id":"SEA-CISA-2026-67277-F1","document_citation":"CISA BOD 22-01 Catalog (CVE-2026-67277)"},{"id":"SEA-CISA-2026-67277-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Mandatory remediation: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","source_quote_or_pointer":"Remediation Deadline: 2026-09-13","fact_id":"SEA-CISA-2026-67277-F2","document_citation":"Remediation Deadline: 2026-09-13"}],"source_stated_contributors":["Actively exploited in production systems pursuant to CISA Binding Operational Directive BOD 22-01","Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-004"],"consequences":["Actively exploited in the wild"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-cisa-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"CISA Known Exploited Vulnerabilities Directive","filing_id":"CVE-2026-67277","reporting_entity":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","regulatory_body":"U.S. Department of Homeland Security / CISA"},"safeguards":[{"safeguard_id":"SEA-CISA-2026-67277-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CISA-2026-67277-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-67277"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CISA-2026-19490","title":"Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability","display_title":"NetScaler issue could allow unauthorized access","display_summary":"Citrix NetScaler ADC and NetScaler Gateway contain an authentication-bypass vulnerability involving an alternate path or channel.","display_reference":"CVE-2026-19490","display_source_type":"CISA advisory","incident_date":"2026-09-09","disclosure_date":"2026-09-09","source_type":"vendor_postmortem","source_url":"https://support.citrix.com/external/article/CTX696939/netscaler-adc-and-netscaler-gateway-secu.html","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T16:55:27.519Z","source_hash":"content-fingerprint:fnv1a-e98d0e33","affected_system":{"organization":"Citrix","product":"NetScaler","system_type":"Enterprise Software Platform & Infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Enterprise Software"},"documented_facts":[{"id":"SEA-CISA-2026-19490-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Citrix NetScaler ADC and NetScaler Gateway contain an authentication-bypass vulnerability involving an alternate path or channel. When the NetScaler appliance is configured as an AAA virtual server or as a Gateway (SSL VPN, ICA Proxy, CVPN, or RDP Proxy), an unauthenticated remote threat actor may be able to bypass authentication.","source_quote_or_pointer":"CISA BOD 22-01 Catalog (CVE-2026-19490)","fact_id":"SEA-CISA-2026-19490-F1","document_citation":"CISA BOD 22-01 Catalog (CVE-2026-19490)"},{"id":"SEA-CISA-2026-19490-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Mandatory remediation: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","source_quote_or_pointer":"Remediation Deadline: 2026-09-12","fact_id":"SEA-CISA-2026-19490-F2","document_citation":"Remediation Deadline: 2026-09-12"}],"source_stated_contributors":["Actively exploited in production systems pursuant to CISA Binding Operational Directive BOD 22-01","Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-004"],"consequences":["Actively exploited in the wild"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-cisa-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"CISA Known Exploited Vulnerabilities Directive","filing_id":"CVE-2026-19490","reporting_entity":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","regulatory_body":"U.S. Department of Homeland Security / CISA"},"safeguards":[{"safeguard_id":"SEA-CISA-2026-19490-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CISA-2026-19490-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-19490"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CISA-2026-59822","title":"BerriAI LiteLLM Improper Authentication Vulnerability","display_title":"Security issue reported in LiteLLM","display_summary":"BerriAI LiteLLM contains an improper authentication vulnerability in the MCP Streamable HTTP endpoint that could allow an unauthenticated attacker to establish an authenticated MCP session using an arbitrary Bearer…","display_reference":"CVE-2026-59822","display_source_type":"CISA advisory","incident_date":"2026-09-02","disclosure_date":"2026-09-02","source_type":"vendor_postmortem","source_url":"https://github.com/BerriAI/litellm/security/advisories/GHSA-7488-6r32-c95q","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:06.369Z","source_hash":"content-fingerprint:fnv1a-45efdef8","affected_system":{"organization":"BerriAI","product":"LiteLLM","system_type":"Enterprise Software Platform & Infrastructure","is_ai_system":true,"is_agentic":true,"primary_language":"Enterprise Software"},"documented_facts":[{"id":"SEA-CISA-2026-59822-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"BerriAI LiteLLM contains an improper authentication vulnerability in the MCP Streamable HTTP endpoint that could allow an unauthenticated attacker to establish an authenticated MCP session using an arbitrary Bearer token.","source_quote_or_pointer":"CISA BOD 22-01 Catalog (CVE-2026-59822)","fact_id":"SEA-CISA-2026-59822-F1","document_citation":"CISA BOD 22-01 Catalog (CVE-2026-59822)"},{"id":"SEA-CISA-2026-59822-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Mandatory remediation: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","source_quote_or_pointer":"Remediation Deadline: 2026-09-16","fact_id":"SEA-CISA-2026-59822-F2","document_citation":"Remediation Deadline: 2026-09-16"}],"source_stated_contributors":["Actively exploited in production systems pursuant to CISA Binding Operational Directive BOD 22-01","Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.credentials_secrets","arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-004"],"consequences":["Actively exploited in the wild"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-cisa-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"CISA Known Exploited Vulnerabilities Directive","filing_id":"CVE-2026-59822","reporting_entity":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","regulatory_body":"U.S. Department of Homeland Security / CISA"},"safeguards":[{"safeguard_id":"SEA-CISA-2026-59822-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CISA-2026-59822-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-59822"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CISA-2026-9586","title":"Sangoma Switchvox SQL Injection Vulnerability","display_title":"Switchvox issue could expose or alter stored data","display_summary":"Sangoma Switchvox contains a SQL injection vulnerability which allows an unauthenticated remote attacker to execute arbitrary SQL statements against the backend PostgreSQL database using a single crafted request,…","display_reference":"CVE-2026-9586","display_source_type":"CISA advisory","incident_date":"2026-09-02","disclosure_date":"2026-09-02","source_type":"vendor_postmortem","source_url":"https://sangomakb.atlassian.net/wiki/spaces/Switchvox/pages/1802371073/Switchvox+-+Release+Notes+Version+8.4.0.2+July+14+2026","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:06.372Z","source_hash":"content-fingerprint:fnv1a-391d9264","affected_system":{"organization":"Sangoma","product":"Switchvox","system_type":"Enterprise Software Platform & Infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Enterprise Software"},"documented_facts":[{"id":"SEA-CISA-2026-9586-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Sangoma Switchvox contains a SQL injection vulnerability which allows an unauthenticated remote attacker to execute arbitrary SQL statements against the backend PostgreSQL database using a single crafted request, including database operations and remote code execution.","source_quote_or_pointer":"CISA BOD 22-01 Catalog (CVE-2026-9586)","fact_id":"SEA-CISA-2026-9586-F1","document_citation":"CISA BOD 22-01 Catalog (CVE-2026-9586)"},{"id":"SEA-CISA-2026-9586-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Mandatory remediation: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","source_quote_or_pointer":"Remediation Deadline: 2026-09-05","fact_id":"SEA-CISA-2026-9586-F2","document_citation":"Remediation Deadline: 2026-09-05"}],"source_stated_contributors":["Actively exploited in production systems pursuant to CISA Binding Operational Directive BOD 22-01","Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action"],"failure_mechanisms":["SEA-FM-004"],"consequences":["Actively exploited in the wild"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-cisa-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"CISA Known Exploited Vulnerabilities Directive","filing_id":"CVE-2026-9586","reporting_entity":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","regulatory_body":"U.S. Department of Homeland Security / CISA"},"safeguards":[{"safeguard_id":"SEA-CISA-2026-9586-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CISA-2026-9586-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-9586"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CISA-2026-83548","title":"SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability","display_title":"SMA1000 Appliances issue could reach internal services","display_summary":"SonicWall SMA1000 Appliances contains a server-side request forgery vulnerability that could allow a remote unauthenticated attacker to gain unauthorized access to sensitive functionality and perform unauthorized…","display_reference":"CVE-2026-83548","display_source_type":"CISA advisory","incident_date":"2026-09-02","disclosure_date":"2026-09-02","source_type":"vendor_postmortem","source_url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0016","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:06.373Z","source_hash":"content-fingerprint:fnv1a-39dd74e8","affected_system":{"organization":"SonicWall","product":"SMA1000 Appliances","system_type":"Enterprise Software Platform & Infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Enterprise Software"},"documented_facts":[{"id":"SEA-CISA-2026-83548-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"SonicWall SMA1000 Appliances contains a server-side request forgery vulnerability that could allow a remote unauthenticated attacker to gain unauthorized access to sensitive functionality and perform unauthorized operations.","source_quote_or_pointer":"CISA BOD 22-01 Catalog (CVE-2026-83548)","fact_id":"SEA-CISA-2026-83548-F1","document_citation":"CISA BOD 22-01 Catalog (CVE-2026-83548)"},{"id":"SEA-CISA-2026-83548-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Mandatory remediation: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","source_quote_or_pointer":"Remediation Deadline: 2026-09-05","fact_id":"SEA-CISA-2026-83548-F2","document_citation":"Remediation Deadline: 2026-09-05"}],"source_stated_contributors":["Actively exploited in production systems pursuant to CISA Binding Operational Directive BOD 22-01","Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-004"],"consequences":["Actively exploited in the wild"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-cisa-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"CISA Known Exploited Vulnerabilities Directive","filing_id":"CVE-2026-83548","reporting_entity":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","regulatory_body":"U.S. Department of Homeland Security / CISA"},"safeguards":[{"safeguard_id":"SEA-CISA-2026-83548-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CISA-2026-83548-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-83548"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CISA-2021-23758","title":"Ajax.NET Professional Deserialization of Untrusted Data Vulnerability","display_title":"Software component issue could make the application process unsafe input","display_summary":"Ajax.NET Professional (AjaxPro) contains a deserialization of untrusted data vulnerability that could allow for remote code execution via arbitrary .NET classes.","display_reference":"CVE-2021-23758","display_source_type":"CISA advisory","incident_date":"2026-08-26","disclosure_date":"2026-08-26","source_type":"vendor_postmortem","source_url":"https://github.com/michaelschwarz/Ajax.NET-Professional/commit/b0e63be5f0bb20dfce507cb8a1a9568f6e73de57","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:06.374Z","source_hash":"content-fingerprint:fnv1a-892f7ef6","affected_system":{"organization":"Ajax.NET Professional","product":"Software component","system_type":"Enterprise Software Platform & Infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Enterprise Software"},"documented_facts":[{"id":"SEA-CISA-2021-23758-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Ajax.NET Professional (AjaxPro) contains a deserialization of untrusted data vulnerability that could allow for remote code execution via arbitrary .NET classes. The impacted product(s) could be end-of-life (EoL) and/or end-of-service (EoS). Users are advised to discontinue use and/or transition to a supported version.","source_quote_or_pointer":"CISA BOD 22-01 Catalog (CVE-2021-23758)","fact_id":"SEA-CISA-2021-23758-F1","document_citation":"CISA BOD 22-01 Catalog (CVE-2021-23758)"},{"id":"SEA-CISA-2021-23758-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Mandatory remediation: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","source_quote_or_pointer":"Remediation Deadline: 2026-09-09","fact_id":"SEA-CISA-2021-23758-F2","document_citation":"Remediation Deadline: 2026-09-09"}],"source_stated_contributors":["Actively exploited in production systems pursuant to CISA Binding Operational Directive BOD 22-01","Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":["SEA-FM-004"],"consequences":["Actively exploited in the wild"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-cisa-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"CISA Known Exploited Vulnerabilities Directive","filing_id":"CVE-2021-23758","reporting_entity":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","regulatory_body":"U.S. Department of Homeland Security / CISA"},"safeguards":[{"safeguard_id":"SEA-CISA-2021-23758-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CISA-2021-23758-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2021-23758"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CISA-2015-3246","title":"Red Hat Libuser Race Condition Vulnerability","display_title":"Libuser issue could cause actions to run with inconsistent state","display_summary":"Red Hat libuser contains a race condition vulnerability that allows authenticated local users to corrupt the /etc/passwd file to cause a denial of service or privilege escalation.","display_reference":"CVE-2015-3246","display_source_type":"CISA advisory","incident_date":"2026-08-26","disclosure_date":"2026-08-26","source_type":"vendor_postmortem","source_url":"https://access.redhat.com/articles/1537873","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:06.374Z","source_hash":"content-fingerprint:fnv1a-eb7cf978","affected_system":{"organization":"Red Hat","product":"Libuser","system_type":"Enterprise Software Platform & Infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Enterprise Software"},"documented_facts":[{"id":"SEA-CISA-2015-3246-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Red Hat libuser contains a race condition vulnerability that allows authenticated local users to corrupt the /etc/passwd file to cause a denial of service or privilege escalation. ","source_quote_or_pointer":"CISA BOD 22-01 Catalog (CVE-2015-3246)","fact_id":"SEA-CISA-2015-3246-F1","document_citation":"CISA BOD 22-01 Catalog (CVE-2015-3246)"},{"id":"SEA-CISA-2015-3246-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Mandatory remediation: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","source_quote_or_pointer":"Remediation Deadline: 2026-09-09","fact_id":"SEA-CISA-2015-3246-F2","document_citation":"Remediation Deadline: 2026-09-09"}],"source_stated_contributors":["Actively exploited in production systems pursuant to CISA Binding Operational Directive BOD 22-01","Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":["SEA-FM-004"],"consequences":["Actively exploited in the wild"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-cisa-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"CISA Known Exploited Vulnerabilities Directive","filing_id":"CVE-2015-3246","reporting_entity":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","regulatory_body":"U.S. Department of Homeland Security / CISA"},"safeguards":[{"safeguard_id":"SEA-CISA-2015-3246-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CISA-2015-3246-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2015-3246"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CISA-2015-5287","title":"Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability","display_title":"Automatic Bug Reporting Tool issue could grant elevated privileges","display_summary":"Red Hat Automatic Bug Reporting Tool (ABRT) contains a privilege escalation vulnerability that could allow local users with certain permissions to gain privileges via a symlink attack on a file with a predictable name.","display_reference":"CVE-2015-5287","display_source_type":"CISA advisory","incident_date":"2026-08-26","disclosure_date":"2026-08-26","source_type":"vendor_postmortem","source_url":"https://github.com/abrt/abrt/commit/3c1b60cfa62d39e5fff5a53a5bc53dae189e740e","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:06.375Z","source_hash":"content-fingerprint:fnv1a-9db2ebba","affected_system":{"organization":"Red Hat","product":"Automatic Bug Reporting Tool","system_type":"Enterprise Software Platform & Infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Enterprise Software"},"documented_facts":[{"id":"SEA-CISA-2015-5287-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Red Hat Automatic Bug Reporting Tool (ABRT) contains a privilege escalation vulnerability that could allow local users with certain permissions to gain privileges via a symlink attack on a file with a predictable name. The impacted product(s) could be end-of-life (EoL) and/or end-of-service (EoS). Users are advised to discontinue use and/or transition to a supported version.","source_quote_or_pointer":"CISA BOD 22-01 Catalog (CVE-2015-5287)","fact_id":"SEA-CISA-2015-5287-F1","document_citation":"CISA BOD 22-01 Catalog (CVE-2015-5287)"},{"id":"SEA-CISA-2015-5287-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Mandatory remediation: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","source_quote_or_pointer":"Remediation Deadline: 2026-09-09","fact_id":"SEA-CISA-2015-5287-F2","document_citation":"Remediation Deadline: 2026-09-09"}],"source_stated_contributors":["Actively exploited in production systems pursuant to CISA Binding Operational Directive BOD 22-01","Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":["SEA-FM-004"],"consequences":["Actively exploited in the wild"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-cisa-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"CISA Known Exploited Vulnerabilities Directive","filing_id":"CVE-2015-5287","reporting_entity":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","regulatory_body":"U.S. Department of Homeland Security / CISA"},"safeguards":[{"safeguard_id":"SEA-CISA-2015-5287-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CISA-2015-5287-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2015-5287"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CISA-2022-0995","title":"Linux Kernel Out-of-Bounds Write Vulnerability","display_title":"Security issue reported in Kernel","display_summary":"Linux Kernel contains an out-of-bounds memory write vulnerability which could allow a local user to gain privileged access or cause a denial of service on the system.","display_reference":"CVE-2022-0995","display_source_type":"CISA advisory","incident_date":"2026-08-26","disclosure_date":"2026-08-26","source_type":"vendor_postmortem","source_url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=93ce93587d36493f2f86921fa79921b3cba63fbb","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:06.375Z","source_hash":"content-fingerprint:fnv1a-d23f66d","affected_system":{"organization":"Linux","product":"Kernel","system_type":"Enterprise Software Platform & Infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Enterprise Software"},"documented_facts":[{"id":"SEA-CISA-2022-0995-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Linux Kernel contains an out-of-bounds memory write vulnerability which could allow a local user to gain privileged access or cause a denial of service on the system.","source_quote_or_pointer":"CISA BOD 22-01 Catalog (CVE-2022-0995)","fact_id":"SEA-CISA-2022-0995-F1","document_citation":"CISA BOD 22-01 Catalog (CVE-2022-0995)"},{"id":"SEA-CISA-2022-0995-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Mandatory remediation: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","source_quote_or_pointer":"Remediation Deadline: 2026-08-29","fact_id":"SEA-CISA-2022-0995-F2","document_citation":"Remediation Deadline: 2026-08-29"}],"source_stated_contributors":["Actively exploited in production systems pursuant to CISA Binding Operational Directive BOD 22-01","Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.write_action","data.pii"],"failure_mechanisms":["SEA-FM-004"],"consequences":["Actively exploited in the wild"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-cisa-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"CISA Known Exploited Vulnerabilities Directive","filing_id":"CVE-2022-0995","reporting_entity":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","regulatory_body":"U.S. Department of Homeland Security / CISA"},"safeguards":[{"safeguard_id":"SEA-CISA-2022-0995-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CISA-2022-0995-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2022-0995"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CISA-2026-8452","title":"Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability","display_title":"Security issue reported in NetScaler ADC and NetScaler Gateway","display_summary":"Citrix NetScaler ADC and NetScaler Gateway contain an improper restriction of operations within the bounds of a memory buffer vulnerability which could lead to denial of service.","display_reference":"CVE-2026-8452","display_source_type":"CISA advisory","incident_date":"2026-08-26","disclosure_date":"2026-08-26","source_type":"vendor_postmortem","source_url":"https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696604","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:06.376Z","source_hash":"content-fingerprint:fnv1a-8e7d92f4","affected_system":{"organization":"Citrix","product":"NetScaler ADC and NetScaler Gateway","system_type":"Enterprise Software Platform & Infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Enterprise Software"},"documented_facts":[{"id":"SEA-CISA-2026-8452-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Citrix NetScaler ADC and NetScaler Gateway contain an improper restriction of operations within the bounds of a memory buffer vulnerability which could lead to denial of service. ","source_quote_or_pointer":"CISA BOD 22-01 Catalog (CVE-2026-8452)","fact_id":"SEA-CISA-2026-8452-F1","document_citation":"CISA BOD 22-01 Catalog (CVE-2026-8452)"},{"id":"SEA-CISA-2026-8452-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Mandatory remediation: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","source_quote_or_pointer":"Remediation Deadline: 2026-08-29","fact_id":"SEA-CISA-2026-8452-F2","document_citation":"Remediation Deadline: 2026-08-29"}],"source_stated_contributors":["Actively exploited in production systems pursuant to CISA Binding Operational Directive BOD 22-01","Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-004"],"consequences":["Actively exploited in the wild"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-cisa-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"CISA Known Exploited Vulnerabilities Directive","filing_id":"CVE-2026-8452","reporting_entity":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","regulatory_body":"U.S. Department of Homeland Security / CISA"},"safeguards":[{"safeguard_id":"SEA-CISA-2026-8452-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CISA-2026-8452-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-8452"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CISA-2019-1068","title":"Microsoft SQL Server Remote Code Execution Vulnerability","display_title":"SQL Server issue could allow unintended commands to run","display_summary":"Microsoft SQL Server contains a remote code execution vulnerability that could allow an attacker to execute code in the context of the SQL Server Database Engine service account.","display_reference":"CVE-2019-1068","display_source_type":"CISA advisory","incident_date":"2026-08-26","disclosure_date":"2026-08-26","source_type":"cve_advisory","source_url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1068","source_title":"Microsoft SQL Server Remote Code Execution Vulnerability","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:06.377Z","source_hash":"content-fingerprint:fnv1a-8528836","affected_system":{"organization":"Microsoft","product":"SQL Server","system_type":"Enterprise Software Platform & Infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Enterprise Software"},"documented_facts":[{"id":"SEA-CISA-2019-1068-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Microsoft SQL Server contains a remote code execution vulnerability that could allow an attacker to execute code in the context of the SQL Server Database Engine service account.","source_quote_or_pointer":"CISA BOD 22-01 Catalog (CVE-2019-1068)","fact_id":"SEA-CISA-2019-1068-F1","document_citation":"CISA BOD 22-01 Catalog (CVE-2019-1068)"},{"id":"SEA-CISA-2019-1068-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Mandatory remediation: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","source_quote_or_pointer":"Remediation Deadline: 2026-08-29","fact_id":"SEA-CISA-2019-1068-F2","document_citation":"Remediation Deadline: 2026-08-29"}],"source_stated_contributors":["Actively exploited in production systems pursuant to CISA Binding Operational Directive BOD 22-01","Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.code_execution","auth.write_action","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-004"],"consequences":["Actively exploited in the wild"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-cisa-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"CISA Known Exploited Vulnerabilities Directive","filing_id":"CVE-2019-1068","reporting_entity":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","regulatory_body":"U.S. Department of Homeland Security / CISA"},"safeguards":[{"safeguard_id":"SEA-CISA-2019-1068-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CISA-2019-1068-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2019-1068"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CISA-2026-60004","title":"Gitea Code Injection Vulnerability","display_title":"Security issue reported in Gitea","display_summary":"Gitea contains a code injection vulnerability that allows an attacker with repository write access to send a malicious patch to the diffpatch API endpoint to plant an executable Git hook and run shell commands as the…","display_reference":"CVE-2026-60004","display_source_type":"CISA advisory","incident_date":"2026-08-25","disclosure_date":"2026-08-25","source_type":"vendor_postmortem","source_url":"https://github.com/go-gitea/gitea/security/advisories/GHSA-rcr6-4jqh-j84m","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:06.377Z","source_hash":"content-fingerprint:fnv1a-121fb917","affected_system":{"organization":"Gitea","product":"Gitea","system_type":"Enterprise Software Platform & Infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Enterprise Software"},"documented_facts":[{"id":"SEA-CISA-2026-60004-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Gitea contains a code injection vulnerability that allows an attacker with repository write access to send a malicious patch to the diffpatch API endpoint to plant an executable Git hook and run shell commands as the Gitea service account.","source_quote_or_pointer":"CISA BOD 22-01 Catalog (CVE-2026-60004)","fact_id":"SEA-CISA-2026-60004-F1","document_citation":"CISA BOD 22-01 Catalog (CVE-2026-60004)"},{"id":"SEA-CISA-2026-60004-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Mandatory remediation: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","source_quote_or_pointer":"Remediation Deadline: 2026-08-28","fact_id":"SEA-CISA-2026-60004-F2","document_citation":"Remediation Deadline: 2026-08-28"}],"source_stated_contributors":["Actively exploited in production systems pursuant to CISA Binding Operational Directive BOD 22-01","Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-004"],"consequences":["Actively exploited in the wild"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-cisa-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"CISA Known Exploited Vulnerabilities Directive","filing_id":"CVE-2026-60004","reporting_entity":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","regulatory_body":"U.S. Department of Homeland Security / CISA"},"safeguards":[{"safeguard_id":"SEA-CISA-2026-60004-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CISA-2026-60004-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-60004"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CISA-2026-21962","title":"Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability","display_title":"HTTP Server and Oracle Weblogic Server Proxy Plug-in issue could allow unauthorized access","display_summary":"Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in contain an improper access control vulnerability that can result in unauthorized creation, deletion or modification access to critical data as well as…","display_reference":"CVE-2026-21962","display_source_type":"CISA advisory","incident_date":"2026-08-24","disclosure_date":"2026-08-24","source_type":"vendor_postmortem","source_url":"https://www.oracle.com/security-alerts/cpujan2026.html","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:06.378Z","source_hash":"content-fingerprint:fnv1a-8e7c9590","affected_system":{"organization":"Oracle","product":"HTTP Server and Oracle Weblogic Server Proxy Plug-in","system_type":"Enterprise Software Platform & Infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Enterprise Software"},"documented_facts":[{"id":"SEA-CISA-2026-21962-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in contain an improper access control vulnerability that can result in unauthorized creation, deletion or modification access to critical data as well as unauthorized access to critical data or complete access to all Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in accessible data.","source_quote_or_pointer":"CISA BOD 22-01 Catalog (CVE-2026-21962)","fact_id":"SEA-CISA-2026-21962-F1","document_citation":"CISA BOD 22-01 Catalog (CVE-2026-21962)"},{"id":"SEA-CISA-2026-21962-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Mandatory remediation: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","source_quote_or_pointer":"Remediation Deadline: 2026-08-27","fact_id":"SEA-CISA-2026-21962-F2","document_citation":"Remediation Deadline: 2026-08-27"}],"source_stated_contributors":["Actively exploited in production systems pursuant to CISA Binding Operational Directive BOD 22-01","Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.privileged_action"],"failure_mechanisms":["SEA-FM-005"],"consequences":["Actively exploited in the wild"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-cisa-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"CISA Known Exploited Vulnerabilities Directive","filing_id":"CVE-2026-21962","reporting_entity":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","regulatory_body":"U.S. Department of Homeland Security / CISA"},"safeguards":[{"safeguard_id":"SEA-CISA-2026-21962-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","target_failure_mode":"SEA-FM-005","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CISA-2026-21962-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","target_failure_mode":"SEA-FM-005","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-21962"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CISA-2026-72530","title":"TrueConf Server Code Injection Vulnerability","display_title":"Security issue reported in Server","display_summary":"TrueConf Server contains a code injection vulnerability that could allow an unauthorized remote attacker with network access via port 4307/TCP to use a specially crafted script to break out of the isolated environment…","display_reference":"CVE-2026-72530","display_source_type":"CISA advisory","incident_date":"2026-08-20","disclosure_date":"2026-08-20","source_type":"vendor_postmortem","source_url":"https://trueconf.com/blog/news/security-fixes-updates-and-advisories","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:06.379Z","source_hash":"content-fingerprint:fnv1a-7946a616","affected_system":{"organization":"TrueConf","product":"Server","system_type":"Enterprise Software Platform & Infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Enterprise Software"},"documented_facts":[{"id":"SEA-CISA-2026-72530-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"TrueConf Server contains a code injection vulnerability that could allow an unauthorized remote attacker with network access via port 4307/TCP to use a specially crafted script to break out of the isolated environment and execute arbitrary code on the host system.","source_quote_or_pointer":"CISA BOD 22-01 Catalog (CVE-2026-72530)","fact_id":"SEA-CISA-2026-72530-F1","document_citation":"CISA BOD 22-01 Catalog (CVE-2026-72530)"},{"id":"SEA-CISA-2026-72530-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Mandatory remediation: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","source_quote_or_pointer":"Remediation Deadline: 2026-09-03","fact_id":"SEA-CISA-2026-72530-F2","document_citation":"Remediation Deadline: 2026-09-03"}],"source_stated_contributors":["Actively exploited in production systems pursuant to CISA Binding Operational Directive BOD 22-01","Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-004"],"consequences":["Actively exploited in the wild"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-cisa-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"CISA Known Exploited Vulnerabilities Directive","filing_id":"CVE-2026-72530","reporting_entity":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","regulatory_body":"U.S. Department of Homeland Security / CISA"},"safeguards":[{"safeguard_id":"SEA-CISA-2026-72530-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CISA-2026-72530-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-72530"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CISA-2026-72529","title":"TrueConf Server Missing Authentication for Critical Function Vulnerability","display_title":"Security issue reported in Server","display_summary":"TrueConf Server contains a missing authentication for critical function vulnerability which could allow a remote unauthorized attacker with network access via port 4307/TCP to execute an arbitrary script.","display_reference":"CVE-2026-72529","display_source_type":"CISA advisory","incident_date":"2026-08-20","disclosure_date":"2026-08-20","source_type":"vendor_postmortem","source_url":"https://trueconf.com/blog/news/security-fixes-updates-and-advisories","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:06.380Z","source_hash":"content-fingerprint:fnv1a-b9b620aa","affected_system":{"organization":"TrueConf","product":"Server","system_type":"Enterprise Software Platform & Infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Enterprise Software"},"documented_facts":[{"id":"SEA-CISA-2026-72529-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"TrueConf Server contains a missing authentication for critical function vulnerability which could allow a remote unauthorized attacker with network access via port 4307/TCP to execute an arbitrary script.","source_quote_or_pointer":"CISA BOD 22-01 Catalog (CVE-2026-72529)","fact_id":"SEA-CISA-2026-72529-F1","document_citation":"CISA BOD 22-01 Catalog (CVE-2026-72529)"},{"id":"SEA-CISA-2026-72529-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Mandatory remediation: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","source_quote_or_pointer":"Remediation Deadline: 2026-08-23","fact_id":"SEA-CISA-2026-72529-F2","document_citation":"Remediation Deadline: 2026-08-23"}],"source_stated_contributors":["Actively exploited in production systems pursuant to CISA Binding Operational Directive BOD 22-01","Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-004"],"consequences":["Actively exploited in the wild"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-cisa-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"CISA Known Exploited Vulnerabilities Directive","filing_id":"CVE-2026-72529","reporting_entity":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","regulatory_body":"U.S. Department of Homeland Security / CISA"},"safeguards":[{"safeguard_id":"SEA-CISA-2026-72529-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CISA-2026-72529-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-72529"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CISA-2026-64849","title":"MLflow Server-Side Request Forgery Vulnerability","display_title":"MLflow issue could reach internal services","display_summary":"MLflow contains a server-side request forgery vulnerability that can allow attackers to reach internal or cloud metadata services and receive responsestatus and responsebody.","display_reference":"CVE-2026-64849","display_source_type":"CISA advisory","incident_date":"2026-08-19","disclosure_date":"2026-08-19","source_type":"vendor_postmortem","source_url":"https://github.com/mlflow/mlflow/pull/24258","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:06.380Z","source_hash":"content-fingerprint:fnv1a-6aadb40b","affected_system":{"organization":"MLflow","product":"MLflow","system_type":"Enterprise Software Platform & Infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Enterprise Software"},"documented_facts":[{"id":"SEA-CISA-2026-64849-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"MLflow contains a server-side request forgery vulnerability that can allow attackers to reach internal or cloud metadata services and receive response_status and response_body.","source_quote_or_pointer":"CISA BOD 22-01 Catalog (CVE-2026-64849)","fact_id":"SEA-CISA-2026-64849-F1","document_citation":"CISA BOD 22-01 Catalog (CVE-2026-64849)"},{"id":"SEA-CISA-2026-64849-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Mandatory remediation: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","source_quote_or_pointer":"Remediation Deadline: 2026-09-02","fact_id":"SEA-CISA-2026-64849-F2","document_citation":"Remediation Deadline: 2026-09-02"}],"source_stated_contributors":["Actively exploited in production systems pursuant to CISA Binding Operational Directive BOD 22-01","Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-004"],"consequences":["Actively exploited in the wild"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-cisa-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"CISA Known Exploited Vulnerabilities Directive","filing_id":"CVE-2026-64849","reporting_entity":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","regulatory_body":"U.S. Department of Homeland Security / CISA"},"safeguards":[{"safeguard_id":"SEA-CISA-2026-64849-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CISA-2026-64849-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-64849"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CISA-2026-33824","title":"Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability","display_title":"Security issue reported in Internet Key Exchange (IKE) Service Extensions","display_summary":"Microsoft Internet Key Exchange (IKE) Service Extensions contains a double free vulnerability that could enable remote code execution.","display_reference":"CVE-2026-33824","display_source_type":"CISA advisory","incident_date":"2026-08-18","disclosure_date":"2026-08-18","source_type":"cve_advisory","source_url":"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-33824","source_title":"Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:06.381Z","source_hash":"content-fingerprint:fnv1a-315dec7f","affected_system":{"organization":"Microsoft","product":"Internet Key Exchange (IKE) Service Extensions","system_type":"Enterprise Software Platform & Infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Enterprise Software"},"documented_facts":[{"id":"SEA-CISA-2026-33824-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Microsoft Internet Key Exchange (IKE) Service Extensions contains a double free vulnerability that could enable remote code execution.","source_quote_or_pointer":"CISA BOD 22-01 Catalog (CVE-2026-33824)","fact_id":"SEA-CISA-2026-33824-F1","document_citation":"CISA BOD 22-01 Catalog (CVE-2026-33824)"},{"id":"SEA-CISA-2026-33824-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Mandatory remediation: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","source_quote_or_pointer":"Remediation Deadline: 2026-08-21","fact_id":"SEA-CISA-2026-33824-F2","document_citation":"Remediation Deadline: 2026-08-21"}],"source_stated_contributors":["Actively exploited in production systems pursuant to CISA Binding Operational Directive BOD 22-01","Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-004"],"consequences":["Actively exploited in the wild"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-cisa-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"CISA Known Exploited Vulnerabilities Directive","filing_id":"CVE-2026-33824","reporting_entity":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","regulatory_body":"U.S. Department of Homeland Security / CISA"},"safeguards":[{"safeguard_id":"SEA-CISA-2026-33824-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CISA-2026-33824-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-33824"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CISA-2026-72898","title":"Metabase SQL Injection Vulnerability","display_title":"Metabase issue could expose or alter stored data","display_summary":"Metabase contains a SQL Injection vulnerability that allows an unauthenticated remote attacker to inject arbitrary SQL into the Metabase application database, which can give them administrator access to the instance.","display_reference":"CVE-2026-72898","display_source_type":"CISA advisory","incident_date":"2026-08-11","disclosure_date":"2026-08-11","source_type":"vendor_postmortem","source_url":"https://www.metabase.com/blog/security-update","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:06.382Z","source_hash":"content-fingerprint:fnv1a-538c317d","affected_system":{"organization":"Metabase","product":"Metabase","system_type":"Enterprise Software Platform & Infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Enterprise Software"},"documented_facts":[{"id":"SEA-CISA-2026-72898-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Metabase contains a SQL Injection vulnerability that allows an unauthenticated remote attacker to inject arbitrary SQL into the Metabase application database, which can give them administrator access to the instance. From there, the attacker could change the application configuration, steal stored credentials for the connected databases, read any data accessible through those connections, and export data.","source_quote_or_pointer":"CISA BOD 22-01 Catalog (CVE-2026-72898)","fact_id":"SEA-CISA-2026-72898-F1","document_citation":"CISA BOD 22-01 Catalog (CVE-2026-72898)"},{"id":"SEA-CISA-2026-72898-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Mandatory remediation: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","source_quote_or_pointer":"Remediation Deadline: 2026-08-14","fact_id":"SEA-CISA-2026-72898-F2","document_citation":"Remediation Deadline: 2026-08-14"}],"source_stated_contributors":["Actively exploited in production systems pursuant to CISA Binding Operational Directive BOD 22-01","Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.write_action","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-004"],"consequences":["Actively exploited in the wild"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-cisa-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"CISA Known Exploited Vulnerabilities Directive","filing_id":"CVE-2026-72898","reporting_entity":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","regulatory_body":"U.S. Department of Homeland Security / CISA"},"safeguards":[{"safeguard_id":"SEA-CISA-2026-72898-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CISA-2026-72898-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-72898"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CISA-2026-63077","title":"JetBrains TeamCity Deserialization of Untrusted Data Vulnerability","display_title":"TeamCity issue could make the application process unsafe input","display_summary":"JetBrains TeamCity contains a deserialization of untrusted data vulnerability that could allow unauthenticated remote code execution via the agent polling protocol.","display_reference":"CVE-2026-63077","display_source_type":"CISA advisory","incident_date":"2026-08-05","disclosure_date":"2026-08-05","source_type":"cve_advisory","source_url":"https://blog.jetbrains.com/teamcity/2026/07/cve-2026-63077/","source_title":"JetBrains TeamCity Deserialization of Untrusted Data Vulnerability","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:06.386Z","source_hash":"content-fingerprint:fnv1a-c325427c","affected_system":{"organization":"JetBrains","product":"TeamCity","system_type":"Enterprise Software Platform & Infrastructure","is_ai_system":true,"is_agentic":true,"primary_language":"Enterprise Software"},"documented_facts":[{"id":"SEA-CISA-2026-63077-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"JetBrains TeamCity contains a deserialization of untrusted data vulnerability that could allow unauthenticated remote code execution via the agent polling protocol.","source_quote_or_pointer":"CISA BOD 22-01 Catalog (CVE-2026-63077)","fact_id":"SEA-CISA-2026-63077-F1","document_citation":"CISA BOD 22-01 Catalog (CVE-2026-63077)"},{"id":"SEA-CISA-2026-63077-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Mandatory remediation: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","source_quote_or_pointer":"Remediation Deadline: 2026-08-08","fact_id":"SEA-CISA-2026-63077-F2","document_citation":"Remediation Deadline: 2026-08-08"}],"source_stated_contributors":["Actively exploited in production systems pursuant to CISA Binding Operational Directive BOD 22-01","Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-004"],"consequences":["Actively exploited in the wild"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-cisa-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"CISA Known Exploited Vulnerabilities Directive","filing_id":"CVE-2026-63077","reporting_entity":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","regulatory_body":"U.S. Department of Homeland Security / CISA"},"safeguards":[{"safeguard_id":"SEA-CISA-2026-63077-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CISA-2026-63077-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-63077"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CISA-2026-60137","title":"WordPress Core SQL Injection Vulnerability","display_title":"Core issue could expose or alter stored data","display_summary":"WordPress Core contains a SQL injection vulnerability when a plugin or theme passes untrusted input to the parameter. This vulnerability can be chained with CVE-2026-63030 to allow an unauthenticated attacker to gain…","display_reference":"CVE-2026-60137","display_source_type":"CISA advisory","incident_date":"2026-07-21","disclosure_date":"2026-07-21","source_type":"vendor_postmortem","source_url":"https://wordpress.org/news/2026/07/wordpress-7-0-2-release/","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:06.387Z","source_hash":"content-fingerprint:fnv1a-2e59aae","affected_system":{"organization":"WordPress","product":"Core","system_type":"Enterprise Software Platform & Infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Enterprise Software"},"documented_facts":[{"id":"SEA-CISA-2026-60137-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"WordPress Core contains a SQL injection vulnerability when a plugin or theme passes untrusted input to the parameter. This vulnerability can be chained with CVE-2026-63030 to allow an unauthenticated attacker to gain remote code execution on default WordPress installations.","source_quote_or_pointer":"CISA BOD 22-01 Catalog (CVE-2026-60137)","fact_id":"SEA-CISA-2026-60137-F1","document_citation":"CISA BOD 22-01 Catalog (CVE-2026-60137)"},{"id":"SEA-CISA-2026-60137-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Mandatory remediation: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","source_quote_or_pointer":"Remediation Deadline: 2026-08-04","fact_id":"SEA-CISA-2026-60137-F2","document_citation":"Remediation Deadline: 2026-08-04"}],"source_stated_contributors":["Actively exploited in production systems pursuant to CISA Binding Operational Directive BOD 22-01","Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-004"],"consequences":["Actively exploited in the wild"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-cisa-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"CISA Known Exploited Vulnerabilities Directive","filing_id":"CVE-2026-60137","reporting_entity":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","regulatory_body":"U.S. Department of Homeland Security / CISA"},"safeguards":[{"safeguard_id":"SEA-CISA-2026-60137-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CISA-2026-60137-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-60137"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CISA-2026-63030","title":"WordPress Core Interpretation Conflict Vulnerability","display_title":"Security issue reported in Core","display_summary":"WordPress Core contains an interpretation conflict vulnerability that could allow an attacker to perform SQL Injection and achieve Remote Code Execution. This vulnerability can be chained with CVE-2026-60137.","display_reference":"CVE-2026-63030","display_source_type":"CISA advisory","incident_date":"2026-07-21","disclosure_date":"2026-07-21","source_type":"vendor_postmortem","source_url":"https://wordpress.org/news/2026/07/wordpress-7-0-2-release/","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:06.388Z","source_hash":"content-fingerprint:fnv1a-bb24e611","affected_system":{"organization":"WordPress","product":"Core","system_type":"Enterprise Software Platform & Infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Enterprise Software"},"documented_facts":[{"id":"SEA-CISA-2026-63030-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"WordPress Core contains an interpretation conflict vulnerability that could allow an attacker to perform SQL Injection and achieve Remote Code Execution. This vulnerability can be chained with CVE-2026-60137.","source_quote_or_pointer":"CISA BOD 22-01 Catalog (CVE-2026-63030)","fact_id":"SEA-CISA-2026-63030-F1","document_citation":"CISA BOD 22-01 Catalog (CVE-2026-63030)"},{"id":"SEA-CISA-2026-63030-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Mandatory remediation: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","source_quote_or_pointer":"Remediation Deadline: 2026-07-24","fact_id":"SEA-CISA-2026-63030-F2","document_citation":"Remediation Deadline: 2026-07-24"}],"source_stated_contributors":["Actively exploited in production systems pursuant to CISA Binding Operational Directive BOD 22-01","Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-004"],"consequences":["Actively exploited in the wild"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-cisa-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"CISA Known Exploited Vulnerabilities Directive","filing_id":"CVE-2026-63030","reporting_entity":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","regulatory_body":"U.S. Department of Homeland Security / CISA"},"safeguards":[{"safeguard_id":"SEA-CISA-2026-63030-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CISA-2026-63030-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-63030"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CISA-2026-25089","title":"Fortinet FortiSandbox OS Command Injection Vulnerability","display_title":"FortiSandbox issue could allow unintended commands to run","display_summary":"Fortinet FortiSandbox, FortiSandbox Cloud, and FortiSandbox PaaS contain an OS command injection vulnerability that allows an unauthenticated attacker to execute unauthorized commands via specifically crafted HTTP…","display_reference":"CVE-2026-25089","display_source_type":"CISA advisory","incident_date":"2026-07-16","disclosure_date":"2026-07-16","source_type":"vendor_postmortem","source_url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-141","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:06.388Z","source_hash":"content-fingerprint:fnv1a-f4acaa51","affected_system":{"organization":"Fortinet","product":"FortiSandbox","system_type":"Enterprise Software Platform & Infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Enterprise Software"},"documented_facts":[{"id":"SEA-CISA-2026-25089-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Fortinet FortiSandbox, FortiSandbox Cloud, and FortiSandbox PaaS contain an OS command injection vulnerability that allows an unauthenticated attacker to execute unauthorized commands via specifically crafted HTTP requests.","source_quote_or_pointer":"CISA BOD 22-01 Catalog (CVE-2026-25089)","fact_id":"SEA-CISA-2026-25089-F1","document_citation":"CISA BOD 22-01 Catalog (CVE-2026-25089)"},{"id":"SEA-CISA-2026-25089-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Mandatory remediation: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","source_quote_or_pointer":"Remediation Deadline: 2026-07-19","fact_id":"SEA-CISA-2026-25089-F2","document_citation":"Remediation Deadline: 2026-07-19"}],"source_stated_contributors":["Actively exploited in production systems pursuant to CISA Binding Operational Directive BOD 22-01","Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-004"],"consequences":["Actively exploited in the wild"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-cisa-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"CISA Known Exploited Vulnerabilities Directive","filing_id":"CVE-2026-25089","reporting_entity":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","regulatory_body":"U.S. Department of Homeland Security / CISA"},"safeguards":[{"safeguard_id":"SEA-CISA-2026-25089-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CISA-2026-25089-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-25089"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CISA-2026-56164","title":"Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability","display_title":"Security issue reported in SharePoint Server","display_summary":"Microsoft SharePoint contains a missing authentication for critical function vulnerability that allows an unauthorized attacker to elevate privileges over a network.","display_reference":"CVE-2026-56164","display_source_type":"CISA advisory","incident_date":"2026-07-14","disclosure_date":"2026-07-14","source_type":"cve_advisory","source_url":"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-56164","source_title":"Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:06.388Z","source_hash":"content-fingerprint:fnv1a-e4d24f77","affected_system":{"organization":"Microsoft","product":"SharePoint Server","system_type":"Enterprise Software Platform & Infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Enterprise Software"},"documented_facts":[{"id":"SEA-CISA-2026-56164-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Microsoft SharePoint contains a missing authentication for critical function vulnerability that allows an unauthorized attacker to elevate privileges over a network.","source_quote_or_pointer":"CISA BOD 22-01 Catalog (CVE-2026-56164)","fact_id":"SEA-CISA-2026-56164-F1","document_citation":"CISA BOD 22-01 Catalog (CVE-2026-56164)"},{"id":"SEA-CISA-2026-56164-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Mandatory remediation: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","source_quote_or_pointer":"Remediation Deadline: 2026-07-17","fact_id":"SEA-CISA-2026-56164-F2","document_citation":"Remediation Deadline: 2026-07-17"}],"source_stated_contributors":["Actively exploited in production systems pursuant to CISA Binding Operational Directive BOD 22-01","Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-004"],"consequences":["Actively exploited in the wild"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-cisa-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"CISA Known Exploited Vulnerabilities Directive","filing_id":"CVE-2026-56164","reporting_entity":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","regulatory_body":"U.S. Department of Homeland Security / CISA"},"safeguards":[{"safeguard_id":"SEA-CISA-2026-56164-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CISA-2026-56164-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-56164"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CISA-2026-15409","title":"SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability","display_title":"SMA1000 Appliances issue could reach internal services","display_summary":"SonicWall SMA1000 Appliances contain a server-side request forgery vulnerability that could allow a remote unauthenticated attacker to potentially cause the appliance to make requests to unintended location.","display_reference":"CVE-2026-15409","display_source_type":"CISA advisory","incident_date":"2026-07-14","disclosure_date":"2026-07-14","source_type":"vendor_postmortem","source_url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0008","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:06.388Z","source_hash":"content-fingerprint:fnv1a-f9c44822","affected_system":{"organization":"SonicWall","product":"SMA1000 Appliances","system_type":"Enterprise Software Platform & Infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Enterprise Software"},"documented_facts":[{"id":"SEA-CISA-2026-15409-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"SonicWall SMA1000 Appliances contain a server-side request forgery vulnerability that could allow a remote unauthenticated attacker to potentially cause the appliance to make requests to unintended location.","source_quote_or_pointer":"CISA BOD 22-01 Catalog (CVE-2026-15409)","fact_id":"SEA-CISA-2026-15409-F1","document_citation":"CISA BOD 22-01 Catalog (CVE-2026-15409)"},{"id":"SEA-CISA-2026-15409-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Mandatory remediation: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","source_quote_or_pointer":"Remediation Deadline: 2026-07-17","fact_id":"SEA-CISA-2026-15409-F2","document_citation":"Remediation Deadline: 2026-07-17"}],"source_stated_contributors":["Actively exploited in production systems pursuant to CISA Binding Operational Directive BOD 22-01","Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-004"],"consequences":["Actively exploited in the wild"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-cisa-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"CISA Known Exploited Vulnerabilities Directive","filing_id":"CVE-2026-15409","reporting_entity":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","regulatory_body":"U.S. Department of Homeland Security / CISA"},"safeguards":[{"safeguard_id":"SEA-CISA-2026-15409-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CISA-2026-15409-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-15409"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CISA-2026-45659","title":"Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability","display_title":"SharePoint Server issue could make the application process unsafe input","display_summary":"Microsoft SharePoint Server contains a deserialization of untrusted data vulnerability which allows an authorized attacker to execute code over a network.","display_reference":"CVE-2026-45659","display_source_type":"CISA advisory","incident_date":"2026-07-01","disclosure_date":"2026-07-01","source_type":"cve_advisory","source_url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45659","source_title":"Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:06.389Z","source_hash":"content-fingerprint:fnv1a-8d52325c","affected_system":{"organization":"Microsoft","product":"SharePoint Server","system_type":"Enterprise Software Platform & Infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Enterprise Software"},"documented_facts":[{"id":"SEA-CISA-2026-45659-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Microsoft SharePoint Server contains a deserialization of untrusted data vulnerability which allows an authorized attacker to execute code over a network.","source_quote_or_pointer":"CISA BOD 22-01 Catalog (CVE-2026-45659)","fact_id":"SEA-CISA-2026-45659-F1","document_citation":"CISA BOD 22-01 Catalog (CVE-2026-45659)"},{"id":"SEA-CISA-2026-45659-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Mandatory remediation: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","source_quote_or_pointer":"Remediation Deadline: 2026-07-04","fact_id":"SEA-CISA-2026-45659-F2","document_citation":"Remediation Deadline: 2026-07-04"}],"source_stated_contributors":["Actively exploited in production systems pursuant to CISA Binding Operational Directive BOD 22-01","Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.code_execution"],"failure_mechanisms":["SEA-FM-004"],"consequences":["Actively exploited in the wild"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-cisa-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"CISA Known Exploited Vulnerabilities Directive","filing_id":"CVE-2026-45659","reporting_entity":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","regulatory_body":"U.S. Department of Homeland Security / CISA"},"safeguards":[{"safeguard_id":"SEA-CISA-2026-45659-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CISA-2026-45659-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-45659"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CISA-2026-48558","title":"SimpleHelp Authentication Bypass Vulnerability","display_title":"SimpleHelp issue could allow unauthorized access","display_summary":"SimpleHelp contains an authentication bypass vulnerability in the OIDC authentication flow. When OIDC authentication is configured, identity tokens submitted during login are accepted without verifying their…","display_reference":"CVE-2026-48558","display_source_type":"CISA advisory","incident_date":"2026-06-29","disclosure_date":"2026-06-29","source_type":"vendor_postmortem","source_url":"https://simple-help.com/security/simplehelp-security-update-2026-05","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:06.389Z","source_hash":"content-fingerprint:fnv1a-713c20ce","affected_system":{"organization":"SimpleHelp","product":"SimpleHelp","system_type":"Enterprise Software Platform & Infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Enterprise Software"},"documented_facts":[{"id":"SEA-CISA-2026-48558-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"SimpleHelp contains an authentication bypass vulnerability in the OIDC authentication flow. When OIDC authentication is configured, identity tokens submitted during login are accepted without verifying their cryptographic signature. In a vulnerable configuration, a remote, unauthenticated attacker can submit a forged token containing arbitrary identity claims to obtain a fully authenticated technician session. In some configurations, this may also allow bypass of multi-factor authentication.","source_quote_or_pointer":"CISA BOD 22-01 Catalog (CVE-2026-48558)","fact_id":"SEA-CISA-2026-48558-F1","document_citation":"CISA BOD 22-01 Catalog (CVE-2026-48558)"},{"id":"SEA-CISA-2026-48558-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Mandatory remediation: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","source_quote_or_pointer":"Remediation Deadline: 2026-07-02","fact_id":"SEA-CISA-2026-48558-F2","document_citation":"Remediation Deadline: 2026-07-02"}],"source_stated_contributors":["Actively exploited in production systems pursuant to CISA Binding Operational Directive BOD 22-01","Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-004"],"consequences":["Actively exploited in the wild"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-cisa-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"CISA Known Exploited Vulnerabilities Directive","filing_id":"CVE-2026-48558","reporting_entity":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","regulatory_body":"U.S. Department of Homeland Security / CISA"},"safeguards":[{"safeguard_id":"SEA-CISA-2026-48558-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CISA-2026-48558-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-48558"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CISA-2026-20230","title":"Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability","display_title":"Unified Communications Manager issue could reach internal services","display_summary":"Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) contain a server-side request forgery (SSRF) Vulnerability that could allow an…","display_reference":"CVE-2026-20230","display_source_type":"CISA advisory","incident_date":"2026-06-25","disclosure_date":"2026-06-25","source_type":"vendor_postmortem","source_url":"https://www.cisco.com/c/en/us/support/docs/csa/cisco-sa-cucm-ssrf-cXPnHcW.html","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:06.389Z","source_hash":"content-fingerprint:fnv1a-c1e3f2eb","affected_system":{"organization":"Cisco","product":"Unified Communications Manager","system_type":"Enterprise Software Platform & Infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Enterprise Software"},"documented_facts":[{"id":"SEA-CISA-2026-20230-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) contain a server-side request forgery (SSRF) Vulnerability that could allow an unauthenticated, remote attacker to write files to the underlying operating system that could be used later to elevate to root.","source_quote_or_pointer":"CISA BOD 22-01 Catalog (CVE-2026-20230)","fact_id":"SEA-CISA-2026-20230-F1","document_citation":"CISA BOD 22-01 Catalog (CVE-2026-20230)"},{"id":"SEA-CISA-2026-20230-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Mandatory remediation: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","source_quote_or_pointer":"Remediation Deadline: 2026-06-28","fact_id":"SEA-CISA-2026-20230-F2","document_citation":"Remediation Deadline: 2026-06-28"}],"source_stated_contributors":["Actively exploited in production systems pursuant to CISA Binding Operational Directive BOD 22-01","Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","auth.write_action"],"failure_mechanisms":["SEA-FM-004"],"consequences":["Actively exploited in the wild"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-cisa-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"CISA Known Exploited Vulnerabilities Directive","filing_id":"CVE-2026-20230","reporting_entity":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","regulatory_body":"U.S. Department of Homeland Security / CISA"},"safeguards":[{"safeguard_id":"SEA-CISA-2026-20230-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CISA-2026-20230-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-20230"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CISA-2026-20253","title":"Splunk Enterprise Missing Authentication for Critical Function Vulnerability","display_title":"Security issue reported in Enterprise","display_summary":"Splunk Enterprise contains a missing authentication for critical function vulnerability which could allow an unauthenticated user to create or truncate arbitrary files through a PostgreSQL sidecar service endpoint.","display_reference":"CVE-2026-20253","display_source_type":"CISA advisory","incident_date":"2026-06-18","disclosure_date":"2026-06-18","source_type":"cve_advisory","source_url":"https://advisory.splunk.com/advisories/SVD-2026-0603","source_title":"Splunk Enterprise Missing Authentication for Critical Function Vulnerability","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:06.390Z","source_hash":"content-fingerprint:fnv1a-43ad807a","affected_system":{"organization":"Splunk","product":"Enterprise","system_type":"Enterprise Software Platform & Infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Enterprise Software"},"documented_facts":[{"id":"SEA-CISA-2026-20253-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Splunk Enterprise contains a missing authentication for critical function vulnerability which could allow an unauthenticated user to create or truncate arbitrary files through a PostgreSQL sidecar service endpoint.","source_quote_or_pointer":"CISA BOD 22-01 Catalog (CVE-2026-20253)","fact_id":"SEA-CISA-2026-20253-F1","document_citation":"CISA BOD 22-01 Catalog (CVE-2026-20253)"},{"id":"SEA-CISA-2026-20253-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Mandatory remediation: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","source_quote_or_pointer":"Remediation Deadline: 2026-06-21","fact_id":"SEA-CISA-2026-20253-F2","document_citation":"Remediation Deadline: 2026-06-21"}],"source_stated_contributors":["Actively exploited in production systems pursuant to CISA Binding Operational Directive BOD 22-01","Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.write_action","data.pii"],"failure_mechanisms":["SEA-FM-005"],"consequences":["Actively exploited in the wild"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-cisa-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"CISA Known Exploited Vulnerabilities Directive","filing_id":"CVE-2026-20253","reporting_entity":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","regulatory_body":"U.S. Department of Homeland Security / CISA"},"safeguards":[{"safeguard_id":"SEA-CISA-2026-20253-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","target_failure_mode":"SEA-FM-005","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CISA-2026-20253-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","target_failure_mode":"SEA-FM-005","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-20253"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CISA-2026-48907","title":"Widget Factory Joomla Content Editor Improper Access Control Vulnerability","display_title":"Joomla Content Editor issue could allow unauthorized access","display_summary":"Widget Factory Joomla Content Editor contains an improper access control vulnerability which could allow for upload and execution of PHP code via the creation of new editor profiles for unauthenticated users.","display_reference":"CVE-2026-48907","display_source_type":"CISA advisory","incident_date":"2026-06-16","disclosure_date":"2026-06-16","source_type":"vendor_postmortem","source_url":"https://www.joomlacontenteditor.net/news/jce-security-update-and-a-free-patch-for-older-sites","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:06.390Z","source_hash":"content-fingerprint:fnv1a-93af8e63","affected_system":{"organization":"Widget Factory","product":"Joomla Content Editor","system_type":"Enterprise Software Platform & Infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Enterprise Software"},"documented_facts":[{"id":"SEA-CISA-2026-48907-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Widget Factory Joomla Content Editor contains an improper access control vulnerability which could allow for upload and execution of PHP code via the creation of new editor profiles for unauthenticated users. ","source_quote_or_pointer":"CISA BOD 22-01 Catalog (CVE-2026-48907)","fact_id":"SEA-CISA-2026-48907-F1","document_citation":"CISA BOD 22-01 Catalog (CVE-2026-48907)"},{"id":"SEA-CISA-2026-48907-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Mandatory remediation: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","source_quote_or_pointer":"Remediation Deadline: 2026-06-19","fact_id":"SEA-CISA-2026-48907-F2","document_citation":"Remediation Deadline: 2026-06-19"}],"source_stated_contributors":["Actively exploited in production systems pursuant to CISA Binding Operational Directive BOD 22-01","Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii","data.uploaded_files"],"failure_mechanisms":["SEA-FM-004"],"consequences":["Actively exploited in the wild"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-cisa-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"CISA Known Exploited Vulnerabilities Directive","filing_id":"CVE-2026-48907","reporting_entity":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","regulatory_body":"U.S. Department of Homeland Security / CISA"},"safeguards":[{"safeguard_id":"SEA-CISA-2026-48907-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CISA-2026-48907-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-48907"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CISA-2026-28318","title":"SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability","display_title":"Security issue reported in Serv-U","display_summary":"SolarWinds Serv-U contains an uncontrolled resource consumption vulnerability that allows specially crafted POST requests using the Content-Encoding: deflate header to crash the Serv-U service without authentication.","display_reference":"CVE-2026-28318","display_source_type":"CISA advisory","incident_date":"2026-06-05","disclosure_date":"2026-06-05","source_type":"cve_advisory","source_url":"https://www.solarwinds.com/trust-center/security-advisories/cve-2026-28318","source_title":"SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:06.390Z","source_hash":"content-fingerprint:fnv1a-f9e98635","affected_system":{"organization":"SolarWinds","product":"Serv-U","system_type":"Enterprise Software Platform & Infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Enterprise Software"},"documented_facts":[{"id":"SEA-CISA-2026-28318-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"SolarWinds Serv-U contains an uncontrolled resource consumption vulnerability that allows specially crafted POST requests using the Content-Encoding: deflate header to crash the Serv-U service without authentication.","source_quote_or_pointer":"CISA BOD 22-01 Catalog (CVE-2026-28318)","fact_id":"SEA-CISA-2026-28318-F1","document_citation":"CISA BOD 22-01 Catalog (CVE-2026-28318)"},{"id":"SEA-CISA-2026-28318-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Mandatory remediation: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","source_quote_or_pointer":"Remediation Deadline: 2026-06-19","fact_id":"SEA-CISA-2026-28318-F2","document_citation":"Remediation Deadline: 2026-06-19"}],"source_stated_contributors":["Actively exploited in production systems pursuant to CISA Binding Operational Directive BOD 22-01","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-004"],"consequences":["Actively exploited in the wild"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-cisa-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"CISA Known Exploited Vulnerabilities Directive","filing_id":"CVE-2026-28318","reporting_entity":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","regulatory_body":"U.S. Department of Homeland Security / CISA"},"safeguards":[{"safeguard_id":"SEA-CISA-2026-28318-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CISA-2026-28318-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-28318"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CISA-2026-45247","title":"Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data Vulnerability","display_title":"Mirasvit Full Page Cache Warmer issue could make the application process unsafe input","display_summary":"Mirasvit Full Page Cache Warmer contains a deserialization of untrusted data vulnerability that could allow unauthenticated attackers to achieve remote code execution by supplying a crafted serialized PHP object in the…","display_reference":"CVE-2026-45247","display_source_type":"CISA advisory","incident_date":"2026-06-03","disclosure_date":"2026-06-03","source_type":"vendor_postmortem","source_url":"https://mirasvit.com/package/changelog/?package=mirasvit/module-cache-warmer","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:06.391Z","source_hash":"content-fingerprint:fnv1a-7ca29ad2","affected_system":{"organization":"Mirasvit","product":"Mirasvit Full Page Cache Warmer","system_type":"Enterprise Software Platform & Infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Enterprise Software"},"documented_facts":[{"id":"SEA-CISA-2026-45247-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Mirasvit Full Page Cache Warmer contains a deserialization of untrusted data vulnerability that could allow unauthenticated attackers to achieve remote code execution by supplying a crafted serialized PHP object in the CacheWarmer cookie.","source_quote_or_pointer":"CISA BOD 22-01 Catalog (CVE-2026-45247)","fact_id":"SEA-CISA-2026-45247-F1","document_citation":"CISA BOD 22-01 Catalog (CVE-2026-45247)"},{"id":"SEA-CISA-2026-45247-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Mandatory remediation: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","source_quote_or_pointer":"Remediation Deadline: 2026-06-06","fact_id":"SEA-CISA-2026-45247-F2","document_citation":"Remediation Deadline: 2026-06-06"}],"source_stated_contributors":["Actively exploited in production systems pursuant to CISA Binding Operational Directive BOD 22-01","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["arch.caching"],"failure_mechanisms":["SEA-FM-004"],"consequences":["Actively exploited in the wild"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-cisa-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"CISA Known Exploited Vulnerabilities Directive","filing_id":"CVE-2026-45247","reporting_entity":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","regulatory_body":"U.S. Department of Homeland Security / CISA"},"safeguards":[{"safeguard_id":"SEA-CISA-2026-45247-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CISA-2026-45247-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-45247"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CISA-2025-48595","title":"Android Framework Integer Overflow Vulnerability","display_title":"Security issue reported in Framework","display_summary":"Android Framework contains an integer overflow vulnerability that allows for code execution that could allow for local privilege escalation.","display_reference":"CVE-2025-48595","display_source_type":"CISA advisory","incident_date":"2026-06-02","disclosure_date":"2026-06-02","source_type":"vendor_postmortem","source_url":"https://source.android.com/docs/security/bulletin/2026/2026-06-01","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:06.391Z","source_hash":"content-fingerprint:fnv1a-51f6ffc","affected_system":{"organization":"Android","product":"Framework","system_type":"Enterprise Software Platform & Infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Enterprise Software"},"documented_facts":[{"id":"SEA-CISA-2025-48595-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Android Framework contains an integer overflow vulnerability that allows for code execution that could allow for local privilege escalation.","source_quote_or_pointer":"CISA BOD 22-01 Catalog (CVE-2025-48595)","fact_id":"SEA-CISA-2025-48595-F1","document_citation":"CISA BOD 22-01 Catalog (CVE-2025-48595)"},{"id":"SEA-CISA-2025-48595-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Mandatory remediation: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","source_quote_or_pointer":"Remediation Deadline: 2026-06-05","fact_id":"SEA-CISA-2025-48595-F2","document_citation":"Remediation Deadline: 2026-06-05"}],"source_stated_contributors":["Actively exploited in production systems pursuant to CISA Binding Operational Directive BOD 22-01","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-004"],"consequences":["Actively exploited in the wild"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-cisa-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"CISA Known Exploited Vulnerabilities Directive","filing_id":"CVE-2025-48595","reporting_entity":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","regulatory_body":"U.S. Department of Homeland Security / CISA"},"safeguards":[{"safeguard_id":"SEA-CISA-2025-48595-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CISA-2025-48595-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2025-48595"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CISA-2026-48172","title":"LiteSpeed cPanel Plugin Privilege Escalation Vulnerability","display_title":"cPanel Plugin issue could grant elevated privileges","display_summary":"LiteSpeed cPanel Plugin contains privilege escalation vulnerability that is exposed via the user-end cPanel plugin, which can be abused by any cPanel user account to execute arbitrary scripts with root privileges.","display_reference":"CVE-2026-48172","display_source_type":"CISA advisory","incident_date":"2026-05-26","disclosure_date":"2026-05-26","source_type":"vendor_postmortem","source_url":"https://blog.litespeedtech.com/2026/05/21/security-update-for-litespeed-cpanel-plugin/","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:06.391Z","source_hash":"content-fingerprint:fnv1a-8ef64c01","affected_system":{"organization":"LiteSpeed","product":"cPanel Plugin","system_type":"Enterprise Software Platform & Infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Enterprise Software"},"documented_facts":[{"id":"SEA-CISA-2026-48172-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"LiteSpeed cPanel Plugin contains privilege escalation vulnerability that is exposed via the user-end cPanel plugin, which can be abused by any cPanel user account to execute arbitrary scripts with root privileges.","source_quote_or_pointer":"CISA BOD 22-01 Catalog (CVE-2026-48172)","fact_id":"SEA-CISA-2026-48172-F1","document_citation":"CISA BOD 22-01 Catalog (CVE-2026-48172)"},{"id":"SEA-CISA-2026-48172-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Mandatory remediation: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","source_quote_or_pointer":"Remediation Deadline: 2026-05-29","fact_id":"SEA-CISA-2026-48172-F2","document_citation":"Remediation Deadline: 2026-05-29"}],"source_stated_contributors":["Actively exploited in production systems pursuant to CISA Binding Operational Directive BOD 22-01","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii"],"failure_mechanisms":["SEA-FM-004"],"consequences":["Actively exploited in the wild"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-cisa-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"CISA Known Exploited Vulnerabilities Directive","filing_id":"CVE-2026-48172","reporting_entity":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","regulatory_body":"U.S. Department of Homeland Security / CISA"},"safeguards":[{"safeguard_id":"SEA-CISA-2026-48172-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CISA-2026-48172-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-48172"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CISA-2026-9082","title":"Drupal Core SQL Injection Vulnerability","display_title":"Core issue could expose or alter stored data","display_summary":"Drupal Core contains a SQL injection vulnerability that could allow for privilege escalation and remote code execution via specially crafted requests sent with the database abstraction API.","display_reference":"CVE-2026-9082","display_source_type":"CISA advisory","incident_date":"2026-05-22","disclosure_date":"2026-05-22","source_type":"vendor_postmortem","source_url":"https://www.drupal.org/sa-core-2026-004","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:06.392Z","source_hash":"content-fingerprint:fnv1a-2a6a27da","affected_system":{"organization":"Drupal","product":"Core","system_type":"Enterprise Software Platform & Infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Enterprise Software"},"documented_facts":[{"id":"SEA-CISA-2026-9082-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Drupal Core contains a SQL injection vulnerability that could allow for privilege escalation and remote code execution via specially crafted requests sent with the database abstraction API.","source_quote_or_pointer":"CISA BOD 22-01 Catalog (CVE-2026-9082)","fact_id":"SEA-CISA-2026-9082-F1","document_citation":"CISA BOD 22-01 Catalog (CVE-2026-9082)"},{"id":"SEA-CISA-2026-9082-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Mandatory remediation: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","source_quote_or_pointer":"Remediation Deadline: 2026-05-27","fact_id":"SEA-CISA-2026-9082-F2","document_citation":"Remediation Deadline: 2026-05-27"}],"source_stated_contributors":["Actively exploited in production systems pursuant to CISA Binding Operational Directive BOD 22-01","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action"],"failure_mechanisms":["SEA-FM-004"],"consequences":["Actively exploited in the wild"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-cisa-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"CISA Known Exploited Vulnerabilities Directive","filing_id":"CVE-2026-9082","reporting_entity":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","regulatory_body":"U.S. Department of Homeland Security / CISA"},"safeguards":[{"safeguard_id":"SEA-CISA-2026-9082-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CISA-2026-9082-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-9082"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CISA-2026-34926","title":"Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability","display_title":"Apex One issue could expose restricted files","display_summary":"Trend Micro Apex One (on-premise) contains a directory traversal vulnerability that could allow a pre-authenticated local attacker to modify a key table on the server to inject malicious code to deploy to agents on…","display_reference":"CVE-2026-34926","display_source_type":"CISA advisory","incident_date":"2026-05-21","disclosure_date":"2026-05-21","source_type":"vendor_postmortem","source_url":"https://success.trendmicro.com/en-US/solution/KA-0023430","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:06.392Z","source_hash":"content-fingerprint:fnv1a-b4e35091","affected_system":{"organization":"Trend Micro","product":"Apex One","system_type":"Enterprise Software Platform & Infrastructure","is_ai_system":true,"is_agentic":true,"primary_language":"Enterprise Software"},"documented_facts":[{"id":"SEA-CISA-2026-34926-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Trend Micro Apex One (on-premise) contains a directory traversal vulnerability that could allow a pre-authenticated local attacker to modify a key table on the server to inject malicious code to deploy to agents on affected installations.","source_quote_or_pointer":"CISA BOD 22-01 Catalog (CVE-2026-34926)","fact_id":"SEA-CISA-2026-34926-F1","document_citation":"CISA BOD 22-01 Catalog (CVE-2026-34926)"},{"id":"SEA-CISA-2026-34926-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Mandatory remediation: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","source_quote_or_pointer":"Remediation Deadline: 2026-06-04","fact_id":"SEA-CISA-2026-34926-F2","document_citation":"Remediation Deadline: 2026-06-04"}],"source_stated_contributors":["Actively exploited in production systems pursuant to CISA Binding Operational Directive BOD 22-01","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-004"],"consequences":["Actively exploited in the wild"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-cisa-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"CISA Known Exploited Vulnerabilities Directive","filing_id":"CVE-2026-34926","reporting_entity":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","regulatory_body":"U.S. Department of Homeland Security / CISA"},"safeguards":[{"safeguard_id":"SEA-CISA-2026-34926-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CISA-2026-34926-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-34926"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CISA-2026-45498","title":"Microsoft Defender Denial of Service Vulnerability","display_title":"Defender issue could make the service unavailable","display_summary":"Microsoft Defender contains an unspecified vulnerability that allows for denial of service.","display_reference":"CVE-2026-45498","display_source_type":"CISA advisory","incident_date":"2026-05-20","disclosure_date":"2026-05-20","source_type":"cve_advisory","source_url":"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-45498","source_title":"Microsoft Defender Denial of Service Vulnerability","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:06.392Z","source_hash":"content-fingerprint:fnv1a-b1542b56","affected_system":{"organization":"Microsoft","product":"Defender","system_type":"Enterprise Software Platform & Infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Enterprise Software"},"documented_facts":[{"id":"SEA-CISA-2026-45498-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Microsoft Defender contains an unspecified vulnerability that allows for denial of service.","source_quote_or_pointer":"CISA BOD 22-01 Catalog (CVE-2026-45498)","fact_id":"SEA-CISA-2026-45498-F1","document_citation":"CISA BOD 22-01 Catalog (CVE-2026-45498)"},{"id":"SEA-CISA-2026-45498-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Mandatory remediation: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","source_quote_or_pointer":"Remediation Deadline: 2026-06-03","fact_id":"SEA-CISA-2026-45498-F2","document_citation":"Remediation Deadline: 2026-06-03"}],"source_stated_contributors":["Actively exploited in production systems pursuant to CISA Binding Operational Directive BOD 22-01","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-004"],"consequences":["Actively exploited in the wild"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-cisa-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"CISA Known Exploited Vulnerabilities Directive","filing_id":"CVE-2026-45498","reporting_entity":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","regulatory_body":"U.S. Department of Homeland Security / CISA"},"safeguards":[{"safeguard_id":"SEA-CISA-2026-45498-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CISA-2026-45498-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-45498"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CISA-2026-42208","title":"BerriAI LiteLLM SQL Injection Vulnerability","display_title":"LiteLLM issue could expose or alter stored data","display_summary":"BerriAI LiteLLM contains a SQL injection vulnerability that allows an attacker to read data from the proxy's database and potentially modify it, leading to unauthorized access to the proxy and the credentials it manages.","display_reference":"CVE-2026-42208","display_source_type":"CISA advisory","incident_date":"2026-05-08","disclosure_date":"2026-05-08","source_type":"vendor_postmortem","source_url":"https://github.com/BerriAI/litellm/security/advisories/GHSA-r75f-5x8p-qvmc","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:06.393Z","source_hash":"content-fingerprint:fnv1a-3f042255","affected_system":{"organization":"BerriAI","product":"LiteLLM","system_type":"Enterprise Software Platform & Infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Enterprise Software"},"documented_facts":[{"id":"SEA-CISA-2026-42208-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"BerriAI LiteLLM contains a SQL injection vulnerability that allows an attacker to read data from the proxy's database and potentially modify it, leading to unauthorized access to the proxy and the credentials it manages.","source_quote_or_pointer":"CISA BOD 22-01 Catalog (CVE-2026-42208)","fact_id":"SEA-CISA-2026-42208-F1","document_citation":"CISA BOD 22-01 Catalog (CVE-2026-42208)"},{"id":"SEA-CISA-2026-42208-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Mandatory remediation: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","source_quote_or_pointer":"Remediation Deadline: 2026-05-11","fact_id":"SEA-CISA-2026-42208-F2","document_citation":"Remediation Deadline: 2026-05-11"}],"source_stated_contributors":["Actively exploited in production systems pursuant to CISA Binding Operational Directive BOD 22-01","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-004"],"consequences":["Actively exploited in the wild"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-cisa-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"CISA Known Exploited Vulnerabilities Directive","filing_id":"CVE-2026-42208","reporting_entity":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","regulatory_body":"U.S. Department of Homeland Security / CISA"},"safeguards":[{"safeguard_id":"SEA-CISA-2026-42208-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CISA-2026-42208-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-42208"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CISA-2025-29635","title":"D-Link DIR-823X Command Injection Vulnerability","display_title":"DIR-823X issue could allow unintended commands to run","display_summary":"D-Link DIR-823X contains a command injection vulnerability that allows an authorized attacker to execute arbitrary commands on remote devices by sending a POST request to /goform/setprohibiting via the corresponding…","display_reference":"CVE-2025-29635","display_source_type":"CISA advisory","incident_date":"2026-04-24","disclosure_date":"2026-04-24","source_type":"vendor_postmortem","source_url":"https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10469","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:06.393Z","source_hash":"content-fingerprint:fnv1a-9c5b4024","affected_system":{"organization":"D-Link","product":"DIR-823X","system_type":"Enterprise Software Platform & Infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Enterprise Software"},"documented_facts":[{"id":"SEA-CISA-2025-29635-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"D-Link DIR-823X contains a command injection vulnerability that allows an authorized attacker to execute arbitrary commands on remote devices by sending a POST request to /goform/set_prohibiting via the corresponding function. The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.","source_quote_or_pointer":"CISA BOD 22-01 Catalog (CVE-2025-29635)","fact_id":"SEA-CISA-2025-29635-F1","document_citation":"CISA BOD 22-01 Catalog (CVE-2025-29635)"},{"id":"SEA-CISA-2025-29635-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Mandatory remediation: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","source_quote_or_pointer":"Remediation Deadline: 2026-05-08","fact_id":"SEA-CISA-2025-29635-F2","document_citation":"Remediation Deadline: 2026-05-08"}],"source_stated_contributors":["Actively exploited in production systems pursuant to CISA Binding Operational Directive BOD 22-01","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":["SEA-FM-004"],"consequences":["Actively exploited in the wild"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-cisa-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"CISA Known Exploited Vulnerabilities Directive","filing_id":"CVE-2025-29635","reporting_entity":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","regulatory_body":"U.S. Department of Homeland Security / CISA"},"safeguards":[{"safeguard_id":"SEA-CISA-2025-29635-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CISA-2025-29635-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2025-29635"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CISA-2024-7399","title":"Samsung MagicINFO 9 Server Path Traversal Vulnerability","display_title":"MagicINFO 9 Server issue could expose restricted files","display_summary":"Samsung MagicINFO 9 Server contains a path traversal vulnerability that could allow an attacker to write arbitrary files as system authority.","display_reference":"CVE-2024-7399","display_source_type":"CISA advisory","incident_date":"2026-04-24","disclosure_date":"2026-04-24","source_type":"vendor_postmortem","source_url":"https://security.samsungtv.com/securityUpdates","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:06.394Z","source_hash":"content-fingerprint:fnv1a-7bd5a827","affected_system":{"organization":"Samsung","product":"MagicINFO 9 Server","system_type":"Enterprise Software Platform & Infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Enterprise Software"},"documented_facts":[{"id":"SEA-CISA-2024-7399-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Samsung MagicINFO 9 Server contains a path traversal vulnerability that could allow an attacker to write arbitrary files as system authority.","source_quote_or_pointer":"CISA BOD 22-01 Catalog (CVE-2024-7399)","fact_id":"SEA-CISA-2024-7399-F1","document_citation":"CISA BOD 22-01 Catalog (CVE-2024-7399)"},{"id":"SEA-CISA-2024-7399-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Mandatory remediation: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","source_quote_or_pointer":"Remediation Deadline: 2026-05-08","fact_id":"SEA-CISA-2024-7399-F2","document_citation":"Remediation Deadline: 2026-05-08"}],"source_stated_contributors":["Actively exploited in production systems pursuant to CISA Binding Operational Directive BOD 22-01","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action"],"failure_mechanisms":["SEA-FM-004"],"consequences":["Actively exploited in the wild"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-cisa-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"CISA Known Exploited Vulnerabilities Directive","filing_id":"CVE-2024-7399","reporting_entity":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","regulatory_body":"U.S. Department of Homeland Security / CISA"},"safeguards":[{"safeguard_id":"SEA-CISA-2024-7399-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CISA-2024-7399-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2024-7399"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CISA-2024-57728","title":"SimpleHelp Path Traversal Vulnerability","display_title":"SimpleHelp issue could expose restricted files","display_summary":"SimpleHelp contains a path traversal vulnerability that allows admin users to upload arbitrary files anywhere on the file system by uploading a crafted zip file (i.e. zip slip).","display_reference":"CVE-2024-57728","display_source_type":"CISA advisory","incident_date":"2026-04-24","disclosure_date":"2026-04-24","source_type":"vendor_postmortem","source_url":"https://simple-help.com/kb---security-vulnerabilities-01-2025#security-vulnerabilities-in-simplehelp-5-5-7-and-earlier","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:06.394Z","source_hash":"content-fingerprint:fnv1a-495d0250","affected_system":{"organization":"SimpleHelp","product":"SimpleHelp","system_type":"Enterprise Software Platform & Infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Enterprise Software"},"documented_facts":[{"id":"SEA-CISA-2024-57728-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"SimpleHelp contains a path traversal vulnerability that allows admin users to upload arbitrary files anywhere on the file system by uploading a crafted zip file (i.e. zip slip). This can be exploited to execute arbitrary code on the host in the context of the SimpleHelp server user.","source_quote_or_pointer":"CISA BOD 22-01 Catalog (CVE-2024-57728)","fact_id":"SEA-CISA-2024-57728-F1","document_citation":"CISA BOD 22-01 Catalog (CVE-2024-57728)"},{"id":"SEA-CISA-2024-57728-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Mandatory remediation: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","source_quote_or_pointer":"Remediation Deadline: 2026-05-08","fact_id":"SEA-CISA-2024-57728-F2","document_citation":"Remediation Deadline: 2026-05-08"}],"source_stated_contributors":["Actively exploited in production systems pursuant to CISA Binding Operational Directive BOD 22-01","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii","data.uploaded_files"],"failure_mechanisms":["SEA-FM-004"],"consequences":["Actively exploited in the wild"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-cisa-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"CISA Known Exploited Vulnerabilities Directive","filing_id":"CVE-2024-57728","reporting_entity":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","regulatory_body":"U.S. Department of Homeland Security / CISA"},"safeguards":[{"safeguard_id":"SEA-CISA-2024-57728-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CISA-2024-57728-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2024-57728"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CISA-2024-57726","title":"SimpleHelp Missing Authorization Vulnerability","display_title":"Security issue reported in SimpleHelp","display_summary":"SimpleHelp contains a missing authorization vulnerability that could allow low-privileged technicians to create API keys with excessive permissions.","display_reference":"CVE-2024-57726","display_source_type":"CISA advisory","incident_date":"2026-04-24","disclosure_date":"2026-04-24","source_type":"vendor_postmortem","source_url":"https://simple-help.com/kb---security-vulnerabilities-01-2025#security-vulnerabilities-in-simplehelp-5-5-7-and-earlier","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:06.394Z","source_hash":"content-fingerprint:fnv1a-949f2af0","affected_system":{"organization":"SimpleHelp","product":"SimpleHelp","system_type":"Enterprise Software Platform & Infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Enterprise Software"},"documented_facts":[{"id":"SEA-CISA-2024-57726-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"SimpleHelp contains a missing authorization vulnerability that could allow low-privileged technicians to create API keys with excessive permissions. These API keys can be used to escalate privileges to the server admin role.","source_quote_or_pointer":"CISA BOD 22-01 Catalog (CVE-2024-57726)","fact_id":"SEA-CISA-2024-57726-F1","document_citation":"CISA BOD 22-01 Catalog (CVE-2024-57726)"},{"id":"SEA-CISA-2024-57726-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Mandatory remediation: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","source_quote_or_pointer":"Remediation Deadline: 2026-05-08","fact_id":"SEA-CISA-2024-57726-F2","document_citation":"Remediation Deadline: 2026-05-08"}],"source_stated_contributors":["Actively exploited in production systems pursuant to CISA Binding Operational Directive BOD 22-01","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action"],"failure_mechanisms":["SEA-FM-004"],"consequences":["Actively exploited in the wild"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-cisa-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"CISA Known Exploited Vulnerabilities Directive","filing_id":"CVE-2024-57726","reporting_entity":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","regulatory_body":"U.S. Department of Homeland Security / CISA"},"safeguards":[{"safeguard_id":"SEA-CISA-2024-57726-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CISA-2024-57726-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2024-57726"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CISA-2026-20122","title":"Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability","display_title":"Security issue reported in Catalyst SD-WAN Manger","display_summary":"Cisco Catalyst SD-WAN Manager contains an incorrect use of privileged APIs vulnerability due to improper file handling on the API interface of an affected system.","display_reference":"CVE-2026-20122","display_source_type":"CISA advisory","incident_date":"2026-04-20","disclosure_date":"2026-04-20","source_type":"vendor_postmortem","source_url":"https://www.cisa.gov/news-events/directives/ed-26-03-mitigate-vulnerabilities-cisco-sd-wan-systems","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:06.395Z","source_hash":"content-fingerprint:fnv1a-f3421168","affected_system":{"organization":"Cisco","product":"Catalyst SD-WAN Manger","system_type":"Enterprise Software Platform & Infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Enterprise Software"},"documented_facts":[{"id":"SEA-CISA-2026-20122-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Cisco Catalyst SD-WAN Manager contains an incorrect use of privileged APIs vulnerability due to improper file handling on the API interface of an affected system. An attacker could exploit this vulnerability by uploading a malicious file on the local file system. A successful exploit could allow the attacker to overwrite arbitrary files on the affected system and gain vmanage user privileges.","source_quote_or_pointer":"CISA BOD 22-01 Catalog (CVE-2026-20122)","fact_id":"SEA-CISA-2026-20122-F1","document_citation":"CISA BOD 22-01 Catalog (CVE-2026-20122)"},{"id":"SEA-CISA-2026-20122-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Mandatory remediation: Please adhere to CISA’s guidelines to assess exposure and mitigate risks associated with Cisco SD-WAN devices as outlines in CISA’s Emergency Directive 26-03 (URL listed below in Notes) and CISA’s “Hunt & Hardening Guidance for Cisco SD-WAN Devices (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.","source_quote_or_pointer":"Remediation Deadline: 2026-04-23","fact_id":"SEA-CISA-2026-20122-F2","document_citation":"Remediation Deadline: 2026-04-23"}],"source_stated_contributors":["Actively exploited in production systems pursuant to CISA Binding Operational Directive BOD 22-01","Please adhere to CISA’s guidelines to assess exposure and mitigate risks associated with Cisco SD-WAN devices as outlines in CISA’s Emergency Directive 26-03 (URL listed below in Notes) and CISA’s “Hunt & Hardening Guidance for Cisco SD-WAN Devices (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii"],"failure_mechanisms":["SEA-FM-004"],"consequences":["Actively exploited in the wild"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-cisa-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"CISA Known Exploited Vulnerabilities Directive","filing_id":"CVE-2026-20122","reporting_entity":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","regulatory_body":"U.S. Department of Homeland Security / CISA"},"safeguards":[{"safeguard_id":"SEA-CISA-2026-20122-SG1","label":"Federal Security Directive Patch & Isolation","description":"Please adhere to CISA’s guidelines to assess exposure and mitigate risks associated with Cisco SD-WAN devices as outlines in CISA’s Emergency Directive 26-03 (URL listed below in Notes) and CISA’s “Hunt & Hardening Guidance for Cisco SD-WAN Devices (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CISA-2026-20122-SG1","label":"Federal Security Directive Patch & Isolation","description":"Please adhere to CISA’s guidelines to assess exposure and mitigate risks associated with Cisco SD-WAN devices as outlines in CISA’s Emergency Directive 26-03 (URL listed below in Notes) and CISA’s “Hunt & Hardening Guidance for Cisco SD-WAN Devices (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-20122"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CISA-2025-2749","title":"Kentico Xperience Path Traversal Vulnerability","display_title":"Kentico Xperience issue could expose restricted files","display_summary":"Kentico Xperience contains a path traversal vulnerability that could allow an authenticated user's Staging Sync Server to upload arbitrary data to path relative locations.","display_reference":"CVE-2025-2749","display_source_type":"CISA advisory","incident_date":"2026-04-20","disclosure_date":"2026-04-20","source_type":"vendor_postmortem","source_url":"https://devnet.kentico.com/download/hotfixes","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:06.395Z","source_hash":"content-fingerprint:fnv1a-c1e37e49","affected_system":{"organization":"Kentico","product":"Kentico Xperience","system_type":"Enterprise Software Platform & Infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Enterprise Software"},"documented_facts":[{"id":"SEA-CISA-2025-2749-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Kentico Xperience contains a path traversal vulnerability that could allow an authenticated user's Staging Sync Server to upload arbitrary data to path relative locations.","source_quote_or_pointer":"CISA BOD 22-01 Catalog (CVE-2025-2749)","fact_id":"SEA-CISA-2025-2749-F1","document_citation":"CISA BOD 22-01 Catalog (CVE-2025-2749)"},{"id":"SEA-CISA-2025-2749-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Mandatory remediation: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","source_quote_or_pointer":"Remediation Deadline: 2026-05-04","fact_id":"SEA-CISA-2025-2749-F2","document_citation":"Remediation Deadline: 2026-05-04"}],"source_stated_contributors":["Actively exploited in production systems pursuant to CISA Binding Operational Directive BOD 22-01","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","data.uploaded_files"],"failure_mechanisms":["SEA-FM-004"],"consequences":["Actively exploited in the wild"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-cisa-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"CISA Known Exploited Vulnerabilities Directive","filing_id":"CVE-2025-2749","reporting_entity":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","regulatory_body":"U.S. Department of Homeland Security / CISA"},"safeguards":[{"safeguard_id":"SEA-CISA-2025-2749-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CISA-2025-2749-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2025-2749"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CISA-2025-48700","title":"Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability","display_title":"Zimbra Collaboration Suite (ZCS) issue could run attacker-controlled scripts in a browser","display_summary":"Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability that could allow attackers to execute arbitrary JavaScript within the user's session, potentially leading to unauthorized access to…","display_reference":"CVE-2025-48700","display_source_type":"CISA advisory","incident_date":"2026-04-20","disclosure_date":"2026-04-20","source_type":"vendor_postmortem","source_url":"https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:06.395Z","source_hash":"content-fingerprint:fnv1a-3b9efd3b","affected_system":{"organization":"Synacor","product":"Zimbra Collaboration Suite (ZCS)","system_type":"Enterprise Software Platform & Infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Enterprise Software"},"documented_facts":[{"id":"SEA-CISA-2025-48700-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability that could allow attackers to execute arbitrary JavaScript within the user's session, potentially leading to unauthorized access to sensitive information.","source_quote_or_pointer":"CISA BOD 22-01 Catalog (CVE-2025-48700)","fact_id":"SEA-CISA-2025-48700-F1","document_citation":"CISA BOD 22-01 Catalog (CVE-2025-48700)"},{"id":"SEA-CISA-2025-48700-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Mandatory remediation: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","source_quote_or_pointer":"Remediation Deadline: 2026-04-23","fact_id":"SEA-CISA-2025-48700-F2","document_citation":"Remediation Deadline: 2026-04-23"}],"source_stated_contributors":["Actively exploited in production systems pursuant to CISA Binding Operational Directive BOD 22-01","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":["SEA-FM-004"],"consequences":["Actively exploited in the wild"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-cisa-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"CISA Known Exploited Vulnerabilities Directive","filing_id":"CVE-2025-48700","reporting_entity":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","regulatory_body":"U.S. Department of Homeland Security / CISA"},"safeguards":[{"safeguard_id":"SEA-CISA-2025-48700-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CISA-2025-48700-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2025-48700"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CISA-2012-1854","title":"Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability","display_title":"Security issue reported in Visual Basic for Applications (VBA)","display_summary":"Microsoft Visual Basic for Applications (VBA) contains an insecure library loading vulnerability that could allow for remote code execution.","display_reference":"CVE-2012-1854","display_source_type":"CISA advisory","incident_date":"2026-04-13","disclosure_date":"2026-04-13","source_type":"vendor_postmortem","source_url":"https://learn.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-046","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T21:48:06.395Z","source_hash":"content-fingerprint:fnv1a-257ee80d","affected_system":{"organization":"Microsoft","product":"Visual Basic for Applications (VBA)","system_type":"Enterprise Software Platform & Infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Enterprise Software"},"documented_facts":[{"id":"SEA-CISA-2012-1854-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Microsoft Visual Basic for Applications (VBA) contains an insecure library loading vulnerability that could allow for remote code execution.","source_quote_or_pointer":"CISA BOD 22-01 Catalog (CVE-2012-1854)","fact_id":"SEA-CISA-2012-1854-F1","document_citation":"CISA BOD 22-01 Catalog (CVE-2012-1854)"},{"id":"SEA-CISA-2012-1854-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Mandatory remediation: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","source_quote_or_pointer":"Remediation Deadline: 2026-04-27","fact_id":"SEA-CISA-2012-1854-F2","document_citation":"Remediation Deadline: 2026-04-27"}],"source_stated_contributors":["Actively exploited in production systems pursuant to CISA Binding Operational Directive BOD 22-01","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-004"],"consequences":["Actively exploited in the wild"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-cisa-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"CISA Known Exploited Vulnerabilities Directive","filing_id":"CVE-2012-1854","reporting_entity":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","regulatory_body":"U.S. Department of Homeland Security / CISA"},"safeguards":[{"safeguard_id":"SEA-CISA-2012-1854-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CISA-2012-1854-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2012-1854"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CISA-2023-21529","title":"Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability","display_title":"Exchange Server issue could make the application process unsafe input","display_summary":"Microsoft Exchange Server contains a deserialization of untrusted data that allows an authenticated attacker to achieve remote code execution.","display_reference":"CVE-2023-21529","display_source_type":"CISA advisory","incident_date":"2026-04-13","disclosure_date":"2026-04-13","source_type":"cve_advisory","source_url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21529","source_title":"Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-08T16:00:21.078Z","source_hash":"content-fingerprint:fnv1a-fb9c6577","affected_system":{"organization":"Microsoft","product":"Exchange Server","system_type":"Enterprise Software Platform & Infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Enterprise Software"},"documented_facts":[{"id":"SEA-CISA-2023-21529-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Microsoft Exchange Server contains a deserialization of untrusted data that allows an authenticated attacker to achieve remote code execution.","source_quote_or_pointer":"CISA BOD 22-01 Catalog (CVE-2023-21529)","fact_id":"SEA-CISA-2023-21529-F1","document_citation":"CISA BOD 22-01 Catalog (CVE-2023-21529)"},{"id":"SEA-CISA-2023-21529-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Mandatory remediation: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","source_quote_or_pointer":"Remediation Deadline: 2026-04-27","fact_id":"SEA-CISA-2023-21529-F2","document_citation":"Remediation Deadline: 2026-04-27"}],"source_stated_contributors":["Actively exploited in production systems pursuant to CISA Binding Operational Directive BOD 22-01","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-004"],"consequences":["Actively exploited in the wild"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-cisa-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"CISA Known Exploited Vulnerabilities Directive","filing_id":"CVE-2023-21529","reporting_entity":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","regulatory_body":"U.S. Department of Homeland Security / CISA"},"safeguards":[{"safeguard_id":"SEA-CISA-2023-21529-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CISA-2023-21529-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2023-21529"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CISA-2026-21643","title":"Fortinet FortiClient EMS SQL Injection Vulnerability","display_title":"FortiClient EMS issue could expose or alter stored data","display_summary":"Fortinet FortiClient EMS contains a SQL injection vulnerability that may allow an unauthenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests.","display_reference":"CVE-2026-21643","display_source_type":"CISA advisory","incident_date":"2026-04-13","disclosure_date":"2026-04-13","source_type":"vendor_postmortem","source_url":"https://fortiguard.fortinet.com/psirt/FG-IR-25-1142","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-08T16:00:21.078Z","source_hash":"content-fingerprint:fnv1a-ff7a6a54","affected_system":{"organization":"Fortinet","product":"FortiClient EMS","system_type":"Enterprise Software Platform & Infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Enterprise Software"},"documented_facts":[{"id":"SEA-CISA-2026-21643-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Fortinet FortiClient EMS contains a SQL injection vulnerability that may allow an unauthenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests.","source_quote_or_pointer":"CISA BOD 22-01 Catalog (CVE-2026-21643)","fact_id":"SEA-CISA-2026-21643-F1","document_citation":"CISA BOD 22-01 Catalog (CVE-2026-21643)"},{"id":"SEA-CISA-2026-21643-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Mandatory remediation: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","source_quote_or_pointer":"Remediation Deadline: 2026-04-16","fact_id":"SEA-CISA-2026-21643-F2","document_citation":"Remediation Deadline: 2026-04-16"}],"source_stated_contributors":["Actively exploited in production systems pursuant to CISA Binding Operational Directive BOD 22-01","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-004"],"consequences":["Actively exploited in the wild"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-cisa-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"CISA Known Exploited Vulnerabilities Directive","filing_id":"CVE-2026-21643","reporting_entity":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","regulatory_body":"U.S. Department of Homeland Security / CISA"},"safeguards":[{"safeguard_id":"SEA-CISA-2026-21643-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CISA-2026-21643-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-21643"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CISA-2026-33634","title":"Aquasecurity Trivy Embedded Malicious Code Vulnerability","display_title":"Security issue reported in Trivy","display_summary":"Aquasecurity Trivy contains an embedded malicious code vulnerability that could allow an attacker to gain access to everything in the CI/CD environment, including all tokens, SSH keys, cloud credentials, database…","display_reference":"CVE-2026-33634","display_source_type":"CISA advisory","incident_date":"2026-03-26","disclosure_date":"2026-03-26","source_type":"cve_advisory","source_url":"https://github.com/advisories/GHSA-69fq-xp46-6x23","source_title":"Aquasecurity Trivy Embedded Malicious Code Vulnerability","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-08T16:00:21.078Z","source_hash":"content-fingerprint:fnv1a-19beb655","affected_system":{"organization":"Aquasecurity","product":"Trivy","system_type":"Enterprise Software Platform & Infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Enterprise Software"},"documented_facts":[{"id":"SEA-CISA-2026-33634-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Aquasecurity Trivy contains an embedded malicious code vulnerability that could allow an attacker to gain access to everything in the CI/CD environment, including all tokens, SSH keys, cloud credentials, database passwords, and any sensitive configuration in memory.","source_quote_or_pointer":"CISA BOD 22-01 Catalog (CVE-2026-33634)","fact_id":"SEA-CISA-2026-33634-F1","document_citation":"CISA BOD 22-01 Catalog (CVE-2026-33634)"},{"id":"SEA-CISA-2026-33634-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Mandatory remediation: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","source_quote_or_pointer":"Remediation Deadline: 2026-04-09","fact_id":"SEA-CISA-2026-33634-F2","document_citation":"Remediation Deadline: 2026-04-09"}],"source_stated_contributors":["Actively exploited in production systems pursuant to CISA Binding Operational Directive BOD 22-01","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.code_execution","auth.privileged_action","auth.write_action","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-004"],"consequences":["Actively exploited in the wild"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-cisa-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"CISA Known Exploited Vulnerabilities Directive","filing_id":"CVE-2026-33634","reporting_entity":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","regulatory_body":"U.S. Department of Homeland Security / CISA"},"safeguards":[{"safeguard_id":"SEA-CISA-2026-33634-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CISA-2026-33634-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2026-33634"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-CISA-2021-22054","title":"Omnissa Workspace ONE Server-Side Request Forgery","display_title":"Workspace One UEM issue could reach internal services","display_summary":"Omnissa Workspace One UEM formerly known as VMware Workspace One UEM contains a server-side request forgery (SSRF) vulnerability that could allow a malicious actor with network access to UEM to send their requests…","display_reference":"CVE-2021-22054","display_source_type":"CISA advisory","incident_date":"2026-03-09","disclosure_date":"2026-03-09","source_type":"vendor_postmortem","source_url":"https://web.archive.org/web/20211222154335/https://www.vmware.com/security/advisories/VMSA-2021-0029.html","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-04T18:00:19.914Z","source_hash":"content-fingerprint:fnv1a-43a5572a","affected_system":{"organization":"Omnissa","product":"Workspace One UEM","system_type":"Enterprise Software Platform & Infrastructure","is_ai_system":false,"is_agentic":false,"primary_language":"Enterprise Software"},"documented_facts":[{"id":"SEA-CISA-2021-22054-F1","claim_type":"COLLECTSEA_INFERENCE","statement":"Omnissa Workspace One UEM formerly known as VMware Workspace One UEM contains a server-side request forgery (SSRF) vulnerability that could allow a malicious actor with network access to UEM to send their requests without authentication and to gain access to sensitive information.","source_quote_or_pointer":"CISA BOD 22-01 Catalog (CVE-2021-22054)","fact_id":"SEA-CISA-2021-22054-F1","document_citation":"CISA BOD 22-01 Catalog (CVE-2021-22054)"},{"id":"SEA-CISA-2021-22054-F2","claim_type":"COLLECTSEA_INFERENCE","statement":"Mandatory remediation: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","source_quote_or_pointer":"Remediation Deadline: 2026-03-23","fact_id":"SEA-CISA-2021-22054-F2","document_citation":"Remediation Deadline: 2026-03-23"}],"source_stated_contributors":["Actively exploited in production systems pursuant to CISA Binding Operational Directive BOD 22-01","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable."],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.untrusted_external_text"],"failure_mechanisms":["SEA-FM-004"],"consequences":["Actively exploited in the wild"],"confidence":"TENTATIVE","authority_level":"UNPRIVILEGED_EXTERNAL"},"provenance":{"extractor_version":"v5.0-classified-cisa-ingestion","review_status":"machine_extracted","review_notes":[]},"source_authority":{"document_type":"CISA Known Exploited Vulnerabilities Directive","filing_id":"CVE-2021-22054","reporting_entity":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","regulatory_body":"U.S. Department of Homeland Security / CISA"},"safeguards":[{"safeguard_id":"SEA-CISA-2021-22054-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"countermeasures":[{"safeguard_id":"SEA-CISA-2021-22054-SG1","label":"Federal Security Directive Patch & Isolation","description":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","target_failure_mode":"SEA-FM-004","effectiveness_level":"PREVENTATIVE"}],"lessons":[],"cve_references":["CVE-2021-22054"],"direct_identifiers":[],"status":"active"},{"incident_id":"SEA-8K-0001104659-26-115541","title":"Park Dental Partners, Inc. discloses a cybersecurity incident (SEC 8-K, October 2026)","display_title":"Park Dental Partners, Inc. discloses a cybersecurity incident (SEC 8-K, October 2026)","display_summary":"As previously reported, on August 28, 2026 , Park Dental Partners, Inc. (“Company”) identified unauthorized access to its computer network.","display_reference":"0001104659-26-115541","display_source_type":"SEC filing","incident_date":"2026-10-13","disclosure_date":"2026-10-13","source_type":"regulator_report","source_url":"https://www.sec.gov/Archives/edgar/data/2069604/000110465926115541/park-20261007x8k.htm","source_title":"Park Dental Partners, Inc., Form 8-K (Item 1.05), filed 2026-10-13","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-13T22:56:31.925Z","source_hash":"content-fingerprint:fnv1a-d9492e28","affected_system":{"organization":"Park Dental Partners, Inc.","product":"Corporate systems","system_type":"Enterprise IT and business systems","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-8K-0001104659-26-115541-F1","claim_type":"SOURCE_FACT","statement":"As previously reported, on August 28, 2026 , Park Dental Partners, Inc. (“Company”) identified unauthorized access to its computer network.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001104659-26-115541-F1","document_citation":"Form 8-K Item 1.05, Park Dental Partners, Inc., filed 2026-10-13"},{"id":"SEA-8K-0001104659-26-115541-F2","claim_type":"SOURCE_FACT","statement":"The investigation has determined that data was subject to unauthorized acquisition as a result of the incident.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001104659-26-115541-F2","document_citation":"Form 8-K Item 1.05, Park Dental Partners, Inc., filed 2026-10-13"},{"id":"SEA-8K-0001104659-26-115541-F3","claim_type":"SOURCE_FACT","statement":"The Company has identified impacted patients whose protected health information was involved and is completing notifications pursuant to applicable state and federal law.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001104659-26-115541-F3","document_citation":"Form 8-K Item 1.05, Park Dental Partners, Inc., filed 2026-10-13"},{"id":"SEA-8K-0001104659-26-115541-F4","claim_type":"SOURCE_FACT","statement":"To date, the Company is not aware of any unauthorized use of protected health information or any damages as a result of the incident.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001104659-26-115541-F4","document_citation":"Form 8-K Item 1.05, Park Dental Partners, Inc., filed 2026-10-13"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.pii"],"failure_mechanisms":[],"consequences":["Operational disruption","Data exposure","Financial impact"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"disclosure-v1","review_status":"machine_extracted","review_notes":["Ingested automatically from the company’s SEC filing. Facts are quoted from the filing; the failure-pattern classification is rule-based and unreviewed."]},"source_authority":{"document_type":"SEC Form 8-K, Item 1.05 (Material Cybersecurity Incidents)","filing_id":"0001104659-26-115541","reporting_entity":"Park Dental Partners, Inc.","regulatory_body":"U.S. Securities and Exchange Commission"},"safeguards":[],"countermeasures":[],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"disclosure"},{"incident_id":"SEA-8K-0001104659-26-109813","title":"Astrana Health, Inc. discloses a cybersecurity incident involving social engineering (SEC 8-K, September 2026)","display_title":"Astrana Health, Inc. discloses a cybersecurity incident involving social engineering (SEC 8-K, September 2026)","display_summary":"Astrana Health, Inc. (the “Company”) recently became aware that its subsidiary Astrana Health Management, Inc. detected unusual activity within its environment.","display_reference":"0001104659-26-109813","display_source_type":"SEC filing","incident_date":"2026-09-23","disclosure_date":"2026-09-23","source_type":"regulator_report","source_url":"https://www.sec.gov/Archives/edgar/data/1083446/000110465926109813/asth-20260922x8k.htm","source_title":"Astrana Health, Inc., Form 8-K (Item 1.05), filed 2026-09-23","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T13:10:51.479Z","source_hash":"content-fingerprint:fnv1a-17fddef7","affected_system":{"organization":"Astrana Health, Inc.","product":"Corporate systems","system_type":"Enterprise IT and business systems","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-8K-0001104659-26-109813-F1","claim_type":"SOURCE_FACT","statement":"Astrana Health, Inc. (the “Company”) recently became aware that its subsidiary Astrana Health Management, Inc. detected unusual activity within its environment.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001104659-26-109813-F1","document_citation":"Form 8-K Item 1.05, Astrana Health, Inc., filed 2026-09-23"},{"id":"SEA-8K-0001104659-26-109813-F2","claim_type":"SOURCE_FACT","statement":"The incident involved a series of social engineering attempts in which threat actors, impersonating Company personnel and spoofing the Company’s main corporate telephone number, contacted certain employees in an effort to obtain unauthorized access to Company systems.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001104659-26-109813-F2","document_citation":"Form 8-K Item 1.05, Astrana Health, Inc., filed 2026-09-23"},{"id":"SEA-8K-0001104659-26-109813-F3","claim_type":"SOURCE_FACT","statement":"The Company’s cybersecurity team detected and responded to the unauthorized activity, launched an investigation, engaged a leading third-party cybersecurity and digital forensics firm, notified law enforcement, and is notifying state and federal regulators, and payer partners.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001104659-26-109813-F3","document_citation":"Form 8-K Item 1.05, Astrana Health, Inc., filed 2026-09-23"},{"id":"SEA-8K-0001104659-26-109813-F4","claim_type":"SOURCE_FACT","statement":"Based on the current status of the Company’s ongoing investigation, the Company believes that certain private and/or confidential information maintained on the Company’s servers has been accessed and/or acquired without authorization.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001104659-26-109813-F4","document_citation":"Form 8-K Item 1.05, Astrana Health, Inc., filed 2026-09-23"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.financial_action","data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012","SEA-FM-009"],"consequences":["Operational disruption","Data exposure","Financial impact"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"disclosure-v1","review_status":"machine_extracted","review_notes":["Ingested automatically from the company’s SEC filing. Facts are quoted from the filing; the failure-pattern classification is rule-based and unreviewed."]},"source_authority":{"document_type":"SEC Form 8-K, Item 1.05 (Material Cybersecurity Incidents)","filing_id":"0001104659-26-109813","reporting_entity":"Astrana Health, Inc.","regulatory_body":"U.S. Securities and Exchange Commission"},"safeguards":[],"countermeasures":[],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"disclosure"},{"incident_id":"SEA-8K-0000885725-26-000059","title":"Boston Scientific Corp discloses a cybersecurity incident (SEC 8-K, September 2026)","display_title":"Boston Scientific Corp discloses a cybersecurity incident (SEC 8-K, September 2026)","display_summary":"As previously disclosed in a Current Report on Form 8-K filed on August 26, 2026 with the Securities and Exchange Commission, on August 25, 2026, Boston Scientific Corporation (the “ Company ”) identified a cybersecurity…","display_reference":"0000885725-26-000059","display_source_type":"SEC filing","incident_date":"2026-09-08","disclosure_date":"2026-09-08","source_type":"regulator_report","source_url":"https://www.sec.gov/Archives/edgar/data/885725/000088572526000059/bsx-20260907.htm","source_title":"Boston Scientific Corp, Form 8-K (Item 1.05), filed 2026-09-08","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T13:10:51.160Z","source_hash":"content-fingerprint:fnv1a-560368e7","affected_system":{"organization":"Boston Scientific Corp","product":"Corporate systems","system_type":"Enterprise IT and business systems","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-8K-0000885725-26-000059-F1","claim_type":"SOURCE_FACT","statement":"As previously disclosed in a Current Report on Form 8-K filed on August 26, 2026 with the Securities and Exchange Commission, on August 25, 2026, Boston Scientific Corporation (the “ Company ”) identified a cybersecurity incident that affected certain of its information technology systems and resulted in a global disruption to the Company’s operations.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0000885725-26-000059-F1","document_citation":"Form 8-K Item 1.05, Boston Scientific Corp, filed 2026-09-08"},{"id":"SEA-8K-0000885725-26-000059-F2","claim_type":"SOURCE_FACT","statement":"Upon detection, the Company activated its incident response protocols, and since then has been working, with the assistance of third-party cybersecurity experts, to investigate, assess and contain the impact of the incident and to restore operations.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0000885725-26-000059-F2","document_citation":"Form 8-K Item 1.05, Boston Scientific Corp, filed 2026-09-08"},{"id":"SEA-8K-0000885725-26-000059-F3","claim_type":"SOURCE_FACT","statement":"The incident involved unauthorized activity on certain of the Company’s systems that resulted in a network outage affecting access to certain operating systems and business applications, which impacted the Company’s ability to manufacture as well as process and ship customer orders.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0000885725-26-000059-F3","document_citation":"Form 8-K Item 1.05, Boston Scientific Corp, filed 2026-09-08"},{"id":"SEA-8K-0000885725-26-000059-F4","claim_type":"SOURCE_FACT","statement":"As of the date of this Current Report on Form 8-K, the Company has not identified evidence of ongoing unauthorized access to its systems.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0000885725-26-000059-F4","document_citation":"Form 8-K Item 1.05, Boston Scientific Corp, filed 2026-09-08"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.financial_action","auth.write_action","data.pii"],"failure_mechanisms":["SEA-FM-014"],"consequences":["Operational disruption","Data exposure","Financial impact"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"disclosure-v1","review_status":"machine_extracted","review_notes":["Ingested automatically from the company’s SEC filing. Facts are quoted from the filing; the failure-pattern classification is rule-based and unreviewed."]},"source_authority":{"document_type":"SEC Form 8-K, Item 1.05 (Material Cybersecurity Incidents)","filing_id":"0000885725-26-000059","reporting_entity":"Boston Scientific Corp","regulatory_body":"U.S. Securities and Exchange Commission"},"safeguards":[],"countermeasures":[],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"disclosure"},{"incident_id":"SEA-8K-0001104659-26-104300","title":"Park Dental Partners, Inc. discloses a cybersecurity incident (SEC 8-K, September 2026)","display_title":"Park Dental Partners, Inc. discloses a cybersecurity incident (SEC 8-K, September 2026)","display_summary":"On August 28, 2026 , Park Dental Partners, Inc. (“we” or the “Company”) identified unauthorized access to its computer network.","display_reference":"0001104659-26-104300","display_source_type":"SEC filing","incident_date":"2026-09-01","disclosure_date":"2026-09-01","source_type":"regulator_report","source_url":"https://www.sec.gov/Archives/edgar/data/2069604/000110465926104300/park-20260828x8k.htm","source_title":"Park Dental Partners, Inc., Form 8-K (Item 1.05), filed 2026-09-01","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T13:10:50.847Z","source_hash":"content-fingerprint:fnv1a-aa30fa07","affected_system":{"organization":"Park Dental Partners, Inc.","product":"Corporate systems","system_type":"Enterprise IT and business systems","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-8K-0001104659-26-104300-F1","claim_type":"SOURCE_FACT","statement":"On August 28, 2026 , Park Dental Partners, Inc. (“we” or the “Company”) identified unauthorized access to its computer network.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001104659-26-104300-F1","document_citation":"Form 8-K Item 1.05, Park Dental Partners, Inc., filed 2026-09-01"},{"id":"SEA-8K-0001104659-26-104300-F2","claim_type":"SOURCE_FACT","statement":"As of the date of this Current Report on Form 8-K, the incident has not materially disrupted the Company’s operations, however, due to the possible access of patient data, we are treating this as a reportable event.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001104659-26-104300-F2","document_citation":"Form 8-K Item 1.05, Park Dental Partners, Inc., filed 2026-09-01"},{"id":"SEA-8K-0001104659-26-104300-F3","claim_type":"SOURCE_FACT","statement":"The Company is in the process of estimating any financial, legal, operational, and reputational impact of the incident.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001104659-26-104300-F3","document_citation":"Form 8-K Item 1.05, Park Dental Partners, Inc., filed 2026-09-01"},{"id":"SEA-8K-0001104659-26-104300-F4","claim_type":"SOURCE_FACT","statement":"As of the date of this report, an estimate is not reasonably possible, however, the Company has not identified any material impact on its financial condition, results of operations, or business operations.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001104659-26-104300-F4","document_citation":"Form 8-K Item 1.05, Park Dental Partners, Inc., filed 2026-09-01"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","arch.event_driven"],"failure_mechanisms":["SEA-FM-014"],"consequences":["Operational disruption","Data exposure","Financial impact"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"disclosure-v1","review_status":"machine_extracted","review_notes":["Ingested automatically from the company’s SEC filing. Facts are quoted from the filing; the failure-pattern classification is rule-based and unreviewed."]},"source_authority":{"document_type":"SEC Form 8-K, Item 1.05 (Material Cybersecurity Incidents)","filing_id":"0001104659-26-104300","reporting_entity":"Park Dental Partners, Inc.","regulatory_body":"U.S. Securities and Exchange Commission"},"safeguards":[],"countermeasures":[],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"disclosure"},{"incident_id":"SEA-8K-0001628280-26-059602","title":"Nutex Health Inc. discloses a cybersecurity incident with data taken without authorization (SEC 8-K, August 2026)","display_title":"Nutex Health Inc. discloses a cybersecurity incident with data taken without authorization (SEC 8-K, August 2026)","display_summary":"As disclosed in Item 8.01 of a Current Report on Form 8-K filed with the Securities and Exchange Commission on August 24, 2026 (the “Prior 8-K”), Nutex Health Inc.","display_reference":"0001628280-26-059602","display_source_type":"SEC filing","incident_date":"2026-08-31","disclosure_date":"2026-08-31","source_type":"regulator_report","source_url":"https://www.sec.gov/Archives/edgar/data/1479681/000162828026059602/nutx-20260831.htm","source_title":"Nutex Health Inc., Form 8-K (Item 1.05), filed 2026-08-31","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T13:10:50.536Z","source_hash":"content-fingerprint:fnv1a-85e9ca84","affected_system":{"organization":"Nutex Health Inc.","product":"Corporate systems","system_type":"Enterprise IT and business systems","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-8K-0001628280-26-059602-F1","claim_type":"SOURCE_FACT","statement":"As disclosed in Item 8.01 of a Current Report on Form 8-K filed with the Securities and Exchange Commission on August 24, 2026 (the “Prior 8-K”), Nutex Health Inc. (the “Company”) became aware of unauthorized activity involving data stored on its computer network.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001628280-26-059602-F1","document_citation":"Form 8-K Item 1.05, Nutex Health Inc., filed 2026-08-31"},{"id":"SEA-8K-0001628280-26-059602-F2","claim_type":"SOURCE_FACT","statement":"As disclosed in the Prior 8-K, the Company engaged an independent third-party cybersecurity response team and forensic experts, activated a cybersecurity response plan, implemented containment measures and notified law enforcement.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001628280-26-059602-F2","document_citation":"Form 8-K Item 1.05, Nutex Health Inc., filed 2026-08-31"},{"id":"SEA-8K-0001628280-26-059602-F3","claim_type":"SOURCE_FACT","statement":"Based on the current status of the Company’s ongoing investigation, the Company believes that certain information maintained on the Company’s servers was accessed and exfiltrated by an unauthorized third party, including patient and employee, credentialed provider, business and financial information that is private and/or confidential.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001628280-26-059602-F3","document_citation":"Form 8-K Item 1.05, Nutex Health Inc., filed 2026-08-31"},{"id":"SEA-8K-0001628280-26-059602-F4","claim_type":"SOURCE_FACT","statement":"The third party has threatened to post such information externally.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001628280-26-059602-F4","document_citation":"Form 8-K Item 1.05, Nutex Health Inc., filed 2026-08-31"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.financial_action","data.pii"],"failure_mechanisms":["SEA-FM-012","SEA-FM-009"],"consequences":["Operational disruption","Data exposure","Financial impact"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"disclosure-v1","review_status":"machine_extracted","review_notes":["Ingested automatically from the company’s SEC filing. Facts are quoted from the filing; the failure-pattern classification is rule-based and unreviewed."]},"source_authority":{"document_type":"SEC Form 8-K, Item 1.05 (Material Cybersecurity Incidents)","filing_id":"0001628280-26-059602","reporting_entity":"Nutex Health Inc.","regulatory_body":"U.S. Securities and Exchange Commission"},"safeguards":[],"countermeasures":[],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"disclosure"},{"incident_id":"SEA-8K-0000318154-26-000119","title":"Amgen Inc discloses a cybersecurity incident with data taken without authorization (SEC 8-K, July 2026)","display_title":"Amgen Inc discloses a cybersecurity incident with data taken without authorization (SEC 8-K, July 2026)","display_summary":"In July 2026, Amgen Inc. (the \"Company\") identified unauthorized activity involving data stored in cloud environments hosted by third-party cloud service providers.","display_reference":"0000318154-26-000119","display_source_type":"SEC filing","incident_date":"2026-07-31","disclosure_date":"2026-07-31","source_type":"regulator_report","source_url":"https://www.sec.gov/Archives/edgar/data/318154/000031815426000119/amgn-20260729.htm","source_title":"Amgen Inc, Form 8-K (Item 1.05), filed 2026-07-31","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T13:10:50.149Z","source_hash":"content-fingerprint:fnv1a-764cf45c","affected_system":{"organization":"Amgen Inc","product":"Corporate systems","system_type":"Enterprise IT and business systems","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-8K-0000318154-26-000119-F1","claim_type":"SOURCE_FACT","statement":"In July 2026, Amgen Inc. (the \"Company\") identified unauthorized activity involving data stored in cloud environments hosted by third-party cloud service providers.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0000318154-26-000119-F1","document_citation":"Form 8-K Item 1.05, Amgen Inc, filed 2026-07-31"},{"id":"SEA-8K-0000318154-26-000119-F2","claim_type":"SOURCE_FACT","statement":"The Company has since learned that some of its data, including proprietary data, patient protected health information, and other information, has been exfiltrated from these cloud environments.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0000318154-26-000119-F2","document_citation":"Form 8-K Item 1.05, Amgen Inc, filed 2026-07-31"},{"id":"SEA-8K-0000318154-26-000119-F3","claim_type":"SOURCE_FACT","statement":"To date, the Company has not identified any impact to its products, manufacturing operations, or financial reporting systems, or to the Company's ability to meet patient needs.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0000318154-26-000119-F3","document_citation":"Form 8-K Item 1.05, Amgen Inc, filed 2026-07-31"},{"id":"SEA-8K-0000318154-26-000119-F4","claim_type":"SOURCE_FACT","statement":"The Company continues to assess whether, and/or the extent to which, patient, confidential business information, intellectual property, research and development, or other information may have been accessed, acquired, or exfiltrated and to evaluate the potential impact of the incident on the Company.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0000318154-26-000119-F4","document_citation":"Form 8-K Item 1.05, Amgen Inc, filed 2026-07-31"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":["SEA-FM-009"],"consequences":["Operational disruption","Data exposure","Financial impact"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"disclosure-v1","review_status":"machine_extracted","review_notes":["Ingested automatically from the company’s SEC filing. Facts are quoted from the filing; the failure-pattern classification is rule-based and unreviewed."]},"source_authority":{"document_type":"SEC Form 8-K, Item 1.05 (Material Cybersecurity Incidents)","filing_id":"0000318154-26-000119","reporting_entity":"Amgen Inc","regulatory_body":"U.S. Securities and Exchange Commission"},"safeguards":[],"countermeasures":[],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"disclosure"},{"incident_id":"SEA-8K-0001104659-26-080297","title":"AdaptHealth Corp. discloses a cybersecurity incident involving social engineering (SEC 8-K, July 2026)","display_title":"AdaptHealth Corp. discloses a cybersecurity incident involving social engineering (SEC 8-K, July 2026)","display_summary":"AdaptHealth Corp. (the “Company”) is investigating a security incident whereby a threat actor gained unauthorized access to Company systems and exfiltrated certain data therefrom.","display_reference":"0001104659-26-080297","display_source_type":"SEC filing","incident_date":"2026-07-02","disclosure_date":"2026-07-02","source_type":"regulator_report","source_url":"https://www.sec.gov/Archives/edgar/data/1725255/000110465926080297/ahco-20260627x8k.htm","source_title":"AdaptHealth Corp., Form 8-K (Item 1.05), filed 2026-07-02","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T13:10:49.515Z","source_hash":"content-fingerprint:fnv1a-cff5128d","affected_system":{"organization":"AdaptHealth Corp.","product":"Corporate systems","system_type":"Enterprise IT and business systems","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-8K-0001104659-26-080297-F1","claim_type":"SOURCE_FACT","statement":"AdaptHealth Corp. (the “Company”) is investigating a security incident whereby a threat actor gained unauthorized access to Company systems and exfiltrated certain data therefrom.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001104659-26-080297-F1","document_citation":"Form 8-K Item 1.05, AdaptHealth Corp., filed 2026-07-02"},{"id":"SEA-8K-0001104659-26-080297-F2","claim_type":"SOURCE_FACT","statement":"Specifically, based on information obtained to date, the Company believes that a threat actor gained unauthorized access to certain of the Company’s cloud-based business applications, including certain internal patient management systems and document storage platforms.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001104659-26-080297-F2","document_citation":"Form 8-K Item 1.05, AdaptHealth Corp., filed 2026-07-02"},{"id":"SEA-8K-0001104659-26-080297-F3","claim_type":"SOURCE_FACT","statement":"On June 15, 2026, the Company received a communication from a threat actor claiming to have obtained certain data from the Company’s systems.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001104659-26-080297-F3","document_citation":"Form 8-K Item 1.05, AdaptHealth Corp., filed 2026-07-02"},{"id":"SEA-8K-0001104659-26-080297-F4","claim_type":"SOURCE_FACT","statement":"The Company has confirmed that certain data was exfiltrated from its systems including a stored password file associated with insurance billing; the Company also has confirmed that certain external electronic health record system portals were accessed by the threat actor.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001104659-26-080297-F4","document_citation":"Form 8-K Item 1.05, AdaptHealth Corp., filed 2026-07-02"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.financial_action","auth.write_action","data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012","SEA-FM-009"],"consequences":["Operational disruption","Data exposure","Financial impact"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"disclosure-v1","review_status":"machine_extracted","review_notes":["Ingested automatically from the company’s SEC filing. Facts are quoted from the filing; the failure-pattern classification is rule-based and unreviewed."]},"source_authority":{"document_type":"SEC Form 8-K, Item 1.05 (Material Cybersecurity Incidents)","filing_id":"0001104659-26-080297","reporting_entity":"AdaptHealth Corp.","regulatory_body":"U.S. Securities and Exchange Commission"},"safeguards":[],"countermeasures":[],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"disclosure"},{"incident_id":"SEA-8K-0001140361-26-027441","title":"Navient Corp discloses a cybersecurity incident involving ransomware (SEC 8-K, July 2026)","display_title":"Navient Corp discloses a cybersecurity incident involving ransomware (SEC 8-K, July 2026)","display_summary":"On June 8, 2026, the Company became aware of a cybersecurity incident involving a third party law firm (the “Firm”) that provides services to the Company.","display_reference":"0001140361-26-027441","display_source_type":"SEC filing","incident_date":"2026-07-02","disclosure_date":"2026-07-02","source_type":"regulator_report","source_url":"https://www.sec.gov/Archives/edgar/data/1593538/000114036126027441/ef20077249_8k.htm","source_title":"Navient Corp, Form 8-K (Item 1.05), filed 2026-07-02","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T13:10:49.831Z","source_hash":"content-fingerprint:fnv1a-170bb67e","affected_system":{"organization":"Navient Corp","product":"Corporate systems","system_type":"Enterprise IT and business systems","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-8K-0001140361-26-027441-F1","claim_type":"SOURCE_FACT","statement":"On June 8, 2026, the Company became aware of a cybersecurity incident involving a third party law firm (the “Firm”) that provides services to the Company.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001140361-26-027441-F1","document_citation":"Form 8-K Item 1.05, Navient Corp, filed 2026-07-02"},{"id":"SEA-8K-0001140361-26-027441-F2","claim_type":"SOURCE_FACT","statement":"The incident involved a ransomware attack affecting certain of the Firm’s information systems.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001140361-26-027441-F2","document_citation":"Form 8-K Item 1.05, Navient Corp, filed 2026-07-02"},{"id":"SEA-8K-0001140361-26-027441-F3","claim_type":"SOURCE_FACT","statement":"The Company was informed by the Firm that an unauthorized actor accessed certain Company-related data maintained by the Firm as a result of the Firm’s provision of legal services to the Company.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001140361-26-027441-F3","document_citation":"Form 8-K Item 1.05, Navient Corp, filed 2026-07-02"},{"id":"SEA-8K-0001140361-26-027441-F4","claim_type":"SOURCE_FACT","statement":"The incident was limited to the Firm’s environment; the Company has not identified any evidence of unauthorized access to its own systems and has not experienced any disruption to its operations or customer services as a result of the incident.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001140361-26-027441-F4","document_citation":"Form 8-K Item 1.05, Navient Corp, filed 2026-07-02"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.financial_action","data.pii"],"failure_mechanisms":["SEA-FM-014"],"consequences":["Operational disruption","Data exposure","Financial impact"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"disclosure-v1","review_status":"machine_extracted","review_notes":["Ingested automatically from the company’s SEC filing. Facts are quoted from the filing; the failure-pattern classification is rule-based and unreviewed."]},"source_authority":{"document_type":"SEC Form 8-K, Item 1.05 (Material Cybersecurity Incidents)","filing_id":"0001140361-26-027441","reporting_entity":"Navient Corp","regulatory_body":"U.S. Securities and Exchange Commission"},"safeguards":[],"countermeasures":[],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"disclosure"},{"incident_id":"SEA-8K-0001193125-26-282946","title":"River Financial Corp discloses a cybersecurity incident involving ransomware (SEC 8-K, June 2026)","display_title":"River Financial Corp discloses a cybersecurity incident involving ransomware (SEC 8-K, June 2026)","display_summary":"On or about June 16, 2026, an unauthorized threat actor gained access to the network environment of River Financial Corporation, including River Bank & Trust (together, “River”).","display_reference":"0001193125-26-282946","display_source_type":"SEC filing","incident_date":"2026-06-25","disclosure_date":"2026-06-25","source_type":"regulator_report","source_url":"https://www.sec.gov/Archives/edgar/data/1641601/000119312526282946/ck0001641601-20260619.htm","source_title":"River Financial Corp, Form 8-K (Item 1.05), filed 2026-06-25","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T13:10:49.172Z","source_hash":"content-fingerprint:fnv1a-a0ab398c","affected_system":{"organization":"River Financial Corp","product":"Corporate systems","system_type":"Enterprise IT and business systems","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-8K-0001193125-26-282946-F1","claim_type":"SOURCE_FACT","statement":"On or about June 16, 2026, an unauthorized threat actor gained access to the network environment of River Financial Corporation, including River Bank & Trust (together, “River”).","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001193125-26-282946-F1","document_citation":"Form 8-K Item 1.05, River Financial Corp, filed 2026-06-25"},{"id":"SEA-8K-0001193125-26-282946-F2","claim_type":"SOURCE_FACT","statement":"River identified the activity on or about June 19, 2026, and determined that ransomware had been deployed across portions of its server environment.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001193125-26-282946-F2","document_citation":"Form 8-K Item 1.05, River Financial Corp, filed 2026-06-25"},{"id":"SEA-8K-0001193125-26-282946-F3","claim_type":"SOURCE_FACT","statement":"River promptly took containment measures, including disabling affected administrative accounts and taking impacted systems offline.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001193125-26-282946-F3","document_citation":"Form 8-K Item 1.05, River Financial Corp, filed 2026-06-25"},{"id":"SEA-8K-0001193125-26-282946-F4","claim_type":"SOURCE_FACT","statement":"River, with the assistance of a third-party forensic firm, is investigating the nature and scope of the incident, including whether any personally identifiable information was subject to unauthorized access or exfiltration.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001193125-26-282946-F4","document_citation":"Form 8-K Item 1.05, River Financial Corp, filed 2026-06-25"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":[],"failure_mechanisms":["SEA-FM-014","SEA-FM-009"],"consequences":["Operational disruption","Data exposure","Financial impact"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"disclosure-v1","review_status":"machine_extracted","review_notes":["Ingested automatically from the company’s SEC filing. Facts are quoted from the filing; the failure-pattern classification is rule-based and unreviewed."]},"source_authority":{"document_type":"SEC Form 8-K, Item 1.05 (Material Cybersecurity Incidents)","filing_id":"0001193125-26-282946","reporting_entity":"River Financial Corp","regulatory_body":"U.S. Securities and Exchange Commission"},"safeguards":[],"countermeasures":[],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"disclosure"},{"incident_id":"SEA-8K-0001023731-26-000084","title":"8x8 Inc /de/ discloses a cybersecurity incident with data taken without authorization (SEC 8-K, June 2026)","display_title":"8x8 Inc /de/ discloses a cybersecurity incident with data taken without authorization (SEC 8-K, June 2026)","display_summary":"On June 13, 2026, 8x8, Inc. (the “ Company ” or “ we” ) was informed that an unauthorized third party threat actor exploited the Klue Labs, Inc.","display_reference":"0001023731-26-000084","display_source_type":"SEC filing","incident_date":"2026-06-23","disclosure_date":"2026-06-23","source_type":"regulator_report","source_url":"https://www.sec.gov/Archives/edgar/data/1023731/000102373126000084/eght-20260617.htm","source_title":"8x8 Inc /de/, Form 8-K (Item 1.05), filed 2026-06-23","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T13:10:48.857Z","source_hash":"content-fingerprint:fnv1a-54d8f3d4","affected_system":{"organization":"8x8 Inc /de/","product":"Corporate systems","system_type":"Enterprise IT and business systems","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-8K-0001023731-26-000084-F1","claim_type":"SOURCE_FACT","statement":"On June 13, 2026, 8x8, Inc. (the “ Company ” or “ we” ) was informed that an unauthorized third party threat actor exploited the Klue Labs, Inc. (“ Klue ”) third-party application programming integration connected to the Company's Salesforce, Inc. (“ Salesforce ”) customer relationship management system.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001023731-26-000084-F1","document_citation":"Form 8-K Item 1.05, 8x8 Inc /de/, filed 2026-06-23"},{"id":"SEA-8K-0001023731-26-000084-F2","claim_type":"SOURCE_FACT","statement":"The threat actor gained unauthorized access and exfiltrated certain information from 8x8’s Salesforce system.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001023731-26-000084-F2","document_citation":"Form 8-K Item 1.05, 8x8 Inc /de/, filed 2026-06-23"},{"id":"SEA-8K-0001023731-26-000084-F3","claim_type":"SOURCE_FACT","statement":"This unauthorized access occurred between June 11 and 12, 2026.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001023731-26-000084-F3","document_citation":"Form 8-K Item 1.05, 8x8 Inc /de/, filed 2026-06-23"},{"id":"SEA-8K-0001023731-26-000084-F4","claim_type":"SOURCE_FACT","statement":"Upon discovery, 8x8 and Klue, with support from Salesforce, took immediate steps to disable the compromised integration and removed the unauthorized access.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001023731-26-000084-F4","document_citation":"Form 8-K Item 1.05, 8x8 Inc /de/, filed 2026-06-23"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","auth.external_communication","data.pii","arch.external_api"],"failure_mechanisms":["SEA-FM-014","SEA-FM-013","SEA-FM-009"],"consequences":["Operational disruption","Data exposure","Financial impact"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"disclosure-v1","review_status":"machine_extracted","review_notes":["Ingested automatically from the company’s SEC filing. Facts are quoted from the filing; the failure-pattern classification is rule-based and unreviewed."]},"source_authority":{"document_type":"SEC Form 8-K, Item 1.05 (Material Cybersecurity Incidents)","filing_id":"0001023731-26-000084","reporting_entity":"8x8 Inc /de/","regulatory_body":"U.S. Securities and Exchange Commission"},"safeguards":[],"countermeasures":[],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"disclosure"},{"incident_id":"SEA-8K-0001388658-26-000055","title":"iRhythm Holdings, Inc. discloses a cybersecurity incident involving social engineering (SEC 8-K, June 2026)","display_title":"iRhythm Holdings, Inc. discloses a cybersecurity incident involving social engineering (SEC 8-K, June 2026)","display_summary":"On June 8, 2026, iRhythm Holdings, Inc. (the “Company”) identified unauthorized activity involving data maintained on certain third-party-hosted business applications.","display_reference":"0001388658-26-000055","display_source_type":"SEC filing","incident_date":"2026-06-15","disclosure_date":"2026-06-15","source_type":"regulator_report","source_url":"https://www.sec.gov/Archives/edgar/data/1388658/000138865826000055/irtc-20260610.htm","source_title":"iRhythm Holdings, Inc., Form 8-K (Item 1.05), filed 2026-06-15","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T13:10:48.538Z","source_hash":"content-fingerprint:fnv1a-7131d22","affected_system":{"organization":"iRhythm Holdings, Inc.","product":"Corporate systems","system_type":"Enterprise IT and business systems","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-8K-0001388658-26-000055-F1","claim_type":"SOURCE_FACT","statement":"On June 8, 2026, iRhythm Holdings, Inc. (the “Company”) identified unauthorized activity involving data maintained on certain third-party-hosted business applications.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001388658-26-000055-F1","document_citation":"Form 8-K Item 1.05, iRhythm Holdings, Inc., filed 2026-06-15"},{"id":"SEA-8K-0001388658-26-000055-F2","claim_type":"SOURCE_FACT","statement":"On June 9, 2026, the Company received communications from a threat actor claiming to have obtained sensitive information, including proprietary data, patient protected health information and other personal information.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001388658-26-000055-F2","document_citation":"Form 8-K Item 1.05, iRhythm Holdings, Inc., filed 2026-06-15"},{"id":"SEA-8K-0001388658-26-000055-F3","claim_type":"SOURCE_FACT","statement":"The communications from the threat actor demanded payment in exchange for not publicly disclosing this information.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001388658-26-000055-F3","document_citation":"Form 8-K Item 1.05, iRhythm Holdings, Inc., filed 2026-06-15"},{"id":"SEA-8K-0001388658-26-000055-F4","claim_type":"SOURCE_FACT","statement":"Since receipt of the communications, the Company has confirmed that certain data was exfiltrated from those applications.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001388658-26-000055-F4","document_citation":"Form 8-K Item 1.05, iRhythm Holdings, Inc., filed 2026-06-15"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.financial_action","auth.write_action","data.pii"],"failure_mechanisms":["SEA-FM-012","SEA-FM-009"],"consequences":["Operational disruption","Data exposure","Financial impact"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"disclosure-v1","review_status":"machine_extracted","review_notes":["Ingested automatically from the company’s SEC filing. Facts are quoted from the filing; the failure-pattern classification is rule-based and unreviewed."]},"source_authority":{"document_type":"SEC Form 8-K, Item 1.05 (Material Cybersecurity Incidents)","filing_id":"0001388658-26-000055","reporting_entity":"iRhythm Holdings, Inc.","regulatory_body":"U.S. Securities and Exchange Commission"},"safeguards":[],"countermeasures":[],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"disclosure"},{"incident_id":"SEA-8K-0001079973-26-000721","title":"Oncology Institute, Inc. discloses a cybersecurity incident (SEC 8-K, May 2026)","display_title":"Oncology Institute, Inc. discloses a cybersecurity incident (SEC 8-K, May 2026)","display_summary":"The Oncology Institute, Inc. (the “Company”) is providing this disclosure, as a follow-up to its voluntary disclosure in Item 7.01 of a Current Report on Form 8-K filed on November 6, 2025, regarding a cybersecurity…","display_reference":"0001079973-26-000721","display_source_type":"SEC filing","incident_date":"2026-05-22","disclosure_date":"2026-05-22","source_type":"regulator_report","source_url":"https://www.sec.gov/Archives/edgar/data/1799191/000107997326000721/toi_8k.htm","source_title":"Oncology Institute, Inc., Form 8-K (Item 1.05), filed 2026-05-22","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T13:10:48.171Z","source_hash":"content-fingerprint:fnv1a-8720cae5","affected_system":{"organization":"Oncology Institute, Inc.","product":"Corporate systems","system_type":"Enterprise IT and business systems","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-8K-0001079973-26-000721-F1","claim_type":"SOURCE_FACT","statement":"The Oncology Institute, Inc. (the “Company”) is providing this disclosure, as a follow-up to its voluntary disclosure in Item 7.01 of a Current Report on Form 8-K filed on November 6, 2025, regarding a cybersecurity incident affecting a software service provider (“Vendor”) utilized by the Company.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001079973-26-000721-F1","document_citation":"Form 8-K Item 1.05, Oncology Institute, Inc., filed 2026-05-22"},{"id":"SEA-8K-0001079973-26-000721-F2","claim_type":"SOURCE_FACT","statement":"At the time of the prior voluntary disclosure, the Vendor had indicated that investigation was still ongoing and it could not yet confirm any evidence that any patient personal information was compromised as a result of this incident.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001079973-26-000721-F2","document_citation":"Form 8-K Item 1.05, Oncology Institute, Inc., filed 2026-05-22"},{"id":"SEA-8K-0001079973-26-000721-F3","claim_type":"SOURCE_FACT","statement":"However, on May 20, 2026, Kroll, who is the third-party administrator for the Vendor, notified the Company that the Vendor had detected unauthorized access by a third party to certain information systems of the Company, including systems affecting data of patients.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001079973-26-000721-F3","document_citation":"Form 8-K Item 1.05, Oncology Institute, Inc., filed 2026-05-22"},{"id":"SEA-8K-0001079973-26-000721-F4","claim_type":"SOURCE_FACT","statement":"The Company believes that the cybersecurity incident has affected various other healthcare service providers, and the Vendor has set up a patient portal through which it intends to provide information and responses to inquiries.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001079973-26-000721-F4","document_citation":"Form 8-K Item 1.05, Oncology Institute, Inc., filed 2026-05-22"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.privileged_action","data.pii"],"failure_mechanisms":[],"consequences":["Operational disruption","Data exposure","Financial impact"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"disclosure-v1","review_status":"machine_extracted","review_notes":["Ingested automatically from the company’s SEC filing. Facts are quoted from the filing; the failure-pattern classification is rule-based and unreviewed."]},"source_authority":{"document_type":"SEC Form 8-K, Item 1.05 (Material Cybersecurity Incidents)","filing_id":"0001079973-26-000721","reporting_entity":"Oncology Institute, Inc.","regulatory_body":"U.S. Securities and Exchange Commission"},"safeguards":[],"countermeasures":[],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"disclosure"},{"incident_id":"SEA-8K-0001605301-26-000021","title":"CB Financial Services, Inc. discloses a cybersecurity incident (SEC 8-K, May 2026)","display_title":"CB Financial Services, Inc. discloses a cybersecurity incident (SEC 8-K, May 2026)","display_summary":"On May 5, 2026, Community Bank (the “Bank”), the wholly-owned subsidiary of CB Financial Services, Inc. (the “Company”), became aware of an internal incident involving the handling of certain non public customer…","display_reference":"0001605301-26-000021","display_source_type":"SEC filing","incident_date":"2026-05-11","disclosure_date":"2026-05-11","source_type":"regulator_report","source_url":"https://www.sec.gov/Archives/edgar/data/1605301/000160530126000021/cbfv-20260507.htm","source_title":"CB Financial Services, Inc., Form 8-K (Item 1.05), filed 2026-05-11","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T13:10:47.460Z","source_hash":"content-fingerprint:fnv1a-cb911dc2","affected_system":{"organization":"CB Financial Services, Inc.","product":"Corporate systems","system_type":"Enterprise IT and business systems","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-8K-0001605301-26-000021-F1","claim_type":"SOURCE_FACT","statement":"On May 5, 2026, Community Bank (the “Bank”), the wholly-owned subsidiary of CB Financial Services, Inc. (the “Company”), became aware of an internal incident involving the handling of certain non public customer information using an unauthorized artificial intelligence-based software application.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001605301-26-000021-F1","document_citation":"Form 8-K Item 1.05, CB Financial Services, Inc., filed 2026-05-11"},{"id":"SEA-8K-0001605301-26-000021-F2","claim_type":"SOURCE_FACT","statement":"The incident did not involve a disruption to the Bank's operations, customer access to accounts or services, payment systems, or core information technology infrastructure; however, due to the volume and sensitive nature of the non-public information at issue, on May 7, 2026, the Company determined the event to be material.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001605301-26-000021-F2","document_citation":"Form 8-K Item 1.05, CB Financial Services, Inc., filed 2026-05-11"},{"id":"SEA-8K-0001605301-26-000021-F3","claim_type":"SOURCE_FACT","statement":"As of the date of this disclosure, this incident has not had, and is not expected to have, a material impact on the Company’s consolidated financial condition or results of operations. 2","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001605301-26-000021-F3","document_citation":"Form 8-K Item 1.05, CB Financial Services, Inc., filed 2026-05-11"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.financial_action","auth.privileged_action","auth.public_publication","data.pii","arch.event_driven"],"failure_mechanisms":["SEA-FM-014"],"consequences":["Operational disruption","Data exposure","Financial impact"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"disclosure-v1","review_status":"machine_extracted","review_notes":["Ingested automatically from the company’s SEC filing. Facts are quoted from the filing; the failure-pattern classification is rule-based and unreviewed."]},"source_authority":{"document_type":"SEC Form 8-K, Item 1.05 (Material Cybersecurity Incidents)","filing_id":"0001605301-26-000021","reporting_entity":"CB Financial Services, Inc.","regulatory_body":"U.S. Securities and Exchange Commission"},"safeguards":[],"countermeasures":[],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"disclosure"},{"incident_id":"SEA-8K-0000105770-26-000068","title":"West Pharmaceutical Services Inc discloses a cybersecurity incident with data taken without authorization (SEC 8-K, May 2026)","display_title":"West Pharmaceutical Services Inc discloses a cybersecurity incident with data taken without authorization (SEC 8-K, May 2026)","display_summary":"On May 7, 2026, West Pharmaceutical Services, Inc. (the “Company”) determined that the Company has experienced a material cybersecurity attack, in which certain data was exfiltrated by an unauthorized party and certain…","display_reference":"0000105770-26-000068","display_source_type":"SEC filing","incident_date":"2026-05-11","disclosure_date":"2026-05-11","source_type":"regulator_report","source_url":"https://www.sec.gov/Archives/edgar/data/105770/000010577026000068/wst-20260507.htm","source_title":"West Pharmaceutical Services Inc, Form 8-K (Item 1.05), filed 2026-05-11","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T13:10:47.783Z","source_hash":"content-fingerprint:fnv1a-e52c3595","affected_system":{"organization":"West Pharmaceutical Services Inc","product":"Corporate systems","system_type":"Enterprise IT and business systems","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-8K-0000105770-26-000068-F1","claim_type":"SOURCE_FACT","statement":"On May 7, 2026, West Pharmaceutical Services, Inc. (the “Company”) determined that the Company has experienced a material cybersecurity attack, in which certain data was exfiltrated by an unauthorized party and certain systems were encrypted.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0000105770-26-000068-F1","document_citation":"Form 8-K Item 1.05, West Pharmaceutical Services Inc, filed 2026-05-11"},{"id":"SEA-8K-0000105770-26-000068-F2","claim_type":"SOURCE_FACT","statement":"Upon initial detection of an intrusion on May 4, 2026, the Company promptly activated its incident response protocols, including proactively taking systems offline globally for containment purposes, notifying law enforcement, and engaging external cyber-forensic experts.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0000105770-26-000068-F2","document_citation":"Form 8-K Item 1.05, West Pharmaceutical Services Inc, filed 2026-05-11"},{"id":"SEA-8K-0000105770-26-000068-F3","claim_type":"SOURCE_FACT","statement":"The Company has taken steps intended to mitigate the risk of dissemination of the exfiltrated data.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0000105770-26-000068-F3","document_citation":"Form 8-K Item 1.05, West Pharmaceutical Services Inc, filed 2026-05-11"},{"id":"SEA-8K-0000105770-26-000068-F4","claim_type":"SOURCE_FACT","statement":"The incident and the Company’s proactive response have temporarily disrupted the Company’s business operations globally.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0000105770-26-000068-F4","document_citation":"Form 8-K Item 1.05, West Pharmaceutical Services Inc, filed 2026-05-11"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":[],"failure_mechanisms":["SEA-FM-014","SEA-FM-009"],"consequences":["Operational disruption","Data exposure","Financial impact"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"disclosure-v1","review_status":"machine_extracted","review_notes":["Ingested automatically from the company’s SEC filing. Facts are quoted from the filing; the failure-pattern classification is rule-based and unreviewed."]},"source_authority":{"document_type":"SEC Form 8-K, Item 1.05 (Material Cybersecurity Incidents)","filing_id":"0000105770-26-000068","reporting_entity":"West Pharmaceutical Services Inc","regulatory_body":"U.S. Securities and Exchange Commission"},"safeguards":[],"countermeasures":[],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"disclosure"},{"incident_id":"SEA-8K-0001193125-26-147772","title":"Bitcoin Depot Inc. discloses a cybersecurity incident with data taken without authorization (SEC 8-K, April 2026)","display_title":"Bitcoin Depot Inc. discloses a cybersecurity incident with data taken without authorization (SEC 8-K, April 2026)","display_summary":"On March 23, 2026, Bitcoin Depot Inc. (the “Company”) discovered that an unauthorized party gained access to certain of its information technology systems.","display_reference":"0001193125-26-147772","display_source_type":"SEC filing","incident_date":"2026-04-08","disclosure_date":"2026-04-08","source_type":"regulator_report","source_url":"https://www.sec.gov/Archives/edgar/data/1901799/000119312526147772/btm-20260406.htm","source_title":"Bitcoin Depot Inc., Form 8-K (Item 1.05), filed 2026-04-08","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T13:10:47.154Z","source_hash":"content-fingerprint:fnv1a-1693220c","affected_system":{"organization":"Bitcoin Depot Inc.","product":"Corporate systems","system_type":"Enterprise IT and business systems","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-8K-0001193125-26-147772-F1","claim_type":"SOURCE_FACT","statement":"On March 23, 2026, Bitcoin Depot Inc. (the “Company”) discovered that an unauthorized party gained access to certain of its information technology systems.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001193125-26-147772-F1","document_citation":"Form 8-K Item 1.05, Bitcoin Depot Inc., filed 2026-04-08"},{"id":"SEA-8K-0001193125-26-147772-F2","claim_type":"SOURCE_FACT","statement":"Based on the Company’s investigation to date, the unauthorized actor gained access to certain systems and obtained control of credentials associated with the Company’s digital asset settlement accounts.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001193125-26-147772-F2","document_citation":"Form 8-K Item 1.05, Bitcoin Depot Inc., filed 2026-04-08"},{"id":"SEA-8K-0001193125-26-147772-F3","claim_type":"SOURCE_FACT","statement":"As a result, the unauthorized actor transferred approximately 50.903 Bitcoin from Company-controlled wallets, valued at approximately $3.665 million as of the date of this report, without authorization.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001193125-26-147772-F3","document_citation":"Form 8-K Item 1.05, Bitcoin Depot Inc., filed 2026-04-08"},{"id":"SEA-8K-0001193125-26-147772-F4","claim_type":"SOURCE_FACT","statement":"The Company continues to investigate the nature and scope of the incident with the assistance of third-party specialists.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001193125-26-147772-F4","document_citation":"Form 8-K Item 1.05, Bitcoin Depot Inc., filed 2026-04-08"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012","SEA-FM-009"],"consequences":["Operational disruption","Data exposure","Financial impact"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"disclosure-v1","review_status":"machine_extracted","review_notes":["Ingested automatically from the company’s SEC filing. Facts are quoted from the filing; the failure-pattern classification is rule-based and unreviewed."]},"source_authority":{"document_type":"SEC Form 8-K, Item 1.05 (Material Cybersecurity Incidents)","filing_id":"0001193125-26-147772","reporting_entity":"Bitcoin Depot Inc.","regulatory_body":"U.S. Securities and Exchange Commission"},"safeguards":[],"countermeasures":[],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"disclosure"},{"incident_id":"SEA-8K-0001493152-26-013239","title":"CareCloud, Inc. discloses a cybersecurity incident with data taken without authorization (SEC 8-K, March 2026)","display_title":"CareCloud, Inc. discloses a cybersecurity incident with data taken without authorization (SEC 8-K, March 2026)","display_summary":"On March 16, 2026, CareCloud, Inc. (the “Company”) experienced a temporary network disruption in its CareCloud Health division that partially impacted the functionality and data access to 1 of its 6 electronic health…","display_reference":"0001493152-26-013239","display_source_type":"SEC filing","incident_date":"2026-03-27","disclosure_date":"2026-03-27","source_type":"regulator_report","source_url":"https://www.sec.gov/Archives/edgar/data/1582982/000149315226013239/form8-k.htm","source_title":"CareCloud, Inc., Form 8-K (Item 1.05), filed 2026-03-27","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T13:10:46.843Z","source_hash":"content-fingerprint:fnv1a-25eaeae6","affected_system":{"organization":"CareCloud, Inc.","product":"Corporate systems","system_type":"Enterprise IT and business systems","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-8K-0001493152-26-013239-F1","claim_type":"SOURCE_FACT","statement":"On March 16, 2026, CareCloud, Inc. (the “Company”) experienced a temporary network disruption in its CareCloud Health division that partially impacted the functionality and data access to 1 of its 6 electronic health record environments for approximately 8 hours until the Company fully restored all functionality and data access during that evening.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001493152-26-013239-F1","document_citation":"Form 8-K Item 1.05, CareCloud, Inc., filed 2026-03-27"},{"id":"SEA-8K-0001493152-26-013239-F2","claim_type":"SOURCE_FACT","statement":"The incident was contained on the day it was discovered.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001493152-26-013239-F2","document_citation":"Form 8-K Item 1.05, CareCloud, Inc., filed 2026-03-27"},{"id":"SEA-8K-0001493152-26-013239-F3","claim_type":"SOURCE_FACT","statement":"The Company further believes that the incident was caused by an unauthorized third party who temporarily had access to the system.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001493152-26-013239-F3","document_citation":"Form 8-K Item 1.05, CareCloud, Inc., filed 2026-03-27"},{"id":"SEA-8K-0001493152-26-013239-F4","claim_type":"SOURCE_FACT","statement":"The affected environment stores patient information, and the Company continues to assess whether, and the extent to which, patient information or other data was accessed or exfiltrated, and the categories and volume of any such data.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001493152-26-013239-F4","document_citation":"Form 8-K Item 1.05, CareCloud, Inc., filed 2026-03-27"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":["SEA-FM-014","SEA-FM-009"],"consequences":["Operational disruption","Data exposure","Financial impact"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"disclosure-v1","review_status":"machine_extracted","review_notes":["Ingested automatically from the company’s SEC filing. Facts are quoted from the filing; the failure-pattern classification is rule-based and unreviewed."]},"source_authority":{"document_type":"SEC Form 8-K, Item 1.05 (Material Cybersecurity Incidents)","filing_id":"0001493152-26-013239","reporting_entity":"CareCloud, Inc.","regulatory_body":"U.S. Securities and Exchange Commission"},"safeguards":[],"countermeasures":[],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"disclosure"},{"incident_id":"SEA-8K-0001437749-26-009193","title":"Trio-tech International discloses a cybersecurity incident involving ransomware (SEC 8-K, March 2026)","display_title":"Trio-tech International discloses a cybersecurity incident involving ransomware (SEC 8-K, March 2026)","display_summary":"On March 11, 2026, Trio-Tech International (“Company”) identified and responded to a cybersecurity incident in one of its subsidiaries (“subsidiary”) in Singapore.","display_reference":"0001437749-26-009193","display_source_type":"SEC filing","incident_date":"2026-03-20","disclosure_date":"2026-03-20","source_type":"regulator_report","source_url":"https://www.sec.gov/Archives/edgar/data/732026/000143774926009193/trt20260320_8k.htm","source_title":"Trio-tech International, Form 8-K (Item 1.05), filed 2026-03-20","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T13:10:46.457Z","source_hash":"content-fingerprint:fnv1a-178fcacf","affected_system":{"organization":"Trio-tech International","product":"Corporate systems","system_type":"Enterprise IT and business systems","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-8K-0001437749-26-009193-F1","claim_type":"SOURCE_FACT","statement":"On March 11, 2026, Trio-Tech International (“Company”) identified and responded to a cybersecurity incident in one of its subsidiaries (“subsidiary”) in Singapore.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001437749-26-009193-F1","document_citation":"Form 8-K Item 1.05, Trio-tech International, filed 2026-03-20"},{"id":"SEA-8K-0001437749-26-009193-F2","claim_type":"SOURCE_FACT","statement":"The subsidiary experienced a ransomware incident that resulted in encryption of certain files within the Company’s network.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001437749-26-009193-F2","document_citation":"Form 8-K Item 1.05, Trio-tech International, filed 2026-03-20"},{"id":"SEA-8K-0001437749-26-009193-F3","claim_type":"SOURCE_FACT","statement":"On March 18, 2026, the incident escalated and resulted in the unauthorized disclosure of certain Company data.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001437749-26-009193-F3","document_citation":"Form 8-K Item 1.05, Trio-tech International, filed 2026-03-20"},{"id":"SEA-8K-0001437749-26-009193-F4","claim_type":"SOURCE_FACT","statement":"Upon discovery of the cybersecurity incident, the subsidiary immediately activated its response protocols, implemented containment measures, including proactively taking its network offline, launching an investigation with the assistance of third-party cybersecurity professionals and notifying law enforcement in Singapore.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001437749-26-009193-F4","document_citation":"Form 8-K Item 1.05, Trio-tech International, filed 2026-03-20"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["arch.event_driven"],"failure_mechanisms":["SEA-FM-014"],"consequences":["Operational disruption","Data exposure","Financial impact"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"disclosure-v1","review_status":"machine_extracted","review_notes":["Ingested automatically from the company’s SEC filing. Facts are quoted from the filing; the failure-pattern classification is rule-based and unreviewed."]},"source_authority":{"document_type":"SEC Form 8-K, Item 1.05 (Material Cybersecurity Incidents)","filing_id":"0001437749-26-009193","reporting_entity":"Trio-tech International","regulatory_body":"U.S. Securities and Exchange Commission"},"safeguards":[],"countermeasures":[],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"disclosure"},{"incident_id":"SEA-8K-0001628280-26-011152","title":"Ufp Technologies Inc discloses a cybersecurity incident with data taken without authorization (SEC 8-K, February 2026)","display_title":"Ufp Technologies Inc discloses a cybersecurity incident with data taken without authorization (SEC 8-K, February 2026)","display_summary":"On or about February 14, 2026, UFP Technologies, Inc. (the “Company”) detected suspicious activity involving its information technology (“IT”) systems.","display_reference":"0001628280-26-011152","display_source_type":"SEC filing","incident_date":"2026-02-24","disclosure_date":"2026-02-24","source_type":"regulator_report","source_url":"https://www.sec.gov/Archives/edgar/data/914156/000162828026011152/ufpt-20260219.htm","source_title":"Ufp Technologies Inc, Form 8-K (Item 1.05), filed 2026-02-24","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T13:10:46.073Z","source_hash":"content-fingerprint:fnv1a-17c7e15b","affected_system":{"organization":"Ufp Technologies Inc","product":"Corporate systems","system_type":"Enterprise IT and business systems","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-8K-0001628280-26-011152-F1","claim_type":"SOURCE_FACT","statement":"On or about February 14, 2026, UFP Technologies, Inc. (the “Company”) detected suspicious activity involving its information technology (“IT”) systems.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001628280-26-011152-F1","document_citation":"Form 8-K Item 1.05, Ufp Technologies Inc, filed 2026-02-24"},{"id":"SEA-8K-0001628280-26-011152-F2","claim_type":"SOURCE_FACT","statement":"Upon detecting the issue, the Company began taking steps to assess, contain, and remediate the unauthorized activity, including isolating the affected systems and launching an investigation with the assistance of external cybersecurity advisors.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001628280-26-011152-F2","document_citation":"Form 8-K Item 1.05, Ufp Technologies Inc, filed 2026-02-24"},{"id":"SEA-8K-0001628280-26-011152-F3","claim_type":"SOURCE_FACT","statement":"Through the Company’s efforts, the Company believes that the third party responsible for this cybersecurity incident has been removed from the Company’s IT systems, and the Company’s ability to access information impacted by this incident has been restored in all material respects.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001628280-26-011152-F3","document_citation":"Form 8-K Item 1.05, Ufp Technologies Inc, filed 2026-02-24"},{"id":"SEA-8K-0001628280-26-011152-F4","claim_type":"SOURCE_FACT","statement":"The incident appears to have impacted many but not all of the Company’s IT systems and affected functions such as billing and label making for customer deliveries.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001628280-26-011152-F4","document_citation":"Form 8-K Item 1.05, Ufp Technologies Inc, filed 2026-02-24"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.financial_action","auth.destructive_action","data.pii"],"failure_mechanisms":["SEA-FM-009"],"consequences":["Operational disruption","Data exposure","Financial impact"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"disclosure-v1","review_status":"machine_extracted","review_notes":["Ingested automatically from the company’s SEC filing. Facts are quoted from the filing; the failure-pattern classification is rule-based and unreviewed."]},"source_authority":{"document_type":"SEC Form 8-K, Item 1.05 (Material Cybersecurity Incidents)","filing_id":"0001628280-26-011152","reporting_entity":"Ufp Technologies Inc","regulatory_body":"U.S. Securities and Exchange Commission"},"safeguards":[],"countermeasures":[],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"disclosure"},{"incident_id":"SEA-8K-0001834584-25-000196","title":"Coupang, Inc. discloses a cybersecurity incident (SEC 8-K, December 2025)","display_title":"Coupang, Inc. discloses a cybersecurity incident (SEC 8-K, December 2025)","display_summary":"On November 18, 2025, Coupang Corp. (“Coupang Corp.”), a wholly-owned Korean subsidiary of Coupang, Inc. (Coupang Corp., together with Coupang, Inc.","display_reference":"0001834584-25-000196","display_source_type":"SEC filing","incident_date":"2025-12-16","disclosure_date":"2025-12-16","source_type":"regulator_report","source_url":"https://www.sec.gov/Archives/edgar/data/1834584/000183458425000196/cpng-20251215.htm","source_title":"Coupang, Inc., Form 8-K (Item 1.05), filed 2025-12-16","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T13:10:45.651Z","source_hash":"content-fingerprint:fnv1a-4bbcb6d1","affected_system":{"organization":"Coupang, Inc.","product":"Corporate systems","system_type":"Enterprise IT and business systems","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-8K-0001834584-25-000196-F1","claim_type":"SOURCE_FACT","statement":"On November 18, 2025, Coupang Corp. (“Coupang Corp.”), a wholly-owned Korean subsidiary of Coupang, Inc. (Coupang Corp., together with Coupang, Inc. (“Coupang, Inc.,” “our,” or “we”) and its subsidiaries and affiliates, “Coupang,”), became aware of a cybersecurity incident involving unauthorized access to customer accounts (the “Incident”).","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001834584-25-000196-F1","document_citation":"Form 8-K Item 1.05, Coupang, Inc., filed 2025-12-16"},{"id":"SEA-8K-0001834584-25-000196-F2","claim_type":"SOURCE_FACT","statement":"Upon discovery, Coupang activated its incident response processes, disabled the threat actor’s unauthorized access, reported the Incident to the relevant Korean regulatory and law enforcement authorities, and warned customers whose data was potentially accessed.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001834584-25-000196-F2","document_citation":"Form 8-K Item 1.05, Coupang, Inc., filed 2025-12-16"},{"id":"SEA-8K-0001834584-25-000196-F3","claim_type":"SOURCE_FACT","statement":"Based on investigative findings, Coupang has determined that a former employee may have obtained the name, phone number, delivery address, and email address associated with up to 33 million customer accounts, and certain order histories for a subset of the impacted acc ounts.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001834584-25-000196-F3","document_citation":"Form 8-K Item 1.05, Coupang, Inc., filed 2025-12-16"},{"id":"SEA-8K-0001834584-25-000196-F4","claim_type":"SOURCE_FACT","statement":"Coupang’s operations have not been materially disrupted.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001834584-25-000196-F4","document_citation":"Form 8-K Item 1.05, Coupang, Inc., filed 2025-12-16"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.financial_action","data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012","SEA-FM-014"],"consequences":["Operational disruption","Data exposure","Financial impact"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"disclosure-v1","review_status":"machine_extracted","review_notes":["Ingested automatically from the company’s SEC filing. Facts are quoted from the filing; the failure-pattern classification is rule-based and unreviewed."]},"source_authority":{"document_type":"SEC Form 8-K, Item 1.05 (Material Cybersecurity Incidents)","filing_id":"0001834584-25-000196","reporting_entity":"Coupang, Inc.","regulatory_body":"U.S. Securities and Exchange Commission"},"safeguards":[],"countermeasures":[],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"disclosure"},{"incident_id":"SEA-8K-0001649739-25-000246","title":"BayFirst Financial Corp. discloses a cybersecurity incident (SEC 8-K, October 2025)","display_title":"BayFirst Financial Corp. discloses a cybersecurity incident (SEC 8-K, October 2025)","display_summary":"Cybersecurity Incidents On August 14, 2025, BayFirst National Bank (“BayFirst”) was notified of a cybersecurity incident experienced by a third-party provider of marketing services.","display_reference":"0001649739-25-000246","display_source_type":"SEC filing","incident_date":"2025-10-30","disclosure_date":"2025-10-30","source_type":"regulator_report","source_url":"https://www.sec.gov/Archives/edgar/data/1649739/000164973925000246/bafn-20251028.htm","source_title":"BayFirst Financial Corp., Form 8-K (Item 1.05), filed 2025-10-30","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T13:10:45.258Z","source_hash":"content-fingerprint:fnv1a-6f0aa9a8","affected_system":{"organization":"BayFirst Financial Corp.","product":"Corporate systems","system_type":"Enterprise IT and business systems","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-8K-0001649739-25-000246-F1","claim_type":"SOURCE_FACT","statement":"Cybersecurity Incidents On August 14, 2025, BayFirst National Bank (“BayFirst”) was notified of a cybersecurity incident experienced by a third-party provider of marketing services.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001649739-25-000246-F1","document_citation":"Form 8-K Item 1.05, BayFirst Financial Corp., filed 2025-10-30"},{"id":"SEA-8K-0001649739-25-000246-F2","claim_type":"SOURCE_FACT","statement":"On October 28, 2025, the third-party provider confirmed that some customer information was exposed by this incident.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001649739-25-000246-F2","document_citation":"Form 8-K Item 1.05, BayFirst Financial Corp., filed 2025-10-30"},{"id":"SEA-8K-0001649739-25-000246-F3","claim_type":"SOURCE_FACT","statement":"Upon learning of the incident, the third-party provider immediately launched an investigation, worked with BayFirst to understand the scope of the issue, and engaged the appropriate cybersecurity experts to assist.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001649739-25-000246-F3","document_citation":"Form 8-K Item 1.05, BayFirst Financial Corp., filed 2025-10-30"},{"id":"SEA-8K-0001649739-25-000246-F4","claim_type":"SOURCE_FACT","statement":"The third-party provider also promptly notified law enforcement.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001649739-25-000246-F4","document_citation":"Form 8-K Item 1.05, BayFirst Financial Corp., filed 2025-10-30"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":[],"consequences":["Operational disruption","Data exposure","Financial impact"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"disclosure-v1","review_status":"machine_extracted","review_notes":["Ingested automatically from the company’s SEC filing. Facts are quoted from the filing; the failure-pattern classification is rule-based and unreviewed."]},"source_authority":{"document_type":"SEC Form 8-K, Item 1.05 (Material Cybersecurity Incidents)","filing_id":"0001649739-25-000246","reporting_entity":"BayFirst Financial Corp.","regulatory_body":"U.S. Securities and Exchange Commission"},"safeguards":[],"countermeasures":[],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"disclosure"},{"incident_id":"SEA-8K-0001079973-25-001631","title":"Jewett Cameron Trading Co Ltd discloses a cybersecurity incident with data taken without authorization (SEC 8-K, October 2025)","display_title":"Jewett Cameron Trading Co Ltd discloses a cybersecurity incident with data taken without authorization (SEC 8-K, October 2025)","display_summary":"Ltd. (the “Company”) learned that a threat actor had gained unauthorized access to portions of the Company’s information technology (“IT”) environment and claimed to have unlawfully accessed certain Company information…","display_reference":"0001079973-25-001631","display_source_type":"SEC filing","incident_date":"2025-10-21","disclosure_date":"2025-10-21","source_type":"regulator_report","source_url":"https://www.sec.gov/Archives/edgar/data/885307/000107997325001631/jctc_8k.htm","source_title":"Jewett Cameron Trading Co Ltd, Form 8-K (Item 1.05), filed 2025-10-21","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T13:10:44.771Z","source_hash":"content-fingerprint:fnv1a-2551abd5","affected_system":{"organization":"Jewett Cameron Trading Co Ltd","product":"Corporate systems","system_type":"Enterprise IT and business systems","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-8K-0001079973-25-001631-F1","claim_type":"SOURCE_FACT","statement":"Ltd. (the “Company”) learned that a threat actor had gained unauthorized access to portions of the Company’s information technology (“IT”) environment and claimed to have unlawfully accessed certain Company information and data.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001079973-25-001631-F1","document_citation":"Form 8-K Item 1.05, Jewett Cameron Trading Co Ltd, filed 2025-10-21"},{"id":"SEA-8K-0001079973-25-001631-F2","claim_type":"SOURCE_FACT","statement":"Based on its investigation to date, the Company believes that the cybersecurity incident consisted of unauthorized access and deployment of encryption and monitoring software by a third party to a portion of the Company’s internal corporate IT systems.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001079973-25-001631-F2","document_citation":"Form 8-K Item 1.05, Jewett Cameron Trading Co Ltd, filed 2025-10-21"},{"id":"SEA-8K-0001079973-25-001631-F3","claim_type":"SOURCE_FACT","statement":"The incident caused disruptions and limitation of access to portions of the Company’s business applications supporting aspects of the Company’s operations and corporate functions, which the Company voluntarily took offline as a precautionary measure.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001079973-25-001631-F3","document_citation":"Form 8-K Item 1.05, Jewett Cameron Trading Co Ltd, filed 2025-10-21"},{"id":"SEA-8K-0001079973-25-001631-F4","claim_type":"SOURCE_FACT","statement":"Based on the information reviewed to date, the Company believes the unauthorized activity has been contained and is working diligently to bring the impacted portions of its IT systems and individual computer devices back online.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001079973-25-001631-F4","document_citation":"Form 8-K Item 1.05, Jewett Cameron Trading Co Ltd, filed 2025-10-21"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.financial_action","data.pii","data.uploaded_files"],"failure_mechanisms":["SEA-FM-014","SEA-FM-009"],"consequences":["Operational disruption","Data exposure","Financial impact"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"disclosure-v1","review_status":"machine_extracted","review_notes":["Ingested automatically from the company’s SEC filing. Facts are quoted from the filing; the failure-pattern classification is rule-based and unreviewed."]},"source_authority":{"document_type":"SEC Form 8-K, Item 1.05 (Material Cybersecurity Incidents)","filing_id":"0001079973-25-001631","reporting_entity":"Jewett Cameron Trading Co Ltd","regulatory_body":"U.S. Securities and Exchange Commission"},"safeguards":[],"countermeasures":[],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"disclosure"},{"incident_id":"SEA-8K-0001048695-25-000149","title":"F5, Inc. discloses a cybersecurity incident with data taken without authorization (SEC 8-K, October 2025)","display_title":"F5, Inc. discloses a cybersecurity incident with data taken without authorization (SEC 8-K, October 2025)","display_summary":"On August 9, 2025, F5, Inc. (the “Company”, “F5”, “we”, or “our”) learned that a highly sophisticated nation-state threat actor had gained unauthorized access to certain Company systems.","display_reference":"0001048695-25-000149","display_source_type":"SEC filing","incident_date":"2025-10-15","disclosure_date":"2025-10-15","source_type":"regulator_report","source_url":"https://www.sec.gov/Archives/edgar/data/1048695/000104869525000149/ffiv-20251015.htm","source_title":"F5, Inc., Form 8-K (Item 1.05), filed 2025-10-15","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T13:10:44.390Z","source_hash":"content-fingerprint:fnv1a-938b1139","affected_system":{"organization":"F5, Inc.","product":"Corporate systems","system_type":"Enterprise IT and business systems","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-8K-0001048695-25-000149-F1","claim_type":"SOURCE_FACT","statement":"On August 9, 2025, F5, Inc. (the “Company”, “F5”, “we”, or “our”) learned that a highly sophisticated nation-state threat actor had gained unauthorized access to certain Company systems.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001048695-25-000149-F1","document_citation":"Form 8-K Item 1.05, F5, Inc., filed 2025-10-15"},{"id":"SEA-8K-0001048695-25-000149-F2","claim_type":"SOURCE_FACT","statement":"The Company promptly activated its incident response processes, and has taken extensive actions to contain the threat actor.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001048695-25-000149-F2","document_citation":"Form 8-K Item 1.05, F5, Inc., filed 2025-10-15"},{"id":"SEA-8K-0001048695-25-000149-F3","claim_type":"SOURCE_FACT","statement":"The Company believes its containment actions have been successful and, since the initiation of its containment efforts, has not observed any evidence of new unauthorized activity.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001048695-25-000149-F3","document_citation":"Form 8-K Item 1.05, F5, Inc., filed 2025-10-15"},{"id":"SEA-8K-0001048695-25-000149-F4","claim_type":"SOURCE_FACT","statement":"During the course of its investigation, the Company determined that the threat actor maintained long-term, persistent access to certain F5 systems, including the BIG-IP product development environment and engineering knowledge management platform.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001048695-25-000149-F4","document_citation":"Form 8-K Item 1.05, F5, Inc., filed 2025-10-15"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.public_publication","data.pii","arch.distributed_tx"],"failure_mechanisms":["SEA-FM-013","SEA-FM-009"],"consequences":["Operational disruption","Data exposure","Financial impact"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"disclosure-v1","review_status":"machine_extracted","review_notes":["Ingested automatically from the company’s SEC filing. Facts are quoted from the filing; the failure-pattern classification is rule-based and unreviewed."]},"source_authority":{"document_type":"SEC Form 8-K, Item 1.05 (Material Cybersecurity Incidents)","filing_id":"0001048695-25-000149","reporting_entity":"F5, Inc.","regulatory_body":"U.S. Securities and Exchange Commission"},"safeguards":[],"countermeasures":[],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"disclosure"},{"incident_id":"SEA-8K-0001654954-25-010613","title":"Data I/O Corp discloses a cybersecurity incident involving ransomware (SEC 8-K, September 2025)","display_title":"Data I/O Corp discloses a cybersecurity incident involving ransomware (SEC 8-K, September 2025)","display_summary":"As previously disclosed on August 21, 2025 in a Current Report on Form 8-K filed with the Securities and Exchange Commission (“SEC”), on August 16, 2025, Data I/O Corporation (the “Company”) experienced a ransomware…","display_reference":"0001654954-25-010613","display_source_type":"SEC filing","incident_date":"2025-09-10","disclosure_date":"2025-09-10","source_type":"regulator_report","source_url":"https://www.sec.gov/Archives/edgar/data/351998/000165495425010613/daio_8k.htm","source_title":"Data I/O Corp, Form 8-K (Item 1.05), filed 2025-09-10","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T13:10:44.070Z","source_hash":"content-fingerprint:fnv1a-adfae9fa","affected_system":{"organization":"Data I/O Corp","product":"Corporate systems","system_type":"Enterprise IT and business systems","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-8K-0001654954-25-010613-F1","claim_type":"SOURCE_FACT","statement":"As previously disclosed on August 21, 2025 in a Current Report on Form 8-K filed with the Securities and Exchange Commission (“SEC”), on August 16, 2025, Data I/O Corporation (the “Company”) experienced a ransomware incident (the “Incident”) on certain of its internal IT systems.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001654954-25-010613-F1","document_citation":"Form 8-K Item 1.05, Data I/O Corp, filed 2025-09-10"},{"id":"SEA-8K-0001654954-25-010613-F2","claim_type":"SOURCE_FACT","statement":"Through ongoing discovery and investigation efforts, the Company has determined that the Incident was not targeted but originated as a vulnerability of a commercially available third-party firewall service provider.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001654954-25-010613-F2","document_citation":"Form 8-K Item 1.05, Data I/O Corp, filed 2025-09-10"},{"id":"SEA-8K-0001654954-25-010613-F3","claim_type":"SOURCE_FACT","statement":"The Incident temporarily impacted the Company’s operations, including internal/external communications, shipping, receiving, manufacturing production, and various other support functions, which are fully operational as of the date of this filing.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001654954-25-010613-F3","document_citation":"Form 8-K Item 1.05, Data I/O Corp, filed 2025-09-10"},{"id":"SEA-8K-0001654954-25-010613-F4","claim_type":"SOURCE_FACT","statement":"As of September 9, 2025, the estimated costs related to the Incident for remediation, restoration and investigation efforts are expected to total approximately $388,000 in expenses in the third quarter ending September 30, 2025 and will likely have a material impact on the Company’s results of operations and financial condition.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001654954-25-010613-F4","document_citation":"Form 8-K Item 1.05, Data I/O Corp, filed 2025-09-10"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.credentials_secrets","arch.external_api"],"failure_mechanisms":["SEA-FM-014","SEA-FM-013"],"consequences":["Operational disruption","Data exposure","Financial impact"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"disclosure-v1","review_status":"machine_extracted","review_notes":["Ingested automatically from the company’s SEC filing. Facts are quoted from the filing; the failure-pattern classification is rule-based and unreviewed."]},"source_authority":{"document_type":"SEC Form 8-K, Item 1.05 (Material Cybersecurity Incidents)","filing_id":"0001654954-25-010613","reporting_entity":"Data I/O Corp","regulatory_body":"U.S. Securities and Exchange Commission"},"safeguards":[],"countermeasures":[],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"disclosure"},{"incident_id":"SEA-8K-0001683168-25-006583","title":"Wytec International Inc discloses a cybersecurity incident (SEC 8-K, August 2025)","display_title":"Wytec International Inc discloses a cybersecurity incident (SEC 8-K, August 2025)","display_summary":"On August 25, 2025 , Wytec International, Inc. (the “Company”) became aware of a cybersecurity incident in which a bad actor published a defaced website at the Company’s web address, wytecintl.com.","display_reference":"0001683168-25-006583","display_source_type":"SEC filing","incident_date":"2025-08-29","disclosure_date":"2025-08-29","source_type":"regulator_report","source_url":"https://www.sec.gov/Archives/edgar/data/1560143/000168316825006583/wytec_8k.htm","source_title":"Wytec International Inc, Form 8-K (Item 1.05), filed 2025-08-29","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T13:10:43.745Z","source_hash":"content-fingerprint:fnv1a-dfe4d868","affected_system":{"organization":"Wytec International Inc","product":"Corporate systems","system_type":"Enterprise IT and business systems","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-8K-0001683168-25-006583-F1","claim_type":"SOURCE_FACT","statement":"On August 25, 2025 , Wytec International, Inc. (the “Company”) became aware of a cybersecurity incident in which a bad actor published a defaced website at the Company’s web address, wytecintl.com.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001683168-25-006583-F1","document_citation":"Form 8-K Item 1.05, Wytec International Inc, filed 2025-08-29"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":[],"failure_mechanisms":[],"consequences":["Financial impact"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"disclosure-v1","review_status":"machine_extracted","review_notes":["Ingested automatically from the company’s SEC filing. Facts are quoted from the filing; the failure-pattern classification is rule-based and unreviewed."]},"source_authority":{"document_type":"SEC Form 8-K, Item 1.05 (Material Cybersecurity Incidents)","filing_id":"0001683168-25-006583","reporting_entity":"Wytec International Inc","regulatory_body":"U.S. Securities and Exchange Commission"},"safeguards":[],"countermeasures":[],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"disclosure"},{"incident_id":"SEA-8K-0001654954-25-009925","title":"Data I/O Corp discloses a cybersecurity incident involving ransomware (SEC 8-K, August 2025)","display_title":"Data I/O Corp discloses a cybersecurity incident involving ransomware (SEC 8-K, August 2025)","display_summary":"On August 16, 2025, Data I/O Corporation (the “Company”) experienced a ransomware incident (the “Incident”) on certain of its internal IT systems.","display_reference":"0001654954-25-009925","display_source_type":"SEC filing","incident_date":"2025-08-21","disclosure_date":"2025-08-21","source_type":"regulator_report","source_url":"https://www.sec.gov/Archives/edgar/data/351998/000165495425009925/daio_8k.htm","source_title":"Data I/O Corp, Form 8-K (Item 1.05), filed 2025-08-21","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T13:10:43.397Z","source_hash":"content-fingerprint:fnv1a-9a3bfebc","affected_system":{"organization":"Data I/O Corp","product":"Corporate systems","system_type":"Enterprise IT and business systems","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-8K-0001654954-25-009925-F1","claim_type":"SOURCE_FACT","statement":"On August 16, 2025, Data I/O Corporation (the “Company”) experienced a ransomware incident (the “Incident”) on certain of its internal IT systems.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001654954-25-009925-F1","document_citation":"Form 8-K Item 1.05, Data I/O Corp, filed 2025-08-21"},{"id":"SEA-8K-0001654954-25-009925-F2","claim_type":"SOURCE_FACT","statement":"Upon discovery, the Company promptly activated its response protocols, took steps to secure its global IT systems and implemented containment measures, including proactively taking certain platforms offline and implementing other mitigation measures.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001654954-25-009925-F2","document_citation":"Form 8-K Item 1.05, Data I/O Corp, filed 2025-08-21"},{"id":"SEA-8K-0001654954-25-009925-F3","claim_type":"SOURCE_FACT","statement":"The Incident has temporarily impacted the Company’s operations, including internal/external communications, shipping, receiving, manufacturing production, and various other support functions.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001654954-25-009925-F3","document_citation":"Form 8-K Item 1.05, Data I/O Corp, filed 2025-08-21"},{"id":"SEA-8K-0001654954-25-009925-F4","claim_type":"SOURCE_FACT","statement":"As the investigation of the Incident is ongoing, the full scope, nature, and impact are also not yet known.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001654954-25-009925-F4","document_citation":"Form 8-K Item 1.05, Data I/O Corp, filed 2025-08-21"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.regulated_records"],"failure_mechanisms":["SEA-FM-014"],"consequences":["Operational disruption","Data exposure","Financial impact"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"disclosure-v1","review_status":"machine_extracted","review_notes":["Ingested automatically from the company’s SEC filing. Facts are quoted from the filing; the failure-pattern classification is rule-based and unreviewed."]},"source_authority":{"document_type":"SEC Form 8-K, Item 1.05 (Material Cybersecurity Incidents)","filing_id":"0001654954-25-009925","reporting_entity":"Data I/O Corp","regulatory_body":"U.S. Securities and Exchange Commission"},"safeguards":[],"countermeasures":[],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"disclosure"},{"incident_id":"SEA-8K-0001020859-25-000036","title":"United Natural Foods Inc discloses a cybersecurity incident (SEC 8-K, June 2025)","display_title":"United Natural Foods Inc discloses a cybersecurity incident (SEC 8-K, June 2025)","display_summary":"As previously disclosed in a Current Report on Form 8-K filed with the Securities and Exchange Commission (“SEC”) on June 9, 2025 (the “Prior 8-K”), on June 5, 2025 , United Natural Foods, Inc.","display_reference":"0001020859-25-000036","display_source_type":"SEC filing","incident_date":"2025-06-26","disclosure_date":"2025-06-26","source_type":"regulator_report","source_url":"https://www.sec.gov/Archives/edgar/data/1020859/000102085925000036/unfi-20250621.htm","source_title":"United Natural Foods Inc, Form 8-K (Item 1.05), filed 2025-06-26","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T13:10:43.071Z","source_hash":"content-fingerprint:fnv1a-fe5671d5","affected_system":{"organization":"United Natural Foods Inc","product":"Corporate systems","system_type":"Enterprise IT and business systems","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-8K-0001020859-25-000036-F1","claim_type":"SOURCE_FACT","statement":"As previously disclosed in a Current Report on Form 8-K filed with the Securities and Exchange Commission (“SEC”) on June 9, 2025 (the “Prior 8-K”), on June 5, 2025 , United Natural Foods, Inc. (the “Company”) became aware of unauthorized activity on certain information technology (IT) systems.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001020859-25-000036-F1","document_citation":"Form 8-K Item 1.05, United Natural Foods Inc, filed 2025-06-26"},{"id":"SEA-8K-0001020859-25-000036-F2","claim_type":"SOURCE_FACT","statement":"As disclosed in the Prior 8-K, the Company promptly activated its incident response plan and implemented containment measures, including proactively taking certain systems offline, which temporarily impacted the Company’s ability to fulfill and distribute customer orders.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001020859-25-000036-F2","document_citation":"Form 8-K Item 1.05, United Natural Foods Inc, filed 2025-06-26"},{"id":"SEA-8K-0001020859-25-000036-F3","claim_type":"SOURCE_FACT","statement":"The unauthorized activity has since been contained and the Company is now regularly receiving and shipping products to retailers across its distribution network.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001020859-25-000036-F3","document_citation":"Form 8-K Item 1.05, United Natural Foods Inc, filed 2025-06-26"},{"id":"SEA-8K-0001020859-25-000036-F4","claim_type":"SOURCE_FACT","statement":"Based on the information currently available to the Company, management believes that the incident is reasonably likely to have a material impact on the Company’s net income/(loss) and adjusted EBITDA for the fourth fiscal quarter of 2025 compared to its internal projections prior to the incident .","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001020859-25-000036-F4","document_citation":"Form 8-K Item 1.05, United Natural Foods Inc, filed 2025-06-26"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.financial_action","data.pii"],"failure_mechanisms":[],"consequences":["Operational disruption","Data exposure","Financial impact"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"disclosure-v1","review_status":"machine_extracted","review_notes":["Ingested automatically from the company’s SEC filing. Facts are quoted from the filing; the failure-pattern classification is rule-based and unreviewed."]},"source_authority":{"document_type":"SEC Form 8-K, Item 1.05 (Material Cybersecurity Incidents)","filing_id":"0001020859-25-000036","reporting_entity":"United Natural Foods Inc","regulatory_body":"U.S. Securities and Exchange Commission"},"safeguards":[],"countermeasures":[],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"disclosure"},{"incident_id":"SEA-8K-0001213900-25-054319","title":"Zoomcar Holdings, Inc. discloses a cybersecurity incident (SEC 8-K, June 2025)","display_title":"Zoomcar Holdings, Inc. discloses a cybersecurity incident (SEC 8-K, June 2025)","display_summary":"On June 9, 2025, Zoomcar Holdings, Inc. (the “Company”) identified a cybersecurity incident involving unauthorized access to its information systems.","display_reference":"0001213900-25-054319","display_source_type":"SEC filing","incident_date":"2025-06-13","disclosure_date":"2025-06-13","source_type":"regulator_report","source_url":"https://www.sec.gov/Archives/edgar/data/1854275/000121390025054319/ea0245724-8k_zoomcar.htm","source_title":"Zoomcar Holdings, Inc., Form 8-K (Item 1.05), filed 2025-06-13","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T13:10:42.743Z","source_hash":"content-fingerprint:fnv1a-aa5a7420","affected_system":{"organization":"Zoomcar Holdings, Inc.","product":"Corporate systems","system_type":"Enterprise IT and business systems","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-8K-0001213900-25-054319-F1","claim_type":"SOURCE_FACT","statement":"On June 9, 2025, Zoomcar Holdings, Inc. (the “Company”) identified a cybersecurity incident involving unauthorized access to its information systems.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001213900-25-054319-F1","document_citation":"Form 8-K Item 1.05, Zoomcar Holdings, Inc., filed 2025-06-13"},{"id":"SEA-8K-0001213900-25-054319-F2","claim_type":"SOURCE_FACT","statement":"The Company became aware of the incident after certain employees received external communications from a threat actor alleging unauthorized access to Company data.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001213900-25-054319-F2","document_citation":"Form 8-K Item 1.05, Zoomcar Holdings, Inc., filed 2025-06-13"},{"id":"SEA-8K-0001213900-25-054319-F3","claim_type":"SOURCE_FACT","statement":"Based on preliminary findings, the Company determined that an unauthorized third party accessed a limited dataset containing certain personal information of a subset of approximately 8.4 million users, including names, phone numbers, car registration numbers, personal addresses and email addresses associated with such users.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001213900-25-054319-F3","document_citation":"Form 8-K Item 1.05, Zoomcar Holdings, Inc., filed 2025-06-13"},{"id":"SEA-8K-0001213900-25-054319-F4","claim_type":"SOURCE_FACT","statement":"The Company is also engaging with third-party cybersecurity experts to further assist with the investigation.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001213900-25-054319-F4","document_citation":"Form 8-K Item 1.05, Zoomcar Holdings, Inc., filed 2025-06-13"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","arch.event_driven"],"failure_mechanisms":["SEA-FM-012","SEA-FM-014"],"consequences":["Operational disruption","Data exposure","Financial impact"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"disclosure-v1","review_status":"machine_extracted","review_notes":["Ingested automatically from the company’s SEC filing. Facts are quoted from the filing; the failure-pattern classification is rule-based and unreviewed."]},"source_authority":{"document_type":"SEC Form 8-K, Item 1.05 (Material Cybersecurity Incidents)","filing_id":"0001213900-25-054319","reporting_entity":"Zoomcar Holdings, Inc.","regulatory_body":"U.S. Securities and Exchange Commission"},"safeguards":[],"countermeasures":[],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"disclosure"},{"incident_id":"SEA-8K-0001679788-25-000094","title":"Coinbase Global, Inc. discloses a cybersecurity incident (SEC 8-K, May 2025)","display_title":"Coinbase Global, Inc. discloses a cybersecurity incident (SEC 8-K, May 2025)","display_summary":"On May 11, 2025, Coinbase, Inc., a subsidiary of Coinbase Global, Inc. (“Coinbase” or the “Company”), received an email communication from an unknown threat actor claiming to have obtained information about certain…","display_reference":"0001679788-25-000094","display_source_type":"SEC filing","incident_date":"2025-05-15","disclosure_date":"2025-05-15","source_type":"regulator_report","source_url":"https://www.sec.gov/Archives/edgar/data/1679788/000167978825000094/coin-20250514.htm","source_title":"Coinbase Global, Inc., Form 8-K (Item 1.05), filed 2025-05-15","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T13:10:42.350Z","source_hash":"content-fingerprint:fnv1a-a3b81450","affected_system":{"organization":"Coinbase Global, Inc.","product":"Corporate systems","system_type":"Enterprise IT and business systems","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-8K-0001679788-25-000094-F1","claim_type":"SOURCE_FACT","statement":"On May 11, 2025, Coinbase, Inc., a subsidiary of Coinbase Global, Inc. (“Coinbase” or the “Company”), received an email communication from an unknown threat actor claiming to have obtained information about certain Coinbase customer accounts, as well as internal Coinbase documentation, including materials relating to customer-service and account-management systems.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001679788-25-000094-F1","document_citation":"Form 8-K Item 1.05, Coinbase Global, Inc., filed 2025-05-15"},{"id":"SEA-8K-0001679788-25-000094-F2","claim_type":"SOURCE_FACT","statement":"The threat actor appears to have obtained this information by paying multiple contractors or employees working in support roles outside the United States to collect information from internal Coinbase systems to which they had access in order to perform their job responsibilities.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001679788-25-000094-F2","document_citation":"Form 8-K Item 1.05, Coinbase Global, Inc., filed 2025-05-15"},{"id":"SEA-8K-0001679788-25-000094-F3","claim_type":"SOURCE_FACT","statement":"These instances of such personnel accessing data without business need were independently detected by the Company’s security monitoring in the previous months.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001679788-25-000094-F3","document_citation":"Form 8-K Item 1.05, Coinbase Global, Inc., filed 2025-05-15"},{"id":"SEA-8K-0001679788-25-000094-F4","claim_type":"SOURCE_FACT","statement":"Upon discovery, the Company had immediately terminated the personnel involved and also implemented heightened fraud-monitoring protections and warned customers whose information was potentially accessed in order to prevent misuse of any compromised information.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001679788-25-000094-F4","document_citation":"Form 8-K Item 1.05, Coinbase Global, Inc., filed 2025-05-15"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.financial_action","auth.destructive_action","auth.infrastructure_modification","data.pii","data.financial_records","data.credentials_secrets","data.uploaded_files","arch.event_driven","arch.tool_enabled_agent"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Data exposure","Financial impact"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"disclosure-v1","review_status":"machine_extracted","review_notes":["Ingested automatically from the company’s SEC filing. Facts are quoted from the filing; the failure-pattern classification is rule-based and unreviewed."]},"source_authority":{"document_type":"SEC Form 8-K, Item 1.05 (Material Cybersecurity Incidents)","filing_id":"0001679788-25-000094","reporting_entity":"Coinbase Global, Inc.","regulatory_body":"U.S. Securities and Exchange Commission"},"safeguards":[],"countermeasures":[],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"disclosure"},{"incident_id":"SEA-8K-0001193125-25-119311","title":"Nucor Corp discloses a cybersecurity incident (SEC 8-K, May 2025)","display_title":"Nucor Corp discloses a cybersecurity incident (SEC 8-K, May 2025)","display_summary":"Nucor Corporation (the “Company”) recently identified a cybersecurity incident involving unauthorized third party access to certain information technology systems used by the Company.","display_reference":"0001193125-25-119311","display_source_type":"SEC filing","incident_date":"2025-05-14","disclosure_date":"2025-05-14","source_type":"regulator_report","source_url":"https://www.sec.gov/Archives/edgar/data/73309/000119312525119311/d795264d8k.htm","source_title":"Nucor Corp, Form 8-K (Item 1.05), filed 2025-05-14","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T13:10:41.775Z","source_hash":"content-fingerprint:fnv1a-ac21ec34","affected_system":{"organization":"Nucor Corp","product":"Corporate systems","system_type":"Enterprise IT and business systems","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-8K-0001193125-25-119311-F1","claim_type":"SOURCE_FACT","statement":"Nucor Corporation (the “Company”) recently identified a cybersecurity incident involving unauthorized third party access to certain information technology systems used by the Company.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001193125-25-119311-F1","document_citation":"Form 8-K Item 1.05, Nucor Corp, filed 2025-05-14"},{"id":"SEA-8K-0001193125-25-119311-F2","claim_type":"SOURCE_FACT","statement":"Upon detecting the incident, the Company began promptly taking steps to contain and respond to the incident, including activating its incident response plan, proactively taking potentially affected systems offline and implementing other containment, remediation, or recovery measures.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001193125-25-119311-F2","document_citation":"Form 8-K Item 1.05, Nucor Corp, filed 2025-05-14"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":[],"failure_mechanisms":[],"consequences":["Operational disruption"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"disclosure-v1","review_status":"machine_extracted","review_notes":["Ingested automatically from the company’s SEC filing. Facts are quoted from the filing; the failure-pattern classification is rule-based and unreviewed."]},"source_authority":{"document_type":"SEC Form 8-K, Item 1.05 (Material Cybersecurity Incidents)","filing_id":"0001193125-25-119311","reporting_entity":"Nucor Corp","regulatory_body":"U.S. Securities and Exchange Commission"},"safeguards":[],"countermeasures":[],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"disclosure"},{"incident_id":"SEA-8K-0001677703-25-000067","title":"CONDUENT Inc discloses a cybersecurity incident with data taken without authorization (SEC 8-K, April 2025)","display_title":"CONDUENT Inc discloses a cybersecurity incident with data taken without authorization (SEC 8-K, April 2025)","display_summary":"On January 13, 2025, Conduent Incorporated (the \"Company\") experienced an operational disruption and learned that a ‘threat actor’ gained unauthorized access to a limited portion of the Company’s environment.","display_reference":"0001677703-25-000067","display_source_type":"SEC filing","incident_date":"2025-04-14","disclosure_date":"2025-04-14","source_type":"regulator_report","source_url":"https://www.sec.gov/Archives/edgar/data/1677703/000167770325000067/cndt-20250409.htm","source_title":"CONDUENT Inc, Form 8-K (Item 1.05), filed 2025-04-14","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T13:10:41.313Z","source_hash":"content-fingerprint:fnv1a-63d1fefe","affected_system":{"organization":"CONDUENT Inc","product":"Corporate systems","system_type":"Enterprise IT and business systems","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-8K-0001677703-25-000067-F1","claim_type":"SOURCE_FACT","statement":"On January 13, 2025, Conduent Incorporated (the \"Company\") experienced an operational disruption and learned that a ‘threat actor’ gained unauthorized access to a limited portion of the Company’s environment.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001677703-25-000067-F1","document_citation":"Form 8-K Item 1.05, CONDUENT Inc, filed 2025-04-14"},{"id":"SEA-8K-0001677703-25-000067-F2","claim_type":"SOURCE_FACT","statement":"The disruption did not have a material impact to the Company’s operations.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001677703-25-000067-F2","document_citation":"Form 8-K Item 1.05, CONDUENT Inc, filed 2025-04-14"},{"id":"SEA-8K-0001677703-25-000067-F3","claim_type":"SOURCE_FACT","statement":"As part of its ongoing investigation, the Company determined that the threat actor exfiltrated a set of files associated with a limited number of the Company’s clients.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001677703-25-000067-F3","document_citation":"Form 8-K Item 1.05, CONDUENT Inc, filed 2025-04-14"},{"id":"SEA-8K-0001677703-25-000067-F4","claim_type":"SOURCE_FACT","statement":"Due to the complexity of the files, the Company engaged cybersecurity data mining experts to evaluate the exfiltrated data and was recently informed of its nature, scope and validity, confirming that the data sets contained a significant number of individuals’ personal information associated with our clients' end-users.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001677703-25-000067-F4","document_citation":"Form 8-K Item 1.05, CONDUENT Inc, filed 2025-04-14"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","arch.event_driven"],"failure_mechanisms":["SEA-FM-014","SEA-FM-009"],"consequences":["Operational disruption","Data exposure","Financial impact"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"disclosure-v1","review_status":"machine_extracted","review_notes":["Ingested automatically from the company’s SEC filing. Facts are quoted from the filing; the failure-pattern classification is rule-based and unreviewed."]},"source_authority":{"document_type":"SEC Form 8-K, Item 1.05 (Material Cybersecurity Incidents)","filing_id":"0001677703-25-000067","reporting_entity":"CONDUENT Inc","regulatory_body":"U.S. Securities and Exchange Commission"},"safeguards":[],"countermeasures":[],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"disclosure"},{"incident_id":"SEA-8K-0001477294-25-000047","title":"Sensata Technologies Holding plc discloses a cybersecurity incident involving ransomware (SEC 8-K, April 2025)","display_title":"Sensata Technologies Holding plc discloses a cybersecurity incident involving ransomware (SEC 8-K, April 2025)","display_summary":"On April 6, 2025, Sensata Technologies Holding plc (the “Company”) experienced a ransomware incident that has encrypted certain devices in the Company’s network.","display_reference":"0001477294-25-000047","display_source_type":"SEC filing","incident_date":"2025-04-09","disclosure_date":"2025-04-09","source_type":"regulator_report","source_url":"https://www.sec.gov/Archives/edgar/data/1477294/000147729425000047/st-20250406.htm","source_title":"Sensata Technologies Holding plc, Form 8-K (Item 1.05), filed 2025-04-09","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T13:10:40.952Z","source_hash":"content-fingerprint:fnv1a-9f39c050","affected_system":{"organization":"Sensata Technologies Holding plc","product":"Corporate systems","system_type":"Enterprise IT and business systems","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-8K-0001477294-25-000047-F1","claim_type":"SOURCE_FACT","statement":"On April 6, 2025, Sensata Technologies Holding plc (the “Company”) experienced a ransomware incident that has encrypted certain devices in the Company’s network.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001477294-25-000047-F1","document_citation":"Form 8-K Item 1.05, Sensata Technologies Holding plc, filed 2025-04-09"},{"id":"SEA-8K-0001477294-25-000047-F2","claim_type":"SOURCE_FACT","statement":"Upon discovery, Sensata immediately activated its response protocols, implemented containment measures, including proactively taking its network offline, and launched an investigation with the assistance of third-party cybersecurity professionals.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001477294-25-000047-F2","document_citation":"Form 8-K Item 1.05, Sensata Technologies Holding plc, filed 2025-04-09"},{"id":"SEA-8K-0001477294-25-000047-F3","claim_type":"SOURCE_FACT","statement":"The incident has temporarily impacted Sensata’s operations, including shipping, receiving, manufacturing production, and various other support functions.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001477294-25-000047-F3","document_citation":"Form 8-K Item 1.05, Sensata Technologies Holding plc, filed 2025-04-09"},{"id":"SEA-8K-0001477294-25-000047-F4","claim_type":"SOURCE_FACT","statement":"The preliminary investigation has identified evidence that files were taken from the Company’s environment.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001477294-25-000047-F4","document_citation":"Form 8-K Item 1.05, Sensata Technologies Holding plc, filed 2025-04-09"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":[],"failure_mechanisms":["SEA-FM-014"],"consequences":["Operational disruption","Financial impact"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"disclosure-v1","review_status":"machine_extracted","review_notes":["Ingested automatically from the company’s SEC filing. Facts are quoted from the filing; the failure-pattern classification is rule-based and unreviewed."]},"source_authority":{"document_type":"SEC Form 8-K, Item 1.05 (Material Cybersecurity Incidents)","filing_id":"0001477294-25-000047","reporting_entity":"Sensata Technologies Holding plc","regulatory_body":"U.S. Securities and Exchange Commission"},"safeguards":[],"countermeasures":[],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"disclosure"},{"incident_id":"SEA-8K-0001437749-25-006475","title":"National Presto Industries Inc discloses a cybersecurity incident (SEC 8-K, March 2025)","display_title":"National Presto Industries Inc discloses a cybersecurity incident (SEC 8-K, March 2025)","display_summary":"On March 1, 2025, the Registrant experienced a system outage caused by a cybersecurity incident.","display_reference":"0001437749-25-006475","display_source_type":"SEC filing","incident_date":"2025-03-06","disclosure_date":"2025-03-06","source_type":"regulator_report","source_url":"https://www.sec.gov/Archives/edgar/data/80172/000143774925006475/npk20250306_8k.htm","source_title":"National Presto Industries Inc, Form 8-K (Item 1.05), filed 2025-03-06","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T13:10:40.223Z","source_hash":"content-fingerprint:fnv1a-acb501f3","affected_system":{"organization":"National Presto Industries Inc","product":"Corporate systems","system_type":"Enterprise IT and business systems","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-8K-0001437749-25-006475-F1","claim_type":"SOURCE_FACT","statement":"On March 1, 2025, the Registrant experienced a system outage caused by a cybersecurity incident.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001437749-25-006475-F1","document_citation":"Form 8-K Item 1.05, National Presto Industries Inc, filed 2025-03-06"},{"id":"SEA-8K-0001437749-25-006475-F2","claim_type":"SOURCE_FACT","statement":"The Registrant is actively conducting a forensic analysis to determine the nature, scope and impact of the incident.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001437749-25-006475-F2","document_citation":"Form 8-K Item 1.05, National Presto Industries Inc, filed 2025-03-06"},{"id":"SEA-8K-0001437749-25-006475-F3","claim_type":"SOURCE_FACT","statement":"At this time, no conclusive evidence has been identified, but the investigation remains ongoing.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001437749-25-006475-F3","document_citation":"Form 8-K Item 1.05, National Presto Industries Inc, filed 2025-03-06"},{"id":"SEA-8K-0001437749-25-006475-F4","claim_type":"SOURCE_FACT","statement":"The incident has temporarily impacted the Registrant’s operations, including shipping and receiving, some manufacturing processes, and various other back office functions, much of which are in the process of being restored.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001437749-25-006475-F4","document_citation":"Form 8-K Item 1.05, National Presto Industries Inc, filed 2025-03-06"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":[],"failure_mechanisms":[],"consequences":["Operational disruption","Financial impact"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"disclosure-v1","review_status":"machine_extracted","review_notes":["Ingested automatically from the company’s SEC filing. Facts are quoted from the filing; the failure-pattern classification is rule-based and unreviewed."]},"source_authority":{"document_type":"SEC Form 8-K, Item 1.05 (Material Cybersecurity Incidents)","filing_id":"0001437749-25-006475","reporting_entity":"National Presto Industries Inc","regulatory_body":"U.S. Securities and Exchange Commission"},"safeguards":[],"countermeasures":[],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"disclosure"},{"incident_id":"SEA-8K-0001628280-25-005855","title":"LEE ENTERPRISES, Inc discloses a cybersecurity incident with data taken without authorization (SEC 8-K, February 2025)","display_title":"LEE ENTERPRISES, Inc discloses a cybersecurity incident with data taken without authorization (SEC 8-K, February 2025)","display_summary":"On February 3, 2025, Lee Enterprises, Inc. (\"Lee\" or the \"Company\") experienced a systems outage caused by a cybersecurity attack.","display_reference":"0001628280-25-005855","display_source_type":"SEC filing","incident_date":"2025-02-18","disclosure_date":"2025-02-18","source_type":"regulator_report","source_url":"https://www.sec.gov/Archives/edgar/data/58361/000162828025005855/lee-20250212.htm","source_title":"LEE ENTERPRISES, Inc, Form 8-K (Item 1.05), filed 2025-02-18","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T13:10:39.785Z","source_hash":"content-fingerprint:fnv1a-f12b1555","affected_system":{"organization":"LEE ENTERPRISES, Inc","product":"Corporate systems","system_type":"Enterprise IT and business systems","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-8K-0001628280-25-005855-F1","claim_type":"SOURCE_FACT","statement":"On February 3, 2025, Lee Enterprises, Inc. (\"Lee\" or the \"Company\") experienced a systems outage caused by a cybersecurity attack.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001628280-25-005855-F1","document_citation":"Form 8-K Item 1.05, LEE ENTERPRISES, Inc, filed 2025-02-18"},{"id":"SEA-8K-0001628280-25-005855-F2","claim_type":"SOURCE_FACT","statement":"Preliminary investigations indicate that threat actors unlawfully accessed the Company’s network, encrypted critical applications, and exfiltrated certain files.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001628280-25-005855-F2","document_citation":"Form 8-K Item 1.05, LEE ENTERPRISES, Inc, filed 2025-02-18"},{"id":"SEA-8K-0001628280-25-005855-F3","claim_type":"SOURCE_FACT","statement":"At this time, no conclusive evidence has been identified, but the investigation remains ongoing.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001628280-25-005855-F3","document_citation":"Form 8-K Item 1.05, LEE ENTERPRISES, Inc, filed 2025-02-18"},{"id":"SEA-8K-0001628280-25-005855-F4","claim_type":"SOURCE_FACT","statement":"The incident impacted the Company’s operations, including distribution of products, billing, collections, and vendor payments.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001628280-25-005855-F4","document_citation":"Form 8-K Item 1.05, LEE ENTERPRISES, Inc, filed 2025-02-18"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.financial_action","data.pii","arch.distributed_tx"],"failure_mechanisms":["SEA-FM-014","SEA-FM-009"],"consequences":["Operational disruption","Data exposure","Financial impact"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"disclosure-v1","review_status":"machine_extracted","review_notes":["Ingested automatically from the company’s SEC filing. Facts are quoted from the filing; the failure-pattern classification is rule-based and unreviewed."]},"source_authority":{"document_type":"SEC Form 8-K, Item 1.05 (Material Cybersecurity Incidents)","filing_id":"0001628280-25-005855","reporting_entity":"LEE ENTERPRISES, Inc","regulatory_body":"U.S. Securities and Exchange Commission"},"safeguards":[],"countermeasures":[],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"disclosure"},{"incident_id":"SEA-8K-0001857154-24-000123","title":"Krispy Kreme, Inc. discloses a cybersecurity incident (SEC 8-K, December 2024)","display_title":"Krispy Kreme, Inc. discloses a cybersecurity incident (SEC 8-K, December 2024)","display_summary":"On November 29, 2024, Krispy Kreme, Inc. (the “Company”) was notified regarding unauthorized activity on a portion of its information technology systems.","display_reference":"0001857154-24-000123","display_source_type":"SEC filing","incident_date":"2024-12-11","disclosure_date":"2024-12-11","source_type":"regulator_report","source_url":"https://www.sec.gov/Archives/edgar/data/1857154/000185715424000123/dnut-20241211.htm","source_title":"Krispy Kreme, Inc., Form 8-K (Item 1.05), filed 2024-12-11","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T13:10:39.179Z","source_hash":"content-fingerprint:fnv1a-c9a1e4a1","affected_system":{"organization":"Krispy Kreme, Inc.","product":"Corporate systems","system_type":"Enterprise IT and business systems","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-8K-0001857154-24-000123-F1","claim_type":"SOURCE_FACT","statement":"On November 29, 2024, Krispy Kreme, Inc. (the “Company”) was notified regarding unauthorized activity on a portion of its information technology systems.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001857154-24-000123-F1","document_citation":"Form 8-K Item 1.05, Krispy Kreme, Inc., filed 2024-12-11"},{"id":"SEA-8K-0001857154-24-000123-F2","claim_type":"SOURCE_FACT","statement":"Krispy Kreme shops globally are open, and consumers are able to place orders in person, but the Company is experiencing certain operational disruptions, including with online ordering in parts of the United States.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001857154-24-000123-F2","document_citation":"Form 8-K Item 1.05, Krispy Kreme, Inc., filed 2024-12-11"},{"id":"SEA-8K-0001857154-24-000123-F3","claim_type":"SOURCE_FACT","statement":"The Company, along with its external cybersecurity experts, continues to work diligently to respond to and mitigate the impact from the incident, including the restoration of online ordering, and has notified federal law enforcement.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001857154-24-000123-F3","document_citation":"Form 8-K Item 1.05, Krispy Kreme, Inc., filed 2024-12-11"},{"id":"SEA-8K-0001857154-24-000123-F4","claim_type":"SOURCE_FACT","statement":"As the investigation of the incident is ongoing, the full scope, nature, and impact of the incident are not yet known.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001857154-24-000123-F4","document_citation":"Form 8-K Item 1.05, Krispy Kreme, Inc., filed 2024-12-11"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.financial_action"],"failure_mechanisms":["SEA-FM-014"],"consequences":["Operational disruption","Financial impact"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"disclosure-v1","review_status":"machine_extracted","review_notes":["Ingested automatically from the company’s SEC filing. Facts are quoted from the filing; the failure-pattern classification is rule-based and unreviewed."]},"source_authority":{"document_type":"SEC Form 8-K, Item 1.05 (Material Cybersecurity Incidents)","filing_id":"0001857154-24-000123","reporting_entity":"Krispy Kreme, Inc.","regulatory_body":"U.S. Securities and Exchange Commission"},"safeguards":[],"countermeasures":[],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"disclosure"},{"incident_id":"SEA-8K-0001654954-24-015098","title":"Englobal Corp discloses a cybersecurity incident (SEC 8-K, December 2024)","display_title":"Englobal Corp discloses a cybersecurity incident (SEC 8-K, December 2024)","display_summary":"On November 25, 2024, ENGlobal Corporation (the “Company”) became aware of a cybersecurity incident.","display_reference":"0001654954-24-015098","display_source_type":"SEC filing","incident_date":"2024-12-02","disclosure_date":"2024-12-02","source_type":"regulator_report","source_url":"https://www.sec.gov/Archives/edgar/data/933738/000165495424015098/eng_8k.htm","source_title":"Englobal Corp, Form 8-K (Item 1.05), filed 2024-12-02","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T13:10:38.165Z","source_hash":"content-fingerprint:fnv1a-a87a99c5","affected_system":{"organization":"Englobal Corp","product":"Corporate systems","system_type":"Enterprise IT and business systems","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-8K-0001654954-24-015098-F1","claim_type":"SOURCE_FACT","statement":"On November 25, 2024, ENGlobal Corporation (the “Company”) became aware of a cybersecurity incident.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001654954-24-015098-F1","document_citation":"Form 8-K Item 1.05, Englobal Corp, filed 2024-12-02"},{"id":"SEA-8K-0001654954-24-015098-F2","claim_type":"SOURCE_FACT","statement":"The preliminary investigation has revealed that a threat actor illegally accessed the Company’s information technology (“IT”) system and encrypted some of its data files.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001654954-24-015098-F2","document_citation":"Form 8-K Item 1.05, Englobal Corp, filed 2024-12-02"},{"id":"SEA-8K-0001654954-24-015098-F3","claim_type":"SOURCE_FACT","statement":"Upon detecting the unauthorized access, the Company immediately took steps to contain, assess and remediate the cybersecurity incident, including beginning an internal investigation, engaging external cybersecurity specialists, and restricting access to its IT system.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001654954-24-015098-F3","document_citation":"Form 8-K Item 1.05, Englobal Corp, filed 2024-12-02"},{"id":"SEA-8K-0001654954-24-015098-F4","claim_type":"SOURCE_FACT","statement":"The Company has not yet determined whether the cybersecurity incident is reasonably likely to materially impact the Company’s financial condition or results of operations.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001654954-24-015098-F4","document_citation":"Form 8-K Item 1.05, Englobal Corp, filed 2024-12-02"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":[],"failure_mechanisms":["SEA-FM-014"],"consequences":["Operational disruption","Data exposure","Financial impact"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"disclosure-v1","review_status":"machine_extracted","review_notes":["Ingested automatically from the company’s SEC filing. Facts are quoted from the filing; the failure-pattern classification is rule-based and unreviewed."]},"source_authority":{"document_type":"SEC Form 8-K, Item 1.05 (Material Cybersecurity Incidents)","filing_id":"0001654954-24-015098","reporting_entity":"Englobal Corp","regulatory_body":"U.S. Securities and Exchange Commission"},"safeguards":[],"countermeasures":[],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"disclosure"},{"incident_id":"SEA-8K-0001213900-24-099394","title":"iLearningEngines, Inc. discloses a cybersecurity incident (SEC 8-K, November 2024)","display_title":"iLearningEngines, Inc. discloses a cybersecurity incident (SEC 8-K, November 2024)","display_summary":"iLearningEngines, Inc. (the “ Company ”) recently became aware of a cybersecurity incident.","display_reference":"0001213900-24-099394","display_source_type":"SEC filing","incident_date":"2024-11-18","disclosure_date":"2024-11-18","source_type":"regulator_report","source_url":"https://www.sec.gov/Archives/edgar/data/1835972/000121390024099394/ea0221424-8k_ilearning.htm","source_title":"iLearningEngines, Inc., Form 8-K (Item 1.05), filed 2024-11-18","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T13:10:37.494Z","source_hash":"content-fingerprint:fnv1a-59a41833","affected_system":{"organization":"iLearningEngines, Inc.","product":"Corporate systems","system_type":"Enterprise IT and business systems","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-8K-0001213900-24-099394-F1","claim_type":"SOURCE_FACT","statement":"iLearningEngines, Inc. (the “ Company ”) recently became aware of a cybersecurity incident.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001213900-24-099394-F1","document_citation":"Form 8-K Item 1.05, iLearningEngines, Inc., filed 2024-11-18"},{"id":"SEA-8K-0001213900-24-099394-F2","claim_type":"SOURCE_FACT","statement":"The ongoing investigation has revealed that a threat actor illegally accessed the Company’s environment and certain files on its network, misdirected a $250,000 wire payment, and deleted a number of email messages.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001213900-24-099394-F2","document_citation":"Form 8-K Item 1.05, iLearningEngines, Inc., filed 2024-11-18"},{"id":"SEA-8K-0001213900-24-099394-F3","claim_type":"SOURCE_FACT","statement":"The Company engaged a nationally recognized forensic firm and other external advisors to assess and remediate the unauthorized activity.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001213900-24-099394-F3","document_citation":"Form 8-K Item 1.05, iLearningEngines, Inc., filed 2024-11-18"},{"id":"SEA-8K-0001213900-24-099394-F4","claim_type":"SOURCE_FACT","statement":"The Company’s ongoing investigation and response include continued assessment of impacted systems and data.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001213900-24-099394-F4","document_citation":"Form 8-K Item 1.05, iLearningEngines, Inc., filed 2024-11-18"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.financial_action","auth.destructive_action","auth.public_publication","data.pii","data.financial_records"],"failure_mechanisms":["SEA-FM-005"],"consequences":["Operational disruption","Data exposure","Financial impact"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"disclosure-v1","review_status":"machine_extracted","review_notes":["Ingested automatically from the company’s SEC filing. Facts are quoted from the filing; the failure-pattern classification is rule-based and unreviewed."]},"source_authority":{"document_type":"SEC Form 8-K, Item 1.05 (Material Cybersecurity Incidents)","filing_id":"0001213900-24-099394","reporting_entity":"iLearningEngines, Inc.","regulatory_body":"U.S. Securities and Exchange Commission"},"safeguards":[],"countermeasures":[],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"disclosure"},{"incident_id":"SEA-8K-0000045012-24-000052","title":"Halliburton Co discloses a cybersecurity incident with data taken without authorization (SEC 8-K, September 2024)","display_title":"Halliburton Co discloses a cybersecurity incident with data taken without authorization (SEC 8-K, September 2024)","display_summary":"As previously disclosed in a Current Report on Form 8-K, on August 21, 2024, Halliburton Company (the “Company”) became aware that an unauthorized third party gained access to certain of its systems.","display_reference":"0000045012-24-000052","display_source_type":"SEC filing","incident_date":"2024-09-03","disclosure_date":"2024-09-03","source_type":"regulator_report","source_url":"https://www.sec.gov/Archives/edgar/data/45012/000004501224000052/hal-20240830.htm","source_title":"Halliburton Co, Form 8-K (Item 1.05), filed 2024-09-03","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T13:10:36.837Z","source_hash":"content-fingerprint:fnv1a-4dd75ebd","affected_system":{"organization":"Halliburton Co","product":"Corporate systems","system_type":"Enterprise IT and business systems","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-8K-0000045012-24-000052-F1","claim_type":"SOURCE_FACT","statement":"As previously disclosed in a Current Report on Form 8-K, on August 21, 2024, Halliburton Company (the “Company”) became aware that an unauthorized third party gained access to certain of its systems.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0000045012-24-000052-F1","document_citation":"Form 8-K Item 1.05, Halliburton Co, filed 2024-09-03"},{"id":"SEA-8K-0000045012-24-000052-F2","claim_type":"SOURCE_FACT","statement":"When it learned of the issue, the Company activated its cybersecurity response plan and launched an investigation internally with the support of external advisors to assess and remediate the unauthorized activity.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0000045012-24-000052-F2","document_citation":"Form 8-K Item 1.05, Halliburton Co, filed 2024-09-03"},{"id":"SEA-8K-0000045012-24-000052-F3","claim_type":"SOURCE_FACT","statement":"The Company’s response efforts included proactively taking certain systems offline to help protect them and notifying law enforcement.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0000045012-24-000052-F3","document_citation":"Form 8-K Item 1.05, Halliburton Co, filed 2024-09-03"},{"id":"SEA-8K-0000045012-24-000052-F4","claim_type":"SOURCE_FACT","statement":"The Company’s ongoing investigation and response include restoration of its systems and assessment of impacted data.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0000045012-24-000052-F4","document_citation":"Form 8-K Item 1.05, Halliburton Co, filed 2024-09-03"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":["SEA-FM-014","SEA-FM-009"],"consequences":["Operational disruption","Data exposure","Financial impact"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"disclosure-v1","review_status":"machine_extracted","review_notes":["Ingested automatically from the company’s SEC filing. Facts are quoted from the filing; the failure-pattern classification is rule-based and unreviewed."]},"source_authority":{"document_type":"SEC Form 8-K, Item 1.05 (Material Cybersecurity Incidents)","filing_id":"0000045012-24-000052","reporting_entity":"Halliburton Co","regulatory_body":"U.S. Securities and Exchange Commission"},"safeguards":[],"countermeasures":[],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"disclosure"},{"incident_id":"SEA-8K-0000950170-24-089345","title":"Meta Materials Inc. discloses a cybersecurity incident (SEC 8-K, August 2024)","display_title":"Meta Materials Inc. discloses a cybersecurity incident (SEC 8-K, August 2024)","display_summary":"On July 25, 2024, Meta Materials Inc. (the “Company”) became aware that its website, email system and other related information technology (IT) systems were significantly disrupted and taken offline.","display_reference":"0000950170-24-089345","display_source_type":"SEC filing","incident_date":"2024-08-01","disclosure_date":"2024-08-01","source_type":"regulator_report","source_url":"https://www.sec.gov/Archives/edgar/data/1431959/000095017024089345/mmat-20240725.htm","source_title":"Meta Materials Inc., Form 8-K (Item 1.05), filed 2024-08-01","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T13:10:36.443Z","source_hash":"content-fingerprint:fnv1a-df73548","affected_system":{"organization":"Meta Materials Inc.","product":"Corporate systems","system_type":"Enterprise IT and business systems","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-8K-0000950170-24-089345-F1","claim_type":"SOURCE_FACT","statement":"On July 25, 2024, Meta Materials Inc. (the “Company”) became aware that its website, email system and other related information technology (IT) systems were significantly disrupted and taken offline.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0000950170-24-089345-F1","document_citation":"Form 8-K Item 1.05, Meta Materials Inc., filed 2024-08-01"},{"id":"SEA-8K-0000950170-24-089345-F2","claim_type":"SOURCE_FACT","statement":"Upon detecting the disruption, the Company immediately began taking steps to restore, contain, and remediate the incident with internal and external cybersecurity experts, including beginning an investigation as to the cause of the disruption.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0000950170-24-089345-F2","document_citation":"Form 8-K Item 1.05, Meta Materials Inc., filed 2024-08-01"},{"id":"SEA-8K-0000950170-24-089345-F3","claim_type":"SOURCE_FACT","statement":"On initial investigation, the Company learned that a former executive officer of the Company deliberately de-activated and cancelled the renewal of the Company’s website, which significantly impacted the Company’s IT systems, including delivery and receipt of electronic email communications from customers, investors and other stakeholders of the Company.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0000950170-24-089345-F3","document_citation":"Form 8-K Item 1.05, Meta Materials Inc., filed 2024-08-01"},{"id":"SEA-8K-0000950170-24-089345-F4","claim_type":"SOURCE_FACT","statement":"The Company, along with its internal and external cybersecurity experts, continue to work diligently to respond to and mitigate any impact from the incident.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0000950170-24-089345-F4","document_citation":"Form 8-K Item 1.05, Meta Materials Inc., filed 2024-08-01"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii","arch.event_driven"],"failure_mechanisms":["SEA-FM-014"],"consequences":["Operational disruption","Data exposure","Financial impact"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"disclosure-v1","review_status":"machine_extracted","review_notes":["Ingested automatically from the company’s SEC filing. Facts are quoted from the filing; the failure-pattern classification is rule-based and unreviewed."]},"source_authority":{"document_type":"SEC Form 8-K, Item 1.05 (Material Cybersecurity Incidents)","filing_id":"0000950170-24-089345","reporting_entity":"Meta Materials Inc.","regulatory_body":"U.S. Securities and Exchange Commission"},"safeguards":[],"countermeasures":[],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"disclosure"},{"incident_id":"SEA-8K-0001562151-24-000032","title":"Crimson Wine Group, Ltd discloses a cybersecurity incident with data taken without authorization (SEC 8-K, July 2024)","display_title":"Crimson Wine Group, Ltd discloses a cybersecurity incident with data taken without authorization (SEC 8-K, July 2024)","display_summary":"As previously disclosed on the Current Report on Form 8-K filed by Crimson Wine Group, Ltd. (the “Company”) on July 5, 2024 (the “Initial Report”), on June 30, 2024, the Company detected a cybersecurity incident in which…","display_reference":"0001562151-24-000032","display_source_type":"SEC filing","incident_date":"2024-07-25","disclosure_date":"2024-07-25","source_type":"regulator_report","source_url":"https://www.sec.gov/Archives/edgar/data/1562151/000156215124000032/cwgl-20240725.htm","source_title":"Crimson Wine Group, Ltd, Form 8-K (Item 1.05), filed 2024-07-25","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T13:10:36.103Z","source_hash":"content-fingerprint:fnv1a-937815be","affected_system":{"organization":"Crimson Wine Group, Ltd","product":"Corporate systems","system_type":"Enterprise IT and business systems","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-8K-0001562151-24-000032-F1","claim_type":"SOURCE_FACT","statement":"As previously disclosed on the Current Report on Form 8-K filed by Crimson Wine Group, Ltd. (the “Company”) on July 5, 2024 (the “Initial Report”), on June 30, 2024, the Company detected a cybersecurity incident in which an unauthorized third party gained access to certain information systems of the Company.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001562151-24-000032-F1","document_citation":"Form 8-K Item 1.05, Crimson Wine Group, Ltd, filed 2024-07-25"},{"id":"SEA-8K-0001562151-24-000032-F2","claim_type":"SOURCE_FACT","statement":"As the Company was in early stages of its investigation and assessment of the incident, it was unable to determine at the time of the Initial Report whether the incident had or will have a material impact on the Company.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001562151-24-000032-F2","document_citation":"Form 8-K Item 1.05, Crimson Wine Group, Ltd, filed 2024-07-25"},{"id":"SEA-8K-0001562151-24-000032-F3","claim_type":"SOURCE_FACT","statement":"On July 25, 2024, the Company determined that the cybersecurity incident has likely had a material impact on the Company’s business operations.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001562151-24-000032-F3","document_citation":"Form 8-K Item 1.05, Crimson Wine Group, Ltd, filed 2024-07-25"},{"id":"SEA-8K-0001562151-24-000032-F4","claim_type":"SOURCE_FACT","statement":"The incident consisted of the third party’s unauthorized access to a portion of the Company’s internal information systems and the exfiltration of certain files, including files potentially containing sensitive personal information.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001562151-24-000032-F4","document_citation":"Form 8-K Item 1.05, Crimson Wine Group, Ltd, filed 2024-07-25"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":["SEA-FM-014","SEA-FM-009"],"consequences":["Operational disruption","Data exposure","Financial impact"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"disclosure-v1","review_status":"machine_extracted","review_notes":["Ingested automatically from the company’s SEC filing. Facts are quoted from the filing; the failure-pattern classification is rule-based and unreviewed."]},"source_authority":{"document_type":"SEC Form 8-K, Item 1.05 (Material Cybersecurity Incidents)","filing_id":"0001562151-24-000032","reporting_entity":"Crimson Wine Group, Ltd","regulatory_body":"U.S. Securities and Exchange Commission"},"safeguards":[],"countermeasures":[],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"disclosure"},{"incident_id":"SEA-8K-0001437749-24-022743","title":"Bassett Furniture Industries Inc discloses a cybersecurity incident (SEC 8-K, July 2024)","display_title":"Bassett Furniture Industries Inc discloses a cybersecurity incident (SEC 8-K, July 2024)","display_summary":"On July 10, 2024, Bassett Furniture Industries, Incorporated (the “Company”) detected unauthorized occurrences on a portion of its information technology (IT) systems.","display_reference":"0001437749-24-022743","display_source_type":"SEC filing","incident_date":"2024-07-15","disclosure_date":"2024-07-15","source_type":"regulator_report","source_url":"https://www.sec.gov/Archives/edgar/data/10329/000143774924022743/bset20240715_8k.htm","source_title":"Bassett Furniture Industries Inc, Form 8-K (Item 1.05), filed 2024-07-15","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T13:10:35.783Z","source_hash":"content-fingerprint:fnv1a-ebbca38f","affected_system":{"organization":"Bassett Furniture Industries Inc","product":"Corporate systems","system_type":"Enterprise IT and business systems","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-8K-0001437749-24-022743-F1","claim_type":"SOURCE_FACT","statement":"On July 10, 2024, Bassett Furniture Industries, Incorporated (the “Company”) detected unauthorized occurrences on a portion of its information technology (IT) systems.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001437749-24-022743-F1","document_citation":"Form 8-K Item 1.05, Bassett Furniture Industries Inc, filed 2024-07-15"},{"id":"SEA-8K-0001437749-24-022743-F2","claim_type":"SOURCE_FACT","statement":"Upon detecting the unauthorized occurrences, the Company immediately began taking steps to contain, assess and remediate the incident, including beginning an investigation, activating its incident response plan, and shutting down some systems.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001437749-24-022743-F2","document_citation":"Form 8-K Item 1.05, Bassett Furniture Industries Inc, filed 2024-07-15"},{"id":"SEA-8K-0001437749-24-022743-F3","claim_type":"SOURCE_FACT","statement":"The threat actor disrupted the Company’s business operations by encrypting some data files.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001437749-24-022743-F3","document_citation":"Form 8-K Item 1.05, Bassett Furniture Industries Inc, filed 2024-07-15"},{"id":"SEA-8K-0001437749-24-022743-F4","claim_type":"SOURCE_FACT","statement":"The Company’s retail stores and e-commerce platform are open, and customers are able to place orders and purchase available merchandise; however, the Company’s ability to fulfill orders is currently impacted.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001437749-24-022743-F4","document_citation":"Form 8-K Item 1.05, Bassett Furniture Industries Inc, filed 2024-07-15"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.financial_action","data.pii"],"failure_mechanisms":["SEA-FM-014"],"consequences":["Operational disruption","Data exposure","Financial impact"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"disclosure-v1","review_status":"machine_extracted","review_notes":["Ingested automatically from the company’s SEC filing. Facts are quoted from the filing; the failure-pattern classification is rule-based and unreviewed."]},"source_authority":{"document_type":"SEC Form 8-K, Item 1.05 (Material Cybersecurity Incidents)","filing_id":"0001437749-24-022743","reporting_entity":"Bassett Furniture Industries Inc","regulatory_body":"U.S. Securities and Exchange Commission"},"safeguards":[],"countermeasures":[],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"disclosure"},{"incident_id":"SEA-8K-0000732717-24-000046","title":"AT&T Inc. discloses a cybersecurity incident with data taken without authorization (SEC 8-K, July 2024)","display_title":"AT&T Inc. discloses a cybersecurity incident with data taken without authorization (SEC 8-K, July 2024)","display_summary":"On April 19, 2024, AT&T Inc. (“AT&T”) learned that a threat actor claimed to have unlawfully accessed and copied AT&T call logs.","display_reference":"0000732717-24-000046","display_source_type":"SEC filing","incident_date":"2024-07-12","disclosure_date":"2024-07-12","source_type":"regulator_report","source_url":"https://www.sec.gov/Archives/edgar/data/732717/000073271724000046/t-20240506.htm","source_title":"AT&T Inc., Form 8-K (Item 1.05), filed 2024-07-12","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T13:10:35.438Z","source_hash":"content-fingerprint:fnv1a-c4cf14f7","affected_system":{"organization":"AT&T Inc.","product":"Corporate systems","system_type":"Enterprise IT and business systems","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-8K-0000732717-24-000046-F1","claim_type":"SOURCE_FACT","statement":"On April 19, 2024, AT&T Inc. (“AT&T”) learned that a threat actor claimed to have unlawfully accessed and copied AT&T call logs.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0000732717-24-000046-F1","document_citation":"Form 8-K Item 1.05, AT&T Inc., filed 2024-07-12"},{"id":"SEA-8K-0000732717-24-000046-F2","claim_type":"SOURCE_FACT","statement":"Based on its investigation, AT&T believes that threat actors unlawfully accessed an AT&T workspace on a third-party cloud platform and, between April 14 and April 25, 2024, exfiltrated files containing AT&T records of customer call and text interactions that occurred between approximately May 1 and October 31, 2022, as well as on January 2, 2023, as described below.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0000732717-24-000046-F2","document_citation":"Form 8-K Item 1.05, AT&T Inc., filed 2024-07-12"},{"id":"SEA-8K-0000732717-24-000046-F3","claim_type":"SOURCE_FACT","statement":"AT&T will provide notice to its current and former impacted customers.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0000732717-24-000046-F3","document_citation":"Form 8-K Item 1.05, AT&T Inc., filed 2024-07-12"},{"id":"SEA-8K-0000732717-24-000046-F4","claim_type":"SOURCE_FACT","statement":"As of the date of this filing, this incident has not had a material impact on AT&T’s operations, and AT&T does not believe that this incident is reasonably likely to materially impact AT&T’s financial condition or results of operations.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0000732717-24-000046-F4","document_citation":"Form 8-K Item 1.05, AT&T Inc., filed 2024-07-12"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.public_publication","data.pii"],"failure_mechanisms":["SEA-FM-009"],"consequences":["Operational disruption","Data exposure","Financial impact"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"disclosure-v1","review_status":"machine_extracted","review_notes":["Ingested automatically from the company’s SEC filing. Facts are quoted from the filing; the failure-pattern classification is rule-based and unreviewed."]},"source_authority":{"document_type":"SEC Form 8-K, Item 1.05 (Material Cybersecurity Incidents)","filing_id":"0000732717-24-000046","reporting_entity":"AT&T Inc.","regulatory_body":"U.S. Securities and Exchange Commission"},"safeguards":[],"countermeasures":[],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"disclosure"},{"incident_id":"SEA-8K-0001043509-24-000060","title":"Sonic Automotive Inc discloses a cybersecurity incident (SEC 8-K, July 2024)","display_title":"Sonic Automotive Inc discloses a cybersecurity incident (SEC 8-K, July 2024)","display_summary":"As previously disclosed on its Current Report on Form 8-K filed on June 21, 2024, Sonic Automotive, Inc. (the “Company”) has experienced disruptions since June 19, 2024 in its access to certain information systems…","display_reference":"0001043509-24-000060","display_source_type":"SEC filing","incident_date":"2024-07-05","disclosure_date":"2024-07-05","source_type":"regulator_report","source_url":"https://www.sec.gov/Archives/edgar/data/1043509/000104350924000060/sah-20240705.htm","source_title":"Sonic Automotive Inc, Form 8-K (Item 1.05), filed 2024-07-05","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T13:10:35.058Z","source_hash":"content-fingerprint:fnv1a-a6bcee99","affected_system":{"organization":"Sonic Automotive Inc","product":"Corporate systems","system_type":"Enterprise IT and business systems","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-8K-0001043509-24-000060-F1","claim_type":"SOURCE_FACT","statement":"As previously disclosed on its Current Report on Form 8-K filed on June 21, 2024, Sonic Automotive, Inc. (the “Company”) has experienced disruptions since June 19, 2024 in its access to certain information systems provided to the Company by CDK Global (“CDK”) due to a cybersecurity incident experienced by CDK (the “Incident”).","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001043509-24-000060-F1","document_citation":"Form 8-K Item 1.05, Sonic Automotive Inc, filed 2024-07-05"},{"id":"SEA-8K-0001043509-24-000060-F2","claim_type":"SOURCE_FACT","statement":"Other Affected Systems, including the CRM and certain functions of the DMS, remain offline as the Company continues to investigate and test such systems.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001043509-24-000060-F2","document_citation":"Form 8-K Item 1.05, Sonic Automotive Inc, filed 2024-07-05"},{"id":"SEA-8K-0001043509-24-000060-F3","claim_type":"SOURCE_FACT","statement":"Additionally, some third-party applications typically accessible through the Affected Systems also remain offline.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001043509-24-000060-F3","document_citation":"Form 8-K Item 1.05, Sonic Automotive Inc, filed 2024-07-05"},{"id":"SEA-8K-0001043509-24-000060-F4","claim_type":"SOURCE_FACT","statement":"While the full impact of the Incident on the Company and its results of operations and financial condition are not presently ascertainable, based on the information available to the Company on the date hereof, the Company concluded that the Incident is reasonably likely to have a material impact on the Company’s results of operation for the second fiscal quarter ended June 30, 2024 due to, among other thing, a slo…","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001043509-24-000060-F4","document_citation":"Form 8-K Item 1.05, Sonic Automotive Inc, filed 2024-07-05"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":["SEA-FM-014"],"consequences":["Operational disruption","Data exposure","Financial impact"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"disclosure-v1","review_status":"machine_extracted","review_notes":["Ingested automatically from the company’s SEC filing. Facts are quoted from the filing; the failure-pattern classification is rule-based and unreviewed."]},"source_authority":{"document_type":"SEC Form 8-K, Item 1.05 (Material Cybersecurity Incidents)","filing_id":"0001043509-24-000060","reporting_entity":"Sonic Automotive Inc","regulatory_body":"U.S. Securities and Exchange Commission"},"safeguards":[],"countermeasures":[],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"disclosure"},{"incident_id":"SEA-8K-0000719733-24-000015","title":"Key Tronic Corp discloses a cybersecurity incident (SEC 8-K, May 2024)","display_title":"Key Tronic Corp discloses a cybersecurity incident (SEC 8-K, May 2024)","display_summary":"On May 6, 2024, Key Tronic Corporation (the “Company”) detected unauthorized third party access to portions of its information technology (“IT”) systems.","display_reference":"0000719733-24-000015","display_source_type":"SEC filing","incident_date":"2024-05-10","disclosure_date":"2024-05-10","source_type":"regulator_report","source_url":"https://www.sec.gov/Archives/edgar/data/719733/000071973324000015/ktcc-20240506.htm","source_title":"Key Tronic Corp, Form 8-K (Item 1.05), filed 2024-05-10","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T13:10:34.744Z","source_hash":"content-fingerprint:fnv1a-f816e431","affected_system":{"organization":"Key Tronic Corp","product":"Corporate systems","system_type":"Enterprise IT and business systems","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-8K-0000719733-24-000015-F1","claim_type":"SOURCE_FACT","statement":"On May 6, 2024, Key Tronic Corporation (the “Company”) detected unauthorized third party access to portions of its information technology (“IT”) systems.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0000719733-24-000015-F1","document_citation":"Form 8-K Item 1.05, Key Tronic Corp, filed 2024-05-10"},{"id":"SEA-8K-0000719733-24-000015-F2","claim_type":"SOURCE_FACT","statement":"The incident has caused disruptions, and limitation of access, to portions of the Company’s business applications supporting aspects of the Company’s operations and corporate functions, including financial and operating reporting systems.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0000719733-24-000015-F2","document_citation":"Form 8-K Item 1.05, Key Tronic Corp, filed 2024-05-10"},{"id":"SEA-8K-0000719733-24-000015-F3","claim_type":"SOURCE_FACT","statement":"As the investigation of the incident is ongoing, the full scope, nature and impact of the incident are not yet known, but based on the information reviewed to date, the Company believes the unauthorized activity has been contained and is working diligently to bring the impacted portions of its IT system back online.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0000719733-24-000015-F3","document_citation":"Form 8-K Item 1.05, Key Tronic Corp, filed 2024-05-10"},{"id":"SEA-8K-0000719733-24-000015-F4","claim_type":"SOURCE_FACT","statement":"As of the date of this filing, the Company does not believe the incident is reasonably likely to have a material impact on the Company, including its financial condition or results of operations.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0000719733-24-000015-F4","document_citation":"Form 8-K Item 1.05, Key Tronic Corp, filed 2024-05-10"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":[],"failure_mechanisms":["SEA-FM-014"],"consequences":["Operational disruption","Financial impact"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"disclosure-v1","review_status":"machine_extracted","review_notes":["Ingested automatically from the company’s SEC filing. Facts are quoted from the filing; the failure-pattern classification is rule-based and unreviewed."]},"source_authority":{"document_type":"SEC Form 8-K, Item 1.05 (Material Cybersecurity Incidents)","filing_id":"0000719733-24-000015","reporting_entity":"Key Tronic Corp","regulatory_body":"U.S. Securities and Exchange Commission"},"safeguards":[],"countermeasures":[],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"disclosure"},{"incident_id":"SEA-8K-0001193125-24-133132","title":"Brandywine Realty Trust discloses a cybersecurity incident with data taken without authorization (SEC 8-K, May 2024)","display_title":"Brandywine Realty Trust discloses a cybersecurity incident with data taken without authorization (SEC 8-K, May 2024)","display_summary":"On May 1, 2024, Brandywine Realty Trust (the “Company”) detected what was determined to be a cybersecurity incident, whereby a third party gained unauthorized access to portions of its information technology (“IT”)…","display_reference":"0001193125-24-133132","display_source_type":"SEC filing","incident_date":"2024-05-07","disclosure_date":"2024-05-07","source_type":"regulator_report","source_url":"https://www.sec.gov/Archives/edgar/data/790816/000119312524133132/d824906d8k.htm","source_title":"Brandywine Realty Trust, Form 8-K (Item 1.05), filed 2024-05-07","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T13:10:34.425Z","source_hash":"content-fingerprint:fnv1a-c42e3fe","affected_system":{"organization":"Brandywine Realty Trust","product":"Corporate systems","system_type":"Enterprise IT and business systems","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-8K-0001193125-24-133132-F1","claim_type":"SOURCE_FACT","statement":"On May 1, 2024, Brandywine Realty Trust (the “Company”) detected what was determined to be a cybersecurity incident, whereby a third party gained unauthorized access to portions of its information technology (“IT”) environment.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001193125-24-133132-F1","document_citation":"Form 8-K Item 1.05, Brandywine Realty Trust, filed 2024-05-07"},{"id":"SEA-8K-0001193125-24-133132-F2","claim_type":"SOURCE_FACT","statement":"Upon detecting the unauthorized occurrences, the Company promptly initiated its previously established response protocols and began taking steps to contain, assess and remediate the incident, including beginning an investigation with leading external cybersecurity experts, activating its incident response plan, shutting down some systems and notifying law enforcement.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001193125-24-133132-F2","document_citation":"Form 8-K Item 1.05, Brandywine Realty Trust, filed 2024-05-07"},{"id":"SEA-8K-0001193125-24-133132-F3","claim_type":"SOURCE_FACT","statement":"The cybersecurity incident consisted of unauthorized access and deployment of encryption by a third party to a portion of the Company’s internal corporate IT systems.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001193125-24-133132-F3","document_citation":"Form 8-K Item 1.05, Brandywine Realty Trust, filed 2024-05-07"},{"id":"SEA-8K-0001193125-24-133132-F4","claim_type":"SOURCE_FACT","statement":"The incident caused disruptions to, and limitation of access to, portions of the Company’s business applications supporting aspects of the Company’s operations and corporate functions, including financial and operating reporting systems.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001193125-24-133132-F4","document_citation":"Form 8-K Item 1.05, Brandywine Realty Trust, filed 2024-05-07"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":[],"failure_mechanisms":["SEA-FM-014","SEA-FM-009"],"consequences":["Operational disruption","Data exposure","Financial impact"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"disclosure-v1","review_status":"machine_extracted","review_notes":["Ingested automatically from the company’s SEC filing. Facts are quoted from the filing; the failure-pattern classification is rule-based and unreviewed."]},"source_authority":{"document_type":"SEC Form 8-K, Item 1.05 (Material Cybersecurity Incidents)","filing_id":"0001193125-24-133132","reporting_entity":"Brandywine Realty Trust","regulatory_body":"U.S. Securities and Exchange Commission"},"safeguards":[],"countermeasures":[],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"disclosure"},{"incident_id":"SEA-8K-0001467623-24-000024","title":"Dropbox, Inc. discloses a cybersecurity incident (SEC 8-K, May 2024)","display_title":"Dropbox, Inc. discloses a cybersecurity incident (SEC 8-K, May 2024)","display_summary":"On April 24, 2024, Dropbox, Inc. (“ Dropbox ” or “ we ”) became aware of unauthorized access to the Dropbox Sign (formerly HelloSign) production environment.","display_reference":"0001467623-24-000024","display_source_type":"SEC filing","incident_date":"2024-05-01","disclosure_date":"2024-05-01","source_type":"regulator_report","source_url":"https://www.sec.gov/Archives/edgar/data/1467623/000146762324000024/dbx-20240429.htm","source_title":"Dropbox, Inc., Form 8-K (Item 1.05), filed 2024-05-01","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T13:10:34.061Z","source_hash":"content-fingerprint:fnv1a-7de05fa6","affected_system":{"organization":"Dropbox, Inc.","product":"Corporate systems","system_type":"Enterprise IT and business systems","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-8K-0001467623-24-000024-F1","claim_type":"SOURCE_FACT","statement":"On April 24, 2024, Dropbox, Inc. (“ Dropbox ” or “ we ”) became aware of unauthorized access to the Dropbox Sign (formerly HelloSign) production environment.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001467623-24-000024-F1","document_citation":"Form 8-K Item 1.05, Dropbox, Inc., filed 2024-05-01"},{"id":"SEA-8K-0001467623-24-000024-F2","claim_type":"SOURCE_FACT","statement":"Upon further investigation, we discovered that the threat actor had accessed data related to all users of Dropbox Sign, such as emails and usernames, in addition to general account settings.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001467623-24-000024-F2","document_citation":"Form 8-K Item 1.05, Dropbox, Inc., filed 2024-05-01"},{"id":"SEA-8K-0001467623-24-000024-F3","claim_type":"SOURCE_FACT","statement":"For subsets of users, the threat actor also accessed phone numbers, hashed passwords, and certain authentication information such as API keys, OAuth tokens, and multi-factor authentication.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001467623-24-000024-F3","document_citation":"Form 8-K Item 1.05, Dropbox, Inc., filed 2024-05-01"},{"id":"SEA-8K-0001467623-24-000024-F4","claim_type":"SOURCE_FACT","statement":"Based on what we know as of the date of this filing, there is no evidence that the threat actor accessed the contents of users’ accounts, such as their agreements or templates, or their payment information.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001467623-24-000024-F4","document_citation":"Form 8-K Item 1.05, Dropbox, Inc., filed 2024-05-01"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.financial_action","auth.privileged_action","data.pii","data.credentials_secrets"],"failure_mechanisms":["SEA-FM-012"],"consequences":["Operational disruption","Data exposure","Financial impact"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"disclosure-v1","review_status":"machine_extracted","review_notes":["Ingested automatically from the company’s SEC filing. Facts are quoted from the filing; the failure-pattern classification is rule-based and unreviewed."]},"source_authority":{"document_type":"SEC Form 8-K, Item 1.05 (Material Cybersecurity Incidents)","filing_id":"0001467623-24-000024","reporting_entity":"Dropbox, Inc.","regulatory_body":"U.S. Securities and Exchange Commission"},"safeguards":[],"countermeasures":[],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"disclosure"},{"incident_id":"SEA-8K-0001193125-24-100764","title":"Frontier Communications Parent, Inc. discloses a cybersecurity incident (SEC 8-K, April 2024)","display_title":"Frontier Communications Parent, Inc. discloses a cybersecurity incident (SEC 8-K, April 2024)","display_summary":"On April 14, 2024, Frontier Communications Parent, Inc. (the “Company”) detected that a third party had gained unauthorized access to portions of its information technology environment.","display_reference":"0001193125-24-100764","display_source_type":"SEC filing","incident_date":"2024-04-18","disclosure_date":"2024-04-18","source_type":"regulator_report","source_url":"https://www.sec.gov/Archives/edgar/data/20520/000119312524100764/d784189d8k.htm","source_title":"Frontier Communications Parent, Inc., Form 8-K (Item 1.05), filed 2024-04-18","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T13:10:33.656Z","source_hash":"content-fingerprint:fnv1a-3f549d15","affected_system":{"organization":"Frontier Communications Parent, Inc.","product":"Corporate systems","system_type":"Enterprise IT and business systems","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-8K-0001193125-24-100764-F1","claim_type":"SOURCE_FACT","statement":"On April 14, 2024, Frontier Communications Parent, Inc. (the “Company”) detected that a third party had gained unauthorized access to portions of its information technology environment.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001193125-24-100764-F1","document_citation":"Form 8-K Item 1.05, Frontier Communications Parent, Inc., filed 2024-04-18"},{"id":"SEA-8K-0001193125-24-100764-F2","claim_type":"SOURCE_FACT","statement":"As part of this process, the containment measures, which included shutting down certain of the Company’s systems, resulted in an operational disruption that could be considered material.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001193125-24-100764-F2","document_citation":"Form 8-K Item 1.05, Frontier Communications Parent, Inc., filed 2024-04-18"},{"id":"SEA-8K-0001193125-24-100764-F3","claim_type":"SOURCE_FACT","statement":"Based on the Company’s investigation, it has determined that the third party was likely a cybercrime group, which gained access to, among other information, personally identifiable information.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001193125-24-100764-F3","document_citation":"Form 8-K Item 1.05, Frontier Communications Parent, Inc., filed 2024-04-18"},{"id":"SEA-8K-0001193125-24-100764-F4","claim_type":"SOURCE_FACT","statement":"The Company does not believe the incident is reasonably likely to materially impact the Company’s financial condition or results of operations.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001193125-24-100764-F4","document_citation":"Form 8-K Item 1.05, Frontier Communications Parent, Inc., filed 2024-04-18"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":[],"failure_mechanisms":["SEA-FM-014"],"consequences":["Operational disruption","Data exposure","Financial impact"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"disclosure-v1","review_status":"machine_extracted","review_notes":["Ingested automatically from the company’s SEC filing. Facts are quoted from the filing; the failure-pattern classification is rule-based and unreviewed."]},"source_authority":{"document_type":"SEC Form 8-K, Item 1.05 (Material Cybersecurity Incidents)","filing_id":"0001193125-24-100764","reporting_entity":"Frontier Communications Parent, Inc.","regulatory_body":"U.S. Securities and Exchange Commission"},"safeguards":[],"countermeasures":[],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"disclosure"},{"incident_id":"SEA-8K-0001193125-24-094797","title":"Orasure Technologies Inc discloses a cybersecurity incident with data taken without authorization (SEC 8-K, April 2024)","display_title":"Orasure Technologies Inc discloses a cybersecurity incident with data taken without authorization (SEC 8-K, April 2024)","display_summary":"On or about March 27, 2024, OraSure Technologies, Inc. (the “Company”) became aware of a cybersecurity incident in which an unauthorized third party gained access to Company data from certain information systems.","display_reference":"0001193125-24-094797","display_source_type":"SEC filing","incident_date":"2024-04-12","disclosure_date":"2024-04-12","source_type":"regulator_report","source_url":"https://www.sec.gov/Archives/edgar/data/1116463/000119312524094797/d825009d8k.htm","source_title":"Orasure Technologies Inc, Form 8-K (Item 1.05), filed 2024-04-12","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T13:10:33.313Z","source_hash":"content-fingerprint:fnv1a-f307f299","affected_system":{"organization":"Orasure Technologies Inc","product":"Corporate systems","system_type":"Enterprise IT and business systems","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-8K-0001193125-24-094797-F1","claim_type":"SOURCE_FACT","statement":"On or about March 27, 2024, OraSure Technologies, Inc. (the “Company”) became aware of a cybersecurity incident in which an unauthorized third party gained access to Company data from certain information systems.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001193125-24-094797-F1","document_citation":"Form 8-K Item 1.05, Orasure Technologies Inc, filed 2024-04-12"},{"id":"SEA-8K-0001193125-24-094797-F2","claim_type":"SOURCE_FACT","statement":"Although the Company ascertained that certain files were exfiltrated, it is still investigating the extent of any sensitive information contained within the accessed systems, including any personal information.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001193125-24-094797-F2","document_citation":"Form 8-K Item 1.05, Orasure Technologies Inc, filed 2024-04-12"},{"id":"SEA-8K-0001193125-24-094797-F3","claim_type":"SOURCE_FACT","statement":"As of the date hereof, the incident has not had a material impact on the Company’s operations, financial systems, or its financial condition.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001193125-24-094797-F3","document_citation":"Form 8-K Item 1.05, Orasure Technologies Inc, filed 2024-04-12"},{"id":"SEA-8K-0001193125-24-094797-F4","claim_type":"SOURCE_FACT","statement":"The Company’s information systems are operational, and it does not anticipate that this incident will have a material impact on its financial condition and results of operations moving forward.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001193125-24-094797-F4","document_citation":"Form 8-K Item 1.05, Orasure Technologies Inc, filed 2024-04-12"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":[],"failure_mechanisms":["SEA-FM-009"],"consequences":["Operational disruption","Data exposure","Financial impact"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"disclosure-v1","review_status":"machine_extracted","review_notes":["Ingested automatically from the company’s SEC filing. Facts are quoted from the filing; the failure-pattern classification is rule-based and unreviewed."]},"source_authority":{"document_type":"SEC Form 8-K, Item 1.05 (Material Cybersecurity Incidents)","filing_id":"0001193125-24-094797","reporting_entity":"Orasure Technologies Inc","regulatory_body":"U.S. Securities and Exchange Commission"},"safeguards":[],"countermeasures":[],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"disclosure"},{"incident_id":"SEA-8K-0001213900-24-031252","title":"B. Riley Financial, Inc. discloses a cybersecurity incident (SEC 8-K, April 2024)","display_title":"B. Riley Financial, Inc. discloses a cybersecurity incident (SEC 8-K, April 2024)","display_summary":"Riley Financial, Inc. (the “Company”), discovered that a threat actor gained unauthorized access to certain of Targus’ file systems.","display_reference":"0001213900-24-031252","display_source_type":"SEC filing","incident_date":"2024-04-08","disclosure_date":"2024-04-08","source_type":"regulator_report","source_url":"https://www.sec.gov/Archives/edgar/data/1464790/000121390024031252/ea0203500-8k_briley.htm","source_title":"B. Riley Financial, Inc., Form 8-K (Item 1.05), filed 2024-04-08","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T13:10:32.950Z","source_hash":"content-fingerprint:fnv1a-c4aefa46","affected_system":{"organization":"B. Riley Financial, Inc.","product":"Corporate systems","system_type":"Enterprise IT and business systems","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-8K-0001213900-24-031252-F1","claim_type":"SOURCE_FACT","statement":"Riley Financial, Inc. (the “Company”), discovered that a threat actor gained unauthorized access to certain of Targus’ file systems.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001213900-24-031252-F1","document_citation":"Form 8-K Item 1.05, B. Riley Financial, Inc., filed 2024-04-08"},{"id":"SEA-8K-0001213900-24-031252-F2","claim_type":"SOURCE_FACT","statement":"Through this process, proactive containment measures to disrupt unauthorized access resulted in a temporary interruption in the business operations of the Targus network.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001213900-24-031252-F2","document_citation":"Form 8-K Item 1.05, B. Riley Financial, Inc., filed 2024-04-08"},{"id":"SEA-8K-0001213900-24-031252-F3","claim_type":"SOURCE_FACT","statement":"While the investigation is ongoing and the incident has temporarily disrupted Targus’ business operations, as of the date of this filing, the Company does not currently believe that this incident will materially impact the Company’s financial condition or results of operations taken as a whole.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001213900-24-031252-F3","document_citation":"Form 8-K Item 1.05, B. Riley Financial, Inc., filed 2024-04-08"},{"id":"SEA-8K-0001213900-24-031252-F4","claim_type":"SOURCE_FACT","statement":"Business operations for each of the Company’s other subsidiaries have continued without disruption in all material respects, and no other Company business has been affected.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001213900-24-031252-F4","document_citation":"Form 8-K Item 1.05, B. Riley Financial, Inc., filed 2024-04-08"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":[],"failure_mechanisms":["SEA-FM-014"],"consequences":["Operational disruption","Financial impact"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"disclosure-v1","review_status":"machine_extracted","review_notes":["Ingested automatically from the company’s SEC filing. Facts are quoted from the filing; the failure-pattern classification is rule-based and unreviewed."]},"source_authority":{"document_type":"SEC Form 8-K, Item 1.05 (Material Cybersecurity Incidents)","filing_id":"0001213900-24-031252","reporting_entity":"B. Riley Financial, Inc.","regulatory_body":"U.S. Securities and Exchange Commission"},"safeguards":[],"countermeasures":[],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"disclosure"},{"incident_id":"SEA-8K-0000950170-24-033954","title":"Radiant Logistics, Inc discloses a cybersecurity incident (SEC 8-K, March 2024)","display_title":"Radiant Logistics, Inc discloses a cybersecurity incident (SEC 8-K, March 2024)","display_summary":"On or about March 14, 2024, through its information technology systems monitoring tools, Radiant Logistics, Inc. (the “Company”) detected what was determined to be the initial stages of a cybersecurity incident related…","display_reference":"0000950170-24-033954","display_source_type":"SEC filing","incident_date":"2024-03-20","disclosure_date":"2024-03-20","source_type":"regulator_report","source_url":"https://www.sec.gov/Archives/edgar/data/1171155/000095017024033954/rlgt-20240319.htm","source_title":"Radiant Logistics, Inc, Form 8-K (Item 1.05), filed 2024-03-20","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T13:10:32.462Z","source_hash":"content-fingerprint:fnv1a-b8229372","affected_system":{"organization":"Radiant Logistics, Inc","product":"Corporate systems","system_type":"Enterprise IT and business systems","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-8K-0000950170-24-033954-F1","claim_type":"SOURCE_FACT","statement":"On or about March 14, 2024, through its information technology systems monitoring tools, Radiant Logistics, Inc. (the “Company”) detected what was determined to be the initial stages of a cybersecurity incident related to its Canadian operations.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0000950170-24-033954-F1","document_citation":"Form 8-K Item 1.05, Radiant Logistics, Inc, filed 2024-03-20"},{"id":"SEA-8K-0000950170-24-033954-F2","claim_type":"SOURCE_FACT","statement":"Upon detection, the Company immediately initiated its incident response and business continuity protocols and began taking measures to disrupt the unauthorized activity.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0000950170-24-033954-F2","document_citation":"Form 8-K Item 1.05, Radiant Logistics, Inc, filed 2024-03-20"},{"id":"SEA-8K-0000950170-24-033954-F3","claim_type":"SOURCE_FACT","statement":"The Company’s U.S. and other international operations have continued without disruption throughout this process in all material respects.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0000950170-24-033954-F3","document_citation":"Form 8-K Item 1.05, Radiant Logistics, Inc, filed 2024-03-20"},{"id":"SEA-8K-0000950170-24-033954-F4","claim_type":"SOURCE_FACT","statement":"While the investigation is ongoing, as of the date of this filing, the incident has not had a material impact on the Company’s overall operations, and the Company has not determined the incident is reasonably likely to materially impact the Company's financial conditions or results of operations.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0000950170-24-033954-F4","document_citation":"Form 8-K Item 1.05, Radiant Logistics, Inc, filed 2024-03-20"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":["SEA-FM-014"],"consequences":["Operational disruption","Data exposure","Financial impact"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"disclosure-v1","review_status":"machine_extracted","review_notes":["Ingested automatically from the company’s SEC filing. Facts are quoted from the filing; the failure-pattern classification is rule-based and unreviewed."]},"source_authority":{"document_type":"SEC Form 8-K, Item 1.05 (Material Cybersecurity Incidents)","filing_id":"0000950170-24-033954","reporting_entity":"Radiant Logistics, Inc","regulatory_body":"U.S. Securities and Exchange Commission"},"safeguards":[],"countermeasures":[],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"disclosure"},{"incident_id":"SEA-8K-0000950170-24-030041","title":"Marinemax Inc discloses a cybersecurity incident (SEC 8-K, March 2024)","display_title":"Marinemax Inc discloses a cybersecurity incident (SEC 8-K, March 2024)","display_summary":"MarineMax, Inc. (the \"Company\") determined on March 10, 2024, that it experienced a “cybersecurity incident,” as defined in applicable Securities and Exchange Commission rules, whereby a third party gained unauthorized…","display_reference":"0000950170-24-030041","display_source_type":"SEC filing","incident_date":"2024-03-12","disclosure_date":"2024-03-12","source_type":"regulator_report","source_url":"https://www.sec.gov/Archives/edgar/data/1057060/000095017024030041/hzo-20240310.htm","source_title":"Marinemax Inc, Form 8-K (Item 1.05), filed 2024-03-12","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T13:10:32.036Z","source_hash":"content-fingerprint:fnv1a-ef751f7c","affected_system":{"organization":"Marinemax Inc","product":"Corporate systems","system_type":"Enterprise IT and business systems","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-8K-0000950170-24-030041-F1","claim_type":"SOURCE_FACT","statement":"MarineMax, Inc. (the \"Company\") determined on March 10, 2024, that it experienced a “cybersecurity incident,” as defined in applicable Securities and Exchange Commission rules, whereby a third party gained unauthorized access to portions of its information environment.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0000950170-24-030041-F1","document_citation":"Form 8-K Item 1.05, Marinemax Inc, filed 2024-03-12"},{"id":"SEA-8K-0000950170-24-030041-F2","claim_type":"SOURCE_FACT","statement":"As part of this process, the containment measures resulted in some disruption to a portion of the Company’s business.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0000950170-24-030041-F2","document_citation":"Form 8-K Item 1.05, Marinemax Inc, filed 2024-03-12"},{"id":"SEA-8K-0000950170-24-030041-F3","claim_type":"SOURCE_FACT","statement":"While the investigation remains ongoing, as of the date of this filing, the incident has not had a material impact on the Company’s operations, and the Company is still in the process of determining whether the incident is reasonably likely to materially impact the Company’s financial conditions or results of operations.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0000950170-24-030041-F3","document_citation":"Form 8-K Item 1.05, Marinemax Inc, filed 2024-03-12"},{"id":"SEA-8K-0000950170-24-030041-F4","claim_type":"SOURCE_FACT","statement":"The Company does not maintain sensitive data in the information environment impacted by the incident.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0000950170-24-030041-F4","document_citation":"Form 8-K Item 1.05, Marinemax Inc, filed 2024-03-12"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":[],"failure_mechanisms":["SEA-FM-014"],"consequences":["Operational disruption","Data exposure","Financial impact"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"disclosure-v1","review_status":"machine_extracted","review_notes":["Ingested automatically from the company’s SEC filing. Facts are quoted from the filing; the failure-pattern classification is rule-based and unreviewed."]},"source_authority":{"document_type":"SEC Form 8-K, Item 1.05 (Material Cybersecurity Incidents)","filing_id":"0000950170-24-030041","reporting_entity":"Marinemax Inc","regulatory_body":"U.S. Securities and Exchange Commission"},"safeguards":[],"countermeasures":[],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"disclosure"},{"incident_id":"SEA-8K-0001654954-24-002505","title":"Federal Home Loan Bank of New York discloses a cybersecurity incident (SEC 8-K, March 2024)","display_title":"Federal Home Loan Bank of New York discloses a cybersecurity incident (SEC 8-K, March 2024)","display_summary":"On February 21, 2024, the Federal Home Loan Bank of New York (“Bank”), through its operational controls, detected unknown persons attempting to fraudulently obtain funds from the Bank (the “incident”).","display_reference":"0001654954-24-002505","display_source_type":"SEC filing","incident_date":"2024-03-01","disclosure_date":"2024-03-01","source_type":"regulator_report","source_url":"https://www.sec.gov/Archives/edgar/data/1329842/000165495424002505/fhlbny_8k.htm","source_title":"Federal Home Loan Bank of New York, Form 8-K (Item 1.05), filed 2024-03-01","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T13:10:31.508Z","source_hash":"content-fingerprint:fnv1a-409d2c5d","affected_system":{"organization":"Federal Home Loan Bank of New York","product":"Corporate systems","system_type":"Enterprise IT and business systems","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-8K-0001654954-24-002505-F1","claim_type":"SOURCE_FACT","statement":"On February 21, 2024, the Federal Home Loan Bank of New York (“Bank”), through its operational controls, detected unknown persons attempting to fraudulently obtain funds from the Bank (the “incident”).","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001654954-24-002505-F1","document_citation":"Form 8-K Item 1.05, Federal Home Loan Bank of New York, filed 2024-03-01"},{"id":"SEA-8K-0001654954-24-002505-F2","claim_type":"SOURCE_FACT","statement":"The Bank immediately activated its response process, and determined that a fourth-party vendor (i.e., a vendor of a Bank vendor) had been compromised, which caused the incident.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001654954-24-002505-F2","document_citation":"Form 8-K Item 1.05, Federal Home Loan Bank of New York, filed 2024-03-01"},{"id":"SEA-8K-0001654954-24-002505-F3","claim_type":"SOURCE_FACT","statement":"The Bank’s own information technology systems and networks were not compromised or affected, no unauthorized transactions were executed and no monies were transferred to the unknown persons, and Bank members were able to continue to execute transactions with the Bank.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001654954-24-002505-F3","document_citation":"Form 8-K Item 1.05, Federal Home Loan Bank of New York, filed 2024-03-01"},{"id":"SEA-8K-0001654954-24-002505-F4","claim_type":"SOURCE_FACT","statement":"As of the date of this filing, the incident has not had a material impact on the Bank’s operations, and the Bank believes the incident will not materially impact the Bank’s financial condition or results of operations. 2","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001654954-24-002505-F4","document_citation":"Form 8-K Item 1.05, Federal Home Loan Bank of New York, filed 2024-03-01"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.financial_action","data.financial_records"],"failure_mechanisms":[],"consequences":["Operational disruption","Financial impact"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"disclosure-v1","review_status":"machine_extracted","review_notes":["Ingested automatically from the company’s SEC filing. Facts are quoted from the filing; the failure-pattern classification is rule-based and unreviewed."]},"source_authority":{"document_type":"SEC Form 8-K, Item 1.05 (Material Cybersecurity Incidents)","filing_id":"0001654954-24-002505","reporting_entity":"Federal Home Loan Bank of New York","regulatory_body":"U.S. Securities and Exchange Commission"},"safeguards":[],"countermeasures":[],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"disclosure"},{"incident_id":"SEA-8K-0001104659-24-028288","title":"Cencora, Inc. discloses a cybersecurity incident with data taken without authorization (SEC 8-K, February 2024)","display_title":"Cencora, Inc. discloses a cybersecurity incident with data taken without authorization (SEC 8-K, February 2024)","display_summary":"On February 21, 2024, Cencora, Inc. (the “Company”), learned that data from its information systems had been exfiltrated, some of which may contain personal information.","display_reference":"0001104659-24-028288","display_source_type":"SEC filing","incident_date":"2024-02-27","disclosure_date":"2024-02-27","source_type":"regulator_report","source_url":"https://www.sec.gov/Archives/edgar/data/1140859/000110465924028288/tm247267d1_8k.htm","source_title":"Cencora, Inc., Form 8-K (Item 1.05), filed 2024-02-27","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T13:10:31.194Z","source_hash":"content-fingerprint:fnv1a-8e3b5926","affected_system":{"organization":"Cencora, Inc.","product":"Corporate systems","system_type":"Enterprise IT and business systems","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-8K-0001104659-24-028288-F1","claim_type":"SOURCE_FACT","statement":"On February 21, 2024, Cencora, Inc. (the “Company”), learned that data from its information systems had been exfiltrated, some of which may contain personal information.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001104659-24-028288-F1","document_citation":"Form 8-K Item 1.05, Cencora, Inc., filed 2024-02-27"},{"id":"SEA-8K-0001104659-24-028288-F2","claim_type":"SOURCE_FACT","statement":"Upon initial detection of the unauthorized activity, the Company immediately took containment steps and commenced an investigation with the assistance of law enforcement, cybersecurity experts and external counsel.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001104659-24-028288-F2","document_citation":"Form 8-K Item 1.05, Cencora, Inc., filed 2024-02-27"},{"id":"SEA-8K-0001104659-24-028288-F3","claim_type":"SOURCE_FACT","statement":"As of the date of this filing, the incident has not had a material impact on the Company’s operations, and its information systems continue to be operational.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001104659-24-028288-F3","document_citation":"Form 8-K Item 1.05, Cencora, Inc., filed 2024-02-27"},{"id":"SEA-8K-0001104659-24-028288-F4","claim_type":"SOURCE_FACT","statement":"The Company has not yet determined whether the incident is reasonably likely to materially impact the Company’s financial condition or results of operations.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001104659-24-028288-F4","document_citation":"Form 8-K Item 1.05, Cencora, Inc., filed 2024-02-27"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":[],"failure_mechanisms":["SEA-FM-009"],"consequences":["Operational disruption","Data exposure","Financial impact"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"disclosure-v1","review_status":"machine_extracted","review_notes":["Ingested automatically from the company’s SEC filing. Facts are quoted from the filing; the failure-pattern classification is rule-based and unreviewed."]},"source_authority":{"document_type":"SEC Form 8-K, Item 1.05 (Material Cybersecurity Incidents)","filing_id":"0001104659-24-028288","reporting_entity":"Cencora, Inc.","regulatory_body":"U.S. Securities and Exchange Commission"},"safeguards":[],"countermeasures":[],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"disclosure"},{"incident_id":"SEA-8K-0000731766-24-000045","title":"Unitedhealth Group Inc discloses a cybersecurity incident (SEC 8-K, February 2024)","display_title":"Unitedhealth Group Inc discloses a cybersecurity incident (SEC 8-K, February 2024)","display_summary":"On February 21, 2024, UnitedHealth Group (the “Company”) identified a suspected nation-state associated cyber security threat actor had gained access to some of the Change Healthcare information technology systems.","display_reference":"0000731766-24-000045","display_source_type":"SEC filing","incident_date":"2024-02-22","disclosure_date":"2024-02-22","source_type":"regulator_report","source_url":"https://www.sec.gov/Archives/edgar/data/731766/000073176624000045/unh-20240221.htm","source_title":"Unitedhealth Group Inc, Form 8-K (Item 1.05), filed 2024-02-22","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T13:10:30.732Z","source_hash":"content-fingerprint:fnv1a-9e16c5d5","affected_system":{"organization":"Unitedhealth Group Inc","product":"Corporate systems","system_type":"Enterprise IT and business systems","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-8K-0000731766-24-000045-F1","claim_type":"SOURCE_FACT","statement":"On February 21, 2024, UnitedHealth Group (the “Company”) identified a suspected nation-state associated cyber security threat actor had gained access to some of the Change Healthcare information technology systems.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0000731766-24-000045-F1","document_citation":"Form 8-K Item 1.05, Unitedhealth Group Inc, filed 2024-02-22"},{"id":"SEA-8K-0000731766-24-000045-F2","claim_type":"SOURCE_FACT","statement":"Immediately upon detection of this outside threat, the Company proactively isolated the impacted systems from other connecting systems in the interest of protecting our partners and patients, to contain, assess and remediate the incident.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0000731766-24-000045-F2","document_citation":"Form 8-K Item 1.05, Unitedhealth Group Inc, filed 2024-02-22"},{"id":"SEA-8K-0000731766-24-000045-F3","claim_type":"SOURCE_FACT","statement":"The Company is working diligently to restore those systems and resume normal operations as soon as possible, but cannot estimate the duration or extent of the disruption at this time.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0000731766-24-000045-F3","document_citation":"Form 8-K Item 1.05, Unitedhealth Group Inc, filed 2024-02-22"},{"id":"SEA-8K-0000731766-24-000045-F4","claim_type":"SOURCE_FACT","statement":"During the disruption, certain networks and transactional services may not be accessible.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0000731766-24-000045-F4","document_citation":"Form 8-K Item 1.05, Unitedhealth Group Inc, filed 2024-02-22"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.write_action","data.pii"],"failure_mechanisms":["SEA-FM-014"],"consequences":["Operational disruption","Data exposure","Financial impact"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"disclosure-v1","review_status":"machine_extracted","review_notes":["Ingested automatically from the company’s SEC filing. Facts are quoted from the filing; the failure-pattern classification is rule-based and unreviewed."]},"source_authority":{"document_type":"SEC Form 8-K, Item 1.05 (Material Cybersecurity Incidents)","filing_id":"0000731766-24-000045","reporting_entity":"Unitedhealth Group Inc","regulatory_body":"U.S. Securities and Exchange Commission"},"safeguards":[],"countermeasures":[],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"disclosure"},{"incident_id":"SEA-8K-0001193125-24-033753","title":"Prudential Financial Inc discloses a cybersecurity incident (SEC 8-K, February 2024)","display_title":"Prudential Financial Inc discloses a cybersecurity incident (SEC 8-K, February 2024)","display_summary":"On February 5, 2024, Prudential Financial, Inc. (the “Company” or “we”) detected that, beginning February 4, 2024, a threat actor had gained unauthorized access to certain of our systems.","display_reference":"0001193125-24-033753","display_source_type":"SEC filing","incident_date":"2024-02-13","disclosure_date":"2024-02-13","source_type":"regulator_report","source_url":"https://www.sec.gov/Archives/edgar/data/1137774/000119312524033753/d770643d8k.htm","source_title":"Prudential Financial Inc, Form 8-K (Item 1.05), filed 2024-02-13","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T13:10:30.208Z","source_hash":"content-fingerprint:fnv1a-88888fab","affected_system":{"organization":"Prudential Financial Inc","product":"Corporate systems","system_type":"Enterprise IT and business systems","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-8K-0001193125-24-033753-F1","claim_type":"SOURCE_FACT","statement":"On February 5, 2024, Prudential Financial, Inc. (the “Company” or “we”) detected that, beginning February 4, 2024, a threat actor had gained unauthorized access to certain of our systems.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001193125-24-033753-F1","document_citation":"Form 8-K Item 1.05, Prudential Financial Inc, filed 2024-02-13"},{"id":"SEA-8K-0001193125-24-033753-F2","claim_type":"SOURCE_FACT","statement":"As of the date of this Report, we believe that the threat actor, who we suspect to be a cybercrime group, accessed Company administrative and user data from certain information technology systems and a small percentage of Company user accounts associated with employees and contractors.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001193125-24-033753-F2","document_citation":"Form 8-K Item 1.05, Prudential Financial Inc, filed 2024-02-13"},{"id":"SEA-8K-0001193125-24-033753-F3","claim_type":"SOURCE_FACT","statement":"We continue to investigate the extent of the incident, including whether the threat actor accessed any additional information or systems, to determine the impact of the incident.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001193125-24-033753-F3","document_citation":"Form 8-K Item 1.05, Prudential Financial Inc, filed 2024-02-13"},{"id":"SEA-8K-0001193125-24-033753-F4","claim_type":"SOURCE_FACT","statement":"On the basis of the investigation to date, we do not have any evidence that the threat actor has taken customer or client data.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001193125-24-033753-F4","document_citation":"Form 8-K Item 1.05, Prudential Financial Inc, filed 2024-02-13"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["data.pii"],"failure_mechanisms":[],"consequences":["Operational disruption","Data exposure","Financial impact"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"disclosure-v1","review_status":"machine_extracted","review_notes":["Ingested automatically from the company’s SEC filing. Facts are quoted from the filing; the failure-pattern classification is rule-based and unreviewed."]},"source_authority":{"document_type":"SEC Form 8-K, Item 1.05 (Material Cybersecurity Incidents)","filing_id":"0001193125-24-033753","reporting_entity":"Prudential Financial Inc","regulatory_body":"U.S. Securities and Exchange Commission"},"safeguards":[],"countermeasures":[],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"disclosure"},{"incident_id":"SEA-8K-0000950103-24-002017","title":"SouthState Corp discloses a cybersecurity incident (SEC 8-K, February 2024)","display_title":"SouthState Corp discloses a cybersecurity incident (SEC 8-K, February 2024)","display_summary":"SouthState Bank, N.A., (the \"Company\") detected what was determined to be a cybersecurity incident on February 6, 2024.","display_reference":"0000950103-24-002017","display_source_type":"SEC filing","incident_date":"2024-02-09","disclosure_date":"2024-02-09","source_type":"regulator_report","source_url":"https://www.sec.gov/Archives/edgar/data/764038/000095010324002017/dp206600_8k.htm","source_title":"SouthState Corp, Form 8-K (Item 1.05), filed 2024-02-09","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T13:10:29.762Z","source_hash":"content-fingerprint:fnv1a-9b66e4ca","affected_system":{"organization":"SouthState Corp","product":"Corporate systems","system_type":"Enterprise IT and business systems","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-8K-0000950103-24-002017-F1","claim_type":"SOURCE_FACT","statement":"SouthState Bank, N.A., (the \"Company\") detected what was determined to be a cybersecurity incident on February 6, 2024.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0000950103-24-002017-F1","document_citation":"Form 8-K Item 1.05, SouthState Corp, filed 2024-02-09"},{"id":"SEA-8K-0000950103-24-002017-F2","claim_type":"SOURCE_FACT","statement":"Upon detection, the Company initiated its incident response and business continuity protocols and began taking measures to disrupt the unauthorized activity.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0000950103-24-002017-F2","document_citation":"Form 8-K Item 1.05, SouthState Corp, filed 2024-02-09"},{"id":"SEA-8K-0000950103-24-002017-F3","claim_type":"SOURCE_FACT","statement":"As part of its process to address the incident, the Company proactively took measures to isolate parts of its network, which resulted in some disruption to the Company's business processes.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0000950103-24-002017-F3","document_citation":"Form 8-K Item 1.05, SouthState Corp, filed 2024-02-09"},{"id":"SEA-8K-0000950103-24-002017-F4","claim_type":"SOURCE_FACT","statement":"While the investigation is ongoing, as of the date of this filing, the incident has not had a material impact on the Company's operations, and the Company has not determined the incident is reasonably likely to materially impact the Company's financial conditions or results of operations.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0000950103-24-002017-F4","document_citation":"Form 8-K Item 1.05, SouthState Corp, filed 2024-02-09"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":[],"failure_mechanisms":["SEA-FM-014"],"consequences":["Operational disruption","Financial impact"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"disclosure-v1","review_status":"machine_extracted","review_notes":["Ingested automatically from the company’s SEC filing. Facts are quoted from the filing; the failure-pattern classification is rule-based and unreviewed."]},"source_authority":{"document_type":"SEC Form 8-K, Item 1.05 (Material Cybersecurity Incidents)","filing_id":"0000950103-24-002017","reporting_entity":"SouthState Corp","regulatory_body":"U.S. Securities and Exchange Commission"},"safeguards":[],"countermeasures":[],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"disclosure"},{"incident_id":"SEA-8K-0001645590-24-000009","title":"Hewlett Packard Enterprise Co discloses a cybersecurity incident with data taken without authorization (SEC 8-K, January 2024)","display_title":"Hewlett Packard Enterprise Co discloses a cybersecurity incident with data taken without authorization (SEC 8-K, January 2024)","display_summary":"On December 12, 2023, Hewlett Packard Enterprise Company (the “Company,” “HPE,” or “we”) was notified that a suspected nation-state actor, believed to be the threat actor Midnight Blizzard, the state-sponsored actor also…","display_reference":"0001645590-24-000009","display_source_type":"SEC filing","incident_date":"2024-01-24","disclosure_date":"2024-01-24","source_type":"regulator_report","source_url":"https://www.sec.gov/Archives/edgar/data/1645590/000164559024000009/hpe-20240119.htm","source_title":"Hewlett Packard Enterprise Co, Form 8-K (Item 1.05), filed 2024-01-24","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T13:10:29.431Z","source_hash":"content-fingerprint:fnv1a-1ff117de","affected_system":{"organization":"Hewlett Packard Enterprise Co","product":"Corporate systems","system_type":"Enterprise IT and business systems","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-8K-0001645590-24-000009-F1","claim_type":"SOURCE_FACT","statement":"On December 12, 2023, Hewlett Packard Enterprise Company (the “Company,” “HPE,” or “we”) was notified that a suspected nation-state actor, believed to be the threat actor Midnight Blizzard, the state-sponsored actor also known as Cozy Bear, had gained unauthorized access to HPE’s cloud-based email environment.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001645590-24-000009-F1","document_citation":"Form 8-K Item 1.05, Hewlett Packard Enterprise Co, filed 2024-01-24"},{"id":"SEA-8K-0001645590-24-000009-F2","claim_type":"SOURCE_FACT","statement":"Based on our investigation, we now believe that the threat actor accessed and exfiltrated data beginning in May 2023 from a small percentage of HPE mailboxes belonging to individuals in our cybersecurity, go-to-market, business segments, and other functions.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001645590-24-000009-F2","document_citation":"Form 8-K Item 1.05, Hewlett Packard Enterprise Co, filed 2024-01-24"},{"id":"SEA-8K-0001645590-24-000009-F3","claim_type":"SOURCE_FACT","statement":"While our investigation of this incident and its scope remains ongoing, the Company now understands this incident is likely related to earlier activity by this threat actor, of which we were notified in June 2023, involving unauthorized access to and exfiltration of a limited number of SharePoint files as early as May 2023.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001645590-24-000009-F3","document_citation":"Form 8-K Item 1.05, Hewlett Packard Enterprise Co, filed 2024-01-24"},{"id":"SEA-8K-0001645590-24-000009-F4","claim_type":"SOURCE_FACT","statement":"Upon undertaking such actions, we determined that such activity did not materially impact the Company.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001645590-24-000009-F4","document_citation":"Form 8-K Item 1.05, Hewlett Packard Enterprise Co, filed 2024-01-24"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":[],"failure_mechanisms":["SEA-FM-009"],"consequences":["Operational disruption","Data exposure","Financial impact"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"disclosure-v1","review_status":"machine_extracted","review_notes":["Ingested automatically from the company’s SEC filing. Facts are quoted from the filing; the failure-pattern classification is rule-based and unreviewed."]},"source_authority":{"document_type":"SEC Form 8-K, Item 1.05 (Material Cybersecurity Incidents)","filing_id":"0001645590-24-000009","reporting_entity":"Hewlett Packard Enterprise Co","regulatory_body":"U.S. Securities and Exchange Commission"},"safeguards":[],"countermeasures":[],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"disclosure"},{"incident_id":"SEA-8K-0001193125-24-011295","title":"Microsoft Corp discloses a cybersecurity incident with data taken without authorization (SEC 8-K, January 2024)","display_title":"Microsoft Corp discloses a cybersecurity incident with data taken without authorization (SEC 8-K, January 2024)","display_summary":"On January 12, 2024, Microsoft (the “Company” or “we”) detected that beginning in late November 2023, a nation-state associated threat actor had gained access to and exfiltrated information from a very small percentage…","display_reference":"0001193125-24-011295","display_source_type":"SEC filing","incident_date":"2024-01-19","disclosure_date":"2024-01-19","source_type":"regulator_report","source_url":"https://www.sec.gov/Archives/edgar/data/789019/000119312524011295/d708866d8k.htm","source_title":"Microsoft Corp, Form 8-K (Item 1.05), filed 2024-01-19","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T13:10:29.004Z","source_hash":"content-fingerprint:fnv1a-2ce2989f","affected_system":{"organization":"Microsoft Corp","product":"Corporate systems","system_type":"Enterprise IT and business systems","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-8K-0001193125-24-011295-F1","claim_type":"SOURCE_FACT","statement":"On January 12, 2024, Microsoft (the “Company” or “we”) detected that beginning in late November 2023, a nation-state associated threat actor had gained access to and exfiltrated information from a very small percentage of employee email accounts including members of our senior leadership team and employees in our cybersecurity, legal, and other functions, on the basis of preliminary analysis.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001193125-24-011295-F1","document_citation":"Form 8-K Item 1.05, Microsoft Corp, filed 2024-01-19"},{"id":"SEA-8K-0001193125-24-011295-F2","claim_type":"SOURCE_FACT","statement":"We were able to remove the threat actor’s access to the email accounts on or about January 13, 2024.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001193125-24-011295-F2","document_citation":"Form 8-K Item 1.05, Microsoft Corp, filed 2024-01-19"},{"id":"SEA-8K-0001193125-24-011295-F3","claim_type":"SOURCE_FACT","statement":"We are examining the information accessed to determine the impact of the incident.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001193125-24-011295-F3","document_citation":"Form 8-K Item 1.05, Microsoft Corp, filed 2024-01-19"},{"id":"SEA-8K-0001193125-24-011295-F4","claim_type":"SOURCE_FACT","statement":"We are also notifying relevant regulatory authorities with respect to unauthorized access to personal information.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0001193125-24-011295-F4","document_citation":"Form 8-K Item 1.05, Microsoft Corp, filed 2024-01-19"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.destructive_action","data.pii"],"failure_mechanisms":["SEA-FM-009"],"consequences":["Operational disruption","Data exposure","Financial impact"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"disclosure-v1","review_status":"machine_extracted","review_notes":["Ingested automatically from the company’s SEC filing. Facts are quoted from the filing; the failure-pattern classification is rule-based and unreviewed."]},"source_authority":{"document_type":"SEC Form 8-K, Item 1.05 (Material Cybersecurity Incidents)","filing_id":"0001193125-24-011295","reporting_entity":"Microsoft Corp","regulatory_body":"U.S. Securities and Exchange Commission"},"safeguards":[],"countermeasures":[],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"disclosure"},{"incident_id":"SEA-8K-0000950170-23-072513","title":"First American Financial Corp discloses a cybersecurity incident (SEC 8-K, December 2023)","display_title":"First American Financial Corp discloses a cybersecurity incident (SEC 8-K, December 2023)","display_summary":"First American Financial Corporation (the &x201c;Company&x201d;) recently identified unauthorized activity on certain of its information technology systems.","display_reference":"0000950170-23-072513","display_source_type":"SEC filing","incident_date":"2023-12-22","disclosure_date":"2023-12-22","source_type":"regulator_report","source_url":"https://www.sec.gov/Archives/edgar/data/1472787/000095017023072513/faf-20231220.htm","source_title":"First American Financial Corp, Form 8-K (Item 1.05), filed 2023-12-22","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T13:10:28.550Z","source_hash":"content-fingerprint:fnv1a-12a4baf1","affected_system":{"organization":"First American Financial Corp","product":"Corporate systems","system_type":"Enterprise IT and business systems","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-8K-0000950170-23-072513-F1","claim_type":"SOURCE_FACT","statement":"First American Financial Corporation (the &#x201c;Company&#x201d;) recently identified unauthorized activity on certain of its information technology systems.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0000950170-23-072513-F1","document_citation":"Form 8-K Item 1.05, First American Financial Corp, filed 2023-12-22"},{"id":"SEA-8K-0000950170-23-072513-F2","claim_type":"SOURCE_FACT","statement":"Upon detection of the unauthorized activity, the Company took steps in an effort to contain, assess and remediate the incident.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0000950170-23-072513-F2","document_citation":"Form 8-K Item 1.05, First American Financial Corp, filed 2023-12-22"},{"id":"SEA-8K-0000950170-23-072513-F3","claim_type":"SOURCE_FACT","statement":"The Company is working diligently to restore those systems and resume normal operations as soon as possible, but cannot estimate the duration or extent of the disruption at this time.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0000950170-23-072513-F3","document_citation":"Form 8-K Item 1.05, First American Financial Corp, filed 2023-12-22"},{"id":"SEA-8K-0000950170-23-072513-F4","claim_type":"SOURCE_FACT","statement":"During the disruption, the Company's primary website may be inaccessible or inoperative.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0000950170-23-072513-F4","document_citation":"Form 8-K Item 1.05, First American Financial Corp, filed 2023-12-22"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":[],"failure_mechanisms":["SEA-FM-014"],"consequences":["Operational disruption","Financial impact"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"disclosure-v1","review_status":"machine_extracted","review_notes":["Ingested automatically from the company’s SEC filing. Facts are quoted from the filing; the failure-pattern classification is rule-based and unreviewed."]},"source_authority":{"document_type":"SEC Form 8-K, Item 1.05 (Material Cybersecurity Incidents)","filing_id":"0000950170-23-072513","reporting_entity":"First American Financial Corp","regulatory_body":"U.S. Securities and Exchange Commission"},"safeguards":[],"countermeasures":[],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"disclosure"},{"incident_id":"SEA-8K-0000950123-23-011228","title":"V F Corp discloses a cybersecurity incident (SEC 8-K, December 2023)","display_title":"V F Corp discloses a cybersecurity incident (SEC 8-K, December 2023)","display_summary":"On December 13, 2023, VF Corporation (“VF” or the “Company”) detected unauthorized occurrences on a portion of its information technology (IT) systems.","display_reference":"0000950123-23-011228","display_source_type":"SEC filing","incident_date":"2023-12-18","disclosure_date":"2023-12-18","source_type":"regulator_report","source_url":"https://www.sec.gov/Archives/edgar/data/103379/000095012323011228/d659095d8k.htm","source_title":"V F Corp, Form 8-K (Item 1.05), filed 2023-12-18","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_license":"Public source; consult the linked record for applicable terms.","source_accessed_at":"2026-10-11T13:10:28.142Z","source_hash":"content-fingerprint:fnv1a-9c1b2a3","affected_system":{"organization":"V F Corp","product":"Corporate systems","system_type":"Enterprise IT and business systems","is_ai_system":false,"is_agentic":false,"primary_language":"Not disclosed"},"documented_facts":[{"id":"SEA-8K-0000950123-23-011228-F1","claim_type":"SOURCE_FACT","statement":"On December 13, 2023, VF Corporation (“VF” or the “Company”) detected unauthorized occurrences on a portion of its information technology (IT) systems.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0000950123-23-011228-F1","document_citation":"Form 8-K Item 1.05, V F Corp, filed 2023-12-18"},{"id":"SEA-8K-0000950123-23-011228-F2","claim_type":"SOURCE_FACT","statement":"Upon detecting the unauthorized occurrences, the Company immediately began taking steps to contain, assess and remediate the incident, including beginning an investigation with leading external cybersecurity experts, activating its incident response plan, and shutting down some systems.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0000950123-23-011228-F2","document_citation":"Form 8-K Item 1.05, V F Corp, filed 2023-12-18"},{"id":"SEA-8K-0000950123-23-011228-F3","claim_type":"SOURCE_FACT","statement":"The threat actor disrupted the Company’s business operations by encrypting some IT systems, and stole data from the Company, including personal data.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0000950123-23-011228-F3","document_citation":"Form 8-K Item 1.05, V F Corp, filed 2023-12-18"},{"id":"SEA-8K-0000950123-23-011228-F4","claim_type":"SOURCE_FACT","statement":"The Company is working to bring the impacted portions of its IT systems back online and implement workarounds for certain offline operations with the aim of reducing disruption to its ability to serve its retail and brand e-commerce consumers and wholesale customers.","source_quote_or_pointer":"Quoted from the filing","fact_id":"SEA-8K-0000950123-23-011228-F4","document_citation":"Form 8-K Item 1.05, V F Corp, filed 2023-12-18"}],"source_stated_contributors":[],"source_stated_remediations":[],"collectsea_classification":{"capabilities":["auth.financial_action","data.pii"],"failure_mechanisms":["SEA-FM-014","SEA-FM-009"],"consequences":["Operational disruption","Data exposure","Financial impact"],"confidence":"TENTATIVE","authority_level":"PRIVILEGED_INTERNAL"},"provenance":{"extractor_version":"disclosure-v1","review_status":"machine_extracted","review_notes":["Ingested automatically from the company’s SEC filing. Facts are quoted from the filing; the failure-pattern classification is rule-based and unreviewed."]},"source_authority":{"document_type":"SEC Form 8-K, Item 1.05 (Material Cybersecurity Incidents)","filing_id":"0000950123-23-011228","reporting_entity":"V F Corp","regulatory_body":"U.S. Securities and Exchange Commission"},"safeguards":[],"countermeasures":[],"lessons":[],"cve_references":[],"direct_identifiers":[],"status":"active","date_basis":"disclosure"}]}